| |
| |||||||
Log-Analyse und Auswertung: Youtubes starten nicht in w 10?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
05.07.2022, 15:33
| #1 |
 |  Youtubes starten nicht in w 10? ich habe nur widows defender. eine Zeitlan hatte ich eset am laufen ohne probleme..erst mal deinstalliert. und starte frst64.exe vom desktop als administrator. FRST Logfile: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-07-2022
durchgeführt von 49157 (Administrator) auf DESKTOP-1V0T2E4 (Hewlett-Packard HP Compaq 8100 Elite SFF PC) (05-07-2022 16:23:36)
Gestartet von C:\Users\49157\OneDrive\Desktop
Geladene Profile: 49157
Plattform: Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCopyAccelerator.exe
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\dlls\wgc_renderer_host.exe <3>
(C:\ProgramData\Wargaming.net\GameCenter\wgc.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wargamingerrormonitor.exe
(C:\Users\49157\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\49157\AppData\Local\Programs\Opera GX\88.0.4412.75\opera_crashreporter.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <8>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <4>
(explorer.exe ->) (Opera Software AS -> Opera Software) C:\Users\49157\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe <2>
(explorer.exe ->) (Wargaming.net Limited -> Wargaming.net) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10>
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Opera Norway AS -> Opera Software) C:\Users\49157\AppData\Local\Programs\Opera GX\opera.exe <28>
(services.exe ->) (Bright Data Ltd -> Bright Data Ltd.) C:\Program Files\Hola\app\net_updater64.exe
(services.exe ->) (Hola VPN Ltd -> Hola Networks Ltd.) C:\Program Files\Hola\app\hola_svc.exe
(services.exe ->) (Hola VPN Ltd -> Hola Networks Ltd.) C:\Program Files\Hola\app\hola_updater.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\49157\AppData\Local\Microsoft\OneDrive\22.121.0605.0002\FileCoAuth.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1794888 2015-06-29] (NVIDIA Corporation -> NVIDIA Corporation)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [VLC Plus Player Updater] => C:\Users\49157\AppData\Local\VLC Plus Player Updater\Updater.exe [202024 2022-01-12] (Aller Media e.K. -> ) <==== ACHTUNG
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [Opera GX Stable] => C:\Users\49157\AppData\Local\Programs\Opera GX\launcher.exe [2453488 2022-07-04] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\49157\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2155928 2022-06-16] (Wargaming.net Limited -> Wargaming.net)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [RetroShare] => C:\Program Files\RetroShare\retroshare.exe [22001664 2021-03-14] () [Datei ist nicht signiert]
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Run: [MicrosoftEdgeAutoLaunch_8C3649A853E4FE9BF1FEE7E8B08B8FCB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601824 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\MountPoints2: {795aadb7-dc0d-11ec-89c0-6c626dc6b811} - "I:\DTLplus_Launcher.exe"
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Ribbons.scr [153600 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {01E20ADE-1E24-4F42-B1E5-96A3D6C7ECB3} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {042D34B6-FB7D-4712-8102-45BCE0339F9F} - System32\Tasks\Opera GX scheduled Autoupdate 1647510214 => C:\Users\49157\AppData\Local\Programs\Opera GX\launcher.exe [2453488 2022-07-04] (Opera Norway AS -> Opera Software)
Task: {A0F84910-7807-46B0-B5C7-DD15BAB15B22} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1648207779 => C:\Users\49157\AppData\Local\Programs\Opera GX\launcher.exe [2453488 2022-07-04] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\49157\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{ce035653-d185-4365-97b6-fc6cfc7e6fa2}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\49157\AppData\Local\Microsoft\Edge\User Data\Default [2022-07-05]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\49157\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-06-30]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
FireFox:
========
FF DefaultProfile: q34omxor.default
FF ProfilePath: C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\q34omxor.default [2022-01-04]
FF ProfilePath: C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\tun22ddy.default-release [2022-07-05]
FF Homepage: Mozilla\Firefox\Profiles\tun22ddy.default-release -> hxxps://www.amazon.de/gp/video/detail/B01BEKR93A/ref=atv_dp_season_select_s5
FF NetworkProxy: Mozilla\Firefox\Profiles\tun22ddy.default-release -> autoconfig_url", "hxxp://1.1.1.1/"
FF Notifications: Mozilla\Firefox\Profiles\tun22ddy.default-release -> hxxps://lichess.org; hxxps://www.kino.de; hxxps://www.vergleich.org; hxxps://www.instagram.com; hxxps://www.digitalfernsehen.de
FF Extension: (Malwarebytes Browser Guard) - C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\tun22ddy.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-06-29]
FF Extension: (Startpage Privatsphäre-Schutz) - C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\tun22ddy.default-release\Extensions\{5b1a796b-231a-4ad1-84ff-918db0818207}.xpi [2022-07-04]
FF Extension: (Turbo Ad Blocker) - C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\tun22ddy.default-release\Extensions\{c58824d6-e24f-45a6-8ddd-1bba8824656e}.xpi [2022-07-01]
FF Extension: (Tab Slideshow WE) - C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Profiles\tun22ddy.default-release\Extensions\{ff4c3ef4-7337-4e7f-aa99-77ed911ef8b1}.xpi [2022-03-23]
FF Plugin: @vlc.de/vlc,version=3.0.16 -> C:\Program Files\VLC Plus Player\npvlc.dll [2021-08-13] (Aller Media e.K. -> VideoLAN)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-06-29] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Datei ist nicht signiert]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-06-29] (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Datei ist nicht signiert]
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-816154916-3218668794-2224896612-1001) Opera GXStable - "C:\Users\49157\AppData\Local\Programs\Opera GX\Launcher.exe"
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 Apache2.4; C:\xampp\apache\bin\httpd.exe [29696 2021-12-17] (Apache Software Foundation) [Datei ist nicht signiert]
R2 hola_svc; C:\Program Files\Hola\app\hola_svc.exe [19180288 2022-06-30] (Hola VPN Ltd -> Hola Networks Ltd.) <==== ACHTUNG
R2 hola_updater; C:\Program Files\Hola\app\hola_updater.exe [19116728 2022-03-06] (Hola VPN Ltd -> Hola Networks Ltd.) <==== ACHTUNG
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [260256 2022-01-28] (HP Inc. -> HP Inc.)
