| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache?Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
01.04.2023, 13:57
| #1 |
 |  Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Hallo! Vielen vielen herzlichen Dank für die Aufnahme! Ich habe vor ein paar Tagen ausversehen, eine Spam-Mail geöffnet.  Kein Meldung durch Microsoft Defender nach Komplett Untersuchung und Offline Untersuchung. Logs davon werden, wenn möglich, nachgereicht.Nun wollte ich gestern R und RStudio auf die neusten Versionen aktualisieren und habe dazu die alten Versionen deinstalliert und die neuen installiert. Jedoch war es nicht möglich R mit RStudio zu verbinden. Es kam jedes mal folgende Fehlermeldung "Error Loading R" (Bild davon im Anhang). Ich habe beides einige Male neu installiert und das Problem war immer dasselbe. Im Internet bin ich für mein Problem (auch in RStudio spezialisierten Foren) noch nicht fündig geworden. Empfohlen wird dann Dann R und RStudio als vertrauenswürdiges Programm im Antivirenprogramm einzustufen. Microsoft Defender hat mir hier aber keinerlei Warnungen ausgegeben. Ich möchte nun sichergehen, dass ich mir nicht doch eine Malware eingefangen habe, die hinter meinem Problem steckt  Ich hoffe ihr könnt mir vielleicht helfen und meine Angst etwas nehmen.  Im Nachgang meine FRST Logs. Meinen Namen habe ich durch den Benutzernamen "eisberg" in den Logs ersetzt. 1) FRST.txt Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25-03-2023
durchgeführt von Eisberg Admin (Administrator) auf DESKTOP-9R54N8G (HP HP ProBook 440 G5) (01-04-2023 13:47:13)
Gestartet von C:\Users\eisberg\Downloads
Geladene Profile: Eisberg Admin
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\DPAgent.exe ->) (DigitalPersona, Inc. -> DigitalPersona, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpAgent.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCopyAccelerator.exe
(C:\Users\eisberg\AppData\Local\CiscoSparkLauncher\CiscoCollabHost.exe ->) (Cisco Systems, Inc. -> Cisco WebEx LLC) C:\Users\eisberg\AppData\Local\CiscoSparkLauncher\43.3.0.25468_d149b727-f96e-42a8-a348-e4c08813677a\dependencies\wmlhost.exe
(C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\eisberg\AppData\Local\WebEx\WebEx64\Meetings\atmgr.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SmartAudio3.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems, Inc) C:\Program Files\CONEXANT\Flow\Flow.exe
(Cisco Systems, Inc. -> Cisco Systems, Inc) C:\Users\eisberg\AppData\Local\CiscoSparkLauncher\CiscoCollabHost.exe <3>
(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxEM.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe
(explorer.exe ->) (Grammarly, Inc. -> ) C:\Users\eisberg\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe
(explorer.exe ->) (LiveQoS Incorporated -> LiveQoS Incorporated) C:\Program Files\HP\HP Velocity\systray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <20>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(services.exe ->) (Conexant Systems LLC.) [Datei ist nicht signiert] C:\Windows\CxSvc\CxAudioSvc.exe
(services.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP 3D DriveGuard\hpservice.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP Hotkey Support\HotkeyService.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP MAC Address Manager\hpMAMSrv.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_3de4831720bb2934\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\fpCSEvtSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe
(services.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Windows\CxSvc\CxUtilSvc.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (Conexant Systems LLC -> Conexant) C:\Windows\System32\MicTray64.exe
(svchost.exe ->) (HP Inc. -> ) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(svchost.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP Hotkey Support\QLBController.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23022.140.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynaMonApp.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(winlogon.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\DPAgent.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321096 2017-06-09] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [225248 2017-06-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3503584 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [HPNotifications] => C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe [1523008 2017-04-20] (HP Inc. -> HP)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324600 2017-04-25] (HP Inc. -> HP)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2008856 2021-12-08] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1092576 2023-02-27] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\DPAgent.exe, <==== ACHTUNG
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe [8040032 2023-03-23] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [CiscoSpark] => C:\Users\eisberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webex\Webex.lnk [2052 2022-07-06] () [Datei ist nicht signiert]
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7475664 2023-03-21] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [Grammarly] => C:\Users\eisberg\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe [952240 2023-03-18] (Grammarly, Inc. -> )
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [MicrosoftEdgeAutoLaunch_CE422578D93EDB03DC3AAA1B7AE46AB2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4055952 2023-03-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Command Processor: if exist <==== ACHTUNG
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Run: [MicrosoftEdgeAutoLaunch_6D69553DC51B817E6843D5690ABE9FAD] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4055952 2023-03-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\eisberg\AppData\Local\Microsoft\Teams\Update.exe [2454240 2021-10-06] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [2450336 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{733d146c-3c7f-4afc-8381-83348bf326bb}] -> C:\WINDOWS\system32\HPCredentialProvider.dll [2017-06-15] (HP Inc. -> HP)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Velocity.lnk [2018-01-24]
ShortcutTarget: HP Velocity.lnk -> C:\Program Files\HP\HP Velocity\systray.exe (LiveQoS Incorporated -> LiveQoS Incorporated)
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {038C0B97-8CF3-4FDA-99B3-B5F8BD6F28C7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {0B02D048-B1A6-4A96-B254-8F67182E5520} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.)
Task: {0B826D22-3943-47CA-A7FB-ECC0178449BE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-03-22] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0DB21BF2-0D04-4CF1-ABDE-E6F0997458AA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1003 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E8524FA-EF8F-4F73-A590-212D2E3B7794} - System32\Tasks\Microsoft\Windows\Conexant\SynaMonApp => C:\Windows\System32\SynaMonApp.exe [177976 2021-08-25] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {0FEE8550-0978-4324-902F-CBFBE283CB08} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [3826328 2023-03-10] (Microsoft Corporation -> Microsoft Corporation)
Task: {10DDF82F-E2A7-442E-AB6B-296D86FDB47E} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> Keine Datei <==== ACHTUNG
Task: {11ABE11C-077E-4248-9DCF-054DCFECF9C0} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {194E4E28-A6D1-4AEB-B9D4-4CFB27DB7C53} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168840 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B4287B2-66DE-4D74-BD08-14678CE6CAB4} - \HPEA3JOBS -> Keine Datei <==== ACHTUNG
Task: {231B9865-F2B3-40B2-98C5-2A977729809E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {23AC3C28-CC10-4CC6-8815-4C5F29FD7E6D} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3503584 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {27E10052-EB1C-4C7C-9F9D-353A665D7243} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-07] (HP Inc. -> HP Inc.)
Task: {2E6E1352-8C3C-4B62-A24E-F50D24C1A73F} - \HPJumpStartLaunch -> Keine Datei <==== ACHTUNG
Task: {3906DAC9-DA0D-45CC-9372-7E004EDE6B92} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {3D5E9C2F-42C9-48C2-B39D-2D23D356EA5C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {3E7A75C4-06B9-42E5-9628-68BA0746902A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1001 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {4762F68D-BB65-4310-B488-669FB94C6F04} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - \Microsoft\Windows\WindowsUpdate\sih -> Keine Datei <==== ACHTUNG
Task: {5685AB5C-8D31-4F1C-A487-8940DDADCB9F} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - \Microsoft\Windows\UpdateOrchestrator\Reboot -> Keine Datei <==== ACHTUNG
Task: {61A1F0CA-110C-42EF-9A31-E76730D29F7A} - \Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install -> Keine Datei <==== ACHTUNG
Task: {63F8FD6C-F663-4550-A345-9C21A67F1867} - System32\Tasks\WinZip - Deduplikator - Dokumente - eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{58152587-FDC3-46BF-90FC-B9D3143F7CF2}
Task: {6A752CBF-9C23-4552-A127-0D5460834331} - System32\Tasks\WinZip - Deduplikator - Bilder - eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{8E12013C-A1EA-4D14-BD80-618D43334D5C}
Task: {7072963F-3763-4E9F-A1F5-DE9703BAE827} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Keine Datei <==== ACHTUNG
Task: {74233F11-DA53-419C-A589-66ACAD5B8F6F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7D6309FB-8FD0-4627-BFD8-5C10CEE7AE5A} - System32\Tasks\Microsoft\Windows\Conexant\MicTray => C:\Windows\System32\MicTray64.exe [2938448 2020-07-03] (Conexant Systems LLC -> Conexant)
Task: {845677A0-1357-456A-BC39-F3E7A8675970} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {928984EA-32A3-4CBC-A911-D943FDBADDCB} - \Intel PTT EK Recertification -> Keine Datei <==== ACHTUNG
Task: {98FEBE74-5355-43F1-B0CA-6E165AE21A6A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [1487392 2017-04-07] (HP Inc. -> HP Inc.)
Task: {9F4BC39A-97BE-48ED-9085-E3F5F7F86157} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {ABE9D5CA-4F27-418A-8B0B-F2B746A10244} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AF2FFE13-7176-45EB-BE68-FEA1ABC76588} - \Microsoft\Windows\Setup\SetupCleanupTask -> Keine Datei <==== ACHTUNG
Task: {BCAD91D7-A96B-4F80-B7E1-44C227FF81AF} - \HP\HP Hotkey Support\Start QLBController Process -> Keine Datei <==== ACHTUNG
Task: {C2BCE0FD-1887-4FDD-8E8B-11F241FF806C} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {C607CFC9-3C1F-4FFD-A8AB-613365D46C77} - System32\Tasks\HPCeeScheduleForEisberg Admin => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {CA590FDC-5DAC-488C-BFDC-E76F3E17DE7A} - System32\Tasks\WinZip - Deduplikator - Downloads - Eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{86028757-4F6C-4F2A-8836-9311464E3B36}
Task: {D8CB85B0-A620-41F0-9DB1-1DC74AC6C3F1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {DEBB35D2-A9BA-469F-AD9F-3C05F333528E} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [198696 2017-04-07] (HP Inc. -> HP Inc.)
Task: {E714F6EC-409F-4F31-93EB-CE8D99F2A6F6} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-03-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {E779E804-8AF9-4E4D-A5A1-9F43199A7FAD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E78C8A8B-413E-4059-B993-AFE2BAE05783} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForEisberg Admin.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{e5d9dddb-954c-41b2-9afd-92b2aaf6f634}: [DhcpNameServer] 79.138.0.180 85.8.31.209
Tcpip\..\Interfaces\{e742e72d-7699-467e-bcc2-08977950665f}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Profile: C:\Users\eisberg\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-01]
Edge Extension: (Citavi Picker) - C:\Users\eisberg\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mielbhbkcliienpdicphhecpodcaeefg [2021-12-14]
Edge HKLM-x32\...\Edge\Extension: [mielbhbkcliienpdicphhecpodcaeefg]
FireFox:
========
FF DefaultProfile: ie1qww5d.default
FF ProfilePath: C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\ie1qww5d.default [2021-06-28]
FF ProfilePath: C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\7ekyymd8.default-release [2023-04-01]
FF Notifications: Mozilla\Firefox\Profiles\7ekyymd8.default-release -> hxxps://www.lieferando.de; hxxps://www.instagram.com; hxxps://tubcloud.tu-berlin.de
FF Extension: (Grammarly: Grammar Checker and Writing App) - C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\7ekyymd8.default-release\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2023-03-20]
FF Extension: (Citavi Picker) - C:\Program Files\Mozilla Firefox\distribution\extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2021-07-09]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - c:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome => nicht gefunden
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-03-21] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2023-02-27] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2023-02-27] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default [2023-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-01-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-17]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [928224 2023-02-27] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3896288 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3729888 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12512768 2023-03-10] (Microsoft Corporation -> Microsoft Corporation)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [81408 2021-08-25] (Conexant Systems LLC.) [Datei ist nicht signiert]
R2 CxUtilSvc; C:\WINDOWS\CxSvc\CxUtilSvc.exe [173880 2021-08-25] (Synaptics Incorporated -> Conexant Systems LLC.)
R2 DpHost; c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe [527808 2017-06-20] (DigitalPersona, Inc. -> Crossmatch, Inc.)
S3 FileSyncHelper; C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\FileSyncHelper.exe [2556320 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [589392 2017-06-22] (Hewlett Packard Enterprise Company -> Hewlett-Packard Company)
R2 fpCsEvtSvc; C:\WINDOWS\System32\fpCSEvtSvc.exe [23912 2018-07-25] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\HotKeyServiceUWP.exe [1561032 2022-10-12] (HP Inc. -> HP Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1326888 2017-07-31] (HP Inc. -> HP Inc.)
R2 HP Hotkey Service; C:\Program Files (x86)\HP\HP Hotkey Support\HotkeyService.exe [965952 2017-07-17] (HP Inc. -> HP)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [471040 2017-05-23] (HP Inc. -> HP Inc.)
