Trojaner-Board - Windows 10 pop up mit persönlichen Daten hack.ye (oder hack ye?)

das System scheint gut zu laufen. Ich musste mich in einige Websites neu einloggen, und wenn ich mich recht erinnere, war die Yahoo! Website die normalerweise Englisch ist plötzlich auf Deutsch.

Das Internet scheint stabiler zu sein, kann aber sein weil jetzt Hotspot Shield weg ist.
Mit Hotspot Shield war die Verbindung nicht stabil, ich musste Hotspot Shield oft neu starten. Sobald möglich möchte ich das neu installieren.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-07-2022

durchgeführt von wrt (Administrator) auf RYZEN (Acer Aspire GX-281) (06-07-2022 07:55:41)

Gestartet von C:\Users\wrt\Downloads

Geladene Profile: wrt & Administrator

Plattform: Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: Chrome

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(C:\Program Files (x86)\CherryTree\bin\cherrytree.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\dbus-daemon.exe

(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe

(C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking13\dgnuiasvr.exe

(C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking13\dragonbar.exe

(C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking13\x64\dgnuiasvr_x64.exe

(C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dnsspserver.exe

(C:\Program Files\LibreOffice\program\soffice.exe ->) (The Document Foundation -> The Document Foundation) C:\Program Files\LibreOffice\program\soffice.bin

(cmd.exe ->) () [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe

(explorer.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\cherrytree.exe

(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\winkmd\TOTALCMD64.EXE

(explorer.exe ->) (Irfan Skiljan -> Irfan Skiljan) C:\Program Files\Irfan64\i_view64.exe

(explorer.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe

(explorer.exe ->) (The Document Foundation -> The Document Foundation) C:\Program Files\LibreOffice\program\soffice.exe

(explorer.exe ->) (voidtools -> voidtools) C:\Program Files\Everything\Everything.exe <2>

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <37>

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe

(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe

(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe

(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe

(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe

(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe

(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(svchost.exe ->) (Flexera Software LLC -> Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBar.exe

(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16706080 2018-03-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (Canon Inc. -> CANON INC.)

HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585296 2017-12-22] (Acronis International GmbH -> )

HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)

HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe [325960 2014-05-30] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4871640 2021-12-02] (Acronis International GmbH -> )

HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY PRODUCTION LLC -> ABBYY Production LLC)

HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3237808 2018-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)

HKLM-x32\...\Run: [DocFetcher-Daemon] => C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe [563621 2021-05-26] () [Datei ist nicht signiert]

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2010-09-09] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [10587912 2022-06-22] (Dropbox, Inc -> Dropbox, Inc.)

HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.)

HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)

HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-22] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [117528 2022-02-18] (VMware, Inc. -> VMware, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [708840 2022-04-26] (Oracle America, Inc. -> Oracle Corporation)

HKLM\...\RunOnce: [*EmptyTemp] => cmd /c rd /q/s C:\FRST\Temp (Keine Datei)

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [10203648 2019-01-30] (FreeDownloadManager.org) [Datei ist nicht signiert]

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36976728 2022-06-14] (Piriform Software Ltd -> Piriform Software Ltd)

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31162288 2021-04-29] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [116056952 2022-02-23] (Skype Software Sarl -> Skype Technologies S.A.)

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Opera Browser Assistant] => C:\Users\wrt\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4137216 2022-06-07] (Opera Software AS -> Opera Software)

HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632072 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [886685649D2A507C991FC995626687C37E813F73._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8 [3601824 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

HKLM\...\Windows x64\Print Processors\Canon G3010 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEI.DLL [482816 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Windows x64\Print Processors\Canon MX420 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAM.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX420 series: C:\WINDOWS\system32\CNCALAM.DLL [302080 2010-10-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ Language Monitor G3010 series: C:\WINDOWS\system32\CNMLMEI.DLL [1303040 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ Language Monitor MX420 series: C:\WINDOWS\system32\CNMLMAM.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [Datei ist nicht signiert]

HKLM\...\Print\Monitors\FPR10:: C:\WINDOWS\system32\fpmon10-x64.dll [226760 2020-09-01] (FinePrint Software, LLC -> FinePrint Software, LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-05] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MaxLauncher.lnk [2020-01-08]

ShortcutTarget: MaxLauncher.lnk -> C:\Program Files\MaxLauncher\MaxLauncher.exe (Roberto Concepcion) [Datei ist nicht signiert]

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-05-15]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Data [2021-03-09]

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocFetcher Pro Demo Daemon.lnk [2022-01-03]

ShortcutTarget: DocFetcher Pro Demo Daemon.lnk -> C:\Program Files\DocFetcher Pro Demo\docfetcher-pro-daemon-d.exe () [Datei ist nicht signiert]

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk [2021-07-25]

ShortcutTarget: Dragon NaturallySpeaking.lnk -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe (Nuance Communications, Inc. -> Nuance Communications, Inc.)

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntentionActivator.exe - Verknüpfung.lnk [2018-10-12]

ShortcutTarget: IntentionActivator.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Intention activator\IntentionActivator.exe () [Datei ist nicht signiert]

Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MadAppLauncher.lnk [2018-03-06]

ShortcutTarget: MadAppLauncher.lnk -> C:\Programme wr\MadAppLauncher\MadAppLauncher.exe () [Datei ist nicht signiert]
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {001E3010-73A9-417D-A80E-F9AF7C7FDAF2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)

Task: {044F3AA5-8042-4853-849E-0F81E1F6C836} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40880 2021-04-29] (Garmin International, Inc. -> )

Task: {0B5CD838-6196-497F-A350-15198F19090D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {12B1FAAA-5700-47DB-A945-6E26B2807652} - System32\Tasks\CCleanerSkipUAC - wrt => C:\Program Files\CCleaner\CCleaner.exe [31027800 2022-06-14] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {1505733E-46E8-478B-B9D1-BCCEC589E27A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /WakeupRun (Zugriff verweigert) <==== ACHTUNG

Task: {2A7F304A-395C-41AA-B2E9-5B11AC050BE6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {2D7AE1B1-188E-462C-8EF4-7A58B98DDC72} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /CalendarRun (Zugriff verweigert) <==== ACHTUNG

Task: {3B85578C-5601-4C8F-A171-8A0954F8B0C9} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}

Task: {3F20E8F7-0FD2-49EC-AAC3-5A7F89E6DC7E} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [3867928 2020-11-15] (Nero AG -> Nero AG)

Task: {3F32D85B-85ED-4B88-B38C-156BFEAC232C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {419869E2-0CFF-40DA-BC7D-F079A6B7444C} - System32\Tasks\EZCastServiceSchedule => C:\Program Files (x86)\EZCast\EZCast.exe [6048064 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )

Task: {45983CCD-82A3-498E-83F9-F4E2E87F29FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)

Task: {48A93B24-DC7E-4336-B161-DE203CD5C92F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} (Zugriff verweigert) <==== ACHTUNG

Task: {4D3E0216-C96B-4E36-9A8E-FFA205C2CCE6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23374288 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {4E48C07D-7DB7-49AE-8E39-4E90DCEFBDAE} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {5932B60F-DF32-40F7-9C83-A77AFDAB0E27} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [67472 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {5A607ACA-A8E9-4167-AECF-4002C3FB0650} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [566592 2008-07-30] (Apple Inc. -> Apple Inc.)

Task: {68BDCA2C-CED7-4006-A158-6DF0C85EE5F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)

Task: {6BBBD35E-FF77-4CA7-A293-BB24F6298AC3} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

Task: {7159ADE2-418F-4A6D-8241-C5043AC33E3F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

Task: {7BD269CB-F4DA-498A-898D-F249A7A444A6} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23374288 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {873491E9-B7CD-45F9-96D6-08C36CA12967} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68176 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {92668079-69A8-42CB-A2EA-FB8864ABF954} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)

Task: {A079ACB7-7695-4D4B-BE58-3EC2B91DBFF5} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60496 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {A460D746-9FC0-480E-B15E-F682DC49BEE7} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [966072 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {AC55A601-F1E7-414D-8217-F64AA3ECF433} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2022-06-14] (Piriform Software Ltd -> Piriform)

Task: {D4A2E6A3-E5BF-46C9-95A4-807FB79BAF60} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214152 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

Task: {D5F3AA7B-2019-45C0-B858-493043AF37BD} - System32\Tasks\Opera scheduled assistant Autoupdate 1627569296 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2518000 2022-06-23] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\wrt\AppData\Local\Programs\Opera\assistant" $(Arg0)

Task: {DBFC036E-03B9-4EB8-B1BC-5DF3162E200F} - System32\Tasks\Opera scheduled Autoupdate 1627569282 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2518000 2022-06-23] (Opera Norway AS -> Opera Software)

Task: {E31D94B8-5EE5-4C3F-B6AD-38D8332D8DCE} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-10-01] (Tweaking LLC -> Tweaking.com)

Task: {FDB7BF1B-9611-4EDC-A21E-C92A9577C71D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{275bfb08-bb13-4461-8f88-8a01ff26ae94}: [DhcpNameServer] 192.168.0.1 0.0.0.0

Tcpip\..\Interfaces\{38e77d75-a546-469b-aadf-57a377551e87}: [DhcpNameServer] 192.168.0.1

Tcpip\..\Interfaces\{5fdf102f-d92b-4e9e-b85c-8ab59ac3823c}: [DhcpNameServer] 192.168.0.1 0.0.0.0

Tcpip\..\Interfaces\{74f45b62-e5e7-4339-82ef-bd29351a171d}: [DhcpNameServer] 8.8.8.8

Tcpip\..\Interfaces\{89062fd4-48a3-410d-8b24-b45bd6b0332d}: [DhcpNameServer] 192.168.0.1 0.0.0.0

Tcpip\..\Interfaces\{94d30481-e060-45fd-bd5f-d15ad7158a23}: [DhcpNameServer] 192.168.0.1 0.0.0.0
 

Edge: 

=======

DownloadDir: C:\Users\wrt\Downloads

Edge DefaultProfile: Default

Edge Profile: C:\Users\wrt\AppData\Local\Microsoft\Edge\User Data\Default [2022-07-03]

Edge DownloadDir: Default -> C:\Users\wrt\Downloads

Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
 

FireFox:

========

FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Datei ist nicht signiert]

FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)

FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)

FF Plugin-x32: @java.com/DTPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\dtplugin\npDeployJava1.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\plugin2\npjp2.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default [2022-07-06]

CHR Notifications: Default -> hxxps://calendar.google.com

CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}

CHR DefaultSearchKeyword: Default -> duckduckgo.com

CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab

CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list

CHR Session Restore: Default -> ist aktiviert.

