Evtl. Trojan.GenericKD.

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-04-2020
durchgeführt von Andre (06-04-2020 00:15:51)
Gestartet von C:\Users\Andre\Desktop
Windows 10 Home Version 1903 18362.720 (X64) (2019-12-23 20:26:19)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1947122267-951576711-1214051735-500 - Administrator - Disabled)
Andre (S-1-5-21-1947122267-951576711-1214051735-1001 - Administrator - Enabled) => C:\Users\Andre
astec (S-1-5-21-1947122267-951576711-1214051735-1017 - Limited - Disabled)
DefaultAccount (S-1-5-21-1947122267-951576711-1214051735-503 - Limited - Disabled)
Gast (S-1-5-21-1947122267-951576711-1214051735-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1947122267-951576711-1214051735-1002 - Limited - Enabled)
WDAGUtilityAccount (S-1-5-21-1947122267-951576711-1214051735-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avast Antivirus (Enabled - Up to date) {8EA8924E-BC81-DC44-8BB0-8BAE75D86EBF}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Avast Antivirus (Enabled - Up to date) {EB19B86E-3998-C706-90EF-92B41EB091AF}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avast Antivirus (Enabled - Up to date) {35C973AA-9ABB-D3CA-B100-B0DC0E5F2402}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (x64) (HKLM\...\7-Zip) (Version: 15.14 - Igor Pavlov)
A360 Desktop (HKLM\...\{B209E611-5511-4AD6-B4B3-9D36F93DBCD4}) (Version: 6.0.3.1100 - Autodesk)
ACA & MEP 2016 Object Enabler (HKLM\...\{5783F2D7-F004-0000-5102-0060B0CE6BBA}) (Version: 7.8.41.0 - Autodesk) Hidden
ACAD Private (HKLM\...\{5783F2D7-F001-0000-3102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.006.20042 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.344 - Adobe)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.344 - Adobe)
Apple Application Support (32-Bit) (HKLM-x32\...\{A7039CC9-4669-4799-92B1-C5CE346DBE3D}) (Version: 8.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{DA78A9DC-3599-4D81-A960-B679687A6C14}) (Version: 8.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{7D606B87-0AEB-4C27-ABCE-1138EE09777B}) (Version: 13.0.0.41 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A3985C05-7386-411F-A4BF-32A73F37EB44}) (Version: 2.6.3.1 - Apple Inc.)
AutoCAD 2016 - Deutsch (German) (HKLM\...\{5783F2D7-F001-0407-2102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 (HKLM\...\{5783F2D7-F001-0000-0102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD 2016 Language Pack - Deutsch (German) (HKLM\...\{5783F2D7-F001-0407-1102-0060B0CE6BBA}) (Version: 20.1.49.0 - Autodesk) Hidden
AutoCAD LT 2018 - Deutsch (German) (HKLM\...\{28B89EEF-1009-0000-0102-CF3F3A09B77D}) (Version: 22.0.49.0 - Autodesk) Hidden
AutoCAD LT 2018 - Deutsch (German) (HKLM\...\{28B89EEF-1009-0407-2102-CF3F3A09B77D}) (Version: 22.0.49.0 - Autodesk) Hidden
AutoCAD LT 2018 Language Pack - Deutsch (German) (HKLM\...\{28B89EEF-1009-0407-1102-CF3F3A09B77D}) (Version: 22.0.49.0 - Autodesk) Hidden
Autodesk Advanced Material Library Image Library 2016 (HKLM-x32\...\{94AD53E7-493B-4291-8714-7A3B761D2783}) (Version: 6.3.0.15 - Autodesk)
Autodesk App Manager 2016 (HKLM-x32\...\{4ECF9E00-2978-46AF-BD80-455EFEAB7A93}) (Version: 2.0.0 - Autodesk)
Autodesk AutoCAD 2016 - Deutsch (German) (HKLM\...\AutoCAD 2016 - Deutsch (German)) (Version: 20.1.49.0 - Autodesk)
Autodesk AutoCAD Performance Feedback Tool 1.2.4 (HKLM-x32\...\{4E20873D-BC20-495C-AFD9-B18877B7F9BB}) (Version: 1.2.4.0 - Autodesk)
Autodesk BIM 360 Glue AutoCAD 2016 Add-in 64 bit (HKLM\...\{4BEE127E-95C4-434D-ABAC-65155192BB24}) (Version: 4.35.1742 - Autodesk)
Autodesk Content Service (HKLM\...\{A37CDB58-AAE8-0000-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk Content Service (HKLM\...\Autodesk Content Service) (Version: 3.2.0.0 - Autodesk)
Autodesk Content Service Language Pack (HKLM\...\{A37CDB58-AAE8-0001-8C13-E0F7BACB0D5F}) (Version: 3.2.0.0 - Autodesk) Hidden
Autodesk License Service (x64) - 5.1.4 (HKLM\...\{3609A8D9-FC0C-4C9B-9F58-0B1D1A4FE556}) (Version: 5.1.4.0 - Autodesk)
Autodesk Material Library 2016 (HKLM-x32\...\{29A7D6EC-63C2-42FD-8143-5812ABD2923F}) (Version: 6.3.0.15 - Autodesk)
Autodesk Material Library Base Resolution Image Library 2016 (HKLM-x32\...\{6B4CFC6E-ECB0-47FE-95D3-65C680ED0687}) (Version: 6.3.0.15 - Autodesk)
Autodesk ReCap 2016 (HKLM\...\{F6FD1651-0000-1033-0102-387BAF9B3B0A}) (Version: 1.5.0.33 - Autodesk) Hidden
Autodesk ReCap 2016 (HKLM\...\Autodesk ReCap 2016) (Version: 1.5.0.33 - Autodesk)
Avast Free Antivirus (HKLM-x32\...\Avast Antivirus) (Version: 20.1.2397 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BlasterX Acoustic Engine Pro (HKLM-x32\...\{18B69B8B-F2BF-45B6-844A-673E90436F9F}) (Version: 1.01.15 - Creative Technology Limited)
BlasterX Acoustic Engine Pro Extras (HKLM-x32\...\{181E01EF-AF4A-458D-A28C-2CB32CFF9A7F}) (Version: 1.0 - Creative Technology Limited)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.60 - Piriform)
Cheat Engine 7.0 (HKLM\...\Cheat Engine 7.0_is1) (Version:  - Cheat Engine)
Creative ASIO (USB) (HKLM-x32\...\Creative_ASIO(USB)) (Version: 1.02 - Creative Technology Limited)
Creative Systeminformationen (HKLM-x32\...\SysInfo) (Version: 1.10 - Creative Technology Limited)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Decacopy clipboard manager (HKLM-x32\...\{ADE8A368-4911-40CB-9289-1E3A6CDD7D73}) (Version: 1.0.1 - Gomberto Muraca)