R2 luminati_net_updater_win_hola_browser_hola_org; C:\Program Files\Hola\app\net_updater64.exe [9656480 2022-06-29] (Bright Data Ltd -> Bright Data Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254368 2022-06-03] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16187368 2022-05-11] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [817672 2022-03-14] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-07-05 16:23 - 2022-07-05 16:24 - 000000000 ____D C:\FRST
2022-07-05 16:20 - 2022-07-05 16:20 - 002367488 _____ (Farbar) C:\Users\49157\Downloads\FRST64.exe
2022-07-05 16:06 - 2022-07-05 16:07 - 002072576 _____ (Farbar) C:\Users\49157\Downloads\FRST.exe
2022-07-03 13:10 - 2022-07-03 13:10 - 003004440 _____ (Irfan Skiljan) C:\Users\49157\Downloads\iview460_setup (1).exe
2022-07-03 13:10 - 2022-07-03 13:10 - 000000000 _____ C:\Users\49157\Downloads\Nicht bestätigt 967542.crdownload
2022-07-03 10:59 - 2022-07-03 10:59 - 002822454 _____ C:\Users\49157\Downloads\fj729iw1.bmp
2022-06-30 18:12 - 2022-07-01 16:55 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2022-06-30 15:10 - 2022-06-30 15:10 - 000021871 _____ C:\Users\49157\Downloads\SEPA_Überweisungsquittung_KtoNr0839267309_30-06-2022_15-10-40.pdf
2022-06-29 12:02 - 2022-06-29 12:02 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2022-06-28 20:54 - 2022-06-30 12:23 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-06-27 15:48 - 2022-06-27 15:48 - 000000000 ____D C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2022-06-27 15:47 - 2022-06-27 15:48 - 000000000 ____D C:\Program Files (x86)\IrfanView
2022-06-27 15:44 - 2022-06-27 15:44 - 038999008 _____ (TeamViewer Germany GmbH) C:\Users\49157\Downloads\TeamViewer_Setup_x64 (2).exe
2022-06-27 15:44 - 2022-06-27 15:44 - 003004440 _____ (Irfan Skiljan) C:\Users\49157\Downloads\iview460_setup.exe
2022-06-27 15:44 - 2022-06-27 15:44 - 000000000 _____ C:\Users\49157\Downloads\Nicht bestätigt 734256.crdownload
2022-06-27 15:44 - 2022-06-27 15:44 - 000000000 _____ C:\Users\49157\Downloads\Nicht bestätigt 557446.crdownload
2022-06-27 15:09 - 2022-06-27 15:09 - 038999008 _____ (TeamViewer Germany GmbH) C:\Users\49157\Downloads\TeamViewer_Setup_x64 (1).exe
2022-06-27 15:09 - 2022-06-27 15:09 - 000000000 _____ C:\Users\49157\Downloads\Nicht bestätigt 334096.crdownload
2022-06-26 08:44 - 2022-06-26 08:45 - 002170428 _____ C:\Windows\Minidump\062622-33218-01.dmp
2022-06-25 16:34 - 2022-06-25 16:34 - 000000000 ____D C:\Users\49157\AppData\Local\TeamViewer
2022-06-25 16:33 - 2022-07-05 16:17 - 000000000 ____D C:\Program Files\TeamViewer
2022-06-25 16:33 - 2022-06-25 16:41 - 000000000 ____D C:\Users\49157\AppData\Roaming\TeamViewer
2022-06-25 16:33 - 2022-06-25 16:33 - 000000889 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk
2022-06-25 16:33 - 2022-06-25 16:33 - 000000877 _____ C:\Users\Public\Desktop\TeamViewer.lnk
2022-06-25 16:32 - 2022-06-25 16:32 - 038999008 _____ (TeamViewer Germany GmbH) C:\Users\49157\Downloads\TeamViewer_Setup_x64.exe
2022-06-25 16:32 - 2022-06-25 16:32 - 000000000 _____ C:\Users\49157\Downloads\Nicht bestätigt 352487.crdownload
2022-06-23 18:24 - 2022-06-23 18:24 - 000000000 ____D C:\ProgramData\ESET
2022-06-23 18:19 - 2022-06-23 18:19 - 008500248 _____ (ESET) C:\Users\49157\Downloads\eset_internet_security_live_installer.exe
2022-06-22 21:51 - 2022-06-22 21:51 - 000045449 _____ C:\Users\49157\Downloads\bank-ueberweisung-33703642.pdf
2022-06-22 15:17 - 2022-06-22 15:17 - 000142659 _____ C:\Users\49157\Downloads\Anleitung zur Konfiguration von TOR und RETROSHARE (2).pdf
2022-06-17 15:14 - 2022-07-01 11:40 - 000000000 ____D C:\Users\49157\AppData\Roaming\Exodus
2022-06-17 15:14 - 2022-06-17 15:15 - 000000000 ____D C:\Users\49157\AppData\Local\SquirrelTemp
2022-06-17 15:14 - 2022-06-17 15:14 - 000000000 ____D C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc
2022-06-17 15:14 - 2022-06-17 15:14 - 000000000 ____D C:\Users\49157\AppData\Local\exodus
2022-06-17 15:13 - 2022-06-17 15:13 - 189527008 _____ (Exodus Movement Inc) C:\Users\49157\Downloads\exodus-windows-x64-22.6.17.exe
2022-06-16 19:16 - 2022-06-16 19:16 - 000049871 _____ C:\Users\49157\Downloads\PB_Kontoauszug_KtoNr_0839267309_14-06-2022_040755.pdf
2022-06-15 17:28 - 2022-06-15 17:28 - 000011787 _____ C:\Windows\system32\DrtmAuthTxt.wim
2022-06-15 17:18 - 2022-06-15 17:20 - 000000000 ___HD C:\$WinREAgent
2022-06-15 11:05 - 2022-06-15 11:05 - 000000000 ____D C:\Users\49157\.idlerc
2022-06-15 10:59 - 2022-06-15 11:00 - 024814352 _____ (Python Software Foundation) C:\Users\49157\Downloads\python-3.11.0b3-amd64.exe
2022-06-15 10:56 - 2022-06-15 11:04 - 000000000 ____D C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10
2022-06-15 10:56 - 2022-06-15 10:56 - 000000000 ____D C:\Users\49157\AppData\Local\Package Cache
2022-06-15 10:55 - 2022-06-15 10:55 - 028637720 _____ (Python Software Foundation) C:\Users\49157\Downloads\python-3.10.5-amd64.exe
2022-06-15 10:53 - 2022-06-15 10:53 - 000003267 _____ C:\Users\49157\Downloads\EC-IV.py
2022-06-14 12:02 - 2022-06-14 12:03 - 000724905 _____ C:\Users\49157\Downloads\Linienbroschüre_230_10_WEB.pdf
2022-06-13 00:10 - 2022-06-13 00:08 - 000000983 _____ C:\Users\Public\Desktop\apache_start - Verknüpfung.lnk
2022-06-12 17:06 - 2022-06-12 17:06 - 000094482 _____ C:\Users\49157\Downloads\index(6).wav
2022-06-12 17:06 - 2022-06-12 17:06 - 000094482 _____ C:\Users\49157\Downloads\index(5).wav
2022-06-12 14:49 - 2022-06-12 14:49 - 022441984 _____ C:\Users\49157\Downloads\flashplayer32_0r0_371_win.msi
2022-06-12 14:48 - 2022-06-12 14:49 - 008545804 _____ C:\Users\49157\Downloads\flashplayer32_0r0_371_linux.i386.tar.gz
2022-06-11 19:28 - 2022-06-11 19:28 - 001256469 _____ C:\Users\49157\Downloads\TZM-Orientierungshilfe_11von20_20170220-aktuell.pdf
2022-06-11 19:28 - 2022-06-11 19:28 - 000142659 _____ C:\Users\49157\Downloads\Anleitung zur Konfiguration von TOR und RETROSHARE (1).pdf
2022-06-09 21:35 - 2022-06-09 21:35 - 000000347 _____ C:\Users\49157\Downloads\Collatz.py
2022-06-09 20:38 - 2022-06-09 20:38 - 000100161 _____ C:\Users\49157\Downloads\index(4).wav
2022-06-09 20:38 - 2022-06-09 20:38 - 000100161 _____ C:\Users\49157\Downloads\index(3).wav