R2 HPMAMSrv; C:\Program Files (x86)\HP\HP MAC Address Manager\hpMAMSrv.exe [538432 2017-07-05] (HP Inc. -> HP)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\Program Files (x86)\HP\HP 3D DriveGuard\hpservice.exe [30200 2017-06-21] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
S3 HPWorkWise; C:\Program Files (x86)\HP\HP WorkWise\HPWorkWiseService.exe [559096 2017-06-15] (HP Inc. -> HP)
S4 LanWlanSwitchingService; C:\Program Files (x86)\HP\HP Hotkey Support\LanWlanSwitchingService.exe [593728 2017-07-17] (HP Inc. -> HP)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\LanWlanWwanSwitchingServiceUWP.exe [606664 2022-10-12] (HP Inc. -> HP Inc.)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2021-04-15] (Microsoft Windows -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\OneDriveUpdaterService.exe [2936224 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 valWBFPolicyService; C:\WINDOWS\System32\valWBFPolicyService.exe [92520 2018-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe [3224328 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe [133544 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [293264 2021-12-08] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 DAMDrv; C:\WINDOWS\system32\DRIVERS\DAMDrv64.sys [74768 2017-06-22] (Hewlett Packard Enterprise Company -> Hewlett-Packard Enterpise Company)
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 IPeakLWF; C:\WINDOWS\system32\DRIVERS\ipeaklwf.sys [525144 2017-06-14] (LiveQoS Incorporated -> LiveQoS Incorporated)
R3 MpKsl35d5c294; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3ACF153E-545B-4EF3-96D8-9B29B7FD2B4A}\MpKslDrv.sys [211208 2023-04-01] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsla1f253d7; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [137464 2022-04-18] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64880 2020-11-11] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74064 2021-12-08] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49608 2023-03-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [495896 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99624 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
U3 aspnet_state; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-04-01 14:35 - 2023-04-01 14:35 - 110100480 _____ C:\WINDOWS\system32\config\SOFTWARE
2023-04-01 13:47 - 2023-04-01 13:49 - 000036677 _____ C:\Users\eisberg\Downloads\FRST.txt
2023-04-01 13:46 - 2023-04-01 13:48 - 000000000 ____D C:\FRST
2023-04-01 13:45 - 2023-04-01 13:45 - 002379264 _____ (Farbar) C:\Users\eisberg\Downloads\FRST64(1).exe
2023-04-01 13:44 - 2023-04-01 13:44 - 002379264 _____ (Farbar) C:\Users\eisberg\Downloads\FRST64.exe
2023-04-01 13:07 - 2023-04-01 13:07 - 001045776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJET35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBAR332.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSRD2X35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000123664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJINT35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJTER35.DLL
2023-04-01 12:52 - 2023-04-01 12:52 - 000000000 ___HD C:\$WinREAgent
2023-04-01 12:17 - 2023-04-01 12:17 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2023-04-01 12:16 - 2023-04-01 12:16 - 000003604 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1003
2023-04-01 12:16 - 2023-04-01 12:16 - 000003604 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1001
2023-04-01 12:16 - 2023-04-01 12:16 - 000003206 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-04-01 12:16 - 2023-04-01 12:16 - 000002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ___RD C:\Users\Default\OneDrive
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2023-04-01 12:14 - 2023-04-01 12:14 - 000002548 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002544 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002434 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2023-04-01 12:08 - 2023-04-01 12:14 - 000000000 ____D C:\Program Files\Microsoft Office
2023-04-01 12:08 - 2023-04-01 12:08 - 000000000 ____D C:\Program Files\Microsoft Office 15
2023-04-01 11:45 - 2023-04-01 11:45 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2022.lnk
2023-04-01 11:40 - 2023-04-01 11:40 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2023.lnk
2023-04-01 11:36 - 2023-04-01 11:36 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk
2023-04-01 11:28 - 2023-04-01 11:32 - 000000000 ____D C:\Users\eisberg\Desktop\aufgeräumter Desktop
2023-04-01 11:28 - 2023-04-01 11:28 - 000000000 ____D C:\Users\eisberg\.ms-ad
2023-03-31 18:19 - 2023-04-01 12:41 - 000000000 ____D C:\Program Files\R
2023-03-31 18:18 - 2023-03-31 18:18 - 000000000 ____D C:\Users\eisberg\R
2023-03-31 17:45 - 2023-03-31 17:46 - 208078240 _____ (Posit Software, PBC) C:\Users\eisberg\Downloads\RStudio-2023.03.0-386.exe
2023-03-31 17:41 - 2023-03-31 17:42 - 079836488 _____ (R Core Team ) C:\Users\eisberg\Downloads\R-4.2.3-win(1).exe
2023-03-31 17:41 - 2023-03-31 17:41 - 007915004 _____ C:\Users\eisberg\Downloads\RcourseBerry.pdf
2023-03-31 17:27 - 2023-03-31 17:27 - 000305245 _____ C:\Users\eisberg\Downloads\r-fehlermeldungen.pdf
2023-03-31 16:51 - 2023-03-31 16:51 - 081991433 _____ C:\Users\eisberg\Downloads\programmieren-r2022-w0-3-pip (720p)(1).mp4
2023-03-31 16:36 - 2023-03-31 16:36 - 014467109 _____ C:\Users\eisberg\Downloads\RMOOC(1).pdf
2023-03-31 16:17 - 2023-03-31 16:17 - 000000166 _____ C:\WINDOWS\wininit.ini
2023-03-31 16:10 - 2023-03-31 16:10 - 000498979 _____ C:\Users\eisberg\Downloads\Reitabzeichen.pdf
2023-03-31 16:03 - 2023-03-31 16:03 - 000456173 _____ C:\Users\eisberg\Downloads\API-Abzeichen-und-Pruefungen-ab-2023-Stand-02-07.pdf
2023-03-31 15:00 - 2023-03-31 15:00 - 000125806 _____ C:\Users\eisberg\Downloads\FAQ Abschlussarbeiten(1).pdf
2023-03-31 14:59 - 2023-03-31 14:59 - 000125806 _____ C:\Users\eisberg\Downloads\FAQ Abschlussarbeiten.pdf
2023-03-31 13:28 - 2023-03-31 13:28 - 009219813 _____ C:\Users\eisberg\Downloads\overview_palm.pdf;jsessionid=5EBFE4435559782DC0A48863437B2E71.pdf
2023-03-31 13:07 - 2023-03-31 13:07 - 001021378 _____ C:\Users\eisberg\Downloads\58699FEC-7477-42C9-B8A4-F312158D7CAC.MOV
2023-03-31 12:51 - 2023-03-31 12:51 - 012745740 _____ C:\Users\eisberg\Downloads\manuscript_2022_12_14(2).pdf
2023-03-29 22:22 - 2023-03-29 22:22 - 000000000 ____H C:\Users\eisberg\BIT26DB.tmp
2023-03-28 13:03 - 2023-03-28 13:03 - 000600461 _____ C:\Users\eisberg\Downloads\AO_B_K_1._Rate_unterschrieben.pdf
2023-03-28 07:59 - 2023-03-28 07:59 - 001181134 _____ C:\Users\eisberg\Downloads\Asien_Israel_2023-24.pdf
2023-03-22 21:49 - 2023-03-22 21:49 - 084642740 _____ C:\Users\eisberg\Downloads\programmieren-r2022-w2-1-pip (720p).mp4
2023-03-22 19:15 - 2023-03-22 19:15 - 000214689 _____ C:\Users\eisberg\Downloads\WhatsApp Image 2023-03-22 at 17.24.28.jpeg
2023-03-22 18:00 - 2023-03-22 18:00 - 000221184 _____ C:\Users\eisberg\Downloads\Programm SS 23_deutsch.ppt
2023-03-22 17:56 - 2023-03-31 16:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-03-21 14:58 - 2023-03-21 14:58 - 000166775 _____ C:\Users\eisberg\Downloads\Aufruf-Solistreik-TV-STud-III-27.2.2019-2.pdf
2023-03-21 12:45 - 2023-03-21 12:45 - 000840617 _____ C:\Users\eisberg\Downloads\Lateinamerika_2023.pdf
2023-03-21 10:21 - 2023-03-21 10:21 - 000122770 _____ C:\Users\eisberg\Downloads\Studienplan_Kaist_F.pdf
2023-03-21 10:05 - 2023-03-21 10:05 - 000206431 _____ C:\Users\eisberg\Downloads\UEbersicht_der_Studienplanung.pdf
2023-03-20 17:26 - 2023-03-20 17:26 - 000109652 _____ C:\Users\eisberg\Downloads\Das deutsche Hochschulsystem(2).pptx
2023-03-20 17:26 - 2023-03-20 17:26 - 000109652 _____ C:\Users\eisberg\Downloads\Das deutsche Hochschulsystem(1).pptx
2023-03-20 13:20 - 2023-03-20 13:20 - 000892822 _____ C:\Users\eisberg\Downloads\Australien_2024_2023_03_13(1).pdf
2023-03-20 13:19 - 2023-03-20 13:19 - 000892822 _____ C:\Users\eisberg\Downloads\Australien_2024_2023_03_13.pdf
2023-03-20 12:34 - 2023-03-20 12:34 - 001136327 _____ C:\Users\eisberg\Downloads\W_Transcript.pdf
2023-03-20 12:32 - 2023-03-20 12:32 - 001132859 _____ C:\Users\eisberg\Downloads\doc01587420230320111506(1).pdf
2023-03-20 12:29 - 2023-03-20 12:29 - 001140855 _____ C:\Users\eisberg\Downloads\DIE_Transcript.pdf
2023-03-20 12:29 - 2023-03-20 12:29 - 001132859 _____ C:\Users\eisberg\Downloads\doc01587420230320111506.pdf
2023-03-20 12:07 - 2023-03-20 12:07 - 001137387 _____ C:\Users\eisberg\Downloads\doc01587320230320111452.pdf
2023-03-20 12:00 - 2023-03-20 12:00 - 000599202 _____ C:\Users\eisberg\Downloads\bereitschaftserklaerung-fuer-2023-ve.pdf
2023-03-17 12:41 - 2023-03-17 12:41 - 000001092 _____ C:\Users\eisberg\Desktop\Adobe Lightroom Classic.lnk
2023-03-17 12:41 - 2023-03-17 12:41 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic.lnk
2023-03-15 20:06 - 2023-04-01 14:35 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2023-03-14 18:04 - 2023-03-14 18:04 - 006868270 _____ C:\Users\eisberg\Downloads\GB_19_Text_webNIBIS.pdf
2023-03-14 16:14 - 2023-03-14 16:14 - 002220686 _____ C:\Users\eisberg\Downloads\Erstellung_von_Bodenkarten_Berlin.pdf
2023-03-14 16:14 - 2023-03-14 16:14 - 000047671 _____ C:\Users\eisberg\Downloads\Berechnung_Humusvorraete(1).pdf
2023-03-14 15:03 - 2023-03-14 15:03 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022(2).pdf
2023-03-14 13:02 - 2023-03-14 13:02 - 000060162 _____ C:\Users\eisberg\Downloads\5730161419_2023_Nr.006_Kontoauszug_vom_2023.03.07_20230314120210.pdf
2023-03-14 12:56 - 2023-03-14 12:56 - 000122384 _____ C:\Users\eisberg\Downloads\Intyg(2).pdf
2023-03-14 12:55 - 2023-03-14 12:55 - 000165678 _____ C:\Users\eisberg\Downloads\Intyg(1).pdf
2023-03-14 12:54 - 2023-03-14 12:54 - 000110650 _____ C:\Users\eisberg\Downloads\Intyg.pdf
2023-03-12 19:52 - 2023-03-12 19:52 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022(1).pdf
2023-03-12 19:50 - 2023-03-12 19:50 - 000047671 _____ C:\Users\eisberg\Downloads\Berechnung_Humusvorraete.pdf
2023-03-12 19:07 - 2023-03-12 19:07 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022.pdf
2023-03-11 20:17 - 2023-03-11 20:17 - 000611265 _____ C:\Users\eisberg\Documents\Mail.pdf
2023-03-11 19:50 - 2023-03-11 19:50 - 001298889 _____ C:\Users\eisberg\Downloads\ID_eisberg.pdf
2023-03-11 19:33 - 2023-03-11 19:33 - 000513168 _____ C:\Users\eisberg\Downloads\Antrag_Teil B.pdf
2023-03-11 18:57 - 2023-03-11 18:57 - 000540077 _____ C:\Users\eisberg\Downloads\OE_B.Sc._2012(3).pdf
2023-03-11 18:38 - 2023-03-11 18:38 - 000031816 _____ C:\Users\eisberg\Downloads\Ersetzen_einer_Modulpruefung.pdf
2023-03-11 18:37 - 2023-03-11 18:37 - 000019357 _____ C:\Users\eisberg\Downloads\Nachmeldung_QISPOS.pdf
2023-03-11 18:16 - 2023-03-11 18:16 - 000655892 _____ C:\Users\eisberg\Downloads\Anerkennung Natural Hazards_EP(1).pdf
2023-03-11 18:00 - 2023-03-11 19:43 - 000000000 ____D C:\Users\eisberg\Documents\Anerkennung_23
2023-03-11 17:57 - 2023-03-11 17:57 - 000608491 _____ C:\Users\eisberg\Downloads\Notenumrechnung_Austausch_EUROPA_2021(1).pdf
2023-03-11 17:46 - 2023-03-11 17:46 - 001646658 _____ C:\Users\eisberg\Downloads\Anerkennung_von_auslaendischen_Studienleistungen(2).pdf
2023-03-11 17:46 - 2023-03-11 17:46 - 000896396 _____ C:\Users\eisberg\Downloads\Studie_zur_Anerkennung_von_im_Ausland_erbrachten_Studienleistungen_2018(1).pdf
2023-03-08 22:09 - 2023-03-08 22:09 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Frontier Developments
2023-03-08 22:09 - 2023-03-08 22:09 - 000000000 ____D C:\Users\eisberg\AppData\Local\Frontier Developments
2023-03-08 21:54 - 2023-03-31 15:53 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-03-08 21:49 - 2023-03-08 21:49 - 000000000 ____D C:\Users\eisberg\AppData\Local\Steam
2023-03-08 21:48 - 2023-03-08 21:48 - 002296488 _____ C:\Users\eisberg\Downloads\SteamSetup.exe
2023-03-08 14:39 - 2023-03-08 14:39 - 003079193 _____ C:\Users\eisberg\Downloads\Krayenhoff et al. - 2021 - Cooling hot cities a systematic and critical revi(2).pdf
2023-03-08 13:55 - 2023-03-08 13:55 - 003079193 _____ C:\Users\eisberg\Downloads\Krayenhoff et al. - 2021 - Cooling hot cities a systematic and critical revi(1).pdf
2023-03-08 13:35 - 2023-03-08 13:35 - 012745740 _____ C:\Users\eisberg\Downloads\manuscript_2022_12_14(1).pdf
2023-03-07 14:59 - 2023-03-07 14:59 - 1905224421 _____ C:\WINDOWS\MEMORY.DMP
2023-03-07 14:59 - 2023-03-07 14:59 - 003792988 _____ C:\WINDOWS\Minidump\030723-26578-01.dmp
2023-03-07 14:51 - 2023-03-07 14:51 - 000055517 _____ C:\Users\eisberg\Downloads\573016100_2023_Mitteilung_vom_2023.03.02_20230307135133.pdf
2023-03-07 13:58 - 2023-03-07 13:58 - 000234361 _____ C:\Users\eisberg\Downloads\Organigramm_INT_022023.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 005947919 _____ C:\Users\eisberg\Downloads\10-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 004510836 _____ C:\Users\eisberg\Downloads\8-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 004021469 _____ C:\Users\eisberg\Downloads\5-7-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 001272921 _____ C:\Users\eisberg\Downloads\4.2-Boden-Landschaft.pdf
2023-03-02 18:14 - 2023-03-02 18:15 - 003040127 _____ C:\Users\eisberg\Downloads\Pathfinder 2 Charakterbogen.pdf
2023-03-02 10:51 - 2023-03-02 10:51 - 001216554 _____ C:\Users\eisberg\Downloads\Ratgeber_Mein-Haushaltsbuch.pdf
2023-03-02 10:15 - 2023-03-02 10:15 - 000029224 _____ C:\Users\eisberg\Downloads\account_statement_2023_03_02.pdf
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-04-01 13:43 - 2021-06-28 21:06 - 000746440 _____ C:\WINDOWS\system32\perfh007.dat
2023-04-01 13:43 - 2021-06-28 21:06 - 000150810 _____ C:\WINDOWS\system32\perfc007.dat
2023-04-01 13:43 - 2021-06-28 21:03 - 000000000 ____D C:\WINDOWS\INF
2023-04-01 13:43 - 2021-06-28 20:29 - 001807418 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-04-01 13:37 - 2022-02-10 20:58 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-04-01 13:37 - 2021-06-28 21:04 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-04-01 13:36 - 2022-04-27 11:12 - 000000000 ____D C:\Users\eisberg\AppData\Local\CiscoSpark
2023-04-01 13:36 - 2021-09-06 10:16 - 000000000 ____D C:\Users\eisberg\AppData\Local\SquirrelTemp
2023-04-01 13:36 - 2021-07-06 17:51 - 000000000 ___RD C:\Users\eisberg\Creative Cloud Files
2023-04-01 13:36 - 2021-06-24 12:13 - 000000000 ____D C:\Users\eisberg\AppData\LocalLow\Mozilla
2023-04-01 13:35 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\ServiceState
2023-04-01 13:35 - 2021-06-28 20:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-04-01 13:35 - 2021-06-28 20:14 - 000000000 ____D C:\ProgramData\Synaptics
2023-04-01 13:35 - 2021-06-23 19:52 - 000008192 ___SH C:\DumpStack.log.tmp
2023-04-01 13:35 - 2021-06-23 19:52 - 000000000 ____D C:\Intel
2023-04-01 13:29 - 2021-07-18 18:14 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\RStudio
2023-04-01 13:29 - 2021-06-28 21:00 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2023-04-01 13:08 - 2021-06-23 20:33 - 000000000 _RSHD C:\system.sav
2023-04-01 13:07 - 2021-07-13 14:17 - 000000000 ____D C:\Users\eisberg\AppData\Local\HP JumpStart Apps
2023-04-01 12:55 - 2022-04-27 11:12 - 000000000 ____D C:\Users\eisberg\AppData\Local\CiscoSparkLauncher
2023-04-01 12:54 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-04-01 12:54 - 2021-06-23 19:52 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-04-01 12:53 - 2021-06-28 21:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-04-01 12:52 - 2021-06-28 21:09 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2023-04-01 12:40 - 2023-02-22 21:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio
2023-04-01 12:16 - 2021-06-28 21:04 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-04-01 11:51 - 2021-06-28 21:04 - 000000000 ___HD C:\Program Files\WindowsApps
2023-04-01 11:45 - 2022-04-12 13:42 - 000000000 ___HD C:\adobeTemp
2023-04-01 11:45 - 2021-06-28 20:37 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Adobe
2023-04-01 11:44 - 2021-12-03 18:33 - 000000000 ____D C:\Users\eisberg\Documents\Citavi 6
2023-04-01 11:41 - 2023-01-26 09:48 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge 2023.lnk
2023-04-01 11:29 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\Registration
2023-04-01 11:28 - 2022-02-18 09:53 - 000000000 ____D C:\Users\eisberg\AppData\Local\WebEx
2023-04-01 11:28 - 2021-06-28 20:23 - 000000000 ____D C:\Users\eisberg
2023-03-31 18:12 - 2023-02-22 21:55 - 000000000 ____D C:\Users\eisberg\Documents\übung_Kurs_R
2023-03-31 17:59 - 2021-07-06 17:49 - 000000000 ____D C:\Users\eisberg\AppData\Local\D3DSCache
2023-03-31 17:17 - 2022-07-12 11:07 - 000000000 ____D C:\ProgramData\boost_interprocess
2023-03-31 16:19 - 2022-03-03 08:41 - 000000388 _____ C:\WINDOWS\Tasks\HPCeeScheduleForeisberg Admin.job
2023-03-31 16:18 - 2021-06-28 20:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-03-31 16:16 - 2021-07-18 18:14 - 000000000 ____D C:\Users\eisberg\AppData\Local\RStudio
2023-03-31 15:51 - 2021-06-28 21:06 - 000000000 ____D C:\Program Files\Git
2023-03-31 14:57 - 2021-06-25 23:24 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-03-31 14:31 - 2023-02-22 21:55 - 000000000 ____D C:\Users\eisberg\AppData\Local\deno
2023-03-29 22:22 - 2022-03-03 08:41 - 000003304 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForeisberg Admin
2023-03-28 12:42 - 2021-06-28 20:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-03-28 12:09 - 2021-06-28 20:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-03-27 08:27 - 2021-07-06 17:48 - 000000000 ____D C:\Program Files\Adobe
2023-03-23 14:18 - 2021-06-28 20:37 - 000000000 ____D C:\Users\eisberg\AppData\Local\Packages
2023-03-23 14:14 - 2022-05-02 09:25 - 000001430 _____ C:\Users\eisberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grammarly.lnk
2023-03-23 14:14 - 2022-05-02 09:25 - 000001422 _____ C:\Users\eisberg\Desktop\Grammarly.lnk
2023-03-23 14:06 - 2021-10-07 16:22 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2023-03-23 14:06 - 2021-06-28 20:47 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-03-22 17:52 - 2022-10-18 08:41 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-03-22 17:52 - 2022-10-18 08:41 - 000002068 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2023-03-22 17:52 - 2021-09-15 11:35 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-03-22 17:47 - 2021-06-28 20:14 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-03-22 17:47 - 2021-06-28 20:14 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-03-18 23:54 - 2021-06-28 20:14 - 000665960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-03-18 23:52 - 2021-06-28 21:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\SystemResources
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-03-18 21:55 - 2021-06-28 20:16 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-18 21:46 - 2021-06-30 14:04 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-18 21:43 - 2021-06-30 14:04 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-03-15 20:12 - 2021-11-20 18:08 - 000000000 ____D C:\Users\eisberg\AppData\Local\Ubisoft Game Launcher
2023-03-15 20:09 - 2022-09-17 11:57 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-14 21:38 - 2022-05-27 19:13 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Anki2
2023-03-07 14:59 - 2021-07-13 14:15 - 000000000 ____D C:\WINDOWS\Minidump
2023-03-07 14:58 - 2022-02-18 09:56 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\webex
2023-03-05 19:09 - 2021-07-06 17:48 - 000000000 ____D C:\ProgramData\Adobe
2023-03-05 19:09 - 2021-07-06 17:48 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-03-03 12:07 - 2021-06-28 20:36 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\hpqLog
2023-03-02 20:47 - 2022-07-12 11:29 - 000000000 ____D C:\Users\eisberg\AppData\Local\ElevatedDiagnostics
2023-03-02 18:30 - 2021-06-28 21:10 - 000000000 ____D C:\WINDOWS\system32\cAVS
2023-03-02 18:20 - 2023-01-31 16:55 - 000000000 ____D C:\Users\eisberg\AppData\Local\CrashDumps
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2021-07-06 18:26 - 2022-03-30 20:41 - 000000520 _____ () C:\Users\eisberg\AppData\Local\oobelibMkey.log
2022-06-18 18:34 - 2022-06-18 18:34 - 000004662 _____ () C:\Users\eisberg\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. -> 0
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25-03-2023
durchgeführt von eisberg Admin (01-04-2023 13:52:19)
Gestartet von C:\Users\eisberg\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) (2021-06-28 18:30:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1343805967-689705228-1288521309-500 - Administrator - Disabled)
eisberg_ohne_admin_rechte (S-1-5-21-1343805967-689705228-1288521309-1003 - Limited - Enabled) => C:\Users\eisberg_ohne_admin_rechte
Eisberg Admin (S-1-5-21-1343805967-689705228-1288521309-1001 - Administrator - Enabled) => C:\Users\eisberg
DefaultAccount (S-1-5-21-1343805967-689705228-1288521309-503 - Limited - Disabled)
Gast (S-1-5-21-1343805967-689705228-1288521309-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1343805967-689705228-1288521309-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 23.001.20093 - Adobe)
Adobe Bridge 2022 (HKLM-x32\...\KBRG_12_0_4) (Version: 12.0.4 - Adobe Inc.)