DisplayDriverAnalyzer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_DisplayDriverAnalyzer) (Version: 391.01 - NVIDIA Corporation) Hidden
Epic Games Launcher (HKLM-x32\...\{70843FAC-DA36-49CD-A9A1-6CB1665C9346}) (Version: 1.1.143.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galería de fotos (HKLM-x32\...\{198CEF22-A27F-4DC7-9B66-2C22A4B1CA09}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Galerie de photos (HKLM-x32\...\{439B34FF-F74E-4807-B5E2-4B758551DA6B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.1868.1 - Rockstar Games)
iCloud (HKLM\...\{359CA9EA-898C-4F5C-80D9-C111F27B489E}) (Version: 7.17.0.13 - Apple Inc.)
iTunes (HKLM\...\{C491CA9A-814E-4113-9F70-CC8A039D87B9}) (Version: 12.10.4.2 - Apple Inc.)
Java 8 Update 151 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180151F0}) (Version: 8.0.1510.12 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{0BE9E708-5DC0-4963-9CFD-0AA519090E79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\{517CC397-B22F-4593-8DCB-DE72CC541E9A}) (Version: 3.0.1 - Riot Games ) Hidden
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
Lightshot-5.4.0.10 (HKLM-x32\...\{30A5B3C9-2084-4063-A32A-628A98DE512B}_is1) (Version: 5.4.0.10 - Skillbrains)
Logitech Gaming Software 5.10 (HKLM\...\{1444D2EE-C7AD-44A8-844F-2634B49353D1}) (Version: 5.10.127 - Logitech)
Logitech Gaming Software 8.85 (HKLM\...\Logitech Gaming Software) (Version: 8.85.215 - Logitech Inc.)
MediathekView 13.5.1 (HKLM\...\1927-5045-2127-3394) (Version: 13.5.1 - MediathekView Team)
Metric Collection SDK 35 (HKLM-x32\...\{C2B5B5B0-2545-4E94-B4BA-548D4BF0B196}) (Version: 1.2.0006.00 - Lenovo Group Limited) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\Microsoft .NET Framework 1.1  (1033)) (Version:  - )
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual Basic PowerPacks 10.0 (HKLM-x32\...\{2D9F8079-7D50-3EFD-B3BD-ED642E4EE756}) (Version: 10.0.20911 - Microsoft)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}) (Version: 11.0.61030.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.22.27821 (HKLM-x32\...\{6361b579-2795-4886-b2a8-53d5239b6452}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.22.27821 (HKLM-x32\...\{5bfc1380-fd35-4b85-9715-7351535d077e}) (Version: 14.22.27821.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{21764A96-6748-4B83-89E7-7A5063BF156C}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{312F7EE7-37D0-484D-B974-0CE1B8560C79}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{38F03569-A636-4CF3-BDDE-032C8C251304}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{9C82436F-F19C-42A4-B476-F87A28A95BF9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0 - Mozilla)
Mozilla Thunderbird 38.3.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 38.3.0 (x86 de)) (Version: 38.3.0 - Mozilla)
Mozilla Thunderbird 68.6.0 (x86 de) (HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\Mozilla Thunderbird 68.6.0 (x86 de)) (Version: 68.6.0 - Mozilla)
MSXML 4.0 SP2 Parser und SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2758694) (HKLM-x32\...\{1D95BA90-F4F8-47EC-A882-441C99D30C1E}) (Version: 4.30.2117.0 - Microsoft Corporation)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 390.41 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 390.41 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.12.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.12.0.84 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Opera Stable 67.0.3575.115 (HKLM-x32\...\Opera 67.0.3575.115) (Version: 67.0.3575.115 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.57.35162 - Electronic Arts, Inc.)
Raccolta foto (HKLM-x32\...\{86A1CEAD-EF47-47BB-AE79-DA8C09E15382}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 8.19.726.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7841 - Realtek Semiconductor Corp.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.19.234 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.5.2 - Rockstar Games)
Save Wizard for PS4 MAX  (HKLM-x32\...\{5DF30E22-0D6B-4E56-B777-2E4B1178BC4F}) (Version: 1.1.0.0 - DataPower)
SketchUp-Import 2016 (HKLM-x32\...\{C769FB7C-1F55-4B31-9A2A-21CEC50F4F92}) (Version: 2.0.0 - Autodesk)
Spotify (HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\Spotify) (Version: 1.1.29.592.gf0779179 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TeamSpeak 3 Client (HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\TeamSpeak 3 Client) (Version: 3.3.0 - TeamSpeak Systems GmbH)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation)
UpdateAssistant (HKLM\...\{F339C545-24DC-4870-AA32-6EB6B0500B95}) (Version: 1.24.0.0 - Microsoft Corporation) Hidden
Uplay (HKLM-x32\...\Uplay) (Version: 73.0 - Ubisoft)
Verfügbare Autodesk-Apps 2016 (HKLM-x32\...\{D42F37CD-9AF9-4435-A474-B387C5BB6B47}) (Version: 2.0.0 - Autodesk)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.8 - VideoLAN)
WeMod (HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\WeMod) (Version: 6.3.4 - WeMod)
WhatsApp (HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\WhatsApp) (Version: 0.4.2088 - WhatsApp)
Windows 10-Update-Assistent (HKLM-x32\...\{D5C69738-B486-402E-85AC-2456D98A64E4}) (Version: 1.4.9200.22899 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.70 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.70.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