2022-06-09 20:37 - 2022-06-09 20:37 - 000100161 _____ C:\Users\49157\Downloads\index(2).wav
2022-06-09 20:37 - 2022-06-09 20:37 - 000100161 _____ C:\Users\49157\Downloads\index(1).wav
2022-06-09 20:36 - 2022-06-09 20:36 - 000100161 _____ C:\Users\49157\Downloads\index.wav
2022-06-09 17:15 - 2022-06-15 14:59 - 000000000 ____D C:\Users\49157\AppData\Roaming\Bisq
2022-06-09 17:15 - 2022-06-09 17:15 - 000000000 ____D C:\Users\49157\.openjfx
2022-06-09 17:07 - 2022-06-09 17:07 - 000000000 ____D C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unknown
2022-06-09 17:07 - 2022-06-09 17:07 - 000000000 ____D C:\Users\49157\AppData\Local\Bisq
2022-06-09 17:03 - 2022-06-09 17:03 - 218209704 _____ C:\Users\49157\Downloads\Bisq-64bit-1.9.1.exe
2022-06-09 12:31 - 2022-06-09 12:31 - 000053445 _____ C:\Users\49157\Downloads\PB_Kontoauszug_KtoNr_0839267309_03-06-2022_055717.pdf
2022-06-07 22:25 - 2022-06-07 22:25 - 000000000 ____D C:\hidden_service
2022-06-07 22:00 - 2022-06-07 22:00 - 000142659 _____ C:\Users\49157\Downloads\Anleitung zur Konfiguration von TOR und RETROSHARE.pdf
2022-06-07 08:13 - 2022-06-07 08:14 - 001273964 _____ C:\Windows\Minidump\060722-31531-01.dmp
2022-06-06 16:24 - 2022-06-06 16:24 - 000733168 _____ (Python Software Foundation) C:\Windows\pyw.exe
2022-06-06 16:24 - 2022-06-06 16:24 - 000733168 _____ (Python Software Foundation) C:\Windows\py.exe
2022-06-06 16:24 - 2022-06-06 16:24 - 000047600 _____ (Python Software Foundation) C:\Windows\pyshellext.amd64.dll
2022-06-06 02:17 - 2022-06-06 02:17 - 000157728 _____ C:\Users\49157\Downloads\nochetto(2).pdf
2022-06-06 02:15 - 2022-06-06 02:15 - 000157728 _____ C:\Users\49157\Downloads\nochetto.pdf
2022-06-06 02:15 - 2022-06-06 02:15 - 000157728 _____ C:\Users\49157\Downloads\nochetto(1).pdf
2022-06-05 23:02 - 2022-06-05 23:02 - 001053600 _____ (ESET) C:\Users\49157\Downloads\esetuninstaller.exe
2022-06-05 15:09 - 2022-06-27 17:31 - 000000000 ____D C:\Users\49157\AppData\Roaming\RetroShare
2022-06-05 15:09 - 2022-06-05 15:09 - 000000000 ____D C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RetroShare
2022-06-05 15:09 - 2022-06-05 15:09 - 000000000 ____D C:\Program Files\RetroShare
2022-06-05 15:06 - 2022-06-05 15:06 - 032788488 _____ C:\Users\49157\Downloads\RetroShare-0.6.6-20210313-0-g751fffc30-Qt-5.15.2-x64-setup.exe
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-07-05 16:24 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2022-07-05 16:20 - 2022-02-10 11:11 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-07-05 16:20 - 2022-01-04 16:39 - 000000000 ____D C:\Users\49157\AppData\LocalLow\Mozilla
2022-07-05 16:19 - 2022-01-04 16:39 - 000000000 ____D C:\ProgramData\Mozilla
2022-07-05 16:18 - 2022-01-16 10:56 - 000000000 ____D C:\Users\49157\AppData\Local\VLC Plus Player Updater
2022-07-05 16:18 - 2022-01-04 16:20 - 000000000 ___RD C:\Users\49157\OneDrive
2022-07-05 16:18 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-07-05 16:17 - 2022-01-04 16:10 - 000000000 ____D C:\ProgramData\NVIDIA
2022-07-05 16:17 - 2022-01-04 16:03 - 000008192 ___SH C:\DumpStack.log.tmp
2022-07-05 16:17 - 2022-01-04 16:03 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2022-07-05 16:16 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2022-07-05 16:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2022-07-05 16:09 - 2022-02-08 14:03 - 000000000 ____D C:\Users\49157\AppData\Roaming\Electrum
2022-07-05 14:00 - 2022-03-17 11:43 - 000004244 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1647510214
2022-07-05 14:00 - 2022-03-17 11:43 - 000001434 _____ C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2022-07-05 09:28 - 2022-01-04 16:03 - 000000000 ____D C:\Windows\system32\SleepStudy
2022-07-04 21:11 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2022-07-04 20:59 - 2022-03-07 13:37 - 000001442 _____ C:\Users\Public\Desktop\Hola Browser.lnk
2022-07-04 20:59 - 2022-03-07 13:37 - 000001442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hola Browser.lnk
2022-07-03 11:44 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-01 17:02 - 2022-05-11 11:43 - 000706006 _____ C:\Windows\system32\perfh007.dat
2022-07-01 17:02 - 2022-05-11 11:43 - 000142248 _____ C:\Windows\system32\perfc007.dat
2022-07-01 17:02 - 2022-01-04 16:12 - 001632196 _____ C:\Windows\system32\PerfStringBackup.INI
2022-07-01 16:55 - 2022-01-04 16:39 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2022-07-01 11:31 - 2022-05-24 17:04 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-07-01 11:31 - 2022-01-04 16:04 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-29 12:02 - 2022-01-04 16:48 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-28 23:08 - 2022-01-04 16:12 - 000000000 ____D C:\Users\49157
2022-06-28 09:20 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2022-06-27 17:23 - 2022-01-05 12:14 - 000001100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2022-06-27 15:48 - 2022-02-09 19:45 - 000000000 ____D C:\Users\49157\AppData\Roaming\IrfanView
2022-06-26 08:45 - 2022-01-06 16:36 - 000000000 ____D C:\Windows\Minidump
2022-06-26 08:44 - 2022-05-09 07:13 - 000267416 _____ C:\Windows\system32\FNTCACHE.DAT
2022-06-26 08:43 - 2022-01-06 16:36 - 856111261 _____ C:\Windows\MEMORY.DMP
2022-06-25 12:06 - 2022-01-04 16:20 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-816154916-3218668794-2224896612-1001
2022-06-25 12:06 - 2022-01-04 16:20 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-816154916-3218668794-2224896612-1001
2022-06-25 12:06 - 2022-01-04 16:12 - 000002395 _____ C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-23 12:07 - 2022-01-04 16:03 - 000000000 ____D C:\Windows\system32\Drivers\wd
2022-06-19 13:43 - 2022-04-09 12:49 - 000000000 ____D C:\Users\49157\AppData\Local\CrashDumps
2022-06-16 10:30 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2022-06-16 10:30 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs
2022-06-16 10:30 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2022-06-15 20:44 - 2022-01-08 13:32 - 000000000 ____D C:\xampp
2022-06-15 18:26 - 2022-01-07 17:59 - 000000000 ____D C:\Users\49157\AppData\Roaming\vlc
2022-06-15 17:30 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2022-06-15 17:18 - 2022-01-04 16:47 - 000000000 ____D C:\Windows\system32\MRT