Adobe Bridge 2023 (HKLM-x32\...\KBRG_13_0_3) (Version: 13.0.3 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.10.0.573 - Adobe Inc.)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.2.0.18 - Adobe Inc.)
Adobe Illustrator 2021 (HKLM-x32\...\ILST_25_4_8) (Version: 25.4.8 - Adobe Inc.)
Adobe Illustrator 2022 (HKLM-x32\...\ILST_26_5_3) (Version: 26.5.3 - Adobe Inc.)
Adobe Illustrator 2023 (HKLM-x32\...\ILST_27_4) (Version: 27.4 - Adobe Inc.)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_12_2_1) (Version: 12.2.1 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_3) (Version: 24.3.0.376 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601042}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Anki (HKLM-x32\...\Anki) (Version: 2.1.60 - )
Camtasia 2022 (HKLM\...\{B27D7CEB-AB23-4608-86AD-57B10BC790F8}) (Version: 22.4.1.42246 - TechSmith Corporation) Hidden
Camtasia 2022 (HKLM-x32\...\{3f71e02b-b7d1-4a73-88da-6929e0bdb137}) (Version: 22.4.1.42246 - TechSmith Corporation)
Cisco AnyConnect Diagnostics and Reporting Tool (HKLM-x32\...\{E72FE44D-62EF-41E2-A17B-E63FD559F227}) (Version: 4.10.04071 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.04071 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{6B6C5D99-59FB-4B3A-B80A-7FA882769358}) (Version: 4.10.04071 - Cisco Systems, Inc.) Hidden
Cisco Webex Meetings (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\ActiveTouchMeetingClient) (Version: 42.1.6 - Cisco Webex LLC)
Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.11.0.0 - Swiss Academic Software)
Conexant ISST Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 9.0.278.150 - Conexant)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Grammarly for Windows (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Grammarly Desktop Integrations) (Version: 1.0.27.421 - )
HP 3D DriveGuard (HKLM-x32\...\{1289A5C3-C900-45CB-877D-C3D87ADE018C}) (Version: 6.0.43.1 - HP)
HP Client Security Manager (HKLM\...\{EB7FE78E-856B-4141-A685-BF9D49622483}) (Version: 9.3.5.2453 - HP Inc.) Hidden
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 9.3.5.2453 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.8.0 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{9720A595-3D2D-440E-9523-0B6F970745DD}) (Version: 6.0.11.1 - HP Inc.) Hidden
HP Device Access Manager (HKLM\...\{77ACDCD1-A6A9-49A2-9F73-76AAF425EA5C}) (Version: 8.4.9.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM\...\{20185BDA-D396-4C93-95C7-ECD0FB397FF7}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{5BBB44D5-3CC0-4434-AA0C-5883B975E45E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{6884D818-9E0E-4984-A6CA-B17757DCB8FA}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{F7E8A494-97B6-4786-9E2C-A42A082483EB}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{2889C948-F002-4992-815F-DBE0AFB5DC6E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{54da9769-2364-4bd3-8139-6400500778b3}) (Version: 5.3.22034 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{98AA8BB0-0C0A-411A-BB43-1265CA769155}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ESU for Microsoft Windows 10 (HKLM-x32\...\{1ACFA37D-E100-4DF3-BC69-E4D583E874F0}) (Version: 11.3.2 - HP)
HP Hotkey Support (HKLM-x32\...\{963F09EA-0B0A-4CFC-B04F-AD9B6614794C}) (Version: 6.2.39.1 - HP)
HP JumpStart Apps (HKLM-x32\...\HP JumpStart Apps) (Version: 7.0.32 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}) (Version: 1.3.0.407 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{6A139049-EBB9-4076-8664-B468888E55A3}) (Version: 1.3.392.0 - HP Inc.)
HP MAC Address Manager (HKLM-x32\...\{21FA165F-905C-4DDA-B00A-00C3A5D17BBA}) (Version: 1.1.10.1 - HP)
HP Notifications (HKLM-x32\...\{914DE766-65CE-4B85-BCCF-048ECB92E2A7}) (Version: 1.1.4.1 - HP)
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Registration Service (HKLM-x32\...\{EBF2C31B-E9A1-4929-BE35-6EBECF286110}) (Version: 1.0.0.30 - HP Inc.) Hidden
HP SoftPaq Download Manager (HKLM-x32\...\{fc153673-e23b-4908-93b9-164cc056a3c4}) (Version: 4.3.19.0 - HP)
HP Software Setup (HKLM-x32\...\{C968E860-054F-490F-95C6-C9A29601459E}) (Version: 9.2.3 - HP)
HP Support Assistant (HKLM-x32\...\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}) (Version: 8.4.14.41 - HP Inc.)
HP Support Solutions Framework (HKLM-x32\...\{FC8A64EE-AE92-4705-9C3E-63A87DDFD205}) (Version: 12.6.14.19 - HP Inc.)
HP System Default Settings (HKLM-x32\...\{A66E1AC5-F4A9-4DB0-ACB0-90419A8F98D5}) (Version: 1.2.11.2 - HP Inc.)
HP Universal Camera Driver (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.15063.11275 - Realtek Semiconductor Corp.)
HP Velocity (HKLM\...\IPQ_NSIS) (Version: 3.2.0.24905 - HP Inc.)
HP Wireless Button Driver (HKLM-x32\...\{F5852AA8-30EA-495B-84B4-C2403C935D6F}) (Version: 1.1.19.1 - HP)
HP WorkWise (HKLM-x32\...\{2EDE0C89-892C-4C3C-A922-C4DDE7C68EAE}) (Version: 1.4.14.1 - HP Inc.)
HPWorkWise64 (HKLM\...\{56051A5A-7A04-4CD4-A5CD-781F1AC10112}) (Version: 1.4.14.1 - Ihr Firmenname) Hidden
Intel(R) Chipset Device Software (HKLM\...\{94E05108-3E4E-4F2E-AC5F-33A1B22B779C}) (Version: 10.1.1.44 - Intel Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10205.4743 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1035 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{212B25D1-7216-4140-B248-D24BA0F80029}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{81274252-3CCE-4ABF-91F0-811144288963}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{927853D5-9CCC-4ED8-9C64-113EB34E8728}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4736 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.0.1014 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{ABDC630D-DC10-4991-9965-D683C8F4885D}) (Version: 15.7.0.1014 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{0AF335C8-701E-41FA-8333-4702475CF32A}) (Version: 30.100.1724.2 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1724.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client (HKLM\...\{F6AA7E43-41A4-4304-BA96-A495C5788231}) (Version: 1.45.447.1 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{DDE28492-B260-4DF0-BA99-7F96FC2932C1}) (Version: 19.60.0 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{ed5cef80-a339-45bd-8c06-514eaf785ca8}) (Version: 19.71.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{5E952F21-EFE4-47D8-9C8E-29AE9A2D75B7}) (Version: 19.71.0.1071 - Intel Corporation) Hidden
Logitech Unifying-Software 2.52 (HKLM\...\Logitech Unifying) (Version: 2.52.33 - Logitech)
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.16130.20306 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 111.0.1661.54 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 111.0.1661.54 - Microsoft Corporation)
Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 22.077.0410.0007 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{93E32441-3402-439F-8EF7-8EC66D3B74CA}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{4ADC7996-3183-4E8D-8827-34E6558F5B83}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 111.0.1 (x64 de)) (Version: 111.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 89.0.2 - Mozilla)
Nextcloud (HKLM\...\{2E5F383F-C80C-4F61-AA50-A2C801AC15DD}) (Version: 3.6.6.20230119 - Nextcloud GmbH)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
R for Windows 4.2.3 (HKLM\...\R for Windows 4.2.3_is1) (Version: 4.2.3 - R Core Team)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.154 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
RStudio (HKLM-x32\...\RStudio) (Version: 2023.03.0+386 - Posit Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.166 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.5.0.30767 - Microsoft Corporation)
thesettlers3 (HKLM-x32\...\Uplay Install 11784) (Version: - Ubisoft)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 127.3.10627 - Ubisoft)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
Webex (HKLM\...\{611AD18D-000D-4ABB-84FD-CC503FDE8EC6}) (Version: 42.4.1.22032 - Cisco Systems, Inc)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\ZoomUMX) (Version: 5.13.5 (12053) - Zoom Video Communications, Inc.)
Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc [2022-04-20] (Adobe Systems Incorporated)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.3.407.0_x86__v10z8vjag6ke6 [2021-06-28] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-23] (Microsoft Corporation)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2021-12-03] (Adobe Systems Incorporated)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-04-01] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0 [2023-04-01] (Spotify AB) [Startup Task]
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x64__8wekyb3d8bbwe [2023-02-27] (Microsoft Corporation)
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.802.31.0_x64__8wekyb3d8bbwe [2023-03-18] (Microsoft Corporation)
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.802.31.0_x86__8wekyb3d8bbwe [2023-03-18] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-C0F3CCD1AD40} -> [Creative Cloud Files] => C:\Users\eisberg\Creative Cloud Files [2021-07-06 17:51]
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\eisberg\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\Users\eisberg\AppData\Local\WebEx\WebEx64\Meetings\atucfobj.dll (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{52198ba3-aef2-4fea-a304-b2b2edc7cdb1}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2022\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ NextcloudError] -> {E0342B74-7593-4C70-9D61-22F294AAFE05} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOK] -> {E1094E94-BE93-4EA2-9639-8475C68F3886} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOKShared] -> {E243AD85-F71B-496B-B17E-B8091CBE93D2} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudSync] -> {E3D6DB20-1D83-4829-B5C9-941B31C0C35A} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudWarning] -> {E4977F33-F93A-4A0A-9D3C-83DEA0EE8483} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ContextMenuHandlers3: [NextcloudContextMenuHandler] -> {BC6988AB-ACE2-4B81-84DC-DC34F9B24401} => C:\Program Files\Nextcloud\shellext\NCContextMenu.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxDTCM.dll [2020-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2018-01-24 12:04 - 2018-01-24 12:04 - 010472960 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.3.407.0_x86__v10z8vjag6ke6\HPJumpStart.dll
2023-03-20 13:37 - 2023-03-20 13:37 - 000160256 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\47bcb7db1a1aee8d98bddadfca541fa4\BRIDGECommon.ni.dll
2023-02-22 15:30 - 2023-02-22 15:30 - 000120832 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\aa644a345f67c521e8a3a3ec54b45479\BridgeExtension.ni.dll
2023-02-22 15:30 - 2023-02-22 15:30 - 000348160 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\8ce76fee9ba154197fd5773fa9711878\CleanStartController.ni.dll
2017-06-20 12:40 - 2017-06-20 12:40 - 000382464 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPCPFelica.dll
2017-06-20 12:39 - 2017-06-20 12:39 - 000338432 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice2.dll
2017-06-20 12:40 - 2017-06-20 12:40 - 000456192 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice5.dll
2017-06-20 13:56 - 2017-06-20 13:56 - 000284696 _____ (DigitalPersona, Inc. -> Crossmatch, Inc.) [Datei ist nicht signiert] C:\WINDOWS\system32\DPFPApiUI.dll
2023-02-22 15:30 - 2023-02-22 15:30 - 000134656 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\216d9647851f3324c79bd815e40b88cf\CommonPortable.ni.dll
2023-04-01 12:13 - 2023-04-01 12:13 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppvIsvSubsystems64.dll
2023-04-01 12:13 - 2023-04-01 12:13 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2023-02-22 12:46 - 2023-02-22 12:46 - 002306560 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\07f8315b578f328d8dd4050cce905f49\Newtonsoft.Json.ni.dll
2017-06-20 12:28 - 2017-06-20 12:28 - 000348672 _____ (RFIDeas) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\pcProxAPI.dll
2022-01-29 22:12 - 2021-06-29 15:06 - 001431552 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\CONEXANT\Flow\x64\SQLite.Interop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKU\S-1-5-21-1343805967-689705228-1288521309-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1343805967-689705228-1288521309-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\x64\SwissAcademic.Citavi.IEPicker.DLL [2022-01-04] (Swiss Academic Software -> Swiss Academic Software)
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2017-04-07] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\SwissAcademic.Citavi.IEPicker.DLL [2022-01-04] (Swiss Academic Software -> Swiss Academic Software)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2017-04-07] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\sharepoint.com -> hxxps://uppsalauniversitet-files.sharepoint.com
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-03-18 23:03 - 2017-03-18 23:01 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2021-08-21 21:00 - 2022-01-15 15:43 - 000000585 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
168.137.118 iPad-von-Clara.mshome.net # 2021 9 1 6 6 26 54 884
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\
HKCU\Environment\\Path -> %USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\eisberg\Pictures\linaspaethe_Clara_Vigy_und_Heidur\IMG_3289-2.jpg
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\HP\HP_SNOW_3840x2160.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
BITS: {185478C6-B25A-47E4-A447-6C14BE9BD226} - (HPCeeConnect) -> [NotifyCmdLine: C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe "C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe" HPCeeConnect (null)] [Dateien:hxxp://ceement.rssx.hp.com/CeementWA/index.jsp -> C:\Users\eisberg\hpTemp.txt]
ist aktiviert.