Packages:
=========
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
ROBLOX -> C:\Program Files\WindowsApps\ROBLOXCORPORATION.ROBLOX_2.426.4122.0_x86__55nm5eh3cm0pr [2020-04-04] (ROBLOX Corporation)
WindowsDVDPlayer -> C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe [2015-12-11] (Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{0B628DE4-07AD-4284-81CA-5B439F67C5E6}\localserver32 -> D:\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{149DD748-EA85-45A6-93C5-AC50D0260C98}\localserver32 -> D:\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\Andre\AppData\Local\Microsoft\OneDrive\19.232.1124.0005\amd64\FileSyncShell64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{5370C727-1451-4700-A960-77630950AF6D}\localserver32 -> D:\Autodesk\AutoCAD 2016\acad.exe (Autodesk, Inc -> Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\Andre\AppData\Local\Microsoft\OneDrive\19.232.1124.0005\amd64\FileSyncShell64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\Andre\AppData\Local\Microsoft\OneDrive\19.232.1124.0005\amd64\FileSyncShell64.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{9CF1512B-6019-4573-9466-57AA61960209}\InprocServer32 -> C:\Users\Andre\AppData\Local\Microsoft\Windows Sidebar\Gadgets\nvidia20.gadget\NvApiReader.dll (Orbmu2k) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1947122267-951576711-1214051735-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> D:\Autodesk\AutoCAD 2016\de-DE\acadficn.dll (Autodesk Development Sarl -> Autodesk, Inc.)
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShell.dll [2020-02-25] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShell.dll [2020-02-25] (Avast Software s.r.o. -> AVAST Software)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2017-02-03] (Autodesk, Inc -> Autodesk, Inc.)
ShellIconOverlayIdentifiers-x32: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Programme\7-ZIP\7-zip.dll [2015-12-31] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2017-02-03] (Autodesk, Inc -> Autodesk)
ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShell.dll [2020-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2020-01-22] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Programme\Win RaR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Programme\Win RaR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShell.dll [2020-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Programme\7-ZIP\7-zip.dll [2015-12-31] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-10-03] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\Programme\7-ZIP\7-zip.dll [2015-12-31] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\Avast\ashShell.dll [2020-02-25] (Avast Software s.r.o. -> AVAST Software)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Programme\Win RaR\rarext.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Programme\Win RaR\rarext32.dll [2019-02-24] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
Shortcut: C:\Users\Andre\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DataPower\Save Wizard for PS4 MAX\Manual - Save Wizard for PS4 MAX.lnk -> hxxp://www.savewizard.net/manuals/swps4m