2022-06-15 17:15 - 2022-01-04 16:47 - 145918784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2022-06-15 16:48 - 2022-01-04 16:20 - 000000000 ____D C:\Users\49157\AppData\Local\PlaceholderTileLogoFolder
2022-06-15 16:48 - 2022-01-04 16:18 - 000000000 ____D C:\Users\49157\AppData\Local\Packages
2022-06-15 16:48 - 2022-01-04 16:18 - 000000000 ____D C:\ProgramData\Packages
2022-06-15 10:56 - 2022-01-08 13:37 - 000000000 ____D C:\ProgramData\Package Cache
2022-06-14 19:24 - 2022-03-07 13:37 - 000000000 ____D C:\Program Files\Hola
2022-06-11 13:17 - 2022-01-04 16:03 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-11 13:17 - 2022-01-04 16:03 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-09 21:40 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-07-2022
durchgeführt von 49157 (05-07-2022 16:25:35)
Gestartet von C:\Users\49157\OneDrive\Desktop
Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) (2022-01-04 14:08:14)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
49157 (S-1-5-21-816154916-3218668794-2224896612-1001 - Administrator - Enabled) => C:\Users\49157
Administrator (S-1-5-21-816154916-3218668794-2224896612-500 - Administrator - Disabled)
cauvlwtjro (S-1-5-21-816154916-3218668794-2224896612-1008 - Limited - Disabled)
DefaultAccount (S-1-5-21-816154916-3218668794-2224896612-503 - Limited - Disabled)
Gast (S-1-5-21-816154916-3218668794-2224896612-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-816154916-3218668794-2224896612-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: ESET Security (Enabled - Up to date) {DF8BEACB-94C9-218A-73AD-A78362A8C516}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Firewall (Disabled) {E7B06BEE-DEA6-20D2-58F2-0EB69C7B826D}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Arasan 23.2 (HKLM-x32\...\Arasan_is1) (Version: - )
Bisq (HKLM\...\{2D9F0EB2-982D-3554-A782-59141A7347C2}) (Version: 1.9.1 - Bisq)
Exodus (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\exodus) (Version: 22.6.17 - Exodus Movement Inc)
GNU Privacy Guard (HKLM-x32\...\GnuPG) (Version: 2.3.4 - The GnuPG Project)
Gpg4win (4.0.0) (HKLM-x32\...\Gpg4win) (Version: 4.0.0 - The Gpg4win Project)
Hola Browser 1.199.387 (HKLM\...\Hola Browser) (Version: 1.199.387 - Hola Networks Ltd.) <==== ACHTUNG
IrfanView 4.60 (32-bit) (HKLM-x32\...\IrfanView) (Version: 4.60 - Irfan Skiljan)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 103.0.1264.44 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\OneDriveSetup.exe) (Version: 22.121.0605.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29325 (HKLM-x32\...\{33628a12-6787-4b9f-95a1-92449f69fae0}) (Version: 14.28.29325.2 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.25.28508 (HKLM-x32\...\{65e650ff-30be-469d-b63a-418d71ea1765}) (Version: 14.25.28508.3 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29325 (HKLM\...\{26AF0C35-55EC-4025-8D83-349E8FB1419F}) (Version: 14.28.29325 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29325 (HKLM\...\{7D0362D5-C699-4403-BC09-0C1DAD1D93AB}) (Version: 14.28.29325 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.25.28508 (HKLM-x32\...\{0FA68574-690B-4B00-89AA-B28946231449}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.25.28508 (HKLM-x32\...\{2BC3BD4D-FABA-4394-93C7-9AC82A263FE2}) (Version: 14.25.28508 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 102.0 (x64 de)) (Version: 102.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 95.0.2 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 91.11.0 (x64 de)) (Version: 91.11.0 - Mozilla)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 8.4.2 - Notepad++ Team)
NVIDIA 3D Vision Treiber 341.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 341.74 - NVIDIA Corporation)
NVIDIA Grafiktreiber 341.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 341.74 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
NVIDIA Update 10.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update) (Version: 10.4.0 - NVIDIA Corporation)
Opera GX Stable 88.0.4412.75 (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Opera GX 88.0.4412.75) (Version: 88.0.4412.75 - Opera Software)
Python 3.10.5 (64-bit) (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\{e15803b8-d809-47f3-8818-73f0d155cf58}) (Version: 3.10.5150.0 - Python Software Foundation)
Python 3.10.5 Core Interpreter (64-bit) (HKLM\...\{496B2CAE-CF79-440A-82F1-7587559ABA00}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Development Libraries (64-bit) (HKLM\...\{7B0F6EAD-C8A1-4496-8492-801EDE1A6323}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Documentation (64-bit) (HKLM\...\{3BC23B98-3D25-4A74-98FD-A1BE957A1340}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Executables (64-bit) (HKLM\...\{0FE1250F-6DD6-4948-B211-741B7CDBB335}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 pip Bootstrap (64-bit) (HKLM\...\{C3B084B6-D193-4633-BBB4-E890AAB946A2}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Standard Library (64-bit) (HKLM\...\{67F90672-C696-4DBB-8F33-95CCCFA21DCE}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Tcl/Tk Support (64-bit) (HKLM\...\{7F7E3C5D-2A37-4F1D-8E8C-3BB073D36BFE}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Test Suite (64-bit) (HKLM\...\{269FCA5D-D0CF-43B2-B656-24DF6DAA0D4E}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python 3.10.5 Utility Scripts (64-bit) (HKLM\...\{BBD9CCC0-981B-4976-91EC-4C1E637BCF85}) (Version: 3.10.5150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{25196DA8-29BD-4383-B7B5-B36C3BAF43F3}) (Version: 3.10.7826.0 - Python Software Foundation)
RetroShare (HKLM-x32\...\RetroShare) (Version: 0.6.6 - RetroShare Team)
Shark007 ADVANCED Codecs (HKLM-x32\...\{8C0CAA7A-3272-4991-A808-2C7559DE3409}) (Version: 11.5.6 - Shark007)
Shark007 ADVANCED x64Components (HKLM\...\ADVANCED x64Components_is1) (Version: 11.5.6 - Shark007)
Silkroad (HKLM-x32\...\Silkroad) (Version: - )
TeamViewer (HKLM\...\TeamViewer) (Version: 15.30.3 - TeamViewer)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 10.00 - Ghisler Software GmbH)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.25.9 - IDRIX)
VLC Plus Player (HKLM\...\VLC Plus Player) (Version: 3.0.16 - Aller Media e.K.) <==== ACHTUNG