Network Binding:
=============
WLAN: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
Ethernet: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
Ethernet 2: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{B28FEB06-B75D-4D8E-AC95-990E15BFE7E3}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel(R) Wireless Connectivity Solutions -> )
FirewallRules: [{DB8876EC-4BB5-49C8-AFF0-CFDEEF4FB9C4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B38272B5-350B-40A9-8AA2-6635940AB999}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{13AFA5D1-37DE-4A39-B36C-007FE801AEEA}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{6F1B81F2-676F-473B-A0D0-CC07BA967E0B}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C69A0232-D3EF-4279-A67C-49B77DCAA971}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{707A01AF-B645-4979-B61B-1B9CA3065447}C:\program files\rstudio\bin\rsession.exe] => (Allow) C:\program files\rstudio\bin\rsession.exe => Keine Datei
FirewallRules: [UDP Query User{FA3655B7-5B12-4B8A-A034-11FCC346E6CC}C:\program files\rstudio\bin\rsession.exe] => (Allow) C:\program files\rstudio\bin\rsession.exe => Keine Datei
FirewallRules: [{33FBC2BC-C46C-4D14-9052-F8429DA23A82}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Keine Datei
FirewallRules: [{508E862D-1462-45CA-A93A-5D7321AB63E4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Keine Datei
FirewallRules: [TCP Query User{9A2FCEFF-1C3F-4E47-89FF-0A6FBC741901}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [UDP Query User{385F83EA-8B43-4E8C-AB48-FF386F2608DF}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [TCP Query User{F60CDAF2-15AD-4418-BDE6-3D7172B53DFA}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Block) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [UDP Query User{4E8CF14A-2B96-43DD-AB67-5C44986778C1}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Block) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [{ACC3C7CA-6602-4659-BC69-FB70EC4F4BFD}] => (Allow) LPort=8323
FirewallRules: [TCP Query User{30F304D9-EB81-4C83-B3D7-584F569E781B}C:\program files\rstudio\resources\app\bin\rsession-utf8.exe] => (Allow) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [UDP Query User{C970F598-AB23-455F-8A37-2F436E959E92}C:\program files\rstudio\resources\app\bin\rsession-utf8.exe] => (Allow) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{FA643D65-8A1B-47C7-9DBF-C23293D6F601}] => (Block) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{DC7AEC55-EBB7-416D-843E-BA3E2AC69261}] => (Block) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{C8D26C36-B269-4D64-9DA1-7264DEA8E486}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{26C1E9D0-6E44-45ED-971B-6CB01498A259}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{2742B49E-155F-469C-B67E-8DD060CD2A37}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{36370B53-060D-43E5-96FF-EB01E1EDBC92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{C3300729-F621-45A8-B4F4-C06B2EF73BB7}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.54\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B902336C-CE21-4DD7-B3B9-B457BBB6D7DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{584702F1-F8DC-43ED-9D3D-A3E2ADD97251}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8CE0ED37-EE96-43FC-AD48-6C10ED5E8F97}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{501E3362-4C20-40FD-8D72-80BBA3ADC039}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E2879FE7-1BBB-4BEE-B142-95209374A037}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A51ED736-B4E7-402D-8AC4-18222F4C5105}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED504146-B0BA-4F06-B865-8B85B0A0E037}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{44B9C82F-34F0-4C42-ADFA-776D9554AC4A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E6980C6D-34A6-42AE-AA4B-7B444FAE2827}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{76242132-4DD3-493B-A95A-FEBBD3ABE32D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CD76F128-D395-4802-80DC-A51AF612C175}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4606E6B3-5ED5-4D8B-996B-60D4A7E28CE2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5B40FBCD-8857-4851-93DA-139E29D969EF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3F718750-ACAD-4E74-891A-569BE2829C51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{301B07BF-C254-4978-8DE3-E032FFC1C90E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{15B883EB-D972-4B25-B5AA-196C859F0C35}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8055FB66-86CC-48FE-8CE2-14D533120578}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7C3DB9EB-2D66-4929-8266-D8486F16B363}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1D26E1F6-9885-4509-B751-DBD24708884E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
28-03-2023 08:49:55 Geplanter Prüfpunkt
31-03-2023 15:53:40 Removed QGIS 3.26.2 'Buenos Aires'
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (04/01/2023 01:15:37 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (04/01/2023 01:15:37 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (04/01/2023 01:05:23 PM) (Source: COM) (EventID: 10035) (User: )
Description: Der COM-Standardmarshaler war nicht in der Lage, einen Konflikt zwischen der vom Server bereitgestellten IID {618736E0-3C3D-11CF-810C-00AA00389B71} und der vom Client angeforderten IID {00020400-0000-0000-C000-000000000046} mit der Handler-CLSID {1C84D830-7FF9-0000-C0EB-5F1CF97F0000} zu beheben. Der Fehlercode war 0x80010114.
Error: (04/01/2023 12:18:26 PM) (Source: COM) (EventID: 10035) (User: )
Description: Der COM-Standardmarshaler war nicht in der Lage, einen Konflikt zwischen der vom Server bereitgestellten IID {618736E0-3C3D-11CF-810C-00AA00389B71} und der vom Client angeforderten IID {00020400-0000-0000-C000-000000000046} mit der Handler-CLSID {BB4BD830-7FFB-0000-C0EB-26BBFB7F0000} zu beheben. Der Fehlercode war 0x80010114.
Error: (04/01/2023 12:18:08 PM) (Source: COM) (EventID: 10035) (User: )
Description: Der COM-Standardmarshaler war nicht in der Lage, einen Konflikt zwischen der vom Server bereitgestellten IID {618736E0-3C3D-11CF-810C-00AA00389B71} und der vom Client angeforderten IID {00020400-0000-0000-C000-000000000046} mit der Handler-CLSID {BB4BD830-7FFB-0000-C0EB-26BBFB7F0000} zu beheben. Der Fehlercode war 0x80010114.
Error: (04/01/2023 12:07:43 PM) (Source: COM) (EventID: 10035) (User: )
Description: Der COM-Standardmarshaler war nicht in der Lage, einen Konflikt zwischen der vom Server bereitgestellten IID {618736E0-3C3D-11CF-810C-00AA00389B71} und der vom Client angeforderten IID {00020400-0000-0000-C000-000000000046} mit der Handler-CLSID {BB4BD830-7FFB-0000-C0EB-26BBFB7F0000} zu beheben. Der Fehlercode war 0x80010114.
Error: (04/01/2023 12:07:11 PM) (Source: COM) (EventID: 10035) (User: )
Description: Der COM-Standardmarshaler war nicht in der Lage, einen Konflikt zwischen der vom Server bereitgestellten IID {618736E0-3C3D-11CF-810C-00AA00389B71} und der vom Client angeforderten IID {00020400-0000-0000-C000-000000000046} mit der Handler-CLSID {BB4BD830-7FFB-0000-C0EB-26BBFB7F0000} zu beheben. Der Fehlercode war 0x80010114.
Error: (04/01/2023 11:57:07 AM) (Source: Microsoft-Windows-RestartManager) (EventID: 10006) (User: DESKTOP-9R54N8G)
Description: Die Anwendung oder der Dienst "Webex" konnte nicht heruntergefahren werden.
Systemfehler:
=============
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{776DBC8D-7347-478C-8D71-791E12EF49D8}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{3EEF301F-B596-4C0B-BD92-013BEAFCE793}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{9AA46009-3CE0-458A-A354-715610A075E6}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{3EEF301F-B596-4C0B-BD92-013BEAFCE793}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{776DBC8D-7347-478C-8D71-791E12EF49D8}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{776DBC8D-7347-478C-8D71-791E12EF49D8}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 01:29:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
==================== Speicherinformationen ===========================
BIOS: HP Q85 Ver. 01.23.00 11/29/2022
Hauptplatine: HP 837B
Prozessor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Prozentuale Nutzung des RAM: 73%
Installierter physikalischer RAM: 8083.21 MB
Verfügbarer physikalischer RAM: 2110.9 MB
Summe virtueller Speicher: 16275.21 MB
Verfügbarer virtueller Speicher: 8884.49 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:218.29 GB) (Free:27.11 GB) (Model: SanDisk SD8SN8U-256G-1006) NTFS
Drive d: (Recovery Image) (Fixed) (Total:18.75 GB) (Free:2.44 GB) (Model: SanDisk SD8SN8U-256G-1006) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
\\?\Volume{576abb01-7cbf-4904-9d4b-bd13daf3f042}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.19 GB) NTFS
\\?\Volume{aa1fac8a-7507-439f-97a4-08fb168e274a}\ (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: D129D462)
Partition: GPT.
==================== Ende von Addition.txt =======================
 P.S. Ich sehe mich gerade nur im Forum um, aber es öffnet sich jedes Mal beim Wechseln in einen Unterbreich, Thema etc. Google.doubleklick.ads Fensterfüllend und die Website und Beiträge sind von großen Werbebannern durchsetzt. Nur so am Rande. :/ Geändert von eisberg (01.04.2023 um 14:21 Uhr) Grund: Ergänzungen |
|
01.04.2023, 15:04
| #2 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™   | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache?Zitat:
Und sowas wie Adobe und Camtasia nutzt du zum reinen Privatvergnügen? Zitat:
__________________ |
|
01.04.2023, 15:12
| #3 | |||
| | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Vielen Dank für deine Antwort!
__________________Zitat:
Zitat:
Zitat:
LG |
|
01.04.2023, 15:15
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Danke für die Antworten. Als eingeloggte Userin solltest du die Werbung eigentlich nicht sehen. Gehen wir mal mit adwCleaner rüber: adwCleaner Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags. adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.04.2023, 15:42
| #5 | |
| | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache?Zitat:
 Ich wollte nun der Anleitung für den adwCleaner folgen und bin auf folgendes gestoßen: Die über die Websiter heruntergeladene Datei heißt: MBsetup.exe nicht, wie in der Anleitung beschrieben adwcleaner.exe Hat sich der Name geändert?  |
|
01.04.2023, 16:02
| #6 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Geht dieser Link? --> https://adwcleaner.malwarebytes.com/...hannel=release
__________________ --> Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? |
|
01.04.2023, 16:09
| #7 | |
| /// TB-Ausbilder | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache?Zitat:
Du hast dann vermutlich auf einen anderen Link bei MB geklickt oder du wurdest auf eine andere Seite weitergeleitet. "MBsetup.exe" ist die Installationsdatei für MBAM, wäre jetzt auch nicht verkehrt gewesen.  |
|
01.04.2023, 17:57
| #8 |
| |  Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Der Link aus cosinus Beitrag hat funktioniert danke! Ichh habe mich mal an dem Cleaning mit dem AdwCleaner probiert und über 10 (!) Durchläufe nach der Anleitung durchgeführt. Beim ersten Durchlauf wurde eine Malware (PUP.Winlogon.Heuristic) sowie einiges an vorinstallierter Software gefunden und unter Quarantäne gestellt.  Log AdwCleaner Durchlauf 1: Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-01-2023
# Duration: 00:00:09
# OS: Windows 10 (Build 19045.2728)
# Cleaned: 33
# Awaiting reboot:2
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon|Userinit
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Deleted Preinstalled.HPJumpStartApps Folder C:\Program Files (x86)\HP\HP JUMPSTART APPS
Deleted Preinstalled.HPJumpStartApps Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\HP JumpStart Apps
Deleted Preinstalled.HPJumpStartBridge Folder C:\Program Files (x86)\HP\HP JUMPSTART BRIDGE
Deleted Preinstalled.HPJumpStartBridge Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{EB0912FF-C311-4E0F-A6B1-420FDD3C295E}
Deleted Preinstalled.HPJumpStartLaunch Folder C:\Program Files (x86)\HP\HP JUMPSTART LAUNCH
Deleted Preinstalled.HPJumpStartLaunch Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2E6E1352-8C3C-4B62-A24E-F50D24C1A73F}
Deleted Preinstalled.HPJumpStartLaunch Registry HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HPJumpStartLaunch
Deleted Preinstalled.HPNotifications Folder C:\Program Files (x86)\HP\HP NOTIFICATIONS
Deleted Preinstalled.HPNotifications Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Run|HPNotifications
Deleted Preinstalled.HPNotifications Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{914DE766-65CE-4B85-BCCF-048ECB92E2A7}
Deleted Preinstalled.HPRegistrationService Folder C:\Program Files (x86)\HP\HP REGISTRATION SERVICE
Deleted Preinstalled.HPRegistrationService Folder C:\ProgramData\HP\HP REGISTRATION SERVICE
Deleted Preinstalled.HPSupportAssistant Folder C:\HP\SUPPORT
Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\svrce\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\svrce\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{05F81C27-62A5-4A0C-8519-60CB66CF87C6}
Deleted Preinstalled.HPSureConnect Folder C:\Program Files\HPCOMMRECOVERY
Deleted Preinstalled.HPSureConnect Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{6468C4A5-E47E-405F-B675-A70A70983EA6}
Deleted Preinstalled.HPVelocity Registry HKLM\Software\IPQ_NSIS
Deleted Preinstalled.HPVelocity Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\IPQ_NSIS
Needs Reboot Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Needs Reboot Preinstalled.HPVelocity Folder C:\Program Files\HP\HP VELOCITY
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
***** Reboot Required to Complete *****
***** [ Folders ] *****
Cleaning failed C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Cleaning failed C:\Program Files\HP\HP VELOCITY
*************************
AdwCleaner[S00].txt - [5163 octets] - [01/04/2023 17:07:20]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Nach dem achten Durchlauf blieb nur noch eine Software übrig, welche sich bis dato nicht erfolgreich in die Quarantäne verschieben lässt. Ich musste zwischendurch noch Webex deinstallieren, weil sich dies beim Neustart immer mitgeöffnet hatte und ich erst dachte, die fehlgeschlagene Quarantäne der 2 Programme kommt daher. Allerdings waren die letzten 3 Durchläufe "ohne Webex" und es bleibt bei der einen Software (Preinstalled.HPSupportAssistant) die sich nicht in die Quarantäne verschieben lässt (siehe Screenshot). Log AdcCleaner Durchlauf 10: Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 04-01-2023
# Duration: 00:00:00
# OS: Windows 10 (Build 19045.2728)
# Cleaned: 1
# Awaiting reboot:1
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Needs Reboot Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
***** Reboot Required to Complete *****
***** [ Folders ] *****
Cleaning failed C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
AdwCleaner[S00].txt - [5163 octets] - [01/04/2023 17:07:20]
AdwCleaner[C00].txt - [6001 octets] - [01/04/2023 17:09:16]
AdwCleaner[S01].txt - [1683 octets] - [01/04/2023 17:12:29]
AdwCleaner[C01].txt - [2151 octets] - [01/04/2023 17:13:13]
AdwCleaner[S02].txt - [1805 octets] - [01/04/2023 17:16:54]
AdwCleaner[C02].txt - [2273 octets] - [01/04/2023 17:19:17]
AdwCleaner[S03].txt - [1927 octets] - [01/04/2023 17:30:04]
AdwCleaner[C03].txt - [2395 octets] - [01/04/2023 17:30:38]
AdwCleaner[S04].txt - [2049 octets] - [01/04/2023 17:35:29]
AdwCleaner[C04].txt - [2517 octets] - [01/04/2023 17:37:14]
AdwCleaner[S05].txt - [2171 octets] - [01/04/2023 17:44:17]
AdwCleaner[C05].txt - [2639 octets] - [01/04/2023 17:44:47]
AdwCleaner[S06].txt - [2293 octets] - [01/04/2023 17:56:12]
AdwCleaner[C06].txt - [2761 octets] - [01/04/2023 18:00:14]
AdwCleaner[S07].txt - [2415 octets] - [01/04/2023 18:06:13]
AdwCleaner[C07].txt - [2883 octets] - [01/04/2023 18:07:44]
AdwCleaner[S08].txt - [2537 octets] - [01/04/2023 18:14:45]