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2017-10-30 13:49 - 2020-04-03 22:32 - 000027648 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AXSP\1.01.02\PEbiosinterface32.dll
2019-09-25 09:17 - 2019-09-25 09:17 - 001991168 _____ () [Datei ist nicht signiert] C:\Users\Andre\AppData\Roaming\Gomberto Muraca\Decacopy clipboard manager\ffmpeg.dll
2019-09-25 09:17 - 2019-09-25 09:17 - 000115712 _____ () [Datei ist nicht signiert] C:\Users\Andre\AppData\Roaming\Gomberto Muraca\Decacopy clipboard manager\libegl.dll
2019-09-25 09:17 - 2019-09-25 09:17 - 004636672 _____ () [Datei ist nicht signiert] C:\Users\Andre\AppData\Roaming\Gomberto Muraca\Decacopy clipboard manager\libglesv2.dll
2019-08-13 18:31 - 2019-08-13 18:31 - 000862720 _____ () [Datei ist nicht signiert] D:\Programme\Teamspeak\config\plugins\NextGen-Voice.dll
2019-04-09 10:21 - 2019-04-09 10:21 - 000018432 _____ () [Datei ist nicht signiert] D:\Programme\Teamspeak\libEGL.DLL
2019-04-09 10:21 - 2019-04-09 10:21 - 003572224 _____ () [Datei ist nicht signiert] D:\Programme\Teamspeak\libGLESv2.dll
2016-04-24 16:33 - 2015-12-31 16:15 - 000077312 _____ (Igor Pavlov) [Datei ist nicht signiert] D:\Programme\7-ZIP\7-zip.dll
2019-04-10 18:30 - 2019-04-10 18:30 - 000035328 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\iconengines\qsvgicon.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000031744 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\imageformats\qgif.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000397312 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\imageformats\qjpeg.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000025600 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\imageformats\qsvg.dll
2019-04-09 10:30 - 2019-04-09 10:30 - 001453568 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\platforms\qwindows.dll
2019-05-31 13:05 - 2019-05-31 13:05 - 006130176 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Core.dll
2019-04-09 10:25 - 2019-04-09 10:25 - 006470656 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Gui.dll
2019-04-09 10:24 - 2019-04-09 10:24 - 001314816 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Network.dll
2019-04-10 19:31 - 2019-04-10 19:31 - 000317440 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Positioning.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 000318464 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5PrintSupport.dll
2019-04-10 18:55 - 2019-04-10 18:55 - 004001792 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Qml.dll
2019-04-10 18:48 - 2019-04-10 18:48 - 003776000 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Quick.dll
2019-04-10 18:50 - 2019-04-10 18:50 - 000072704 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5QuickWidgets.dll
2019-04-09 10:23 - 2019-04-09 10:23 - 000205312 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Sql.dll
2019-04-10 18:29 - 2019-04-10 18:29 - 000332288 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Svg.dll
2019-04-10 19:40 - 2019-04-10 19:40 - 000113664 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5WebChannel.dll
2019-04-11 03:37 - 2019-04-11 03:37 - 079989760 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5WebEngineCore.dll
2019-04-11 03:54 - 2019-04-11 03:54 - 000228864 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5WebEngineWidgets.dll
2019-04-09 10:27 - 2019-04-09 10:27 - 005580800 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\Qt5Widgets.dll
2019-04-09 10:28 - 2019-04-09 10:28 - 001151488 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\sqldrivers\qsqlite.dll
2019-04-09 10:29 - 2019-04-09 10:29 - 000137216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] D:\Programme\Teamspeak\styles\qwindowsvistastyle.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:FB6A21E3 [226]
AlternateDataStreams: C:\Users\Andre\Desktop\AU.jpeg:3or4kl4x13tuuug3Byamue2s4b [81]
AlternateDataStreams: C:\Users\Andre\Desktop\AU.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
AlternateDataStreams: C:\Users\Andre\AppData\Local\Temp:$DATA​ [16]
AlternateDataStreams: C:\Users\Public\AppData:CSM [466]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [474]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)