CHR Extension: (Google Übersetzer) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-12]

CHR Extension: (Free Download Manager) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2021-10-21]

CHR Extension: (DuckDuckGo) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2022-07-01]

CHR Extension: (Tab Manager Plus for Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkdjjdmfiffagllbiiilooaoofcoeff [2020-06-22]

CHR Extension: (Dragon Weberweiterung) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe [2020-07-17]

CHR Extension: (Malwarebytes Browser Guard) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-07-01]

CHR Extension: (Voice Recognition) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2020-01-08]

CHR Extension: (Nehmen Sie vollständige Webseiten auf - FireShot) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2022-06-16]

CHR Extension: (SingleFile) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpiodijhokgodhhofbcjdecpffjipkle [2022-06-27]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]

CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-07-05]

CHR Extension: (Präsentationen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-22]

CHR Extension: (Docs) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-22]

CHR Extension: (Google Drive) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-29]

CHR Extension: (YouTube) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-22]

CHR Extension: (Adobe Acrobat) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-10-29]

CHR Extension: (ZenMate Free VPN – Bestes VPN für Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2020-10-29]

CHR Extension: (Tabellen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-22]

CHR Extension: (Google Docs Offline) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-29]

CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-10-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-10-29]

CHR Extension: (Google Mail) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-29]

CHR Extension: (Chrome Media Router) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-29]

CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-05]

CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

CHR HKU\S-1-5-21-779246859-3990032973-3551585165-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
 

Opera: 

=======

OPR Profile: C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable [2022-07-05]

OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}

OPR Extension: (Rich Hints Agent) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-06-24]

OPR Extension: (Opera Crypto Wallet) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-06-24]

OPR Extension: (Amazon Assistant Promotion) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-10]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY PRODUCTION LLC -> ABBYY InfoPoisk LLC)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2728304 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)

R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1216760 2017-12-22] (Acronis International GmbH -> )

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)

R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6096688 2021-12-09] (Acronis International GmbH -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111312 2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46872 2022-06-22] (Dropbox, Inc -> Dropbox, Inc.)

R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

S2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)

S2 EZCastService; C:\Program Files (x86)\EZCast\EZCastService.exe [286016 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncHelper.exe [3374472 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

S2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [445432 2021-04-19] (Canon Inc. -> )

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8677120 2022-07-01] (Malwarebytes Inc. -> Malwarebytes)

R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2017-12-22] (Acronis International GmbH -> Acronis International GmbH)

S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1753528 2021-12-02] (Acronis International GmbH -> )

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.121.0605.0002\OneDriveUpdaterService.exe [3812744 2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254368 2022-06-15] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7157960 2021-12-02] (Acronis International GmbH -> )

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R2 DRHARD64; C:\WINDOWS\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Peter A. Gebhard Softwareentwicklung -> Licensed for Gebhard Software)

R2 DRHMSR64; C:\WINDOWS\system32\drivers\DRHMSR64.sys [13760 2013-07-21] (Peter A. Gebhard Softwareentwicklung -> )

R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [33592 2015-05-24] (DEV47 APPS -> Dev47Apps)

R3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [230712 2015-05-24] (DEV47 APPS -> Windows (R) Win 7 DDK provider)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [569392 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182832 2018-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-07-01] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [192960 2022-07-03] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [74704 2022-07-03] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181992 2022-07-03] (Malwarebytes Inc. -> Malwarebytes)

R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)

R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [162360 2018-05-20] (Disc Soft Ltd -> Duplex Secure Ltd)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2022-07-03] (ADLICE (Julien ASCOET) -> )

S3 usbser; C:\Windows\SysWOW64\drivers\usbser.sys [26112 2013-07-04] (Microsoft Corporation) [Datei ist nicht signiert]

R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [60344 2022-01-12] (VMware, Inc. -> VMware, Inc.)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [67072 2022-02-18] (VMware, Inc. -> VMware, Inc.)

R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)

R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2021-08-16] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [38320 2022-02-09] (Microsoft Windows Hardware Compatibility Publisher -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2018-03-03] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)

S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-07-05 11:36 - 2022-07-05 11:36 - 000000085 ____H C:\Users\wrt\Desktop\.~lock.formulare, selbst, forbes, notes etc.odt#

2022-07-05 07:01 - 2022-07-05 07:30 - 000026117 _____ C:\Users\wrt\Downloads\Fixlog.txt

2022-07-05 07:01 - 2022-07-05 07:01 - 000005011 _____ C:\Users\wrt\Downloads\zrpyrlppbu.txt

2022-07-05 06:50 - 2022-07-05 06:50 - 000138646 _____ C:\Users\wrt\Downloads\Re_ Für die Frage gibt es eine Antwort_ kein Mikrofonsymbol in Word für Android.eml

2022-07-05 06:46 - 2022-07-05 06:46 - 000081256 _____ C:\Users\wrt\Downloads\Screenshot_2022-07-04-14-10-05-44_a27b88515698e5a58d06d430da63049d.jpg.fdmdownload

2022-07-04 08:11 - 2022-07-06 07:57 - 000038882 _____ C:\Users\wrt\Downloads\FRST.txt

2022-07-04 08:10 - 2022-07-06 07:55 - 000000000 ____D C:\Users\wrt\Downloads\FRST-OlderVersion

2022-07-03 16:54 - 2022-07-03 16:54 - 000000000 ____D C:\Users\wrt\.ms-ad

2022-07-03 16:43 - 2022-07-03 16:43 - 000074704 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2022-07-03 16:42 - 2022-07-03 16:42 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2022-07-03 16:42 - 2022-07-03 16:42 - 000181992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2022-07-03 15:58 - 2022-07-03 15:58 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys

2022-07-03 15:53 - 2022-07-03 16:15 - 000000000 ____D C:\ProgramData\RogueKiller

2022-07-03 15:51 - 2022-07-03 15:52 - 034312152 _____ C:\Users\wrt\Downloads\RogueKiller_portable64.exe

2022-07-03 15:42 - 2022-07-03 15:42 - 000001414 _____ C:\Users\wrt\Desktop\mbam 2.txt

2022-07-02 20:30 - 2022-07-02 20:35 - 000000000 ____D C:\AdwCleaner

2022-07-02 10:36 - 2022-07-02 10:34 - 000084250 _____ C:\Users\wrt\Downloads\Rechnung Juni .pdf

2022-07-02 10:36 - 2022-07-02 08:00 - 000070551 _____ C:\Users\wrt\Downloads\Gesprächsprotokoll Juni.pdf

2022-07-02 07:46 - 2022-07-02 07:46 - 000052138 _____ C:\Users\wrt\Downloads\call_history_2022-06.csv

2022-07-01 20:28 - 2022-07-01 20:28 - 000003800 _____ C:\Users\wrt\Desktop\mbam.txt

2022-07-01 20:13 - 2022-07-01 20:13 - 000000000 ____D C:\Users\wrt\AppData\Local\mbam

2022-07-01 20:12 - 2022-07-01 20:12 - 000239544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2022-07-01 20:12 - 2022-07-01 20:12 - 000223176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2022-07-01 20:12 - 2022-07-01 20:12 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2022-07-01 20:12 - 2022-07-01 20:12 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2022-07-01 20:12 - 2022-07-01 20:11 - 000158640 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2022-07-01 20:12 - 2022-07-01 20:11 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2022-07-01 20:10 - 2022-07-01 20:10 - 000000000 ____D C:\ProgramData\Malwarebytes

2022-07-01 20:10 - 2022-07-01 20:10 - 000000000 ____D C:\Program Files\Malwarebytes

2022-06-28 08:25 - 2022-06-28 08:25 - 000002784 _____ C:\Users\wrt\AppData\Local\recently-used.xbel

2022-06-27 19:17 - 2022-06-27 19:17 - 000002662 _____ C:\Users\wrt\Neues Dokument 2.2022_06_27_19_17_25.0.svg

2022-06-27 18:59 - 2022-06-27 18:59 - 000001649 _____ C:\Users\wrt\Desktop\cherrytree - Verknüpfung.lnk

2022-06-24 17:39 - 2022-06-24 17:58 - 000066785 _____ C:\Users\wrt\Desktop\FRST_24-06-2022 17.39.12.txt