AdwCleaner[C08].txt - [2954 octets] - [01/04/2023 18:15:12]
AdwCleaner[S09].txt - [2590 octets] - [01/04/2023 18:18:07]
AdwCleaner[C09].txt - [2994 octets] - [01/04/2023 18:18:40]
AdwCleaner[S10].txt - [2712 octets] - [01/04/2023 18:22:32]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C10].txt ##########
Geändert von eisberg (01.04.2023 um 18:01 Uhr) Grund: Name der Malware ergänzt |
|
01.04.2023, 18:05
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Starte den Rechner neu, dann bitte mit Malwarebytes Antimalware weitermachen. Das Setup dazu müsstest du schon haben
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.04.2023, 18:37
| #10 |
| | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Gesagt getan. Hier ist der MBAM Log, diesmal nur ein Durchlauf, der nix ausgespuckt hat (Ergebnis unauffällig). Einzig die Benutzeroberfläche von MBAM sagt, dass mein Laptop Systemprobleme hat, die meine Aufmerksamkeit fordern würden (siehe Screenshot). Log MBAM Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 01.04.23
Scan-Zeit: 19:14
Protokolldatei: b8864ef2-d0b0-11ed-b044-ace2d34a7220.json
-Softwaredaten-
Version: 4.5.25.256
Komponentenversion: 1.0.1957
Version des Aktualisierungspakets: 1.0.67448
Lizenz: Testversion
-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.2728)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-9R54N8G\Clara Admin
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 323966
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 7 Min., 29 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 0
(keine bösartigen Elemente erkannt)
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
|
|
01.04.2023, 18:41
| #11 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Welche Systemprobleme soll das sein?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.04.2023, 18:55
| #12 | |
| | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache?Zitat:
Ich meine bei der Installation von MBAM wollte er mir das auch andrehen, aber ich habe auf "Lieber nicht" geklickt gehabt. Wollte nichts installieren was nicht in der Anleitung erwähnt wird.  |
|
01.04.2023, 19:58
| #13 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Nein, das brauchst du bestimmt nicht. Echt ätzend, Malwarebytes springt wohl jetzt auch auf den Zug auf, User zu irgendeinem Zeug zu verleiten  Mach mal bitte neue Logfiles mit FRST.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
01.04.2023, 20:14
| #14 |
| | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Kommt sofort! frst.txt Log: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25-03-2023
durchgeführt von eisberg Admin (Administrator) auf DESKTOP-9R54N8G (HP HP ProBook 440 G5) (01-04-2023 21:03:22)
Gestartet von C:\Users\eisberg\Desktop
Geladene Profile: eisberg Admin
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe <2>
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe
(C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Common Files\Adobe\Creative Cloud Libraries\libs\node.exe
(C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpCardEngine.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\eisberg\AppData\Local\WebEx\WebEx64\Meetings\atmgr.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Program Files\CONEXANT\SA3\HP-NB-AIO\SmartAudio3.exe
(C:\Windows\CxSvc\CxAudioSvc.exe ->) (Synaptics Incorporated -> Conexant Systems, Inc) C:\Program Files\CONEXANT\Flow\Flow.exe
(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxEM.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe
(explorer.exe ->) (Grammarly, Inc. -> ) C:\Users\eisberg\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(HP Inc. -> HP) C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(services.exe ->) (Conexant Systems LLC.) [Datei ist nicht signiert] C:\Windows\CxSvc\CxAudioSvc.exe
(services.exe ->) (DigitalPersona, Inc. -> Crossmatch, Inc.) C:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP 3D DriveGuard\hpservice.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP Hotkey Support\HotkeyService.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP MAC Address Manager\hpMAMSrv.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_3de4831720bb2934\RstMwService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\fpCSEvtSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated) C:\Windows\System32\valWBFPolicyService.exe
(services.exe ->) (Synaptics Incorporated -> Conexant Systems LLC.) C:\Windows\CxSvc\CxUtilSvc.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Adobe Systems Incorporated) C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Conexant Systems LLC -> Conexant) C:\Windows\System32\MicTray64.exe
(svchost.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP Hotkey Support\QLBController.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23022.140.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynaMonApp.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [321096 2017-06-09] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [RtsCM] => C:\WINDOWS\RTSCM64.EXE [225248 2017-06-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3503584 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [HPRadioMgr] => C:\Program Files (x86)\HP\HP Wireless Button Driver\HPRadioMgr64.exe [324600 2017-04-25] (HP Inc. -> HP)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2008856 2021-12-08] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1092576 2023-02-27] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2021-08-04] (Adobe Inc. -> )
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\eisberg\AppData\Local\WebEx\WebexHost.exe [8040032 2023-03-23] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [7475664 2023-03-21] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [Grammarly] => C:\Users\eisberg\AppData\Local\Grammarly\DesktopIntegrations\Grammarly.Desktop.exe [952240 2023-03-18] (Grammarly, Inc. -> )
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Run: [MicrosoftEdgeAutoLaunch_CE422578D93EDB03DC3AAA1B7AE46AB2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4055952 2023-03-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Command Processor: if exist <==== ACHTUNG
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Run: [MicrosoftEdgeAutoLaunch_6D69553DC51B817E6843D5690ABE9FAD] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4055952 2023-03-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\eisberg\AppData\Local\Microsoft\Teams\Update.exe [2454240 2021-10-06] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe [2450336 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{733d146c-3c7f-4afc-8381-83348bf326bb}] -> C:\WINDOWS\system32\HPCredentialProvider.dll [2017-06-15] (HP Inc. -> HP)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Velocity.lnk [2018-01-24]
ShortcutTarget: HP Velocity.lnk -> C:\Program Files\HP\HP Velocity\systray.exe (Keine Datei)
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {038C0B97-8CF3-4FDA-99B3-B5F8BD6F28C7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {0B02D048-B1A6-4A96-B254-8F67182E5520} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.)
Task: {0B826D22-3943-47CA-A7FB-ECC0178449BE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676768 2023-03-22] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0DB21BF2-0D04-4CF1-ABDE-E6F0997458AA} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1003 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {0E8524FA-EF8F-4F73-A590-212D2E3B7794} - System32\Tasks\Microsoft\Windows\Conexant\SynaMonApp => C:\Windows\System32\SynaMonApp.exe [177976 2021-08-25] (Synaptics Incorporated -> Synaptics Incorporated)
Task: {10DDF82F-E2A7-442E-AB6B-296D86FDB47E} - \Hewlett-Packard\HP Support Assistant\Product Configurator -> Keine Datei <==== ACHTUNG
Task: {11ABE11C-077E-4248-9DCF-054DCFECF9C0} - \Microsoft\Windows\UpdateOrchestrator\Policy Install -> Keine Datei <==== ACHTUNG
Task: {194E4E28-A6D1-4AEB-B9D4-4CFB27DB7C53} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168840 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {1B4287B2-66DE-4D74-BD08-14678CE6CAB4} - \HPEA3JOBS -> Keine Datei <==== ACHTUNG
Task: {23AC3C28-CC10-4CC6-8815-4C5F29FD7E6D} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3503584 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {27E10052-EB1C-4C7C-9F9D-353A665D7243} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [625512 2017-04-07] (HP Inc. -> HP Inc.)
Task: {3906DAC9-DA0D-45CC-9372-7E004EDE6B92} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display -> Keine Datei <==== ACHTUNG
Task: {3D5E9C2F-42C9-48C2-B39D-2D23D356EA5C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {3E7A75C4-06B9-42E5-9628-68BA0746902A} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1001 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {4762F68D-BB65-4310-B488-669FB94C6F04} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {4B6926D3-D490-4D93-82CE-D109F1D1BC80} - \Microsoft\Windows\WindowsUpdate\sih -> Keine Datei <==== ACHTUNG
Task: {5685AB5C-8D31-4F1C-A487-8940DDADCB9F} - \Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start -> Keine Datei <==== ACHTUNG
Task: {5D81326C-D6EC-49A0-AAB5-D8A874E06E83} - \Microsoft\Windows\UpdateOrchestrator\Reboot -> Keine Datei <==== ACHTUNG
Task: {61A1F0CA-110C-42EF-9A31-E76730D29F7A} - \Microsoft\Windows\UpdateOrchestrator\Combined Scan Download Install -> Keine Datei <==== ACHTUNG
Task: {63F8FD6C-F663-4550-A345-9C21A67F1867} - System32\Tasks\WinZip - Deduplikator - Dokumente - eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{58152587-FDC3-46BF-90FC-B9D3143F7CF2}
Task: {6A752CBF-9C23-4552-A127-0D5460834331} - System32\Tasks\WinZip - Deduplikator - Bilder - eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{8E12013C-A1EA-4D14-BD80-618D43334D5C}
Task: {7072963F-3763-4E9F-A1F5-DE9703BAE827} - \Microsoft\Windows\Shell\FamilySafetyMonitorToastTask -> Keine Datei <==== ACHTUNG
Task: {7D6309FB-8FD0-4627-BFD8-5C10CEE7AE5A} - System32\Tasks\Microsoft\Windows\Conexant\MicTray => C:\Windows\System32\MicTray64.exe [2938448 2020-07-03] (Conexant Systems LLC -> Conexant)
Task: {845677A0-1357-456A-BC39-F3E7A8675970} - \Microsoft\Windows\UpdateOrchestrator\Maintenance Install -> Keine Datei <==== ACHTUNG
Task: {928984EA-32A3-4CBC-A911-D943FDBADDCB} - \Intel PTT EK Recertification -> Keine Datei <==== ACHTUNG
Task: {98FEBE74-5355-43F1-B0CA-6E165AE21A6A} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Keine Datei)
Task: {9F4BC39A-97BE-48ED-9085-E3F5F7F86157} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe [107368 2017-04-07] (HP Inc. -> HP Inc.)
Task: {AF2FFE13-7176-45EB-BE68-FEA1ABC76588} - \Microsoft\Windows\Setup\SetupCleanupTask -> Keine Datei <==== ACHTUNG
Task: {BCAD91D7-A96B-4F80-B7E1-44C227FF81AF} - \HP\HP Hotkey Support\Start QLBController Process -> Keine Datei <==== ACHTUNG
Task: {C2BCE0FD-1887-4FDD-8E8B-11F241FF806C} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot -> Keine Datei <==== ACHTUNG
Task: {C607CFC9-3C1F-4FFD-A8AB-613365D46C77} - System32\Tasks\HPCeeScheduleForeisberg Admin => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99208 2016-06-24] (Hewlett-Packard Company -> HP Inc.)
Task: {CA590FDC-5DAC-488C-BFDC-E76F3E17DE7A} - System32\Tasks\WinZip - Deduplikator - Downloads - eisberg Admin => C:\Users\eisberg\AppData\Local\Microsoft\WindowsApps\WinZipUWPHelper.exe -> RunExe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}C:\Program Files\WindowsApps\WinZipComputing.WinZipDesktopSubscription_27.0.15262.0_x64__3ykzqggjzj4z0\WzBGTToolsManager64.exe{20083F0D-D8B0-49E2-B454-D6DA05DFFB81}{86028757-4F6C-4F2A-8836-9311464E3B36}
Task: {D8CB85B0-A620-41F0-9DB1-1DC74AC6C3F1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {DEBB35D2-A9BA-469F-AD9F-3C05F333528E} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Keine Datei)
Task: {E714F6EC-409F-4F31-93EB-CE8D99F2A6F6} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-03-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {E78C8A8B-413E-4059-B993-AFE2BAE05783} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3252640 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {FFAC4CE9-034C-4CB6-93B8-95E2B7C59CA2} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [3826328 2023-03-10] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\HPCeeScheduleForeisberg Admin.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{e5d9dddb-954c-41b2-9afd-92b2aaf6f634}: [DhcpNameServer] 79.138.0.180 85.8.31.209
Tcpip\..\Interfaces\{e742e72d-7699-467e-bcc2-08977950665f}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Profile: C:\Users\eisberg\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-01]
Edge Extension: (Citavi Picker) - C:\Users\eisberg\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mielbhbkcliienpdicphhecpodcaeefg [2021-12-14]
Edge HKLM-x32\...\Edge\Extension: [mielbhbkcliienpdicphhecpodcaeefg]
FireFox:
========
FF DefaultProfile: ie1qww5d.default
FF ProfilePath: C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\ie1qww5d.default [2021-06-28]
FF ProfilePath: C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\7ekyymd8.default-release [2023-04-01]
FF Notifications: Mozilla\Firefox\Profiles\7ekyymd8.default-release -> hxxps://www.lieferando.de; hxxps://www.instagram.com; hxxps://tubcloud.tu-berlin.de
FF Extension: (Grammarly: Grammar Checker and Writing App) - C:\Users\eisberg\AppData\Roaming\Mozilla\Firefox\Profiles\7ekyymd8.default-release\Extensions\87677a2c52b84ad3a151a4a72f5bd3c4@jetpack.xpi [2023-03-20]
FF Extension: (Citavi Picker) - C:\Program Files\Mozilla Firefox\distribution\extensions\{8AA36F4F-6DC7-4c06-77AF-5035170634FE}.xpi [2021-07-09]
FF HKLM-x32\...\Firefox\Extensions: [dpmaxz_ng@jetpack] - c:\Program Files (x86)\HP\HP ProtectTools Security Manager\Bin\BrowserExt\dpchrome => nicht gefunden
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-03-21] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2023-02-27] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2023-02-27] (Adobe Inc. -> Adobe Systems)
Chrome:
=======
CHR Profile: C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default [2023-02-27]
CHR Extension: (Google Docs Offline) - C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-01-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\eisberg\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-09-17]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [928224 2023-02-27] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3896288 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3729888 2023-01-19] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12512768 2023-03-10] (Microsoft Corporation -> Microsoft Corporation)
R2 CxAudioSvc; C:\WINDOWS\CxSvc\CxAudioSvc.exe [81408 2021-08-25] (Conexant Systems LLC.) [Datei ist nicht signiert]
R2 CxUtilSvc; C:\WINDOWS\CxSvc\CxUtilSvc.exe [173880 2021-08-25] (Synaptics Incorporated -> Conexant Systems LLC.)
R2 DpHost; c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DpHostW.exe [527808 2017-06-20] (DigitalPersona, Inc. -> Crossmatch, Inc.)
S3 FileSyncHelper; C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\FileSyncHelper.exe [2556320 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
S3 FLCDLOCK; c:\windows\SysWOW64\flcdlock.exe [589392 2017-06-22] (Hewlett Packard Enterprise Company -> Hewlett-Packard Company)
R2 fpCsEvtSvc; C:\WINDOWS\System32\fpCSEvtSvc.exe [23912 2018-07-25] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\HotKeyServiceUWP.exe [1561032 2022-10-12] (HP Inc. -> HP Inc.)
R2 HP Hotkey Service; C:\Program Files (x86)\HP\HP Hotkey Support\HotkeyService.exe [965952 2017-07-17] (HP Inc. -> HP)
R2 HPMAMSrv; C:\Program Files (x86)\HP\HP MAC Address Manager\hpMAMSrv.exe [538432 2017-07-05] (HP Inc. -> HP)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1077752 2016-09-28] (HP Inc. -> HP)
R2 hpsrv; C:\Program Files (x86)\HP\HP 3D DriveGuard\hpservice.exe [30200 2017-06-21] (HP Inc. -> HP)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [33640 2017-04-07] (HP Inc. -> HP Inc.)