HKU\S-1-5-21-1947122267-951576711-1214051735-1001\Software\Classes\.scr: AutoCADScriptFile => 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2019-01-05 19:16 - 000000825 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files\Common Files\Microsoft Shared\Windows Live;C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Andre\AppData\Local\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: AdAppMgrSvc => 2
MSCONFIG\Services: Apple Mobile Device Service => 2
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: BstHdAndroidSvc => 3
MSCONFIG\Services: BstHdLogRotatorSvc => 2
MSCONFIG\Services: BstHdPlusAndroidSvc => 3
MSCONFIG\Services: BstHdUpdaterSvc => 3
MSCONFIG\Services: CG6Service => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: FlexNet Licensing Service 64 => 3
MSCONFIG\Services: IDriverT => 3
MSCONFIG\Services: iPod Service => 3
MSCONFIG\Services: LiveUpdateSvc => 2
MSCONFIG\Services: Online Shield Starter Service => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: Origin Web Helper Service => 2
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: VMAuthdService => 2
MSCONFIG\Services: VMnetDHCP => 2
MSCONFIG\Services: VMUSBArbService => 2
MSCONFIG\Services: VMware NAT Service => 2
MSCONFIG\Services: WsAppService => 2
MSCONFIG\startupreg: BlueStacks Agent => C:\Program Files (x86)\BlueStacks\HD-Agent.exe
MSCONFIG\startupreg: CCleaner Monitoring => "C:\Program Files\CCleaner\CCleaner64.exe" /MONITOR
MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
MSCONFIG\startupreg: iTunesHelper => "D:\Programme\iTunes\iTunesHelper.exe"
MSCONFIG\startupreg: KiesTrayAgent => D:\Downloads\(CR)(SHC)\Kies\KiesTrayAgent.exe
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "D:\Downloads\(CR)(SHC)\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: ProfilerU => C:\Program Files\SmartTechnology\Software\ProfilerU.exe
MSCONFIG\startupreg: RoccatKonePure => "D:\Programme\Maus Treiber\KonePureMonitor.EXE"
MSCONFIG\startupreg: S.T.R.I.K.E.5 Service => C:\Program Files (x86)\Mad Catz\Strike5Service\Strike5.exe
MSCONFIG\startupreg: SaiMfd => C:\Program Files\SmartTechnology\Software\SaiMfd.exe
MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
MSCONFIG\startupreg: SOS_Agent => "C:\Program Files (x86)\Steganos Online Shield\OnlineShieldClient.exe" -agent
MSCONFIG\startupreg: SoundTouch Music Server => "D:\Programme\Neuer Ordner\SoundTouchMusicServer\SoundTouch music server.exe"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run: => "Start WingMan Profiler"
HKLM\...\StartupApproved\Run: => "iTunesHelper"
HKLM\...\StartupApproved\Run32: => "ISUSScheduler"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKLM\...\StartupApproved\Run32: => "RazerCortex"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "ISUSPM Startup"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "eXtra Buttons"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "Spotify Web Helper"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "BlueStacks Agent"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "XperiaCompanionAgent"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "CyberGhost"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "iCloudServices"
HKU\S-1-5-21-1947122267-951576711-1214051735-1001\...\StartupApproved\Run: => "AvastBrowserAutoLaunch_262A34B9EA56A41201DA152ACFF6B9C3"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [UDP Query User{9EB3F6BA-1EAB-4BBF-BCE2-FA7D8F5B43AB}D:\spiele\lol\game\league of legends.exe] => (Allow) D:\spiele\lol\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{F5DDA45C-638D-4B45-95A2-9E2504B44F89}D:\spiele\lol\game\league of legends.exe] => (Allow) D:\spiele\lol\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{05E21D3A-DB2C-4D48-A0BF-11F5EF6DC1C1}D:\windowsapps\spotifyab.spotifymusic_1.115.448.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) D:\windowsapps\spotifyab.spotifymusic_1.115.448.0_x86__zpdnekdrzrea0\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{92E39996-7D5E-4D40-97DF-10AECCE070F1}D:\windowsapps\spotifyab.spotifymusic_1.115.448.0_x86__zpdnekdrzrea0\spotify.exe] => (Allow) D:\windowsapps\spotifyab.spotifymusic_1.115.448.0_x86__zpdnekdrzrea0\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{6FBE880E-228B-4171-BA5C-A03332E4E3DA}D:\fortninte\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\fortninte\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [TCP Query User{EA0F0F51-ECBC-4ECF-8D3D-9E3600DFE720}D:\fortninte\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe] => (Allow) D:\fortninte\dauntless\archon\binaries\win64\dauntless-win64-shipping.exe (Phoenix Labs -> Phoenix Labs)