2022-06-24 17:39 - 2022-06-24 17:39 - 000106348 _____ C:\Users\wrt\Desktop\Addition_24-06-2022 17.39.12.txt

2022-06-24 17:35 - 2022-07-04 08:17 - 000095760 _____ C:\Users\wrt\Downloads\Addition.txt

2022-06-24 17:27 - 2022-06-24 17:57 - 000066785 _____ C:\Users\wrt\Desktop\FRST.txt

2022-06-24 17:24 - 2022-07-06 07:57 - 000000000 ____D C:\FRST

2022-06-24 16:47 - 2022-06-24 16:47 - 000064320 _____ C:\Users\wrt\Downloads\Download.htm

2022-06-24 16:09 - 2022-07-06 07:55 - 002369024 _____ (Farbar) C:\Users\wrt\Downloads\FRST64.exe

2022-06-24 02:04 - 2022-06-24 02:04 - 000056366 _____ C:\Users\wrt\Downloads\ernaehrungstagebuch102.pdf

2022-06-23 21:06 - 2022-06-23 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMedia Recode 64bit

2022-06-23 13:50 - 2022-06-23 13:50 - 019590136 _____ (XMedia Recode 64bit ) C:\Users\wrt\Downloads\XMediaRecode3558_x64_setup.exe

2022-06-23 03:16 - 2022-06-23 03:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys

2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys

2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys

2022-06-22 18:07 - 2022-06-22 18:07 - 000046872 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2022-06-21 17:45 - 2022-06-22 13:41 - 000056201 _____ C:\Users\wrt\Desktop\dotts auf pc.ods

2022-06-21 08:13 - 2022-06-21 08:13 - 000234088 _____ C:\Users\wrt\Downloads\kasikto ausz.pdf

2022-06-21 08:10 - 2022-06-21 08:10 - 000227864 _____ C:\Users\wrt\Downloads\0c423fcb-fe2c-489d-8328-023f7522824f.pdf

2022-06-20 20:38 - 2022-06-29 20:13 - 000000000 ____D C:\Users\wrt\Downloads\bilder für lazada

2022-06-20 11:25 - 2022-06-20 11:25 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Pdfsvg

2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\wrt\Documents\eBook Converter

2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\Public\Documents\eBook Converter

2022-06-20 07:54 - 2022-06-24 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBook Converter

2022-06-16 19:33 - 2022-06-16 19:33 - 001349689 _____ C:\Users\wrt\Downloads\Gamma40Manual.pdf

2022-06-15 23:40 - 2022-06-15 23:40 - 021111172 _____ (The OSCAR Team ) C:\Users\wrt\Downloads\OSCAR-1.4.0-Win64.exe

2022-06-15 22:07 - 2022-06-15 22:07 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll

2022-06-15 22:07 - 2022-06-15 22:07 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll

2022-06-15 22:06 - 2022-06-15 22:06 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll

2022-06-15 22:06 - 2022-06-15 22:06 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll

2022-06-15 22:06 - 2022-06-15 22:06 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2022-06-15 22:05 - 2022-06-15 22:05 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll

2022-06-15 22:05 - 2022-06-15 22:05 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll

2022-06-15 21:29 - 2022-06-15 21:29 - 000000000 ___HD C:\$WinREAgent

2022-06-13 09:04 - 2022-06-13 09:04 - 000336751 _____ C:\Users\wrt\Downloads\Bangkok Bank TC_ONLINE20220523EN_001.pdf

2022-06-09 09:00 - 2022-06-09 09:00 - 000000000 ____D C:\Users\wrt\Desktop\temp

2022-06-07 08:46 - 2022-06-07 11:27 - 000000000 ____D C:\Users\wrt\Downloads\mind monitor files 2022

2022-06-06 21:45 - 2022-06-06 21:45 - 002549096 _____ (Malwarebytes) C:\Users\wrt\Downloads\MBSetup.exe
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-07-06 07:58 - 2018-03-04 21:30 - 000000000 ____D C:\ProgramData\TEMP

2022-07-06 07:56 - 2019-12-07 16:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-07-06 07:48 - 2020-09-05 15:08 - 000000000 ____D C:\Program Files\CCleaner

2022-07-06 07:47 - 2021-03-09 16:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2022-07-06 07:40 - 2018-03-03 19:05 - 000000000 ____D C:\Program Files (x86)\Google

2022-07-05 21:35 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Everything

2022-07-05 20:16 - 2018-03-04 22:30 - 000001515 _____ C:\Users\wrt\AppData\Roaming\SAS7_000.DAT

2022-07-05 10:29 - 2018-03-06 08:08 - 000002348 _____ C:\Users\wrt\Documents\Default.rdp

2022-07-05 07:22 - 2018-03-08 13:32 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\Temp

2022-07-05 07:21 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2022-07-05 07:15 - 2019-12-07 16:14 - 000000000 ___HD C:\Program Files\WindowsApps

2022-07-05 07:15 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2022-07-05 07:04 - 2019-12-07 21:51 - 000687482 _____ C:\WINDOWS\system32\perfh007.dat

2022-07-05 07:04 - 2019-12-07 21:51 - 000142466 _____ C:\WINDOWS\system32\perfc007.dat

2022-07-05 07:03 - 2018-03-04 19:00 - 000000000 ____D C:\Users\wrt\AppData\Local\PlaceholderTileLogoFolder

2022-07-05 07:03 - 2015-07-10 18:04 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy

2022-07-05 07:01 - 2019-12-07 21:53 - 000000000 ____D C:\WINDOWS\OCR

2022-07-05 06:50 - 2020-03-09 18:53 - 000000000 ____D C:\Users\wrt\AppData\Local\Free Download Manager

2022-07-05 00:42 - 2020-04-01 17:06 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2022-07-04 22:52 - 2018-03-03 23:30 - 000000000 ____D C:\Users\wrt\AppData\Local\Packages

2022-07-04 15:48 - 2018-06-20 15:14 - 000000000 ____D C:\Users\wrt\AppData\Roaming\vlc

2022-07-04 11:49 - 2020-04-14 16:19 - 000000000 ____D C:\Program Files\Microsoft Office

2022-07-04 11:36 - 2018-05-20 14:24 - 000000000 ____D C:\Users\wrt\AppData\Local\D3DSCache

2022-07-04 10:44 - 2020-09-15 14:04 - 000000000 ____D C:\Users\wrt\Documents\OSCAR_Data

2022-07-04 10:06 - 2019-08-15 10:56 - 000000000 ____D C:\Users\wrt\AppData\Local\CrashDumps

2022-07-03 20:36 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\ServiceState

2022-07-03 16:54 - 2021-03-09 11:44 - 000000000 ____D C:\Users\wrt

2022-07-03 16:41 - 2021-03-09 17:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2022-07-03 16:41 - 2021-03-09 16:56 - 000008192 ___SH C:\DumpStack.log.tmp

2022-07-03 16:41 - 2021-02-23 10:13 - 000000000 ____D C:\ProgramData\Hotspot Shield

2022-07-03 16:41 - 2018-03-05 20:24 - 000000000 ____D C:\ProgramData\VMware

2022-07-03 16:38 - 2019-12-07 16:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI

2022-07-03 16:38 - 2018-03-04 01:11 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin

2022-07-03 16:37 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Local\Everything

2022-07-03 15:39 - 2018-08-15 20:21 - 000000000 ____D C:\Program Files\Everything

2022-07-03 07:08 - 2018-03-03 23:30 - 000000000 __RHD C:\Users\Public\AccountPictures

2022-07-02 23:00 - 2021-03-09 17:23 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2022-07-02 20:24 - 2018-09-19 18:58 - 000002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2022-07-02 20:08 - 2021-08-23 10:06 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2022-07-02 19:13 - 2020-03-17 09:23 - 000000000 ____D C:\ProgramData\CanonIJPLM

2022-07-02 19:12 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Roaming\VMware

2022-07-02 19:12 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Local\VMware

2022-07-02 17:17 - 2020-06-10 08:25 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2022-07-02 16:05 - 2021-01-14 14:08 - 000000000 ____D C:\Users\wrt\AppData\Local\TeamViewer

2022-07-02 16:05 - 2018-10-26 06:15 - 000000000 ____D C:\Users\wrt\AppData\Roaming\TeamViewer

2022-07-02 15:22 - 2019-12-07 16:13 - 000000000 ____D C:\WINDOWS\INF

2022-07-01 20:12 - 2019-12-07 16:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2022-07-01 19:49 - 2021-03-09 17:23 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2022-07-01 06:28 - 2022-04-30 11:56 - 000023516 _____ C:\Users\wrt\Desktop\formulare, selbst, forbes, notes etc.odt

2022-06-30 21:55 - 2018-03-04 21:00 - 000000000 ____D C:\Users\wrt\Documents\FinePrint files

2022-06-30 11:14 - 2021-12-13 00:51 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001

2022-06-30 11:14 - 2021-12-13 00:51 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500

2022-06-30 11:14 - 2021-03-09 17:23 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2022-06-30 11:14 - 2020-05-21 16:41 - 000002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2022-06-29 21:07 - 2022-05-30 09:59 - 000000000 ____D C:\Users\wrt\Downloads\Richard Dotts 220530

2022-06-29 20:47 - 2018-03-03 18:27 - 000000000 ____D C:\Users\wrt\AppData\Local\GHISLER

2022-06-28 21:10 - 2021-07-29 21:35 - 000004152 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1627569282