S3 HPWorkWise; C:\Program Files (x86)\HP\HP WorkWise\HPWorkWiseService.exe [559096 2017-06-15] (HP Inc. -> HP)
S4 LanWlanSwitchingService; C:\Program Files (x86)\HP\HP Hotkey Support\LanWlanSwitchingService.exe [593728 2017-07-17] (HP Inc. -> HP)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_5c0b90ae6269072a\LanWlanWwanSwitchingServiceUWP.exe [606664 2022-10-12] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9094440 2023-04-01] (Malwarebytes Inc. -> Malwarebytes)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2021-04-15] (Microsoft Windows -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\OneDriveUpdaterService.exe [2936224 2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 valWBFPolicyService; C:\WINDOWS\System32\valWBFPolicyService.exe [92520 2018-07-25] (Microsoft Windows Hardware Compatibility Publisher -> Synaptics Incorporated)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe [3224328 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe [133544 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]
S2 HPJumpStartBridge; "c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [293264 2021-12-08] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 DAMDrv; C:\WINDOWS\system32\DRIVERS\DAMDrv64.sys [74768 2017-06-22] (Hewlett Packard Enterprise Company -> Hewlett-Packard Enterpise Company)
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 IPeakLWF; C:\WINDOWS\system32\DRIVERS\ipeaklwf.sys [525144 2017-06-14] (LiveQoS Incorporated -> LiveQoS Incorporated)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-04-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198584 2023-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77736 2023-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181816 2023-04-01] (Malwarebytes Inc. -> Malwarebytes)
S3 MpKsla1f253d7; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [137464 2022-04-18] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [64880 2020-11-11] (Samsung Electronics Co., Ltd. -> QUALCOMM Incorporated)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74064 2021-12-08] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49608 2023-03-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [495896 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99624 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
U3 aspnet_state; kein ImagePath
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-04-01 21:03 - 2023-04-01 21:04 - 000034649 _____ C:\Users\eisberg\Desktop\FRST.txt
2023-04-01 19:32 - 2023-04-01 19:32 - 000001430 _____ C:\Users\eisberg\Desktop\MBAM_Verlauf_1.txt
2023-04-01 19:26 - 2023-04-01 19:26 - 000181816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2023-04-01 19:13 - 2023-04-01 19:13 - 000000000 ____D C:\Users\eisberg\AppData\Local\mbam
2023-04-01 19:11 - 2023-04-01 19:11 - 000002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2023-04-01 19:11 - 2023-04-01 19:11 - 000002028 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2023-04-01 19:11 - 2023-04-01 19:11 - 000000000 ____D C:\ProgramData\Malwarebytes
2023-04-01 19:11 - 2023-04-01 19:11 - 000000000 ____D C:\Program Files\Malwarebytes
2023-04-01 19:07 - 2023-04-01 19:07 - 002649088 _____ (Malwarebytes) C:\Users\eisberg\Desktop\MBSetup.exe
2023-04-01 17:42 - 2023-04-01 17:42 - 000002517 _____ C:\Users\eisberg\Desktop\AdwCleaner[C04].txt
2023-04-01 17:29 - 2023-04-01 17:29 - 000002273 _____ C:\Users\eisberg\Desktop\AdwCleaner[C02].txt
2023-04-01 17:16 - 2023-04-01 17:16 - 000002151 _____ C:\Users\eisberg\Desktop\AdwCleaner[C01].txt
2023-04-01 17:11 - 2023-04-01 17:11 - 000006001 _____ C:\Users\eisberg\Desktop\AdwCleaner[C00].txt
2023-04-01 17:05 - 2023-04-01 17:09 - 000000000 ____D C:\AdwCleaner
2023-04-01 17:04 - 2023-04-01 17:04 - 008791352 _____ (Malwarebytes) C:\Users\eisberg\Desktop\adwcleaner.exe
2023-04-01 14:35 - 2023-04-01 19:26 - 110886912 _____ C:\WINDOWS\system32\config\SOFTWARE
2023-04-01 14:28 - 2023-04-01 14:51 - 000052886 _____ C:\Users\eisberg\Desktop\Addition_eisberg.txt
2023-04-01 14:24 - 2023-04-01 14:51 - 000057927 _____ C:\Users\eisberg\Desktop\FRST_eisberg.txt
2023-04-01 13:56 - 2023-04-01 13:56 - 000052822 _____ C:\Users\eisberg\Desktop\Addition_original.txt
2023-04-01 13:55 - 2023-04-01 13:55 - 000057697 _____ C:\Users\eisberg\Desktop\FRST_original.txt
2023-04-01 13:52 - 2023-04-01 13:55 - 000052822 _____ C:\Users\eisberg\Downloads\Addition.txt
2023-04-01 13:47 - 2023-04-01 13:55 - 000057697 _____ C:\Users\eisberg\Downloads\FRST.txt
2023-04-01 13:46 - 2023-04-01 21:03 - 000000000 ____D C:\FRST
2023-04-01 13:45 - 2023-04-01 13:45 - 002379264 _____ (Farbar) C:\Users\eisberg\Downloads\FRST64(1).exe
2023-04-01 13:44 - 2023-04-01 21:03 - 002379264 _____ (Farbar) C:\Users\eisberg\Desktop\FRST64.exe
2023-04-01 13:07 - 2023-04-01 13:07 - 001045776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJET35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000368912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBAR332.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000252176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSRD2X35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000123664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJINT35.DLL
2023-04-01 13:07 - 2023-04-01 13:07 - 000024848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSJTER35.DLL
2023-04-01 12:52 - 2023-04-01 12:52 - 000000000 ___HD C:\$WinREAgent
2023-04-01 12:17 - 2023-04-01 12:17 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2023-04-01 12:16 - 2023-04-01 12:16 - 000003604 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1003
2023-04-01 12:16 - 2023-04-01 12:16 - 000003604 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1343805967-689705228-1288521309-1001
2023-04-01 12:16 - 2023-04-01 12:16 - 000003206 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-04-01 12:16 - 2023-04-01 12:16 - 000002269 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ___RD C:\Users\Default\OneDrive
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-04-01 12:16 - 2023-04-01 12:16 - 000000000 ____D C:\Program Files (x86)\Microsoft OneDrive
2023-04-01 12:14 - 2023-04-01 12:14 - 000002548 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002544 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002523 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002501 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002498 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002465 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002462 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000002434 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2023-04-01 12:14 - 2023-04-01 12:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2023-04-01 12:08 - 2023-04-01 12:14 - 000000000 ____D C:\Program Files\Microsoft Office
2023-04-01 12:08 - 2023-04-01 12:08 - 000000000 ____D C:\Program Files\Microsoft Office 15
2023-04-01 11:45 - 2023-04-01 11:45 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2022.lnk
2023-04-01 11:40 - 2023-04-01 11:40 - 000002500 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2023.lnk
2023-04-01 11:36 - 2023-04-01 11:36 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2023.lnk
2023-04-01 11:28 - 2023-04-01 11:32 - 000000000 ____D C:\Users\eisberg\Desktop\aufgeräumter Desktop
2023-04-01 11:28 - 2023-04-01 11:28 - 000000000 ____D C:\Users\eisberg\.ms-ad
2023-03-31 18:19 - 2023-04-01 12:41 - 000000000 ____D C:\Program Files\R
2023-03-31 18:18 - 2023-03-31 18:18 - 000000000 ____D C:\Users\eisberg\R
2023-03-31 17:45 - 2023-03-31 17:46 - 208078240 _____ (Posit Software, PBC) C:\Users\eisberg\Downloads\RStudio-2023.03.0-386.exe
2023-03-31 17:41 - 2023-03-31 17:42 - 079836488 _____ (R Core Team ) C:\Users\eisberg\Downloads\R-4.2.3-win(1).exe
2023-03-31 17:41 - 2023-03-31 17:41 - 007915004 _____ C:\Users\eisberg\Downloads\RcourseBerry.pdf
2023-03-31 17:27 - 2023-03-31 17:27 - 000305245 _____ C:\Users\eisberg\Downloads\r-fehlermeldungen.pdf
2023-03-31 16:51 - 2023-03-31 16:51 - 081991433 _____ C:\Users\eisberg\Downloads\programmieren-r2022-w0-3-pip (720p)(1).mp4
2023-03-31 16:36 - 2023-03-31 16:36 - 014467109 _____ C:\Users\eisberg\Downloads\RMOOC(1).pdf
2023-03-31 16:17 - 2023-03-31 16:17 - 000000166 _____ C:\WINDOWS\wininit.ini
2023-03-31 16:10 - 2023-03-31 16:10 - 000498979 _____ C:\Users\eisberg\Downloads\Reitabzeichen.pdf
2023-03-31 16:03 - 2023-03-31 16:03 - 000456173 _____ C:\Users\eisberg\Downloads\API-Abzeichen-und-Pruefungen-ab-2023-Stand-02-07.pdf
2023-03-31 15:00 - 2023-03-31 15:00 - 000125806 _____ C:\Users\eisberg\Downloads\FAQ Abschlussarbeiten(1).pdf
2023-03-31 14:59 - 2023-03-31 14:59 - 000125806 _____ C:\Users\eisberg\Downloads\FAQ Abschlussarbeiten.pdf
2023-03-31 13:28 - 2023-03-31 13:28 - 009219813 _____ C:\Users\eisberg\Downloads\overview_palm.pdf;jsessionid=5EBFE4435559782DC0A48863437B2E71.pdf
2023-03-31 13:07 - 2023-03-31 13:07 - 001021378 _____ C:\Users\eisberg\Downloads\58699FEC-7477-42C9-B8A4-F312158D7CAC.MOV
2023-03-31 12:51 - 2023-03-31 12:51 - 012745740 _____ C:\Users\eisberg\Downloads\manuscript_2022_12_14(2).pdf
2023-03-29 22:22 - 2023-03-29 22:22 - 000000000 ____H C:\Users\eisberg\BIT26DB.tmp
2023-03-28 13:03 - 2023-03-28 13:03 - 000600461 _____ C:\Users\eisberg\Downloads\AO_Benita_Kaster_1._Rate_unterschrieben.pdf
2023-03-28 07:59 - 2023-03-28 07:59 - 001181134 _____ C:\Users\eisberg\Downloads\Asien_Israel_2023-24.pdf
2023-03-22 21:49 - 2023-03-22 21:49 - 084642740 _____ C:\Users\eisberg\Downloads\programmieren-r2022-w2-1-pip (720p).mp4
2023-03-22 19:15 - 2023-03-22 19:15 - 000214689 _____ C:\Users\eisberg\Downloads\WhatsApp Image 2023-03-22 at 17.24.28.jpeg
2023-03-22 18:00 - 2023-03-22 18:00 - 000221184 _____ C:\Users\eisberg\Downloads\Programm SS 23_deutsch.ppt
2023-03-22 17:56 - 2023-03-31 16:18 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-03-21 14:58 - 2023-03-21 14:58 - 000166775 _____ C:\Users\eisberg\Downloads\Aufruf-Solistreik-TV-STud-III-27.2.2019-2.pdf
2023-03-21 12:45 - 2023-03-21 12:45 - 000840617 _____ C:\Users\eisberg\Downloads\Lateinamerika_2023.pdf
2023-03-21 10:21 - 2023-03-21 10:21 - 000122770 _____ C:\Users\eisberg\Downloads\Studienplan_Kaist_Fonseca.pdf
2023-03-21 10:05 - 2023-03-21 10:05 - 000206431 _____ C:\Users\eisberg\Downloads\UEbersicht_der_Studienplanung.pdf
2023-03-20 17:26 - 2023-03-20 17:26 - 000109652 _____ C:\Users\eisberg\Downloads\Das deutsche Hochschulsystem(2).pptx
2023-03-20 17:26 - 2023-03-20 17:26 - 000109652 _____ C:\Users\eisberg\Downloads\Das deutsche Hochschulsystem(1).pptx
2023-03-20 13:20 - 2023-03-20 13:20 - 000892822 _____ C:\Users\eisberg\Downloads\Australien_2024_2023_03_13(1).pdf
2023-03-20 13:19 - 2023-03-20 13:19 - 000892822 _____ C:\Users\eisberg\Downloads\Australien_2024_2023_03_13.pdf
2023-03-20 12:34 - 2023-03-20 12:34 - 001136327 _____ C:\Users\eisberg\Downloads\WEISE_Transcript.pdf
2023-03-20 12:32 - 2023-03-20 12:32 - 001132859 _____ C:\Users\eisberg\Downloads\doc01587420230320111506(1).pdf
2023-03-20 12:29 - 2023-03-20 12:29 - 001140855 _____ C:\Users\eisberg\Downloads\DIETRICH_Transcript.pdf
2023-03-20 12:29 - 2023-03-20 12:29 - 001132859 _____ C:\Users\eisberg\Downloads\doc01587420230320111506.pdf
2023-03-20 12:07 - 2023-03-20 12:07 - 001137387 _____ C:\Users\eisberg\Downloads\doc01587320230320111452.pdf
2023-03-20 12:00 - 2023-03-20 12:00 - 000599202 _____ C:\Users\eisberg\Downloads\bereitschaftserklaerung-fuer-2023-ve.pdf
2023-03-17 12:41 - 2023-03-17 12:41 - 000001092 _____ C:\Users\eisberg\Desktop\Adobe Lightroom Classic.lnk
2023-03-17 12:41 - 2023-03-17 12:41 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic.lnk
2023-03-15 20:06 - 2023-04-01 14:35 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2023-03-14 18:04 - 2023-03-14 18:04 - 006868270 _____ C:\Users\eisberg\Downloads\GB_19_Text_webNIBIS.pdf
2023-03-14 16:14 - 2023-03-14 16:14 - 002220686 _____ C:\Users\eisberg\Downloads\Erstellung_von_Bodenkarten_Berlin.pdf
2023-03-14 16:14 - 2023-03-14 16:14 - 000047671 _____ C:\Users\eisberg\Downloads\Berechnung_Humusvorraete(1).pdf
2023-03-14 15:03 - 2023-03-14 15:03 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022(2).pdf
2023-03-14 13:02 - 2023-03-14 13:02 - 000060162 _____ C:\Users\eisberg\Downloads\5730161419_2023_Nr.006_Kontoauszug_vom_2023.03.07_20230314120210.pdf
2023-03-14 12:56 - 2023-03-14 12:56 - 000122384 _____ C:\Users\eisberg\Downloads\Intyg(2).pdf
2023-03-14 12:55 - 2023-03-14 12:55 - 000165678 _____ C:\Users\eisberg\Downloads\Intyg(1).pdf
2023-03-14 12:54 - 2023-03-14 12:54 - 000110650 _____ C:\Users\eisberg\Downloads\Intyg.pdf
2023-03-12 19:52 - 2023-03-12 19:52 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022(1).pdf
2023-03-12 19:50 - 2023-03-12 19:50 - 000047671 _____ C:\Users\eisberg\Downloads\Berechnung_Humusvorraete.pdf
2023-03-12 19:07 - 2023-03-12 19:07 - 004726456 _____ C:\Users\eisberg\Downloads\Auswertung 2022.pdf
2023-03-11 20:17 - 2023-03-11 20:17 - 000611265 _____ C:\Users\eisberg\Documents\Mail.pdf
2023-03-11 19:50 - 2023-03-11 19:50 - 001298889 _____ C:\Users\eisberg\Downloads\ID_eisbergk.pdf
2023-03-11 19:33 - 2023-03-11 19:33 - 000513168 _____ C:\Users\eisberg\Downloads\Antrag_Teil B.pdf
2023-03-11 18:57 - 2023-03-11 18:57 - 000540077 _____ C:\Users\eisberg\Downloads\OEkologieUmweltplanung_B.Sc._2012(3).pdf
2023-03-11 18:38 - 2023-03-11 18:38 - 000031816 _____ C:\Users\eisberg\Downloads\Ersetzen_einer_Modulpruefung.pdf
2023-03-11 18:37 - 2023-03-11 18:37 - 000019357 _____ C:\Users\eisberg\Downloads\Nachmeldung_QISPOS.pdf
2023-03-11 18:16 - 2023-03-11 18:16 - 000655892 _____ C:\Users\eisberg\Downloads\Anerkennung Natural Hazards_EP(1).pdf
2023-03-11 18:00 - 2023-03-11 19:43 - 000000000 ____D C:\Users\eisberg\Documents\Anerkennung_23
2023-03-11 17:57 - 2023-03-11 17:57 - 000608491 _____ C:\Users\eisberg\Downloads\Notenumrechnung_Austausch_EUROPA_2021(1).pdf
2023-03-11 17:46 - 2023-03-11 17:46 - 001646658 _____ C:\Users\eisberg\Downloads\Anerkennung_von_auslaendischen_Studienleistungen(2).pdf
2023-03-11 17:46 - 2023-03-11 17:46 - 000896396 _____ C:\Users\eisberg\Downloads\Studie_zur_Anerkennung_von_im_Ausland_erbrachten_Studienleistungen_2018(1).pdf
2023-03-08 22:09 - 2023-03-08 22:09 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Frontier Developments
2023-03-08 22:09 - 2023-03-08 22:09 - 000000000 ____D C:\Users\eisberg\AppData\Local\Frontier Developments