VLC Plus Player Updater (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\AM VLC Plus Player Updater) (Version: 1.0.2 - ) <==== ACHTUNG
Warframe (HKLM-x32\...\{52EBA51E-763D-4A89-947A-B5597D403AAD}) (Version: 1.0.0 - Digital Extremes)
Wargaming.net Game Center (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\Wargaming.net Game Center) (Version: 22.1.1.8826 - Wargaming.net)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
World_of_Warships (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\WOWS.WW.PRODUCTION) (Version: - Wargaming.net)
XAMPP (HKLM\...\xampp) (Version: 8.1.1-2 - Bitnami)
Zoom (HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\ZoomUMX) (Version: 5.9.1 (2581) - Zoom Video Communications, Inc.)
Packages:
=========
AV1 Video Extension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.51091.0_x64__8wekyb3d8bbwe [2022-05-07] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-04-28] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-06-10] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-07] (Microsoft Studios) [MS Ad]
Python 3.10 -> C:\Program Files\WindowsApps\PythonSoftwareFoundation.Python.3.10_3.10.1520.0_x64__qbz5n2kfra8p0 [2022-06-15] (Python Software Foundation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2022-03-14] (Notepad++ -> )
ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2021-12-21] (g10 Code GmbH) [Datei ist nicht signiert]
ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2021-12-21] (g10 Code GmbH) [Datei ist nicht signiert]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2015-06-29] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\system32\x264vfw.dll [3799552 2017-07-30] (x264vfw project) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.x265] => C:\Windows\system32\x265vfw.dll [28414044 2019-02-26] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3filter] => C:\Windows\system32\ac3filter.acm [2231296 2013-04-06] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.x264] => C:\Windows\SysWOW64\x264vfw.dll [3850240 2017-07-30] (x264vfw project) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3filter] => C:\Windows\SysWOW64\ac3filter.acm [1679360 2013-04-07] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.x265] => C:\Windows\SysWOW64\x265vfw.dll [6418389 2019-02-26] () [Datei ist nicht signiert]
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Public\Desktop\apache_start - Verknüpfung.lnk -> E:\xampp\apache_start.bat ()
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\03 - Tagesschau 24.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://tagesschau-lh.akamaihd.net/i/tagesschau_1@119231/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\02 - Deutschlandfunk Kultur.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://st02.dlf.de/dlf/02/128/mp3/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\03 - DLF Nova.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://st03.dlf.de/dlf/03/128/mp3/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\04 - NDR 1.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndr1niedersachsen.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\05 - NDR 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndr2.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\06 - N-Joy.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/n-joy.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\07 - WDR 1Live.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://wdr-1live-live.icecast.wdr.de/wdr/1live/live/mp3/128/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\09 - NDR Info.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndrinfo.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\11 - MDR Jump.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://mdr-284320-0.cast.mdr.de/mdr/284320/0/mp3/high/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\13 - Bremen 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/n-joy.m3u
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2021-12-21 13:37 - 2021-12-21 13:37 - 000461824 _____ (g10 Code GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll
2022-01-04 16:10 - 2015-06-29 21:08 - 001219240 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI.dll
2022-01-04 16:10 - 2015-06-29 21:08 - 001406200 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
SearchScopes: HKU\S-1-5-21-816154916-3218668794-2224896612-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-816154916-3218668794-2224896612-1001\...\hola.org -> hxxp://hola.org
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-816154916-3218668794-2224896612-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\49157\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{5F462DA4-3DC0-4B8C-B81D-F346C9D95003}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D9106255-A50F-43C2-9E5A-E70C277BB001}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{5381A3D8-7DB7-4EC9-920B-CC25FE257EE5}C:\program files\vlc plus player\vlc.exe] => (Allow) C:\program files\vlc plus player\vlc.exe (Aller Media e.K. -> VideoLAN)
FirewallRules: [UDP Query User{B289837D-ECCB-48FB-AD47-7FCA971173F5}C:\program files\vlc plus player\vlc.exe] => (Allow) C:\program files\vlc plus player\vlc.exe (Aller Media e.K. -> VideoLAN)
FirewallRules: [TCP Query User{CF922182-C494-498F-81EE-55934EC48561}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{CFACA3C6-3D28-46C1-B6B3-9B34C112EFFD}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [{F72542FC-FDC4-4DD7-88E2-1A77126B1702}] => (Allow) C:\Users\49157\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{10F7D305-5288-4F1B-81C2-D352A1E6643A}] => (Allow) C:\Users\49157\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{E9B26C79-E1F3-4FD3-8583-BB5416494DAB}] => (Allow) C:\Users\49157\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [TCP Query User{F3B8D199-3C42-4710-B71C-FFCE326367FF}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{06BB2DE4-7C41-4467-802A-5816405E2176}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{048D3E75-8745-436B-8316-D33CB5D5E85D}] => (Allow) C:\Users\49157\AppData\Local\Programs\Opera GX\84.0.4316.52\opera.exe => Keine Datei