2022-06-28 21:10 - 2021-07-29 21:34 - 000001442 _____ C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk

2022-06-28 16:46 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\AppData\Roaming\calibre

2022-06-28 08:15 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\Calibre-Bibliothek

2022-06-27 19:08 - 2018-09-15 15:19 - 000000000 ____D C:\Users\wrt\AppData\Roaming\inkscape

2022-06-26 13:32 - 2021-07-18 21:39 - 000000000 ____D C:\Users\wrt\Documents\My Kindle Content

2022-06-25 22:19 - 2018-07-11 11:29 - 000000000 ____D C:\ProgramData\Packages

2022-06-25 18:12 - 2018-04-29 22:43 - 000000000 ____D C:\Users\wrt\AppData\Local\ElevatedDiagnostics

2022-06-24 19:39 - 2021-03-22 20:37 - 000000000 ____D C:\Users\wrt\AppData\Local\AMD_Common

2022-06-24 11:15 - 2020-10-25 22:31 - 000000000 ____D C:\Program Files\CherryTree

2022-06-24 11:12 - 2018-03-05 13:53 - 000000000 ____D C:\Programme wr

2022-06-23 21:07 - 2020-05-18 21:03 - 000000000 ____D C:\Users\wrt\AppData\Roaming\XMedia Recode

2022-06-23 21:06 - 2020-05-17 23:03 - 000000000 ____D C:\Program Files\XMedia Recode 64bit

2022-06-23 13:55 - 2018-03-04 19:17 - 000000000 ____D C:\Users\wrt\AppData\Roaming\audacity

2022-06-23 10:19 - 2018-03-04 19:26 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\Mozilla

2022-06-23 08:01 - 2021-08-12 15:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

2022-06-23 06:20 - 2018-03-04 07:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2022-06-23 03:18 - 2020-01-29 19:44 - 000000000 ____D C:\Users\wrt\AppData\Local\Dropbox

2022-06-23 03:17 - 2020-01-29 19:44 - 000000000 ____D C:\Program Files (x86)\Dropbox

2022-06-22 13:44 - 2022-05-23 21:03 - 000002325 _____ C:\Users\wrt\Desktop\Kindle.lnk

2022-06-22 10:01 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\AppData\Local\cherrytree

2022-06-22 09:46 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\.dbus-keyrings

2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSCAR

2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\Program Files\OSCAR

2022-06-19 18:50 - 2018-03-05 21:00 - 000000000 ____D C:\Temp

2022-06-16 12:11 - 2021-04-26 09:25 - 000003662 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d714cc92528094

2022-06-16 12:11 - 2021-03-09 17:23 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2022-06-16 06:36 - 2021-03-09 17:12 - 000005996 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2022-06-16 06:29 - 2021-03-09 16:56 - 000625080 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2022-06-16 06:26 - 2019-12-07 21:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SystemResources

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\et-EE

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\es-MX

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\DDFs

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2022-06-16 06:26 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\servicing

2022-06-15 22:04 - 2021-03-09 17:00 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2022-06-15 21:23 - 2018-03-03 19:15 - 000000000 ____D C:\WINDOWS\system32\MRT

2022-06-15 21:18 - 2018-03-03 19:15 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2022-06-15 19:20 - 2022-03-16 19:08 - 000000000 ____D C:\Users\wrt\Downloads\books märz 22 radiologie

2022-06-15 19:20 - 2022-02-20 10:34 - 000000000 ____D C:\Users\wrt\Downloads\z lib ebooks

2022-06-15 19:20 - 2022-02-13 19:57 - 000000000 ____D C:\Users\wrt\Downloads\books feb 2022

2022-06-15 19:20 - 2022-01-26 06:20 - 000000000 ____D C:\Users\wrt\Downloads\Ortho

2022-06-15 19:20 - 2021-11-26 22:07 - 000000000 ____D C:\Users\wrt\Downloads\books nov26 21

2022-06-11 09:59 - 2022-04-03 20:11 - 000000000 ____D C:\Users\wrt\Desktop\LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLösch

2022-06-09 15:30 - 2021-09-15 14:16 - 000004380 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1627569296

2022-06-07 23:30 - 2018-09-04 16:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java

2022-06-07 23:30 - 2018-09-04 16:59 - 000000000 ____D C:\Program Files (x86)\Java

2022-06-07 23:29 - 2018-03-03 18:32 - 000000000 ____D C:\winkmd

2022-06-07 23:28 - 2018-09-04 16:59 - 000166680 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll

2022-06-07 20:16 - 2020-10-08 19:25 - 000001665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Med7 Arztpraxisprogramm.lnk

2022-06-07 20:16 - 2020-10-08 19:25 - 000000000 ____D C:\Med7
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2018-03-06 10:08 - 2018-03-06 10:08 - 000000000 _____ () C:\Program Files (x86)\mstsc

2018-03-04 22:30 - 2022-07-05 20:16 - 000001515 _____ () C:\Users\wrt\AppData\Roaming\SAS7_000.DAT
 
 
 
 

2018-05-20 20:36 - 2022-02-20 18:34 - 000011776 _____ () C:\Users\wrt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2022-06-28 08:25 - 2022-06-28 08:25 - 000002784 _____ () C:\Users\wrt\AppData\Local\recently-used.xbel
 

==================== FLock ==============================
 

2018-03-03 19:18 C:\WINDOWS\UpdateAssistant
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-07-2022

durchgeführt von wrt (06-07-2022 07:59:02)

Gestartet von C:\Users\wrt\Downloads

Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) (2021-03-09 10:24:05)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-779246859-3990032973-3551585165-500 - Administrator - Enabled) => C:\Users\Administrator

DefaultAccount (S-1-5-21-779246859-3990032973-3551585165-503 - Limited - Disabled)

drrei (S-1-5-21-779246859-3990032973-3551585165-1004 - Limited - Disabled)

Gast (S-1-5-21-779246859-3990032973-3551585165-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-779246859-3990032973-3551585165-504 - Limited - Disabled)

wrt (S-1-5-21-779246859-3990032973-3551585165-1001 - Administrator - Enabled) => C:\Users\wrt
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4K Video Downloader 4.4 (HKLM-x32\...\{D04F9BA2-CF6F-41AD-8BD1-313ABD28FAF2}) (Version: 4.4.4.2275 - Open Media LLC)

ABBYY FineReader 11 (HKLM-x32\...\{F11000FE-0010-0000-0000-074957833700}) (Version: 11.11.194 - ABBYY Production LLC)

Acronis True Image (HKLM-x32\...\{E8C3CECC-4A39-489A-AE2A-28160E194BD9}) (Version: 22.7.15560 - Acronis) Hidden

Acronis True Image (HKLM-x32\...\{E8C3CECC-4A39-489A-AE2A-28160E194BD9}Visible) (Version: 22.7.15560 - Acronis)

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 22.001.20142 - Adobe Systems Incorporated)

Adobe Audition 3.0 (HKLM-x32\...\Adobe Audition 3.0) (Version: 3.0 - Adobe Systems Incorporated)

Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-001824458876}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden

Amazon Kindle (HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Amazon Kindle) (Version: 1.37.0.65274 - Amazon)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.13.27.501 - Advanced Micro Devices, Inc.)

AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden

AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.117 - Advanced Micro Devices, Inc.) Hidden

AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.82 - Advanced Micro Devices, Inc.) Hidden

AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 4.13.0.0 - Advanced Micro Devices, Inc.) Hidden

AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 6.0.0.9 - Advanced Micro Devices, Inc.) Hidden

AMD SBxxx SMBus Driver Alpha (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 21.3.1 - Advanced Micro Devices, Inc.)

AMD_Chipset_Drivers (HKLM-x32\...\{40c19864-e557-4855-95ee-075689dfcf8e}) (Version: 2.13.27.501 - Advanced Micro Devices, Inc.) Hidden

ANT Drivers Installer x64 (HKLM\...\{1BC0225E-AF99-4434-92CC-615111CE698F}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden

ApowerMirror Version 1.4.1.9 (HKLM-x32\...\{a9482532-9c34-478c-80c3-85bdccbb981f}_is1) (Version: 1.4.1.9 - APOWERSOFT LIMITED)

Apple Software Update (HKLM-x32\...\{6956856F-B6B3-4BE0-BA0B-8F495BE32033}) (Version: 2.1.1.116 - Apple Inc.)

AquaSoft DiaShow 7 Ultimate (HKLM-x32\...\{2FAA2415-618E-4EC0-8253-3CDA076C84D6}) (Version: 7.8.01 - AquaSoft) Hidden

AquaSoft DiaShow 7 Ultimate (HKLM-x32\...\AquaSoft DiaShow 7 Ultimate) (Version: 7.8.01 - AquaSoft)

Audacity 3.0.2 (HKLM-x32\...\Audacity_is1) (Version: 3.0.2 - Audacity Team)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bonjour-Druckdienste (HKLM\...\{0DA20600-6130-443B-9D4B-F30520315FA6}) (Version: 2.0.2.0 - Apple Inc.)

BrainWave Generator (HKLM-x32\...\BrainWave Generator) (Version:  - )

Branding64 (HKLM\...\{856DA29A-EA4A-468B-BBC2-B5F60DD75BFE}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden

calibre (HKLM-x32\...\{85703FD4-26A1-436A-85DA-A2612DE45C60}) (Version: 5.43.0 - Kovid Goyal)

Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version:  - )

Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.)

Canon G3010 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_G3010_series) (Version: 1.01 - Canon Inc.)