2023-03-08 21:54 - 2023-03-31 15:53 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2023-03-08 21:49 - 2023-03-08 21:49 - 000000000 ____D C:\Users\eisberg\AppData\Local\Steam
2023-03-08 21:48 - 2023-03-08 21:48 - 002296488 _____ C:\Users\eisberg\Downloads\SteamSetup.exe
2023-03-08 14:39 - 2023-03-08 14:39 - 003079193 _____ C:\Users\eisberg\Downloads\Krayenhoff et al. - 2021 - Cooling hot cities a systematic and critical revi(2).pdf
2023-03-08 13:55 - 2023-03-08 13:55 - 003079193 _____ C:\Users\eisberg\Downloads\Krayenhoff et al. - 2021 - Cooling hot cities a systematic and critical revi(1).pdf
2023-03-08 13:35 - 2023-03-08 13:35 - 012745740 _____ C:\Users\eisberg\Downloads\manuscript_2022_12_14(1).pdf
2023-03-07 14:59 - 2023-03-07 14:59 - 1905224421 _____ C:\WINDOWS\MEMORY.DMP
2023-03-07 14:59 - 2023-03-07 14:59 - 003792988 _____ C:\WINDOWS\Minidump\030723-26578-01.dmp
2023-03-07 14:51 - 2023-03-07 14:51 - 000055517 _____ C:\Users\eisberg\Downloads\573016100_2023_Mitteilung_vom_2023.03.02_20230307135133.pdf
2023-03-07 13:58 - 2023-03-07 13:58 - 000234361 _____ C:\Users\eisberg\Downloads\Organigramm_INT_022023.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 005947919 _____ C:\Users\eisberg\Downloads\10-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 004510836 _____ C:\Users\eisberg\Downloads\8-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 004021469 _____ C:\Users\eisberg\Downloads\5-7-Boden-Landschaft.pdf
2023-03-05 21:49 - 2023-03-05 21:49 - 001272921 _____ C:\Users\eisberg\Downloads\4.2-Boden-Landschaft.pdf
2023-03-02 18:14 - 2023-03-02 18:15 - 003040127 _____ C:\Users\eisberg\Downloads\Pathfinder 2 Charakterbogen.pdf
2023-03-02 10:51 - 2023-03-02 10:51 - 001216554 _____ C:\Users\eisberg\Downloads\Ratgeber_Mein-Haushaltsbuch.pdf
2023-03-02 10:15 - 2023-03-02 10:15 - 000029224 _____ C:\Users\eisberg\Downloads\account_statement_2023_03_02.pdf
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-04-01 21:04 - 2018-01-24 11:46 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2023-04-01 21:02 - 2021-09-06 10:16 - 000000000 ____D C:\Users\eisberg\AppData\Local\SquirrelTemp
2023-04-01 21:02 - 2021-06-28 21:04 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-04-01 21:01 - 2021-07-06 17:51 - 000000000 ___RD C:\Users\eisberg\Creative Cloud Files
2023-04-01 20:26 - 2021-06-24 12:13 - 000000000 ____D C:\Users\eisberg\AppData\LocalLow\Mozilla
2023-04-01 20:06 - 2021-07-06 17:49 - 000000000 ____D C:\Users\eisberg\AppData\Local\D3DSCache
2023-04-01 19:52 - 2022-02-10 20:58 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-04-01 19:34 - 2021-06-28 21:06 - 000746440 _____ C:\WINDOWS\system32\perfh007.dat
2023-04-01 19:34 - 2021-06-28 21:06 - 000150810 _____ C:\WINDOWS\system32\perfc007.dat
2023-04-01 19:34 - 2021-06-28 21:03 - 000000000 ____D C:\WINDOWS\INF
2023-04-01 19:34 - 2021-06-28 20:29 - 001807418 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-04-01 19:26 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\ServiceState
2023-04-01 19:26 - 2021-06-28 21:00 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2023-04-01 19:26 - 2021-06-28 20:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-04-01 19:26 - 2021-06-28 20:14 - 000000000 ____D C:\ProgramData\Synaptics
2023-04-01 19:26 - 2021-06-23 19:52 - 000008192 ___SH C:\DumpStack.log.tmp
2023-04-01 19:26 - 2021-06-23 19:52 - 000000000 ____D C:\Intel
2023-04-01 19:11 - 2021-06-28 21:04 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-04-01 19:08 - 2023-01-31 16:55 - 000000000 ____D C:\Users\eisberg\AppData\Local\CrashDumps
2023-04-01 18:47 - 2021-06-25 23:24 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-04-01 18:15 - 2018-01-24 11:46 - 000000000 ____D C:\Program Files\HP
2023-04-01 18:13 - 2022-02-18 09:53 - 000000000 ____D C:\Users\eisberg\AppData\Local\WebEx
2023-04-01 17:51 - 2021-06-28 21:04 - 000000000 ___HD C:\Program Files\WindowsApps
2023-04-01 17:51 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-04-01 17:43 - 2022-08-19 17:47 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2023-04-01 17:09 - 2021-07-13 14:23 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Hewlett-Packard
2023-04-01 17:09 - 2021-07-13 14:17 - 000000000 ____D C:\Users\eisberg\AppData\Local\Hewlett-Packard
2023-04-01 17:09 - 2018-01-24 20:41 - 000000000 ____D C:\Program Files (x86)\HP
2023-04-01 17:09 - 2018-01-24 11:46 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2023-04-01 17:09 - 2017-07-26 16:38 - 000000000 _RSHD C:\hp
2023-04-01 17:09 - 2017-04-01 05:17 - 000000000 ____D C:\ProgramData\HP
2023-04-01 13:29 - 2021-07-18 18:14 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\RStudio
2023-04-01 13:08 - 2021-06-23 20:33 - 000000000 _RSHD C:\system.sav
2023-04-01 13:07 - 2021-07-13 14:17 - 000000000 ____D C:\Users\eisberg\AppData\Local\HP JumpStart Apps
2023-04-01 12:54 - 2021-06-23 19:52 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-04-01 12:53 - 2021-06-28 21:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-04-01 12:52 - 2021-06-28 21:09 - 000000000 ____D C:\WINDOWS\SysWOW64\sda
2023-04-01 12:40 - 2023-02-22 21:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RStudio
2023-04-01 12:16 - 2021-06-28 21:04 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-04-01 11:45 - 2022-04-12 13:42 - 000000000 ___HD C:\adobeTemp
2023-04-01 11:45 - 2021-06-28 20:37 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Adobe
2023-04-01 11:44 - 2021-12-03 18:33 - 000000000 ____D C:\Users\eisberg\Documents\Citavi 6
2023-04-01 11:41 - 2023-01-26 09:48 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge 2023.lnk
2023-04-01 11:29 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\Registration
2023-04-01 11:28 - 2021-06-28 20:23 - 000000000 ____D C:\Users\eisberg
2023-03-31 18:12 - 2023-02-22 21:55 - 000000000 ____D C:\Users\eisberg\Documents\übung_Kurs_R
2023-03-31 17:17 - 2022-07-12 11:07 - 000000000 ____D C:\ProgramData\boost_interprocess
2023-03-31 16:19 - 2022-03-03 08:41 - 000000388 _____ C:\WINDOWS\Tasks\HPCeeScheduleForeisberg Admin.job
2023-03-31 16:18 - 2021-06-28 20:47 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-03-31 16:16 - 2021-07-18 18:14 - 000000000 ____D C:\Users\eisberg\AppData\Local\RStudio
2023-03-31 15:51 - 2021-06-28 21:06 - 000000000 ____D C:\Program Files\Git
2023-03-31 14:31 - 2023-02-22 21:55 - 000000000 ____D C:\Users\eisberg\AppData\Local\deno
2023-03-29 22:22 - 2022-03-03 08:41 - 000003304 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForeisberg Admin
2023-03-28 12:42 - 2021-06-28 20:14 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-03-28 12:09 - 2021-06-28 20:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-03-27 08:27 - 2021-07-06 17:48 - 000000000 ____D C:\Program Files\Adobe
2023-03-23 14:18 - 2021-06-28 20:37 - 000000000 ____D C:\Users\eisberg\AppData\Local\Packages
2023-03-23 14:14 - 2022-05-02 09:25 - 000001430 _____ C:\Users\eisberg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Grammarly.lnk
2023-03-23 14:14 - 2022-05-02 09:25 - 000001422 _____ C:\Users\eisberg\Desktop\Grammarly.lnk
2023-03-23 14:06 - 2021-10-07 16:22 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2023-03-23 14:06 - 2021-06-28 20:47 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-03-22 17:52 - 2022-10-18 08:41 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2023-03-22 17:52 - 2022-10-18 08:41 - 000002068 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2023-03-22 17:52 - 2021-09-15 11:35 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2023-03-22 17:47 - 2021-06-28 20:14 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-03-22 17:47 - 2021-06-28 20:14 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-03-18 23:54 - 2021-06-28 20:14 - 000665960 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-03-18 23:52 - 2021-06-28 21:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\SystemResources
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-18 23:52 - 2021-06-28 21:04 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-03-18 21:55 - 2021-06-28 20:16 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-18 21:46 - 2021-06-30 14:04 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-18 21:43 - 2021-06-30 14:04 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-03-15 20:12 - 2021-11-20 18:08 - 000000000 ____D C:\Users\eisberg\AppData\Local\Ubisoft Game Launcher
2023-03-15 20:09 - 2022-09-17 11:57 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-14 21:38 - 2022-05-27 19:13 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\Anki2
2023-03-07 14:59 - 2021-07-13 14:15 - 000000000 ____D C:\WINDOWS\Minidump
2023-03-07 14:58 - 2022-02-18 09:56 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\webex
2023-03-05 19:09 - 2021-07-06 17:48 - 000000000 ____D C:\ProgramData\Adobe
2023-03-05 19:09 - 2021-07-06 17:48 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-03-03 12:07 - 2021-06-28 20:36 - 000000000 ____D C:\Users\eisberg\AppData\Roaming\hpqLog
2023-03-02 20:47 - 2022-07-12 11:29 - 000000000 ____D C:\Users\eisberg\AppData\Local\ElevatedDiagnostics
2023-03-02 18:30 - 2021-06-28 21:10 - 000000000 ____D C:\WINDOWS\system32\cAVS
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2021-07-06 18:26 - 2022-03-30 20:41 - 000000520 _____ () C:\Users\eisberg\AppData\Local\oobelibMkey.log
2022-06-18 18:34 - 2022-06-18 18:34 - 000004662 _____ () C:\Users\eisberg\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. -> 0
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25-03-2023
durchgeführt von eisberg Admin (01-04-2023 21:04:47)
Gestartet von C:\Users\eisberg\Desktop
Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) (2021-06-28 18:30:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1343805967-689705228-1288521309-500 - Administrator - Disabled)
eisberg (S-1-5-21-1343805967-689705228-1288521309-1003 - Limited - Enabled) => C:\Users\eisberg
eisberg Admin (S-1-5-21-1343805967-689705228-1288521309-1001 - Administrator - Enabled) => C:\Users\eisberg
DefaultAccount (S-1-5-21-1343805967-689705228-1288521309-503 - Limited - Disabled)
Gast (S-1-5-21-1343805967-689705228-1288521309-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1343805967-689705228-1288521309-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 23.001.20093 - Adobe)
Adobe Bridge 2022 (HKLM-x32\...\KBRG_12_0_4) (Version: 12.0.4 - Adobe Inc.)
Adobe Bridge 2023 (HKLM-x32\...\KBRG_13_0_3) (Version: 13.0.3 - Adobe Inc.)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.10.0.573 - Adobe Inc.)
Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.2.0.18 - Adobe Inc.)
Adobe Illustrator 2021 (HKLM-x32\...\ILST_25_4_8) (Version: 25.4.8 - Adobe Inc.)
Adobe Illustrator 2022 (HKLM-x32\...\ILST_26_5_3) (Version: 26.5.3 - Adobe Inc.)
Adobe Illustrator 2023 (HKLM-x32\...\ILST_27_4) (Version: 27.4 - Adobe Inc.)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_12_2_1) (Version: 12.2.1 - Adobe Inc.)
Adobe Photoshop 2023 (HKLM-x32\...\PHSP_24_3) (Version: 24.3.0.376 - Adobe Inc.)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601042}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Anki (HKLM-x32\...\Anki) (Version: 2.1.60 - )
Camtasia 2022 (HKLM\...\{B27D7CEB-AB23-4608-86AD-57B10BC790F8}) (Version: 22.4.1.42246 - TechSmith Corporation) Hidden
Camtasia 2022 (HKLM-x32\...\{3f71e02b-b7d1-4a73-88da-6929e0bdb137}) (Version: 22.4.1.42246 - TechSmith Corporation)
Cisco AnyConnect Diagnostics and Reporting Tool (HKLM-x32\...\{E72FE44D-62EF-41E2-A17B-E63FD559F227}) (Version: 4.10.04071 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.04071 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{6B6C5D99-59FB-4B3A-B80A-7FA882769358}) (Version: 4.10.04071 - Cisco Systems, Inc.) Hidden
Cisco Webex Meetings (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\ActiveTouchMeetingClient) (Version: 42.1.6 - Cisco Webex LLC)
Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.11.0.0 - Swiss Academic Software)
Conexant ISST Audio (HKLM\...\CNXT_AUDIO_HDA) (Version: 9.0.278.150 - Conexant)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Grammarly for Windows (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\Grammarly Desktop Integrations) (Version: 1.0.27.421 - )
HP 3D DriveGuard (HKLM-x32\...\{1289A5C3-C900-45CB-877D-C3D87ADE018C}) (Version: 6.0.43.1 - HP)
HP Client Security Manager (HKLM\...\{EB7FE78E-856B-4141-A685-BF9D49622483}) (Version: 9.3.5.2453 - HP Inc.) Hidden
HP Client Security Manager (HKLM\...\HPProtectTools) (Version: 9.3.5.2453 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{9720A595-3D2D-440E-9523-0B6F970745DD}) (Version: 6.0.11.1 - HP Inc.) Hidden
HP Device Access Manager (HKLM\...\{77ACDCD1-A6A9-49A2-9F73-76AAF425EA5C}) (Version: 8.4.9.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM\...\{20185BDA-D396-4C93-95C7-ECD0FB397FF7}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{5BBB44D5-3CC0-4434-AA0C-5883B975E45E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{6884D818-9E0E-4984-A6CA-B17757DCB8FA}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{F7E8A494-97B6-4786-9E2C-A42A082483EB}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{2889C948-F002-4992-815F-DBE0AFB5DC6E}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{54da9769-2364-4bd3-8139-6400500778b3}) (Version: 5.3.22034 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{98AA8BB0-0C0A-411A-BB43-1265CA769155}) (Version: 5.3.22034 - HP Inc.) Hidden
HP ESU for Microsoft Windows 10 (HKLM-x32\...\{1ACFA37D-E100-4DF3-BC69-E4D583E874F0}) (Version: 11.3.2 - HP)
HP Hotkey Support (HKLM-x32\...\{963F09EA-0B0A-4CFC-B04F-AD9B6614794C}) (Version: 6.2.39.1 - HP)
HP JumpStart Launch (HKLM-x32\...\{6A139049-EBB9-4076-8664-B468888E55A3}) (Version: 1.3.392.0 - HP Inc.)
HP MAC Address Manager (HKLM-x32\...\{21FA165F-905C-4DDA-B00A-00C3A5D17BBA}) (Version: 1.1.10.1 - HP)
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Registration Service (HKLM-x32\...\{EBF2C31B-E9A1-4929-BE35-6EBECF286110}) (Version: 1.0.0.30 - HP Inc.) Hidden
HP SoftPaq Download Manager (HKLM-x32\...\{fc153673-e23b-4908-93b9-164cc056a3c4}) (Version: 4.3.19.0 - HP)
HP Software Setup (HKLM-x32\...\{C968E860-054F-490F-95C6-C9A29601459E}) (Version: 9.2.3 - HP)
HP Support Solutions Framework (HKLM-x32\...\{FC8A64EE-AE92-4705-9C3E-63A87DDFD205}) (Version: 12.6.14.19 - HP Inc.)