FirewallRules: [{18B4EAE5-E1A7-4767-99AE-55E61C66F947}] => (Allow) C:\Users\49157\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{F769F61F-1185-486A-AC49-2B574F8EC100}] => (Allow) F:\warfame\Downloaded\Public\Warframe.x64.exe => Keine Datei
FirewallRules: [{F2944399-5AAB-411F-92FE-14C6A1D8D34F}] => (Allow) F:\warfame\Downloaded\Public\Warframe.x64.exe => Keine Datei
FirewallRules: [{C7857A03-0128-419E-B9B1-47B6E3AAC0C8}] => (Allow) C:\Users\49157\AppData\Local\Warframe\Downloaded\Public\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{69891E75-BED1-427D-9029-A30A7F8DED92}] => (Allow) C:\Users\49157\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{E8AA0F26-5927-407F-839B-8E666AC1B61F}] => (Allow) F:\warfame\Downloaded\Public\Warframe.x64.exe => Keine Datei
FirewallRules: [{2B4A0656-AE6E-4148-9AF0-9E0B33F02158}] => (Allow) F:\warfame\Downloaded\Public\Warframe.x64.exe => Keine Datei
FirewallRules: [{C3041A6B-538F-49DF-8DAA-85208C7560C7}] => (Allow) C:\Users\49157\AppData\Local\Warframe\Downloaded\Public\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [TCP Query User{9B64236D-7EAA-44FE-AE79-C3A73A1134F5}E:\xampp\apache\bin\httpd.exe] => (Allow) E:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{4A5C72CA-F2F8-4C3F-ADFE-9A0947134AEE}E:\xampp\apache\bin\httpd.exe] => (Allow) E:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{47D87033-A523-4714-8D7E-95531D9DF841}C:\users\49157\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\49157\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{2D40A235-9E52-44E9-A856-77A580C23672}C:\users\49157\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\49157\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{F66B7ED7-9D73-4727-9F75-1CD1FD3E1223}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming.net Limited -> Wargaming.net)
FirewallRules: [TCP Query User{342D67F3-FD74-4595-9A51-11DEB3819C0F}C:\program files\retroshare\retroshare.exe] => (Allow) C:\program files\retroshare\retroshare.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{BE9E1195-7453-44B1-95F8-1029B216FB59}C:\program files\retroshare\retroshare.exe] => (Allow) C:\program files\retroshare\retroshare.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6BA9F2F2-6FA8-4A16-85EC-D9ADB2532586}C:\users\49157\appdata\local\bisq\bisq.exe] => (Allow) C:\users\49157\appdata\local\bisq\bisq.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{D58CDDE9-8954-4985-886A-6047D8324B96}C:\users\49157\appdata\local\bisq\bisq.exe] => (Allow) C:\users\49157\appdata\local\bisq\bisq.exe () [Datei ist nicht signiert]
FirewallRules: [{DF666321-FDF5-466A-94B0-6680B7192BD3}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{5F925E47-C20C-446A-AD07-E9015399B5D8}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{B5DC5A3B-D8CA-4E82-8BC3-15D9CEAB4E7D}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{AF776B7C-5F59-4BE1-857F-AB469365562A}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{DC4B802F-8E7F-4593-9F62-7A6ED22E2C3C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E691A064-EC68-4271-8D56-6C3DBC081832}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{A96D1B91-CCE1-4376-BD71-85D862A75A03}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2854E1EE-5FE8-4F42-A2E3-2EA6F91A41B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0B81FFC1-7C29-4232-B544-485B203BC3C9}] => (Allow) C:\Users\49157\AppData\Local\Programs\Opera GX\88.0.4412.65\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{C353F12B-729A-47AA-8072-E592F48FED5C}] => (Allow) C:\Users\49157\AppData\Local\Programs\Opera GX\88.0.4412.75\opera.exe (Opera Norway AS -> Opera Software)
==================== Wiederherstellungspunkte =========================
25-06-2022 16:10:42 Geplanter Prüfpunkt
04-07-2022 21:33:57 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Serieller PCI-Anschluss
Description: Serieller PCI-Anschluss
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (07/05/2022 04:18:28 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=1
Error: (07/05/2022 04:17:52 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> SSLCertificateFile: file 'C:/xampp/apache/conf/ssl.crt/server.crt' does not exist or is empty .
Error: (07/05/2022 04:17:52 PM) (Source: Apache Service) (EventID: 3299) (User: )
Description: The Apache service named reported the following error:
>>> AH00526: Syntax error on line 144 of C:/xampp/apache/conf/extra/httpd-ssl.conf: .
Error: (07/05/2022 04:11:02 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: ekrn.exe, Version: 10.26.29.0, Zeitstempel: 0x623098c6
Name des fehlerhaften Moduls: ucrtbase.dll, Version: 10.0.19041.789, Zeitstempel: 0x2bd748bf
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000007286e
ID des fehlerhaften Prozesses: 0x6b0
Startzeit der fehlerhaften Anwendung: 0x01d88d5a9e08688e
Pfad der fehlerhaften Anwendung: C:\Program Files\ESET\ESET Security\ekrn.exe
Pfad des fehlerhaften Moduls: C:\Windows\System32\ucrtbase.dll
Berichtskennung: f2127845-32b7-475e-b647-1d2794bf92fd
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/05/2022 01:56:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x803F7001
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=UserLogon;SessionId=4
Error: (07/05/2022 01:56:33 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x8007139F
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=4de7cb65-cdf1-4de9-8ae8-e3cce27b9f2c;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (07/05/2022 12:40:32 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: wmiprvse.exe, Version: 10.0.19041.546, Zeitstempel: 0x5da7ab91
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0x80131623
Fehleroffset: 0x00007ffbf665200f
ID des fehlerhaften Prozesses: 0x3104
Startzeit der fehlerhaften Anwendung: 0x01d8905ba6571d31
Pfad der fehlerhaften Anwendung: C:\Windows\system32\wbem\wmiprvse.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: d9fa51ed-d19e-4972-86e9-daf053c08c31
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/05/2022 12:40:32 PM) (Source: .NET Runtime) (EventID: 1025) (User: )
Description: Application: wmiprvse.exe
Framework Version: v4.0.30319
Description: The application requested process termination through System.Environment.FailFast(string message).