Canon G3010 series On-Screen-Handbuch (HKLM-x32\...\Canon G3010 series On-Screen-Handbuch) (Version: 1.2.0 - Canon Inc.)

Canon IJ Network Scanner Selector EX (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX) (Version:  - )

Canon IJ Network Scanner Selector EX2 (HKLM-x32\...\Canon_IJ_Network_Scanner_Selector_EX2) (Version: 2.0.5.3 - Canon Inc.)

Canon IJ Network Tool (HKLM-x32\...\Canon_IJ_Network_UTILITY) (Version: 3.1.1 - Canon Inc.)

Canon IJ Printer Assistant Tool (HKLM-x32\...\Canon IJ Printer Assistant Tool) (Version: 1.05.1.51 - Canon Inc.)

Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.4.0.16 - Canon Inc.)

Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.4.0 - Canon Inc.)

Canon Kurzwahlprogramm (HKLM-x32\...\Speed Dial Utility) (Version:  - )

Canon MP Navigator EX 4.1 (HKLM-x32\...\MP Navigator EX 4.1) (Version:  - )

Canon MX420 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MX420_series) (Version:  - Canon Inc.)

Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.)

Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.)

Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version:  - )

Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.)

Canon Wi-Fi Connection Assistant (HKLM-x32\...\Wi-Fi Connection Assistant) (Version: 1.20.0 - Canon Inc.)

CCleaner (HKLM\...\CCleaner) (Version: 6.01 - Piriform)

CherryTree Version 0.39.4 (HKLM-x32\...\{DBA7384C-E1C6-44B5-A3B4-C94F2F0B8C0C}_is1) (Version: 0.39.4 - Giuseppe Penone)

Chessmaster Grandmaster Edition (HKLM-x32\...\InstallShield_{27614800-84A9-484E-9CCB-43ED2F1205F5}) (Version: 1.00.0000 - Ubisoft)

CPUID CPU-Z 1.89 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.89 - CPUID, Inc.)

CUEcards 2000 (HKLM-x32\...\CUEcards 2000) (Version:  - Marcus Humann Software-Technik)

D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden

DocFetcher (HKLM-x32\...\DocFetcher) (Version: 1.1.25 - )

DocFetcher Pro Demo (HKLM\...\DocFetcher Pro Demo) (Version: 1.15 - )

Dr. Hardware 2019 19.0.1 (HKLM-x32\...\Dr. Hardware 2019_is1) (Version:  - Peter A. Gebhard)

Dr. Robert Anthony's Intention Activator (HKLM-x32\...\{1C35ABA7-6507-4CB9-91E7-6311B105A526}) (Version: 2.00 - )

Dragon NaturallySpeaking 13 (HKLM-x32\...\{33EA20FB-5389-4938-BA59-2BCD9BB68F41}) (Version: 13.00.000 - Nuance Communications Inc.)

Dropbox (HKLM-x32\...\Dropbox) (Version: 151.4.4304 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.583.1 - Dropbox, Inc.) Hidden

eBook Converter Bundle 3.22.10306.440 (HKLM-x32\...\{74173236-3507-49A7-A0FC-1BDABF0A9338}_is1) (Version: 3.22.10306.440 - eBook Converter Team)

Effective File Search 6.8.1 (HKLM-x32\...\Effective File Search) (Version: 6.8.1 - SOW)

Elevated Installer (HKLM-x32\...\{C3D3E0B3-6B8D-4AF4-B49A-3583E512ECE8}) (Version: 7.5.0.0 - Garmin Ltd or its subsidiaries) Hidden

Enchanter X 2.0 (HKLM-x32\...\Enchanter_X_2.0) (Version:  - )

EncoreBasic (HKLM-x32\...\{4C0C787B-EF87-4A5F-B4CC-A022BC97A2FC}) (Version: 2.4 - Ihr Firmenname)

Epubor Ultimate (HKLM-x32\...\Epubor Ultimate) (Version: 3.0.14.402 - Epubor Inc.)

Everything 1.4.1.1005 (x86) (HKLM-x32\...\Everything) (Version: 1.4.1.1005 - voidtools)

Everything 1.4.1.935 (x64) (HKLM\...\Everything) (Version: 1.4.1.935 - David Carpenter)

EZCast (HKLM-x32\...\{74CECDD9-4B8E-4AE3-9571-8070A17F3C34}) (Version: 2.8.0.145 - Actions-Micro)

FFmpeg v0.6.2 for Audacity (HKLM-x32\...\FFmpeg for Audacity_is1) (Version:  - )

FinePrint (HKLM\...\FinePrint) (Version: 10.40 - FinePrint Software, LLC)

Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Foxit Phantom (HKLM-x32\...\Foxit Phantom) (Version: 2.0.0.0424 - Foxit Software Company)

Free Download Manager (HKLM\...\{43781dff-e0df-49ce-a6d2-47da96a485e7}}_is1) (Version: 5.1.38.7312 - FreeDownloadManager.ORG)

Free Download Manager 3.9.7 (HKLM-x32\...\Free Download Manager_is1) (Version:  - FreeDownloadManager.ORG)

fx-ES PLUS Emulator Subscription for fx-991ES PLUS C 2nd edition (HKLM-x32\...\{12CC30ED-A07C-46D4-8075-C5660DE67856}) (Version: 5.00.0000 - CASIO COMPUTER CO., LTD.)

Garmin Communicator Plugin (HKLM-x32\...\{71DBFBF2-F7EB-4268-8485-9471D83C4E66}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)

Garmin Communicator Plugin x64 (HKLM\...\{70A381F1-C161-4D61-A20C-BE12FC6777DF}) (Version: 4.2.0 - Garmin Ltd or its subsidiaries)

Garmin Express (HKLM-x32\...\{034F279C-D74E-42F2-8CEC-216E91969B29}) (Version: 7.5.0.0 - Garmin Ltd or its subsidiaries) Hidden

Garmin Express (HKLM-x32\...\{afe06296-a3d5-48cf-88a2-77629aeb124b}) (Version: 7.5.0.0 - Garmin Ltd or its subsidiaries)

Gnaural ver. 1.0.20080808 (HKLM-x32\...\Gnaural_is1) (Version:  - Bret Logan)

Gnaural2 ver. 0.1.20080229 (HKLM-x32\...\Gnaural2_is1) (Version:  - Bret Logan)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 103.0.5060.114 - Google LLC)

Google Earth Pro (HKLM\...\{DE181B35-ACEF-4DB0-86D9-731D5767ABB1}) (Version: 7.3.4.8642 - Google)

Hotspot Shield 7.12.2 (HKLM-x32\...\{AF599C42-A2E5-4251-B7EE-4925C1E7CE58}) (Version: 7.12.2.11061 - AnchorFree Inc.) Hidden

Hotspot Shield 7.12.2 (HKLM-x32\...\{e055aeec-04ef-4ce5-94a9-4427c3b378bf}) (Version: 7.12.2.11061 - AnchorFree Inc.)

Hotspot Shield 7.12.2 (HKLM-x32\...\HotspotShield) (Version: 7.12.2 - AnchorFree Inc.) Hidden

I-Doser Premium (HKLM-x32\...\I-Doser) (Version: 5.1 - I-Doser.com)

ifap praxisCENTER® (HKLM-x32\...\{0B59E9CB-DA5B-4CDE-88E8-3F7C269DE130}_is1) (Version: 3.34.0.122 - ifap GmbH)

Inkscape 0.92.3 (HKLM-x32\...\Inkscape) (Version: 0.92.3 - Inkscape Project)

IrfanView 4.50 (64-bit) (HKLM\...\IrfanView64) (Version: 4.50 - Irfan Skiljan)

Java 8 Update 333 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180333F0}) (Version: 8.0.3330.2 - Oracle Corporation)

KeePass Password Safe 2.38 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.38 - Dominik Reichl)

LAME v3.99.3 (for Windows) (HKLM-x32\...\LAME_is1) (Version:  - )

LibreOffice 7.3 Help Pack (German) (HKLM\...\{D3A8CE42-862A-491E-B149-AC475F815D60}) (Version: 7.3.2.2 - The Document Foundation)

LibreOffice 7.3.2.2 (HKLM\...\{001D6695-F9B8-4CBD-AA92-FE8A58638060}) (Version: 7.3.2.2 - The Document Foundation)

MadAppLauncher version 1.10.0.0 (HKLM-x32\...\{73F59F3E-E753-4D3D-B123-B497B74A549A}_is1) (Version: 1.10.0.0 - Roberto Concepcion)

Malwarebytes version 4.5.10.200 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.10.200 - Malwarebytes)

MaxLauncher version 1.20.1.0 (HKLM\...\{D887E7A5-7906-4A0B-9E16-791BD8F2FD2F}_is1) (Version: 1.20.1.0 - Roberto Concepcion)

MD Medicus vOffice (HKLM-x32\...\vOffice 2.3.0) (Version: 2.3.0 - MD Medicus)

Med7 (HKLM-x32\...\{36427C11-0CC8-4AF9-A5F8-DC9FD5BE3D97}) (Version: 8.40.0004 - Bitron GmbH)

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.15225.20288 - Microsoft Corporation)

Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.15225.20288 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 103.0.1264.44 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 103.0.1264.44 - Microsoft Corporation)

Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 22.121.0605.0002 - Microsoft Corporation)

Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29913 (HKLM-x32\...\{855e31d2-9031-46e1-b06d-c9d7777deefb}) (Version: 14.28.29913.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29913 (HKLM-x32\...\{03d1453c-7d5c-479c-afea-8482f406e036}) (Version: 14.28.29913.0 - Microsoft Corporation)

Microsoft Visual C++ 2019 X64 Additional Runtime - 14.28.29913 (HKLM\...\{620A7633-7A09-42A8-8580-076A4483C4B0}) (Version: 14.28.29913 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.28.29913 (HKLM\...\{EECDD137-13DA-46ED-ADA0-BDF7F8BE65B8}) (Version: 14.28.29913 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29913 (HKLM-x32\...\{572DCD10-CF2E-43D1-8151-8BD9AC9086D0}) (Version: 14.28.29913 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29913 (HKLM-x32\...\{6236EBBD-F50F-40B3-B819-8DB0C608308C}) (Version: 14.28.29913 - Microsoft Corporation) Hidden

MindMaster (HKLM-x32\...\{D5A2C78C-5D8F-40D2-A130-7696D4F22953}) (Version: 2.2.9 - MindMaster)

Mini Manifestor 4-2 (HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Mini Manifestor 4-2) (Version:  - )

Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 68.12.0.7577 - Mozilla)

Mozilla Thunderbird 68.12.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 68.12.1 (x86 de)) (Version: 68.12.1 - Mozilla)

MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden

MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden

MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden

MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)

MyPhoneExplorer (HKLM-x32\...\MPE) (Version: 1.8.9 - F.J. Wechselberger)

Nero ControlCenter (HKLM-x32\...\{ABC88553-8770-4B97-B43E-5A90647A5B63}) (Version: 11.4.3033 - Nero AG) Hidden

Nero Core Components (HKLM-x32\...\{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}) (Version: 11.8.1063 - Nero AG) Hidden

Nero Info (HKLM-x32\...\{F030BFE8-8476-4C08-A553-233DE80A2BE1}) (Version: 21.0.3001 - Nero AG)

Nero Update (HKLM-x32\...\{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}) (Version: 21.0.1014 - Nero AG) Hidden

Nero WaveEditor (HKLM-x32\...\{C2B4762F-2F35-4CB0-A413-1B3C0C1D9ACE}) (Version: 21.0.1002 - Nero AG) Hidden

Nero WaveEditor (HKLM-x32\...\{D261A45C-CC66-419A-8D50-1FB933468DCB}) (Version: 21.0.00100 - Nero AG)

Neuro-Programmer 3.3.1 (HKLM-x32\...\Neuro-Programmer 3_is1) (Version:  - Transparent Corporation)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15330.20158 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15330.20196 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden

Onis 2.3 Free Edition (HKLM-x32\...\{185514C4-3F4C-499A-A9DD-5E280450BE8D}) (Version: 2.3.0 - Digitalcore)

Opera Stable 88.0.4412.53 (HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Opera 88.0.4412.53) (Version: 88.0.4412.53 - Opera Software)

OSCAR (HKLM\...\{FC6F08E6-69BF-4469-ADE3-78199288D305}_is1) (Version: 1.4.0-Win64-e35d47b3 - The OSCAR Team)

Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7917 - Realtek Semiconductor Corp.)

Remote Desktop assistant (HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\4ffdbc81071cec8e) (Version: 1.0.0.103 - Remote Desktop assistant)

Rife Generator 3.4 (HKLM-x32\...\{9D334442-BC5A-4654-952E-518C74B4852C}_is1) (Version:  - Timo Esser)

Samsung AllShare (HKLM-x32\...\{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.) Hidden

Samsung AllShare (HKLM-x32\...\InstallShield_{DF47ACA3-7C78-4C08-8007-AC682563C9F1}) (Version: 2.1.0.12031_10 - Samsung Electronics Co., Ltd.)

Skype Version 8.81 (HKLM-x32\...\Skype_is1) (Version: 8.81 - Skype Technologies S.A.)

SpO2 Assistant V3.0.5 (HKLM-x32\...\SpO2 Assistant V3.0.5_is1) (Version:  - )

Stellarium 0.13.0 (HKLM-x32\...\Stellarium_is1) (Version: 0.13.0 - Stellarium team)

synedra View Personal (HKLM-x32\...\synedraViewPersonal) (Version:  - )

TAP-Windows 9.24.2 (HKLM\...\TAP-Windows) (Version: 9.24.2 - OpenVPN Technologies, Inc.)

ThaiTrainer111-V4 (HKLM-x32\...\ThaiTrainer111-V4_is1) (Version:  - © 1998-2008 by WANTANA Software)

Total Commander 64-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 10.50 beta 8 - Ghisler Software GmbH)

TreePad X Enterprise 384 Gb (single-user) 7.12 (HKLM-x32\...\TreePadXEnterprise_384Gb) (Version:  - )

TreeSize Free V4.4.2 (HKLM-x32\...\TreeSize Free_is1) (Version: 4.4.2 - JAM Software)

TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)

Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.9.0 - Tweaking.com)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)

UpdateAssistant (HKLM\...\{567756E0-361F-4E88-AF74-8B0E4628E5BC}) (Version: 1.12.0.0 - Microsoft Corporation) Hidden

VLC media player (HKLM\...\VLC media player) (Version: 3.0.3 - VideoLAN)

vOffice (HKLM-x32\...\{D21BBB39-EA60-4ADB-84A6-5C0F72CDA1CE}) (Version: 2.3.0 - MD Medicus) Hidden

Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)

Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (HKLM-x32\...\{04BE4035-3C8E-4B48-BFB8-1655849C0C8B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (HKLM-x32\...\{714E162E-CD4F-4F1B-8302-7F5179409C25}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer (HKLM-x32\...\{955E4722-1480-4198-A144-65FA5F4446DA}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Live Writer Resources (HKLM-x32\...\{A951D5DA-4759-4C3B-9C36-C6BF30082A2F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden

Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version:  - )

Windows-PC-Integritätsprüfung (HKLM\...\{AD47C6B2-6C72-4F0E-B66F-7685C28ACDFD}) (Version: 3.3.2110.22002 - Microsoft Corporation)

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

Windows-Treiberpaket - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)

Windows-Treiberpaket - Silicon Laboratories (silabenm) Ports  (03/19/2014 6.7.0.0) (HKLM\...\B97004A400E30DCF940971EFA7A0C13C6B0A4B66) (Version: 03/19/2014 6.7.0.0 - Silicon Laboratories)

Windows-Treiberpaket - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)

Windows-Treiberpaket - STMicroelectronics (usbser) Ports  (08/02/2013 1.4.0) (HKLM\...\04B4996F06620A7ECFBFE8F9BCC458F9761E39F7) (Version: 08/02/2013 1.4.0 - STMicroelectronics)

XMedia Recode 64bit Version 3.5.5.8 (HKLM\...\{D31E6E69-4C6A-42CC-926F-CC7B186864EB}_is1) (Version: 3.5.5.8 - XMedia Recode 64bit)

Zoom (HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\ZoomUMX) (Version: 5.4.1 (58698.1027) - Zoom Video Communications, Inc.)
 

Packages:

=========

Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2022-04-15] (Canon Inc.)

Clockmaker: Match Three in Row -> C:\Program Files\WindowsApps\SamfinacoLimited.ClockmakerMatchThreeinRow_65.0.6.0_x86__aj0b1qrpyg0w6 [2022-06-11] (Samfinaco Limited)

Hypnosis Wheel -> C:\Program Files\WindowsApps\43852Rob.Kachmar.HypnosisWheel_1.0.0.1_neutral__a29k398mwv6a8 [2022-04-15] (Rob.Kachmar)

Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x64__8wekyb3d8bbwe [2022-04-15] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for JavaScript -> C:\Program Files\WindowsApps\Microsoft.Advertising.JavaScript_10.1805.2.0_x86__8wekyb3d8bbwe [2022-04-15] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2022-04-15] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2022-04-15] (Microsoft Corporation) [MS Ad]

Microsoft Remote Desktop -> C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.2.1817.0_x64__8wekyb3d8bbwe [2022-04-15] (Microsoft Corporation)

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-07] (Microsoft Studios) [MS Ad]

Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.73.51701.0_x64__8wekyb3d8bbwe [2022-06-30] (Microsoft Corporation) [Startup Task]

Movie Maker & Video Editor : Slideshow Maker -> C:\Program Files\WindowsApps\3631PhotoVideoZone.MovieMakerVideoEditorSlideshowM_1.1.13.0_x64__vfc75da8vjzxg [2022-04-15] (Photo Video Zone) [MS Ad]

Pinball Deluxe Reloaded 3D -> C:\Program Files\WindowsApps\18880GatesKingsGroupHoldi.PinballDeluxeReloaded3D_6.6.6.0_x64__mgran42w2k48p [2022-04-15] (Gates Kings Group Holdings)

PowerPom - Pomodoro Timer -> C:\Program Files\WindowsApps\25994ProdDev.PowerPom-PomodoroTimer_1.1.6.0_x64__w3j63e9zf5dsr [2022-06-01] (Productive Team)

RECOIL -> C:\Program Files\WindowsApps\9998PiotrFusik.RECOIL_6.1.1.0_x64__5dbjqw3zx3tpw [2022-04-15] (Piotr Fusik)

Scatter Slots -> C:\Program Files\WindowsApps\Fishsticksserviceslimited.ScatterSlots_4.27.0.0_x64__bcx82fedc2d04 [2022-07-03] (Murka Games Limited)

Sudoku - Pro -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.Sudoku-Pro_3.1.19.0_x64__kx24dqmazqk8j [2022-07-04] (Random Salad Games LLC)

Super Craft Mario Run -> C:\Program Files\WindowsApps\62585RoyalKingGamesStudio.SuperCraftMarioRun_10.5.2.0_x86__b66x5gv52tdk6 [2022-04-15] (Royal King Games Studio) [MS Ad]

VLC -> C:\Program Files\WindowsApps\VideoLAN.VLC_3.2.1.0_x64__paz6r1rewnh0a [2022-06-01] (VideoLAN)

Wi-Fi Transfer -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.Wi-FiTransfer_2.0.26.0_x64__3c1yjt4zspk6g [2022-06-01] (Samsung Electronics Co. Ltd.)