HP System Default Settings (HKLM-x32\...\{A66E1AC5-F4A9-4DB0-ACB0-90419A8F98D5}) (Version: 1.2.11.2 - HP Inc.)
HP Universal Camera Driver (HKLM-x32\...\{E399A5B3-ED53-4DEA-AF04-8011E1EB1EAC}) (Version: 10.0.15063.11275 - Realtek Semiconductor Corp.)
HP Wireless Button Driver (HKLM-x32\...\{F5852AA8-30EA-495B-84B4-C2403C935D6F}) (Version: 1.1.19.1 - HP)
HP WorkWise (HKLM-x32\...\{2EDE0C89-892C-4C3C-A922-C4DDE7C68EAE}) (Version: 1.4.14.1 - HP Inc.)
HPWorkWise64 (HKLM\...\{56051A5A-7A04-4CD4-A5CD-781F1AC10112}) (Version: 1.4.14.1 - Ihr Firmenname) Hidden
Intel(R) Chipset Device Software (HKLM\...\{94E05108-3E4E-4F2E-AC5F-33A1B22B779C}) (Version: 10.1.1.44 - Intel Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.3.10205.4743 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1035 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{212B25D1-7216-4140-B248-D24BA0F80029}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{81274252-3CCE-4ABF-91F0-811144288963}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{927853D5-9CCC-4ED8-9C64-113EB34E8728}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 22.20.16.4736 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.0.1014 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{ABDC630D-DC10-4991-9965-D683C8F4885D}) (Version: 15.7.0.1014 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{0AF335C8-701E-41FA-8333-4702475CF32A}) (Version: 30.100.1724.2 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1724.2 - Intel Corporation)
Intel(R) Trusted Connect Service Client (HKLM\...\{F6AA7E43-41A4-4304-BA96-A495C5788231}) (Version: 1.45.447.1 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{DDE28492-B260-4DF0-BA99-7F96FC2932C1}) (Version: 19.60.0 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{ed5cef80-a339-45bd-8c06-514eaf785ca8}) (Version: 19.71.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{5E952F21-EFE4-47D8-9C8E-29AE9A2D75B7}) (Version: 19.71.0.1071 - Intel Corporation) Hidden
Logitech Unifying-Software 2.52 (HKLM\...\Logitech Unifying) (Version: 2.52.33 - Logitech)
Malwarebytes version 4.5.25.256 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.25.256 - Malwarebytes)
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.16130.20306 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 111.0.1661.54 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 111.0.1661.54 - Microsoft Corporation)
Microsoft OneDrive (HKLM-x32\...\OneDriveSetup.exe) (Version: 22.077.0410.0007 - Microsoft Corporation)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1343805967-689705228-1288521309-1003\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{93E32441-3402-439F-8EF7-8EC66D3B74CA}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{4ADC7996-3183-4E8D-8827-34E6558F5B83}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31326 (HKLM-x32\...\{2d507699-404c-4c8b-a54a-38e352f32cdd}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.32.31326 (HKLM-x32\...\{817e21c1-6b3a-4bc1-8c49-67e4e1887b3a}) (Version: 14.32.31326.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31326 (HKLM\...\{38624EB5-356D-4B08-8357-C33D89A5C0C5}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31326 (HKLM\...\{C96241EA-9900-4FE8-85B3-1E238D509DF6}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.32.31326 (HKLM-x32\...\{A250E750-DB3F-40C1-8460-8EF77C7582DA}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.32.31326 (HKLM-x32\...\{46E11E7F-01E1-44D0-BB86-C67342D253DD}) (Version: 14.32.31326 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 111.0.1 (x64 de)) (Version: 111.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 89.0.2 - Mozilla)
Nextcloud (HKLM\...\{2E5F383F-C80C-4F61-AA50-A2C801AC15DD}) (Version: 3.6.6.20230119 - Nextcloud GmbH)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.0.1 - OBS Project)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
R for Windows 4.2.3 (HKLM\...\R for Windows 4.2.3_is1) (Version: 4.2.3 - R Core Team)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.370.154 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.16.323.2017 - Realtek)
RStudio (HKLM-x32\...\RStudio) (Version: 2023.03.0+386 - Posit Software)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.4.3.166 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.5.0.30767 - Microsoft Corporation)
thesettlers3 (HKLM-x32\...\Uplay Install 11784) (Version: - Ubisoft)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 127.3.10627 - Ubisoft)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_1_0) (Version: 1.1.0 - Adobe Inc.)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\ZoomUMX) (Version: 5.13.5 (12053) - Zoom Video Communications, Inc.)
Packages:
=========
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_3.0.1.1_x86__enpm4xejd91yc [2022-04-20] (Adobe Systems Incorporated)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.3.407.0_x86__v10z8vjag6ke6 [2021-06-28] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-23] (Microsoft Corporation)
Reader Notification Client -> C:\Program Files\WindowsApps\ReaderNotificationClient_1.0.4.0_x86__e1rzdqpraam7r [2021-12-03] (Adobe Systems Incorporated)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-04-01] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0 [2023-04-01] (Spotify AB) [Startup Task]
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.777.2143.0_x64__8wekyb3d8bbwe [2023-02-27] (Microsoft Corporation)
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.802.31.0_x64__8wekyb3d8bbwe [2023-03-18] (Microsoft Corporation)
WindowsAppRuntime.1.2 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.2_2000.802.31.0_x86__8wekyb3d8bbwe [2023-03-18] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-C0F3CCD1AD40} -> [Creative Cloud Files] => C:\Users\eisberg\Creative Cloud Files [2021-07-06 17:51]
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{1019ADC7-17CB-4489-AFD5-6642C7400ACE}\localserver32 -> C:\Users\eisberg\AppData\Local\Webex\Webex\Applications\ptOIEx64.exe (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{32E26FD9-F435-4A20-A561-35D4B987CFDC}\InprocServer32 -> C:\Users\eisberg\AppData\Local\WebEx\WebEx64\Meetings\atucfobj.dll (Cisco WebEx LLC -> Cisco WebEx LLC)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{52198ba3-aef2-4fea-a304-b2b2edc7cdb1}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2022\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation)
CustomCLSID: HKU\S-1-5-21-1343805967-689705228-1288521309-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ NextcloudError] -> {E0342B74-7593-4C70-9D61-22F294AAFE05} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOK] -> {E1094E94-BE93-4EA2-9639-8475C68F3886} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudOKShared] -> {E243AD85-F71B-496B-B17E-B8091CBE93D2} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudSync] -> {E3D6DB20-1D83-4829-B5C9-941B31C0C35A} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ NextcloudWarning] -> {E4977F33-F93A-4A0A-9D3C-83DEA0EE8483} => C:\Program Files\Nextcloud\shellext\NCOverlays.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-01] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [NextcloudContextMenuHandler] -> {BC6988AB-ACE2-4B81-84DC-DC34F9B24401} => C:\Program Files\Nextcloud\shellext\NCContextMenu.dll [2023-01-19] (Nextcloud GmbH -> Nextcloud GmbH)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6daaea9afe1e6f6\igfxDTCM.dll [2020-11-11] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2023-03-22] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-01] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files (x86)\Microsoft OneDrive\22.077.0410.0007\amd64\FileSyncShell64.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2017-06-20 12:40 - 2017-06-20 12:40 - 000382464 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPCPFelica.dll
2017-06-20 12:39 - 2017-06-20 12:39 - 000338432 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice2.dll
2017-06-20 12:40 - 2017-06-20 12:40 - 000456192 _____ (Crossmatch, Inc.) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\DPDevice5.dll
2017-06-20 12:28 - 2017-06-20 12:28 - 000348672 _____ (RFIDeas) [Datei ist nicht signiert] c:\Program Files\HP\HP ProtectTools Security Manager\Bin\pcProxAPI.dll
2022-01-29 22:12 - 2021-06-29 15:06 - 001431552 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\CONEXANT\Flow\x64\SQLite.Interop.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\eisberg\Desktop\FRST64.exe:MBAM.Zone.Identifier [193]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKU\S-1-5-21-1343805967-689705228-1288521309-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-1343805967-689705228-1288521309-1001 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
BHO: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\x64\SwissAcademic.Citavi.IEPicker.DLL [2022-01-04] (Swiss Academic Software -> Swiss Academic Software)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Citavi Picker -> {609D670F-B735-4da7-AC6D-F3BD358E325E} -> C:\Program Files (x86)\Internet Explorer\Citavi Picker\SwissAcademic.Citavi.IEPicker.DLL [2022-01-04] (Swiss Academic Software -> Swiss Academic Software)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-04-01] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-1343805967-689705228-1288521309-1001\...\sharepoint.com -> hxxps://uppsalauniversitet-files.sharepoint.com
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-03-18 23:03 - 2017-03-18 23:01 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2021-08-21 21:00 - 2022-01-15 15:43 - 000000585 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
168.137.118 iPad-von-eisberg.mshome.net # 2021 9 1 6 6 26 54 884
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\
HKCU\Environment\\Path -> %USERPROFILE%\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-1343805967-689705228-1288521309-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\eisberg\Pictures\linaspaethe_eisberg_Vigy_und_Heidur\IMG_3289-2.jpg
HKU\S-1-5-21-1343805967-689705228-1288521309-1003\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\HP\HP_SNOW_3840x2160.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
BITS: {185478C6-B25A-47E4-A447-6C14BE9BD226} - (HPCeeConnect) -> [NotifyCmdLine: C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe "C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe" HPCeeConnect (null)] [Dateien:hxxp://ceement.rssx.hp.com/CeementWA/index.jsp -> C:\Users\eisberg\hpTemp.txt]
ist aktiviert.
Network Binding:
=============
WLAN: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
Ethernet: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
Ethernet 2: LiveQoS NDIS 6 Filter Driver -> ipeak_ipeakLWF (enabled)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{B28FEB06-B75D-4D8E-AC95-990E15BFE7E3}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel(R) Wireless Connectivity Solutions -> )
FirewallRules: [{DB8876EC-4BB5-49C8-AFF0-CFDEEF4FB9C4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B38272B5-350B-40A9-8AA2-6635940AB999}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{13AFA5D1-37DE-4A39-B36C-007FE801AEEA}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{6F1B81F2-676F-473B-A0D0-CC07BA967E0B}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{C69A0232-D3EF-4279-A67C-49B77DCAA971}] => (Allow) C:\Users\eisberg\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{707A01AF-B645-4979-B61B-1B9CA3065447}C:\program files\rstudio\bin\rsession.exe] => (Allow) C:\program files\rstudio\bin\rsession.exe => Keine Datei
FirewallRules: [UDP Query User{FA3655B7-5B12-4B8A-A034-11FCC346E6CC}C:\program files\rstudio\bin\rsession.exe] => (Allow) C:\program files\rstudio\bin\rsession.exe => Keine Datei
FirewallRules: [{33FBC2BC-C46C-4D14-9052-F8429DA23A82}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe => Keine Datei
FirewallRules: [{508E862D-1462-45CA-A93A-5D7321AB63E4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe => Keine Datei
FirewallRules: [TCP Query User{9A2FCEFF-1C3F-4E47-89FF-0A6FBC741901}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [UDP Query User{385F83EA-8B43-4E8C-AB48-FF386F2608DF}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [TCP Query User{F60CDAF2-15AD-4418-BDE6-3D7172B53DFA}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Block) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [UDP Query User{4E8CF14A-2B96-43DD-AB67-5C44986778C1}C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe] => (Block) C:\program files (x86)\ubisoft\ubisoft game launcher\games\thesettlers3\siedler3r.exe (Blue Byte GmbH -> Blue Byte)
FirewallRules: [{ACC3C7CA-6602-4659-BC69-FB70EC4F4BFD}] => (Allow) LPort=8323
FirewallRules: [TCP Query User{30F304D9-EB81-4C83-B3D7-584F569E781B}C:\program files\rstudio\resources\app\bin\rsession-utf8.exe] => (Allow) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [UDP Query User{C970F598-AB23-455F-8A37-2F436E959E92}C:\program files\rstudio\resources\app\bin\rsession-utf8.exe] => (Allow) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{FA643D65-8A1B-47C7-9DBF-C23293D6F601}] => (Block) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{DC7AEC55-EBB7-416D-843E-BA3E2AC69261}] => (Block) C:\program files\rstudio\resources\app\bin\rsession-utf8.exe => Keine Datei
FirewallRules: [{C8D26C36-B269-4D64-9DA1-7264DEA8E486}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{26C1E9D0-6E44-45ED-971B-6CB01498A259}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{2742B49E-155F-469C-B67E-8DD060CD2A37}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{36370B53-060D-43E5-96FF-EB01E1EDBC92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{C3300729-F621-45A8-B4F4-C06B2EF73BB7}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\111.0.1661.54\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B902336C-CE21-4DD7-B3B9-B457BBB6D7DB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{584702F1-F8DC-43ED-9D3D-A3E2ADD97251}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8CE0ED37-EE96-43FC-AD48-6C10ED5E8F97}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{501E3362-4C20-40FD-8D72-80BBA3ADC039}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E2879FE7-1BBB-4BEE-B142-95209374A037}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A51ED736-B4E7-402D-8AC4-18222F4C5105}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{ED504146-B0BA-4F06-B865-8B85B0A0E037}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{44B9C82F-34F0-4C42-ADFA-776D9554AC4A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E6980C6D-34A6-42AE-AA4B-7B444FAE2827}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{76242132-4DD3-493B-A95A-FEBBD3ABE32D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{CD76F128-D395-4802-80DC-A51AF612C175}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4606E6B3-5ED5-4D8B-996B-60D4A7E28CE2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5B40FBCD-8857-4851-93DA-139E29D969EF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3F718750-ACAD-4E74-891A-569BE2829C51}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{301B07BF-C254-4978-8DE3-E032FFC1C90E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{15B883EB-D972-4B25-B5AA-196C859F0C35}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{8055FB66-86CC-48FE-8CE2-14D533120578}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7C3DB9EB-2D66-4929-8266-D8486F16B363}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1D26E1F6-9885-4509-B751-DBD24708884E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (04/01/2023 07:26:03 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (04/01/2023 07:26:03 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (04/01/2023 06:00:28 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (04/01/2023 06:00:28 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (04/01/2023 06:00:28 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (04/01/2023 06:00:28 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (04/01/2023 05:45:28 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (04/01/2023 05:45:28 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Systemfehler:
=============
Error: (04/01/2023 08:27:07 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:07 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/01/2023 08:27:06 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-9R54N8G)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
==================== Speicherinformationen ===========================
BIOS: HP Q85 Ver. 01.23.00 11/29/2022
Hauptplatine: HP 837B
Prozessor: Intel(R) Core(TM) i5-8250U CPU @ 1.60GHz
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 8083.21 MB
Verfügbarer physikalischer RAM: 3196.96 MB
Summe virtueller Speicher: 16275.21 MB
Verfügbarer virtueller Speicher: 11084.05 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:218.29 GB) (Free:36.65 GB) (Model: SanDisk SD8SN8U-256G-1006) NTFS
Drive d: (Recovery Image) (Fixed) (Total:18.75 GB) (Free:2.44 GB) (Model: SanDisk SD8SN8U-256G-1006) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
\\?\Volume{576abb01-7cbf-4904-9d4b-bd13daf3f042}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.19 GB) NTFS
\\?\Volume{aa1fac8a-7507-439f-97a4-08fb168e274a}\ (SYSTEM) (Fixed) (Total:0.35 GB) (Free:0.27 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: D129D462)
Partition: GPT.
==================== Ende von Addition.txt =======================
|
|
01.04.2023, 20:39
| #15 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? Scripting/Repair mit FRST64 WARNUNG AN ALLE MITLESER !!! Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!
__________________ Logfiles bitte immer in CODE-Tags posten |
|
| Themen zu Malware blockiert die Connection zwischen R und RStudio // Spam-Mail-Link Ursache? |
| blockiert, computer, cpu, error, fehlermeldung, firefox, google, internet, internet explorer, karte, malware, microsoft defender, monitor, mozilla, performance, problem, programm, prozesse, realtek, registry, scan, security, services.exe, svchost.exe, udp, windows |
Linear-Darstellung