Message: Unerwartete Anbieterausnahme:
System.IO.FileLoadException:
File name: 'Microsoft.AppV.AppvClientComConsumer, Version=10.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35'
at Microsoft.AppV.AppvPublishingServerWMI.AppvPublishingServer.EnumeratePublishingServers()
Stack:
at System.Environment.FailFast(System.String)
at WmiNative.WbemProvider.WmiNative.IWbemServices.CreateInstanceEnumAsync(System.String, Int32, WmiNative.IWbemContext, WmiNative.IWbemObjectSink)
Systemfehler:
=============
Error: (07/05/2022 04:17:52 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Apache2.4" wurde mit dem folgenden dienstspezifischen Fehler beendet:
Unzulässige Funktion.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (07/05/2022 04:16:46 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-1V0T2E4)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Windows Defender:
================
Date: 2022-06-23 12:17:44
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {59989FCA-0000-46E7-86E9-7EB874DDE55C}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-22 14:21:57
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {32ACF7DE-D15E-4346-9146-8CF517955576}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-20 12:09:10
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {EC3AB7F8-9577-4B52-A9F4-C43657725808}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-19 12:32:56
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {3B7519BB-E6FC-49BD-B703-5221F5098091}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-18 12:44:35
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {CAC010AE-1975-4BBB-AF9E-0BE03F95CEF8}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
CodeIntegrity:
===============
Date: 2022-07-05 16:11:02
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.
Date: 2022-07-05 16:10:26
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\Program Files\ESET\ESET Security\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
==================== Speicherinformationen ===========================
BIOS: Hewlett-Packard 786H1 v01.05 06/09/2010
Hauptplatine: Hewlett-Packard 304Ah
Prozessor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 8055.29 MB
Verfügbarer physikalischer RAM: 2969.74 MB
Summe virtueller Speicher: 19831.29 MB
Verfügbarer virtueller Speicher: 13488.23 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:222.96 GB) (Free:84.63 GB) (Model: Patriot Burst ATA Device) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) (Model: Patriot Burst ATA Device) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: () (Fixed) (Total:488.18 GB) (Free:406.43 GB) (Model: ST1000DM003-1ER162 ATA Device) NTFS
Drive f: (neueMaxTor) (Fixed) (Total:443.23 GB) (Free:82.56 GB) (Model: ST1000DM003-1ER162 ATA Device) NTFS
Drive h: (TOSHIBA EXT) (Fixed) (Total:1863.01 GB) (Free:463.58 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS
Drive i: (DTL+G3) (CDROM) (Total:0.01 GB) (Free:0 GB) CDFS
\\?\Volume{9a083bdb-0000-0000-0000-100000000000}\ (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS
\\?\Volume{f6efd871-0000-0000-0000-80c337000000}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 9A083BDB)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=443.2 GB) - (Type=07 NTFS)
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: F6EFD871)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=526 MB) - (Type=27)
==========================================================
Disk: 3 (Size: 1863 GB) (Disk ID: 89DE76DF)
Partition 1: (Active) - (Size=1863 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================
Code:
ATTFilter Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 05-07-2022
durchgeführt von 49157 (05-07-2022 16:27:20)
Gestartet von C:\Users\49157\OneDrive\Desktop
Start-Modus: Normal
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Public\Desktop\apache_start - Verknüpfung.lnk -> E:\xampp\apache_start.bat ()
Shortcut: C:\Users\49157\Links\Desktop.lnk -> C:\Users\49157\OneDrive\Desktop ()
Shortcut: C:\Users\49157\Links\Downloads.lnk -> C:\Users\49157\Downloads ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk -> C:\Users\49157\AppData\Local\Programs\Opera GX\launcher.exe (Opera Software)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\49157\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk -> C:\Users\49157\OneDrive\Desktop\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Zoom.lnk -> C:\Users\49157\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net\Wargaming.net Game Center.lnk -> C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming.net)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Warframe\Warframe.lnk -> C:\Users\49157\AppData\Local\Warframe\Downloaded\Public\Tools\Launcher.exe (Digital Extremes)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Unknown\Bisq.lnk -> C:\Users\49157\AppData\Local\Bisq\Bisq.exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander Help.lnk -> C:\Program Files\totalcmd\TOTALCMD.CHM ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Total Commander.lnk -> C:\Program Files\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Total Commander\Uninstall or Repair Total Commander.lnk -> C:\Program Files\totalcmd\TCUNINST.EXE ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RetroShare\Deinstallieren.lnk -> C:\Program Files\RetroShare\uninstall.exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\RetroShare\RetroShare.lnk -> C:\Program Files\RetroShare\retroshare.exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10\Python 3.10 (64-bit).lnk -> C:\Users\49157\AppData\Local\Programs\Python\Python310\python.exe (Python Software Foundation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joymax\Silkroad\Silkroad.lnk -> C:\Program Files (x86)\Silkroad\Silkroad.exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Joymax\Silkroad\Uninstall.lnk -> C:\Program Files (x86)\Silkroad\Remove.Exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\About IrfanView.lnk -> C:\Program Files (x86)\IrfanView\i_about.txt ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Available Languages.lnk -> C:\Program Files (x86)\IrfanView\i_languages.txt ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Available PlugIns.lnk -> C:\Program Files (x86)\IrfanView\i_plugins.txt ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\Command line Options.lnk -> C:\Program Files (x86)\IrfanView\i_options.txt ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView 4.60.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView Help.lnk -> C:\Program Files (x86)\IrfanView\i_view32.chm ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\What's New.lnk -> C:\Program Files (x86)\IrfanView\i_changes.txt ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Exodus Movement Inc\Exodus.lnk -> C:\Users\49157\AppData\Local\exodus\Exodus.exe (Exodus Movement Inc)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\RetroShare.lnk -> C:\Program Files\RetroShare\retroshare.exe ()
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Browser Opera GX.lnk -> C:\Users\49157\AppData\Local\Programs\Opera GX\launcher.exe (Opera Software)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Thunderbird.lnk -> C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Start Tor Browser.lnk -> C:\Users\49157\OneDrive\Desktop\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Total Commander.lnk -> C:\Program Files\totalcmd\TOTALCMD.EXE (Ghisler Software GmbH)
Shortcut: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\VLC Plus Player.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GPA.lnk -> C:\Program Files (x86)\Gpg4win\bin\gpa.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kleopatra.lnk -> C:\Program Files (x86)\Gpg4win\bin\kleopatra.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk -> C:\Program Files\PCHealthCheck\PCHealthCheck.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer.lnk -> C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk -> C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP\Uninstall XAMPP.lnk -> C:\xampp\uninstall.exe (Bitnami)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP\XAMPP Control Panel.lnk -> C:\xampp\xampp-control.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP\XAMPP htdocs folder.lnk -> C:\xampp\htdocs ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wargaming.net\Wargaming.net Game Center.lnk -> C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming.net)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Release Notes.lnk -> C:\Program Files\VLC Plus Player\NEWS.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\VLC Plus Player.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt\VeraCrypt.lnk -> C:\Program Files\VeraCrypt\VeraCrypt.exe (IDRIX)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt\VeraCryptExpander.lnk -> C:\Program Files\VeraCrypt\VeraCryptExpander.exe (IDRIX)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs\64bit Settings Application.lnk -> C:\Program Files\Shark007\Tools\Settings64.exe (Shark007)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs\Settings Application 32bit.lnk -> C:\Program Files (x86)\Shark007\Advanced\Tools\Settings32.exe (Shark007)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Arasan 23.2\Arasan.lnk -> C:\Program Files (x86)\Arasan\23.2\arasan.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\49157\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Arasan.lnk -> C:\Program Files (x86)\Arasan\23.2\arasan.exe ()