Word Finder Scrabble -> C:\Program Files\WindowsApps\15985Yasindewid.WordFinderScrabble_4.1.2.0_x64__39dp1177718dj [2022-04-15] (Yasin dewid)

Wordplay: Exercise your brain -> C:\Program Files\WindowsApps\828B5831.WordplayExerciseyourbrain_1.12.1400.0_x64__ytsefhwckbdv6 [2022-04-15] (G5 Entertainment AB)

Words Scrabble & Friends -> C:\Program Files\WindowsApps\54753DragonKingsGamesFree.WordsScrabbleFriends_13.2.0.0_x64__nj2hqgcefq0de [2022-04-15] (Dragon Kings Games Free Inc.) [MS Ad]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-779246859-3990032973-3551585165-1001_Classes\CLSID\{A2B78634-DD87-2E5F-D25B-10D9E13A0B1F}\InprocServer32 -> C:\WINDOWS\system32\ole32.dll (Microsoft Windows -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-779246859-3990032973-3551585165-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\wrt\Dropbox [2020-01-29 19:54]

ShellIconOverlayIdentifiers: [      OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [      OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [     AcronisDrive] -> {5D74FD4B-4EFB-4586-8022-8637BBE40970} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2017-12-22] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncError] -> {934BC6C0-FEC2-4df5-A100-961DE2C8A0ED} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2017-12-22] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncInProgress] -> {00F848DC-B1D4-4892-9C25-CAADC86A215D} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2017-12-22] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [     AcronisSyncOk] -> {71573297-552E-46fc-BE3D-3DFAF88D47B7} => C:\Program Files (x86)\Acronis\TrueImageHome\tishell64.dll [2017-12-22] (Acronis International GmbH -> )

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [      OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [      OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2013-06-28] (ABBYY PRODUCTION LLC -> ABBYY Production LLC)

ContextMenuHandlers1-x32: [MyPhoneExplorer] -> {A372C6DF-7A85-41B1-B3B0-D1E24073DCBF} => C:\Program Files (x86)\MyPhoneExplorer\DLL\ShellMgr.dll [2010-03-31] (F.J. Wechselberger) [Datei ist nicht signiert]

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => C:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2022-02-18] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => C:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2022-02-18] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-07-01] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.121.0605.0002\FileSyncShell64.dll [2022-06-30] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-03-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.52.0.dll [2022-01-19] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers6: [FineReader11ContextMenu] -> {79E48320-C6B5-49F1-992B-571D53586885} => C:\Program Files (x86)\ABBYY FineReader 11\FRIntegration.x64.dll [2013-06-28] (ABBYY PRODUCTION LLC -> ABBYY Production LLC)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-07-01] (Malwarebytes Inc. -> Malwarebytes)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [msacm.pspgru] => C:\Windows\SysWOW64\pspgru.acm [401920 2010-03-22] (Philips Austria GmbH - Speech Processing) [Datei ist nicht signiert]
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Drive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak

ShortcutWithArgument: C:\Users\wrt\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Drive.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak

ShortcutWithArgument: C:\Users\wrt\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\6ba478f6faf86bd4\ZenMate VPN - Top Internet Security & Unblock.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=fdcgdnkidjaadafnichfpabhfomcebme
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2019-10-01 18:32 - 2016-12-17 21:44 - 000091648 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_ctypes.pyd

2019-10-01 18:32 - 2012-07-19 23:55 - 000673115 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_dbus_bindings.pyd

2019-10-01 18:32 - 2012-07-19 23:55 - 000062767 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_dbus_glib_bindings.pyd

2019-10-01 18:32 - 2016-12-17 21:46 - 001016832 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_hashlib.pyd

2019-10-01 18:32 - 2016-12-17 21:45 - 000046592 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_socket.pyd

2019-10-01 18:32 - 2016-12-17 21:45 - 000050688 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_sqlite3.pyd

2019-10-01 18:32 - 2016-12-17 21:45 - 001410048 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\_ssl.pyd

2019-10-01 18:32 - 2011-04-09 10:03 - 000208384 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\atk.pyd

2019-10-01 18:32 - 2010-11-02 21:35 - 000069632 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\cairo._cairo.pyd

2019-10-01 18:32 - 2012-02-09 00:50 - 000538324 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\freetype6.dll

2019-10-01 18:32 - 2011-04-09 09:59 - 000263168 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\gio._gio.pyd

2019-10-01 18:32 - 2011-04-09 09:59 - 000058368 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\glib._glib.pyd

2019-10-01 18:32 - 2011-04-09 09:59 - 000113152 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\gobject._gobject.pyd

2019-10-01 18:32 - 2011-04-09 10:02 - 001882624 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\gtk._gtk.pyd

2019-10-01 18:32 - 2010-11-02 15:26 - 000115200 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\gtksourceview2.pyd

2019-10-01 18:32 - 2012-02-09 00:50 - 001294335 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libcairo-2.dll

2019-10-01 18:32 - 2012-07-19 23:16 - 001213961 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libdbus-1-3.dll

2019-10-01 18:32 - 2012-07-19 23:42 - 000617232 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libdbus-glib-1-2.dll

2019-10-01 18:32 - 2010-12-14 23:46 - 000154514 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libenchant-1.dll

2019-10-01 18:32 - 2012-02-09 00:50 - 000143096 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libexpat-1.dll

2019-10-01 18:32 - 2012-02-09 00:50 - 000279059 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libfontconfig-1.dll

2019-10-01 18:32 - 2012-02-09 00:50 - 001808660 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgtksourceview-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000230529 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libpng14-14.dll

2019-10-01 18:32 - 2010-04-07 02:14 - 001225225 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libxml2-2.dll

2019-10-01 18:32 - 2011-04-09 10:03 - 000111616 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\pango.pyd

2019-10-01 18:32 - 2011-04-09 10:03 - 000017920 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\pangocairo.pyd

2019-10-01 18:32 - 2016-12-17 21:44 - 000136704 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\pyexpat.pyd

2019-10-01 18:32 - 2016-12-17 21:45 - 000551424 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\sqlite3.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000100352 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\zlib1.dll

2019-10-01 18:32 - 2010-12-14 23:46 - 000449832 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\lib\enchant\libenchant_ispell.dll

2019-10-01 18:32 - 2010-12-14 23:46 - 000937047 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\lib\enchant\libenchant_myspell.dll

2019-10-01 18:32 - 2012-02-08 21:37 - 000100255 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\lib\gtk-2.0\2.10.0\engines\libwimp.dll

2017-12-22 06:45 - 2017-12-22 06:45 - 000277538 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\LIBMAGIC.dll

2018-12-26 11:37 - 2012-06-14 17:18 - 000359936 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMN6PPM.DLL

2019-10-01 18:32 - 2012-02-09 00:50 - 000152489 _____ (Free Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\intl.dll

2020-03-09 18:52 - 2019-01-30 21:59 - 000436224 _____ (FreeDownloadManager.org) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\common.dll

1999-01-12 21:19 - 1999-01-12 21:19 - 000156160 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\speech\vcmshl.dll

2014-11-04 09:51 - 2014-11-04 09:51 - 002799344 _____ (Polar Engineering and Consulting) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\SAS7_000.DLL

2014-11-04 09:51 - 2014-11-04 09:51 - 000486816 _____ (Polar Engineering and Consulting) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\sas7_ctl.ocx

2019-10-01 18:32 - 2016-12-17 21:43 - 002639872 _____ (Python Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\PYTHON27.DLL

2019-10-01 18:32 - 2012-02-09 00:51 - 000333729 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libpango-1.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000104729 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libpangocairo-1.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000815421 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libpangoft2-1.0-0.dll

2019-10-01 18:32 - 2011-11-17 14:53 - 000108945 _____ (Red Hat Software) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libpangowin32-1.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:50 - 000163476 _____ (Sun Microsystems Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libatk-1.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 001222182 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgio-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 001242929 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libglib-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000036986 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgmodule-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000341594 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgobject-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:51 - 000044287 _____ (The GLib developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgthread-2.0-0.dll

2019-10-01 18:32 - 2012-02-09 00:50 - 000285194 _____ (The GTK developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgdk_pixbuf-2.0-0.dll

2019-10-01 18:32 - 2012-02-08 21:25 - 000932373 _____ (The GTK developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgdk-win32-2.0-0.dll

2019-10-01 18:32 - 2012-02-08 21:35 - 004939820 _____ (The GTK developer community) [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\libgtk-win32-2.0-0.dll

2020-03-10 11:20 - 2019-01-30 22:01 - 005938176 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\Qt5Core.dll

2020-03-10 11:20 - 2018-05-15 06:35 - 006345216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\Qt5Gui.dll

2020-03-10 11:20 - 2018-05-15 06:35 - 001256960 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\Qt5Network.dll

2020-03-10 11:20 - 2018-05-15 06:33 - 000207360 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\Qt5Sql.dll

2020-03-10 11:20 - 2018-05-15 06:38 - 005515264 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\Qt5Widgets.dll

2020-03-10 11:20 - 2018-05-15 06:39 - 001121280 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\sqldrivers\qsqlite.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8 [510]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)

BHO: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\dgnriaie_x64.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.)