FirewallRules: [UDP Query User{249D3FE8-639F-4F80-88A6-44833FFEC8B0}D:\programme\teamspeak\ts3client_win64.exe] => (Allow) D:\programme\teamspeak\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [TCP Query User{53B020D8-F6D6-4019-9D47-395479C922C7}D:\programme\teamspeak\ts3client_win64.exe] => (Allow) D:\programme\teamspeak\ts3client_win64.exe (TeamSpeak Systems GmbH -> TeamSpeak Systems GmbH)
FirewallRules: [{571534EA-EB91-462A-8E33-5050089114D5}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{1F069166-B530-4D5E-A11E-83C1DC573D85}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{779399EB-9974-4400-A0D4-16092638C950}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3F0D1FB4-B07C-4AFC-9EDB-E48D6F3377B4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{0FD38576-630C-4A7D-B182-259678B1CD06}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{F673DFBB-F6BF-429E-B186-991C17CB8E69}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{DA236A0F-1E51-4910-84F2-91C0A8F8FA50}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{E683D043-C222-45E4-B9FA-644E442835E2}] => (Allow) D:\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{8A4807D2-ABC3-463A-98E1-FC784021A5C9}] => (Allow) D:\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [UDP Query User{236D6AE9-8E56-4841-B0A5-E69216ADF764}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{D170197D-FC4C-431A-8349-8B185DA4F4D7}C:\program files\logitech gaming software\lcore.exe] => (Allow) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{1A920772-6D5F-4CC2-8F4F-5B3779079B0A}C:\users\andre\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\andre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{71AB6F7E-4981-4EDF-B94E-9E81AF5B66E2}C:\users\andre\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\andre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{64797097-8A8B-4BA9-889E-ED31942E3C1B}C:\users\andre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{84AC8089-80D1-499A-BF47-B4E4AF3D1902}C:\users\andre\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\andre\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{94298098-2744-47DB-A773-8F70CCC2D705}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{459A591B-A4AA-4956-B0F8-B040D2967E79}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{526CDB0C-F7DB-4CB6-AAE0-8712CBAD1270}] => (Allow) D:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{2B9EE026-A0AB-4F86-A494-202759B81F69}] => (Allow) D:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{6CC28B62-D40B-4060-92BB-B5E59339FA2C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{11CB698D-6CA3-46C6-98B3-7EB460E40BBE}] => (Allow) LPort=2869
FirewallRules: [{1F9757A8-09E5-4AB8-A963-8B27132DCCF4}] => (Allow) LPort=1900
FirewallRules: [{64CF8A4C-1571-4C16-BEA8-F9BA0D668A3A}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D43746B9-4424-4094-8E2C-21E0EFC15B92}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Datei ist nicht signiert]
FirewallRules: [{03E061EC-F229-4FCF-B195-99BE2E6CF577}] => (Allow) C:\Windows\SysWOW64\muzapp.exe (Musiccity Co.Ltd.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6C71BCE0-1B9A-4C71-BB40-EDF7049991C6}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [UDP Query User{CCE71947-17B4-4FC8-B3D9-9060D1A5F130}C:\program files\logitech gaming software\lcore.exe] => (Block) C:\program files\logitech gaming software\lcore.exe (Logitech Inc -> Logitech Inc.)
FirewallRules: [TCP Query User{37003ED2-284A-42BB-9476-717D97CA7733}D:\fortninte\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\fortninte\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{CEBFC699-3533-4E59-8D57-915D1B396C12}D:\fortninte\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\fortninte\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{5400C0D3-0D42-49A4-A772-7333185DD925}D:\fortninte\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\fortninte\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{044F1CE9-84CA-4F87-BC41-789A3B5FCC7C}D:\fortninte\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\fortninte\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{34E4732B-FA90-4BE1-A546-6D0243985F15}D:\fortninte\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortninte\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{219BE63C-73B2-4CCA-9A44-EE9CBBE73955}D:\fortninte\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortninte\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{023B500E-0618-4947-A55D-92F6C5A1CC8D}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe
FirewallRules: [UDP Query User{0638E4A6-9E25-451F-BACC-BAA876D38D64}C:\program files\java\jre1.8.0_151\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_151\bin\javaw.exe