Shortcut: C:\Users\Public\Desktop\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\Game Center.lnk -> C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming.net)
Shortcut: C:\Users\Public\Desktop\GPA.lnk -> C:\Program Files (x86)\Gpg4win\bin\gpa.exe ()
Shortcut: C:\Users\Public\Desktop\Kleopatra.lnk -> C:\Program Files (x86)\Gpg4win\bin\kleopatra.exe ()
Shortcut: C:\Users\Public\Desktop\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Notepad++.lnk -> C:\Program Files (x86)\Notepad++\notepad++.exe (Don HO don.h@free.fr)
Shortcut: C:\Users\Public\Desktop\TeamViewer.lnk -> C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH)
Shortcut: C:\Users\Public\Desktop\Thunderbird.lnk -> C:\Program Files\Mozilla Thunderbird\thunderbird.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\VeraCrypt.lnk -> C:\Program Files\VeraCrypt\VeraCrypt.exe (IDRIX)
Shortcut: C:\Users\Public\Desktop\VLC Plus Player.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN)
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\03 - Tagesschau 24.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://tagesschau-lh.akamaihd.net/i/tagesschau_1@119231/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\02 - Deutschlandfunk Kultur.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://st02.dlf.de/dlf/02/128/mp3/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\03 - DLF Nova.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://st03.dlf.de/dlf/03/128/mp3/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\04 - NDR 1.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndr1niedersachsen.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\05 - NDR 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndr2.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\06 - N-Joy.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/n-joy.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\07 - WDR 1Live.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://wdr-1live-live.icecast.wdr.de/wdr/1live/live/mp3/128/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\09 - NDR Info.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/ndrinfo.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\11 - MDR Jump.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxp://mdr-284320-0.cast.mdr.de/mdr/284320/0/mp3/high/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\13 - Bremen 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://www.ndr.de/resources/metadaten/audio/m3u/n-joy.m3u
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\49157\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net\World_of_Warships\World_of_Warships deinstallieren.lnk -> C:\Games\World_of_Warships\wgc_api.exe (Wargaming.net) -> --uninstall
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wargaming.net\World_of_Warships\World_of_Warships.lnk -> C:\Games\World_of_Warships\wgc_api.exe (Wargaming.net) -> --open
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\01 - Das Erste.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://mcdn.daserste.de/daserste/de/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\02 - ZDF.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://zdf-hls-15.akamaized.net/hls/live/2016498/de/high/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\04 - ZDF Info.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://zdf-hls-17.akamaized.net/hls/live/2016500/de/high/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\05 - Phoenix.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://zdf-hls-19.akamaized.net/hls/live/2016502/de/high/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\06 - ZDF Neo.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://zdf-hls-16.akamaized.net/hls/live/2016499/de/high/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\TV\07 - 3Sat.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://zdf-hls-18.akamaized.net/hls/live/2016501/dach/high/master.m3u8
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\01 - Deutschlandfunk.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://st01.sslstream.dlf.de/dlf/01/128/mp3/stream.mp3?aggregator=web
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\08 - SWR 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://liveradio.swr.de/sw331ch/swr2
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\10 - WDR 2.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://wdr-wdr2-rheinruhr.icecast.wdr.de/wdr/wdr2/rheinruhr/mp3/128/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\Stream\Radio\12 - MDF Kultur.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> hxxps://mdr-284310-0.cast.mdr.de/mdr/284310/0/mp3/high/stream.mp3
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10\IDLE (Python 3.10 64-bit).lnk -> C:\Users\49157\AppData\Local\Programs\Python\Python310\pythonw.exe (Python Software Foundation) -> "C:\Users\49157\AppData\Local\Programs\Python\Python310\Lib\idlelib\idle.pyw"
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10\Python 3.10 Manuals (64-bit).lnk -> C:\Windows\hh.exe (Microsoft Corporation) -> C:\Users\49157\AppData\Local\Programs\Python\Python310\Doc\python3105.chm
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10\Python 3.10 Module Docs (64-bit).lnk -> C:\Users\49157\AppData\Local\Programs\Python\Python310\python.exe (Python Software Foundation) -> -m pydoc -b
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView\IrfanView - Thumbnails.lnk -> C:\Program Files (x86)\IrfanView\i_view32.exe (Irfan Skiljan) -> /thumbs
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Windows\SendTo\TeamViewer.lnk -> C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH) -> --sendto
ShortcutWithArgument: C:\Users\49157\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\49157\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hola Browser.lnk -> C:\Program Files\Hola\app\chromium\hola_cr.exe (Hola VPN Ltd.) -> --no-default-browser-check --component-updater=fast-update --start-maximized --user-data-dir="C:\Users\49157\AppData\Roaming\Hola\chromium_profile"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\VLC Plus Player - reset preferences and cache files.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> --reset-config --reset-plugins-cache vlc://quit
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VLC Plus Player\VLC Plus Player skinned.lnk -> C:\Program Files\VLC Plus Player\vlc.exe (VideoLAN) -> -Iskins
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs\Uninstall 32bit Advanced.lnk -> C:\Program Files (x86)\Shark007\Advanced\Tools\Settings32.exe (Shark007) -> uninstall
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Shark007 Codecs\Uninstall x64Components.lnk -> C:\Program Files\Shark007\Tools\Settings64.exe (Shark007) -> uninstall
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\TeamViewer.lnk -> C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH) -> --sendto
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\Public\Desktop\Hola Browser.lnk -> C:\Program Files\Hola\app\chromium\hola_cr.exe (Hola VPN Ltd.) -> --no-default-browser-check --component-updater=fast-update --start-maximized --user-data-dir="C:\Users\49157\AppData\Roaming\Hola\chromium_profile"
InternetURL: C:\Users\49157\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP\Bitnami for XAMPP.url -> URL: hxxps://bitnami.com/stack/xampp?utm_source=bitnami&utm_medium=installer&utm_campaign=XAMPP%2BInstaller
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VeraCrypt\VeraCrypt Website.url -> URL: hxxps://www.veracrypt.fr
==================== Ende vom Shortcut.txt =============================
|
| Themen zu Youtubes starten nicht in w 10? |
| dateien, desktop, explorer.exe, firefox, homepage, internet, lan, malwarebytes, microsoft, microsoft defender, mozilla, nvidia, opera, ordner, prozesse, registry, scan, security, services.exe, software, starten, svchost.exe, system, system32, treiber, windows |
Baum-Darstellung