BHO-x32: Dragon Web Extension For Internet Explorer -> {609C0837-8DD3-4F9B-AAC5-446F36BC0353} -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnriaie.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\ssv.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: Free Download Manager -> {CC59E0F9-7E43-44FA-9FAA-8377850BF205} -> C:\Program Files (x86)\Free Download Manager\iefdm2.dll [2018-11-14] (FreeDownloadManager.ORG) [Datei ist nicht signiert]

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\jp2ssv.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)

Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)

Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)

Toolbar: HKU\S-1-5-21-779246859-3990032973-3551585165-1001 -> Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-07-04] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2015-07-10 18:04 - 2022-07-05 07:19 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       localhost
 

2019-05-05 21:06 - 2021-10-23 23:42 - 000000436 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\VMware\VMware Workstation\bin\;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Common Files\Acronis\SnapAPI\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile\;C:\Program Files (x86)\Common Files\Acronis\VirtualFile64\;C:\Program Files (x86)\Common Files\Acronis\FileProtector\;C:\Program Files (x86)\Common Files\Acronis\FileProtector64\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Calibre2\;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files (x86)\synedra\ViewPersonal

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\wrt\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\irfanview_wallpaper.png

HKU\S-1-5-21-779246859-3990032973-3551585165-500\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

DNS Servers: 192.168.0.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)

 ist aktiviert.
 

Network Binding:

=============

VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 

LAN-Verbindung: VMware Bridge Protocol -> vmware_bridge (enabled) 

Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) 

Bluetooth-Netzwerkverbindung: VMware Bridge Protocol -> vmware_bridge (enabled) 

WLAN: VMware Bridge Protocol -> vmware_bridge (enabled) 

VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\StartupFolder: => "MaxLauncher.lnk"

HKLM\...\StartupApproved\Run: => "Acronis Scheduler2 Service"

HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad"

HKLM\...\StartupApproved\Run32: => "TrueImageMonitor.exe"

HKLM\...\StartupApproved\Run32: => "AcronisTibMounterMonitor"

HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX"

HKLM\...\StartupApproved\Run32: => "ISUSPM"

HKLM\...\StartupApproved\Run32: => "DNS7reminder"

HKLM\...\StartupApproved\Run32: => "Dropbox"

HKLM\...\StartupApproved\Run32: => "IJNetworkScannerSelectorEX2"

HKLM\...\StartupApproved\Run32: => "AllShareAgent"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "MadAppLauncher.lnk"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "ZenMate.bat"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "MindMasterV2.exe"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "IntentionActivator.exe - Verknüpfung.lnk"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\StartupFolder: => "Dragon NaturallySpeaking.lnk"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\Run: => "ISUSPM"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\Run: => "Skype for Desktop"

HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\StartupApproved\Run: => "GarminExpress"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{99676B27-4AAB-4EB7-B423-0B663B3E2678}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{C1B8460B-60CE-446F-83B3-09E81477A9BF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{E2C36831-C448-4F33-8DAC-CDAA63EBBA30}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{5D36D20E-E173-4B66-9E62-DF6980411749}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{4B454696-C4A8-426A-AE41-FFBB52CA5B7F}] => (Allow) LPort=51001

FirewallRules: [TCP Query User{BE634D55-0B89-49EE-8105-AB14088D0979}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [UDP Query User{679AD103-ED3E-4FA5-B96A-17BDC770EA45}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{BD6BDF2A-5A62-49D0-8629-155EC78034A7}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{4EF86B53-E7D7-47F6-8EF6-7D0B8EF1D524}] => (Block) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
 

==================== Wiederherstellungspunkte =========================
 
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (07/06/2022 07:55:06 AM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Das Programm FRST64.exe Version 4.7.2022.0 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 5988
 

Startzeit: 01d890025a6bdd56
 

Beendigungszeit: 5
 

Anwendungspfad: C:\Users\wrt\Downloads\FRST64.exe
 

Bericht-ID: b54ffc5b-d027-4846-93d3-4a2720fbbdac
 

Vollständiger Name des fehlerhaften Pakets: 
 

Relative Anwendungs-ID des fehlerhaften Pakets: 
 

Absturztyp: Unknown
 

Error: (07/05/2022 08:16:02 PM) (Source: DNS logging) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (07/05/2022 04:27:44 PM) (Source: DNS logging) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (07/05/2022 07:04:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: RYZEN)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NET CLR Data" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (07/05/2022 07:04:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: RYZEN)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NET CLR Networking" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (07/05/2022 07:04:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: RYZEN)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NET Data Provider for Oracle" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (07/05/2022 07:04:05 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: RYZEN)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NET Data Provider for SqlServer" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (07/05/2022 07:04:04 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3009) (User: RYZEN)

Description: Die Zeichenfolgen der Leistungsindikatoren für Dienst ".NETFramework" () konnten nicht installiert werden. Der Fehlercode ist das erste DWORD im Datenbereich.
 
 

Systemfehler:

=============

Error: (07/06/2022 07:57:02 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:58 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:54 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:50 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:46 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:42 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:38 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 

Error: (07/06/2022 07:56:34 AM) (Source: disk) (EventID: 7) (User: )

Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.
 
 

Windows Defender:

================

Date: 2022-07-01 06:34:27

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {F31327EA-7973-46EE-80BA-29EE323B8D42}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2022-06-30 06:39:21

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {CB7CADA5-D73C-4CBF-A77D-4B092E4B4436}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2022-06-29 07:04:38

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {19B1A66A-C64A-4261-ABDC-9268C2582C23}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2022-06-27 15:47:43

Description: 

C:\Windows\System32\RuntimeBroker.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\Favorites zu ändern.

Erkennungszeit: 2022-06-27T08:47:43.633Z

Benutzer: RYZEN\wrt

Pfad: %userprofile%\Favorites

Prozessname: C:\Windows\System32\RuntimeBroker.exe

Sicherheitsversion: 1.369.304.0

Modulversion: 1.1.19300.2

Produktversion: 4.18.2205.7
 

Date: 2022-06-27 07:15:22

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {C1A84876-00E4-4992-821A-B5E5A146424E}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM



CodeIntegrity:

===============

Date: 2022-07-06 07:50:16

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. R01-A3 10/25/2017

Hauptplatine: Acer Aspire GX-281

Prozessor: AMD Ryzen 7 1700 Eight-Core Processor 

Prozentuale Nutzung des RAM: 48%

Installierter physikalischer RAM: 16314.88 MB

Verfügbarer physikalischer RAM: 8459.84 MB

Summe virtueller Speicher: 22202.88 MB

Verfügbarer virtueller Speicher: 10312 MB
 

==================== Laufwerke ================================
 

Drive c: (treesize) (Fixed) (Total:317.12 GB) (Free:99.2 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS

Drive d: (Volume) (Fixed) (Total:612.86 GB) (Free:50.66 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS

Drive f: (Seagate Backup Plus Drive) (Fixed) (Total:3726.02 GB) (Free:2036.55 GB) (Model: Seagate Backup+  Desk SCSI Disk Device) NTFS

Drive g: () (Fixed) (Total:0 GB) (Free:0 GB) (Model: WD My Passport 25E1 USB Device) 

Drive h: (Backup Plus) (Fixed) (Total:3725.75 GB) (Free:1606.93 GB) (Model: Seagate BUP Portable SCSI Disk Device) exFAT

Drive i: (System-reserviert) (Fixed) (Total:0.49 GB) (Free:0.39 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

Drive j: (USB HD rot) (Fixed) (Total:1862.86 GB) (Free:409.85 GB) (Model: WD My Passport 25E2 USB Device) NTFS

Drive m: () (Fixed) (Total:0 GB) (Free:0 GB) (Model: WDC WD10EZEX-21WN4A0) 

Drive n: () (Fixed) (Total:0 GB) (Free:0 GB) (Model: WDC WD10EZEX-21WN4A0) 

Drive x: () (Fixed) (Total:1862.98 GB) (Free:48.06 GB) NTFS

Drive y: () (Fixed) (Total:160 GB) (Free:13.54 GB) (Model: WDC WD10EZEX-21WN4A0) NTFS
 

\\?\Volume{2b434e5a-ef35-469b-96f5-adc30ba7be98}\ (EFI) (Fixed) (Total:0.19 GB) (Free:0.19 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 90C151F2)

Partition 1: (Not Active) - (Size=600 MB) - (Type=42)

Partition 2: (Active) - (Size=500 MB) - (Type=42)

Partition 3: (Not Active) - (Size=317.1 GB) - (Type=42)

Partition 4: (Not Active) - (Size=613.3 GB) - (Type=42)
 

==========================================================

Disk: 2 (Size: 1863 GB) (Disk ID: 16F2A91F)
 

Partition: GPT.
 

==========================================================

Disk: 3 (Protective MBR) (Size: 3726 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 4 (MBR Code: Windows 7/8/10) (Size: 1863 GB) (Disk ID: C865BF2D)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 5.
 

==================== Ende von Addition.txt =======================