FirewallRules: [{47270C5D-8BBB-4D0E-8D53-8340BCA416C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D85E5E60-2786-4591-80A6-821289E227F1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A427C06F-D22B-4244-8C6C-B2454E1018BB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F85AA121-F90E-433D-8483-2C9B71AEBFF3}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{67E51659-1331-4A96-845E-1DE917616E0D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0B28E5A1-A723-49B1-B74A-E0AB1F24DC93}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{77F1206F-3802-426E-9070-06EE29428404}] => (Allow) LPort=50248
FirewallRules: [{37750054-3064-46B7-85A6-9F6F403FCE24}] => (Allow) D:\Programme\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
FirewallRules: [{6C5ED981-DF4E-4ADD-8C22-A8B81080BD73}] => (Allow) D:\Programme\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe (Valve -> )
FirewallRules: [{5FD6BE40-79A0-4D5C-8A49-022CEB16C702}] => (Allow) D:\Programme\Steam\SteamApps\common\BloonsTD6\BloonsTD6.exe () [Datei ist nicht signiert]
FirewallRules: [{D9F3394F-93E4-49E9-857D-587A5B6F7968}] => (Allow) D:\Programme\Steam\SteamApps\common\BloonsTD6\BloonsTD6.exe () [Datei ist nicht signiert]
FirewallRules: [{43116F87-7308-4209-8833-ED69CC65C24B}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{10127CDC-A54D-4E62-AA8D-C6A0B677E3C8}] => (Allow) D:\Programme\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [{2B233D7F-5151-4E43-AEA0-D210D5CE2B90}] => (Allow) D:\Programme\Steam\SteamApps\common\PUBG\TslGame\Binaries\Win64\ExecPubg.exe (Bluehole, Inc. -> PUBG Corporation )
FirewallRules: [TCP Query User{EA3EA278-95CE-4155-82DA-B2037BB33854}D:\battlenet\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\battlenet\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [UDP Query User{E9E7A4D9-55E1-4DDF-BFFF-13997D7B6B01}D:\battlenet\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\battlenet\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{5D1CA78B-286A-4270-9590-BC8BDC436D15}] => (Allow) D:\Programme\Steam\SteamApps\common\Idle Racing GO\Idle Racing GO.exe () [Datei ist nicht signiert]
FirewallRules: [{668DC4BE-8343-4E5C-BB9C-BBD31B8454B1}] => (Allow) D:\Programme\Steam\SteamApps\common\Idle Racing GO\Idle Racing GO.exe () [Datei ist nicht signiert]
FirewallRules: [{94B501FF-2A0E-49D1-871D-75C52801E88D}] => (Allow) D:\Programme\Steam\SteamApps\common\Wolcen\win_x64\Wolcen.exe (Wolcen Studio) [Datei ist nicht signiert]
FirewallRules: [{152F7A66-8A52-4BB7-9E5A-60620ABE6D65}] => (Allow) D:\Programme\Steam\SteamApps\common\Wolcen\win_x64\Wolcen.exe (Wolcen Studio) [Datei ist nicht signiert]
FirewallRules: [{5FCC1C73-6307-43EC-BEE2-C7159CCC9CE4}] => (Allow) D:\Programme\Steam\SteamApps\common\Thief Simulator\thief.exe () [Datei ist nicht signiert]
FirewallRules: [{322586B7-231F-4E8C-BAD2-A607DC6BE7E1}] => (Allow) D:\Programme\Steam\SteamApps\common\Thief Simulator\thief.exe () [Datei ist nicht signiert]
FirewallRules: [{0F3185E8-9AA9-4F2E-B501-128318C4CA37}] => (Allow) C:\Program Files (x86)\Opera\67.0.3575.97\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{18279C2A-A532-4A5F-AE1C-A2A387E01CD4}] => (Allow) D:\Programme\Steam\SteamApps\common\Car Mechanic Simulator 2018\cms2018.exe () [Datei ist nicht signiert]
FirewallRules: [{DAACF16D-F495-4905-BEF3-9304AC5F4E50}] => (Allow) D:\Programme\Steam\SteamApps\common\Car Mechanic Simulator 2018\cms2018.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{CBC03038-9202-452E-92F5-CFD9F19A7343}D:\gta\grand theft auto v\gta5.exe] => (Allow) D:\gta\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [UDP Query User{65A6C1C4-04F0-4ABF-9592-063EB5CE31F3}D:\gta\grand theft auto v\gta5.exe] => (Allow) D:\gta\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{F3D7E973-D152-4184-B1AC-55FC5FECDE61}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]
FirewallRules: [{CC3065B3-D1AE-460C-A579-1DCCDCFCF517}] => (Allow) D:\Programme\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]
FirewallRules: [{84D06C8E-8AFB-4F84-BB15-53BDC6AD285F}] => (Allow) D:\Programme\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{0334EA77-682C-4BC9-A600-3D84D64464AA}] => (Allow) D:\Programme\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{77A82936-37B5-48A0-9C2F-08C1B366C3DE}] => (Allow) C:\Program Files (x86)\Opera\67.0.3575.115\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [{20A56169-D20E-46F4-A670-D7722809BB97}] => (Allow) D:\Programme\Steam\SteamApps\common\Destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [{B34788DE-AA76-4AF2-9377-5D889E1C5B9D}] => (Allow) D:\Programme\Steam\SteamApps\common\Destiny 2\destiny2.exe (Bungie Inc. -> Bungie)

==================== Wiederherstellungspunkte =========================

ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:99.54 GB) (Free:21.06 GB) (21%)

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/05/2020 01:20:49 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (04/05/2020 01:20:49 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1020) (User: NT-AUTORITÄT)
Description: Die erforderliche Puffergröße ist größer als die an die Collect-Funktion der DLL für erweiterbare Leistungsindikatoren "C:\Windows\System32\perfts.dll" für den Dienst "LSM" übergebene Größe. Die Puffergröße war 16504, und die erforderliche Größe betrug 32120.

Error: (04/04/2020 02:21:34 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (12760,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/04/2020 01:47:08 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (13800,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/04/2020 01:21:34 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (3188,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/03/2020 10:52:55 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (12832,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/03/2020 10:43:58 PM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4244,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\system32\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.

Error: (04/03/2020 10:39:08 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).


Systemfehler:
=============
Error: (04/03/2020 10:33:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/03/2020 10:32:46 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Autodesk Content Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/03/2020 10:32:46 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst Autodesk Content Service erreicht.

Error: (04/03/2020 10:32:42 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎03.‎04.‎2020 um 16:06:20 unerwartet heruntergefahren.

Error: (04/03/2020 10:32:34 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225684Bei der Verarbeitung der Wiederherstellungsdaten ist ein schwerwiegender Fehler aufgetreten.

Error: (04/03/2020 02:06:36 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (04/03/2020 02:06:23 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Autodesk Content Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (04/03/2020 02:06:23 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst Autodesk Content Service erreicht.


CodeIntegrity:
===================================

Date: 2020-04-05 13:20:59.205
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-05 13:20:59.179
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-05 13:20:59.152
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-05 13:20:59.128
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-05 13:20:59.099
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-03 22:34:51.887
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-03 22:34:51.862
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2020-04-03 22:34:51.832
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Programme\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 0603 05/15/2014
Hauptplatine: ASUSTeK COMPUTER INC. H81M-D PLUS
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 38%
Installierter physikalischer RAM: 16320.1 MB
Verfügbarer physikalischer RAM: 9967.22 MB
Summe virtueller Speicher: 32704.1 MB
Verfügbarer virtueller Speicher: 24003.44 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:99.54 GB) (Free:21.06 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.51 GB) (Free:137.95 GB) NTFS

\\?\Volume{ba869956-4f0a-11e4-8912-806e6f6e6963}\ (System) (Fixed) (Total:0.34 GB) (Free:0.3 GB) NTFS
\\?\Volume{10c9e164-0000-0000-0000-b0f818000000}\ () (Fixed) (Total:0.87 GB) (Free:0.4 GB) NTFS
\\?\Volume{ba869958-4f0a-11e4-8912-806e6f6e6963}\ (Recovery) (Fixed) (Total:11.04 GB) (Free:1.61 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 111.8 GB) (Disk ID: 10C9E164)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=99.5 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=889 MB) - (Type=27)
Partition 4: (Not Active) - (Size=11 GB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: A6763F7F)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================