![]() |
|
Alles rund um Windows: Win10 Pro Performanceprobleme und Driver_Power_State_FailureWindows 7 Hilfe zu allen Windows-Betriebssystemen: Windows XP, Windows Vista, Windows 7, Windows 8(.1) und Windows 10 / Windows 11- als auch zu sämtlicher Windows-Software. Alles zu Windows 10 ist auch gerne willkommen. Bitte benenne etwaige Fehler oder Bluescreens unter Windows mit dem Wortlaut der Fehlermeldung und Fehlercode. Erste Schritte für Hilfe unter Windows. |
|
![]() | #1 |
![]() ![]() | ![]() Problem: Win10 Pro Performanceprobleme und Driver_Power_State_Failure Hallo zusammen! Ich hoffe, ich bin hier richtig: Seit einigen Wochen habe ich das Problem, dass mein selbstgebauter Tower PC mit Win10 Pro heftige Ruckler hat. Ich fahre den Tower hoch und merke schon an der Mausbewegung, dass der Rechner nicht flüssig läuft. Wenn ich dann herunterfahre, dauert das ganze ewig, ohne dass der Rechner abschaltet und ich erhalte schließlich verschiedene Variationen des Driver_Power_State_Failure Fehlers nachdem er abgestürzt ist: ![]() Ich habe schon alle möglichen Windows Updates gemacht und alle Gerätetreiber sollten auch aktuell sein. Nur ein nicht identifiziertes Gerät ist in der Liste, kann aber auch nicht rausfinden, was das sein soll. Manchmal macht der 1 Jahr alte Tower keine Zicken aber oft läuft er nicht gut. Das erste 3/4 Jahr ist er ohne Probleme gelaufen, gepflegt ist er auch. Hier noch die Log Files: Log File Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-02-2021 01 durchgeführt von Admin (Administrator) auf **** (Micro-Star International Co., Ltd MS-7C02) (10-02-2021 13:06:01) Gestartet von C:\Users\Admin\Downloads Geladene Profile: Admin Platform: Windows 10 Pro Version 20H2 19042.804 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Edge Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\DiscoverySrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3> (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdwtxag.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (IObit Information Technology -> IObit) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 6 for Steam\DriverBooster.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2011.11613.0_x64__8wekyb3d8bbwe\Cortana.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe (Micro-Star International CO., LTD. -> ) C:\Program Files\GamingOSD\mysticlight\MysticLightController.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\MSI\MSIRegister\MSIRegisterService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\EyeRest.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\TriggerModeMonitor.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\VideoCardMonitorII.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2> (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3> (Open Source Developer, Dominik Reichl -> Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2> (Scarlet.Crush Productions) [Datei ist nicht signiert] C:\Program Files\WiinUSoft\SCP_Driver\ScpService.exe (TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe (Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7> (Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1027360 2019-11-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [TabletDriver] => C:\Program Files\PenDisplay\TabletDriver.exe [637960 2016-03-04] (Shenzhen Huion Animation Technology Co., Ltd. -> Graphic Tablet Company Shenzhen) HKLM-x32\...\Run: [OnScreen Control] => C:\Program Files (x86)\LG Electronics\OnScreen Control\bin\OnScreenStartUpApp.exe [1786808 2018-03-14] (LG Electronics Inc. -> TODO: <Company name>) HKLM-x32\...\Run: [MSIRegister] => C:\MSI\MSIRegister\MSIRegister.exe [1266872 2019-03-08] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [APP Manager] => C:\Program Files (x86)\MSI\APP Manager\AppManager.exe [3705520 2019-07-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [X_Boost] => C:\Program Files (x86)\MSI\MSI X Boost\X_Boost.exe [4260000 2018-08-28] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835760 2019-06-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1226240 2018-01-19] (Cisco Systems, Inc. -> Cisco Systems, Inc.) HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3137728 2021-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl) HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7992336 2021-02-03] (Dropbox, Inc -> Dropbox, Inc.) HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26310800 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1028280 2017-11-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [Discord] => C:\Users\****\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3412696 2021-02-08] (Valve -> Valve Corporation) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [JetBrains Toolbox] => C:\Users\****\AppData\Local\JetBrains\Toolbox\bin\jetbrains-toolbox.exe [7667648 2020-12-16] (JetBrains s.r.o. -> JetBrains) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [Seafile] => C:\Program Files (x86)\Seafile\bin\seafile-applet.exe [5684072 2020-10-12] (Seafile Ltd. -> Seafile Ltd.) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [274176 2020-10-16] (TEFINCOM S.A. -> TEFINCOM S.A.) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Run: [Opera Browser Assistant] => C:\Users\****\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3366424 2020-12-16] (Opera Software AS -> Opera Software) HKLM\...\Windows x64\Print Processors\Canon TS5000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDF.DLL [30720 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5000 series: C:\Windows\system32\CNMLMDF.DLL [485376 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f GroupPolicy: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {033BD63B-FA1B-466E-8469-1705F1A271C6} - System32\Tasks\MSI_Toast_Server => C:\Program Files (x86)\MSI\MSI Toast Server\MSIToastServer.exe [31904 2019-03-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) Task: {0CEA06A9-6056-48DD-9531-CC76CD10CF13} - System32\Tasks\Bitdefender AgentTask_AD394AE64E874073B10A89FEEC305A3C => C:\Program Files\Bitdefender\Bitdefender Security\bdagent.exe [959440 2021-02-05] (Bitdefender SRL -> Bitdefender) Task: {0EAB776A-B531-4121-B05D-783F7F34217D} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {1AF77797-FCE6-4F10-AC06-EA60C4444694} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) Task: {24F9466D-806B-448B-AC84-6D38C0D964D8} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {41DD7FD3-00AC-4BB0-A5B0-DB05F3619B5A} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5188D236-FBAB-4234-86BC-89FB31C50ABF} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {53B063C8-3D2D-457D-8F42-824C8ED2D294} - System32\Tasks\MSILEDKeeper_Host => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe [1068688 2019-08-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) Task: {57A68B8E-18F3-4754-9E2D-1336C0E2ED84} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {5A641908-2C57-4691-8729-23E01F6A31F3} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22763912 2021-01-10] (Microsoft Corporation -> Microsoft Corporation) Task: {5D569886-52FD-472A-BDA5-778658F4C526} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5057960 2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Task: {5DA82407-6C18-47BB-8271-51363B8234E8} - System32\Tasks\MSIGH_Host => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe [3354296 2019-01-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) Task: {5F42DA21-1D44-41E7-BE2E-C04C0ACB24ED} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1683352 2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Task: {642DF14A-40DB-46D7-A366-0245C415256D} - System32\Tasks\Opera scheduled assistant Autoupdate 1584537520 => C:\Users\****\AppData\Local\Programs\Opera\launcher.exe [1776280 2021-01-14] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\****\AppData\Local\Programs\Opera\assistant" $(Arg0) Task: {74025E08-C26C-486E-BEE9-1D6518970EF5} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\WatchDog.exe [888232 2021-01-29] (Bitdefender SRL -> Bitdefender) Task: {79DC625B-FD52-4786-B040-939FE0538DCA} - System32\Tasks\MonitorMysticLight => C:\Program Files\GamingOSD\MysticLight\MysticLightController.exe [31224 2018-11-09] (Micro-Star International CO., LTD. -> ) Task: {7B03C718-CB4F-43A8-BAE6-68D322C7B4F3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5057960 2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Task: {7CDDA2D4-9AB4-4D87-9FFE-D7439BE68C2F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145768 2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Task: {8A99256A-EDC5-486B-B0A9-C4D349A523F0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log Task: {9C1A59DF-F348-4C08-AABB-ADB33D61BC25} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A52D8403-FC6E-4D36-B317-9D6485FBB6B7} - System32\Tasks\Opera scheduled Autoupdate 1575943109 => C:\Users\****\AppData\Local\Programs\Opera\launcher.exe [1776280 2021-01-14] (Opera Software AS -> Opera Software) Task: {A616E534-EA54-4CBC-8674-A79A297BF982} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145768 2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Task: {B19AC24D-7976-4238-8541-C50BCA938724} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-12-10] (Dropbox, Inc -> Dropbox, Inc.) Task: {B654ECEC-EB09-48E7-AE8D-74891A55B832} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {C3D5AD5F-B21A-40B6-AF51-9E737D7A2334} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4135016 2021-01-10] (Microsoft Corporation -> Microsoft Corporation) Task: {C96181E8-FF7B-489B-A548-A83ED807039A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22763912 2021-01-10] (Microsoft Corporation -> Microsoft Corporation) Task: {CAC9564B-97DA-419E-9DE6-EE0342799FC0} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.) Task: {DC277218-3598-4689-AB22-2311A14F0163} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {E25174A1-987D-4277-9D62-D24D4F609A6D} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F9096D0D-D8BD-4BD3-AB52-A17AC1A68763} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-12-10] (Dropbox, Inc -> Dropbox, Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\MSIGH_Host.job => C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey.exe Task: C:\WINDOWS\Tasks\MSILEDKeeper_Host.job => C:\Program Files (x86)\MSI\MysticLight\LEDKeeper.exe Task: C:\WINDOWS\Tasks\MSISW_Host.job => C:\WINDOWS\SysWOW64\muachost.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{3ff34dc0-87d0-4029-9654-42cae60d6292}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{5a2cc459-b158-4dd3-8f13-0aa2af59b410}: [DhcpNameServer] 192.168.2.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default [2021-02-10] FireFox: ======== FF HKLM\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi FF Extension: (Bitdefender Wallet) - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi [2020-07-16] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/wallet/updates.json ] FF HKLM\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi FF Extension: (Bitdefender Anti-Tracker) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi [2020-11-23] [UpdateUrl:hxxps://download.bitdefender.com/windows/desktop/connect/antitracker/updates.json ] FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext [2020-07-22] [] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [bdwtwe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdwteff.xpi FF HKLM-x32\...\Firefox\Extensions: [bdtbe@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbef.xpi FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security\bdtbext FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-02-02] (Adobe Inc. -> Adobe Systems Inc.) Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gannpgaobkkhmpomoijebaigcapoeebl] CHR HKLM-x32\...\Chrome\Extension: [khndhdhbebhaddchcgnalcjlaekbbeof] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.) R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-11-23] (Bitdefender SRL -> Bitdefender) R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-11-23] (Bitdefender SRL -> Bitdefender) R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2195344 2018-03-22] (Bitdefender SRL -> Bitdefender) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8854920 2021-01-10] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-12-10] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2019-12-10] (Dropbox, Inc -> Dropbox, Inc.) R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44064 2021-02-03] (Dropbox, Inc -> Dropbox, Inc.) R2 Ds3Service; C:\Program Files\WiinUSoft\SCP_Driver\ScpService.exe [381952 2016-05-25] (Scarlet.Crush Productions) [Datei ist nicht signiert] S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA) R2 GamingApp_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingApp_Service.exe [46776 2018-09-06] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) R2 GamingHotkey_Service; C:\Program Files (x86)\MSI\Gaming APP\GamingHotkey_Service.exe [2027192 2019-01-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2669240 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2343600 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [2725048 2017-12-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2255544 2018-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2507952 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSIREGISTER_MR; C:\MSI\MSIRegister\MSIRegisterService.exe [2020024 2019-01-03] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2018-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2740912 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSI_ActiveX_Service; C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\MSI_ActiveX_Service.exe [86688 2018-07-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 MSI_AppManager_Service; C:\Program Files (x86)\MSI\APP Manager\AppManager_Service.exe [2055352 2019-01-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2333328 2020-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [183472 2020-03-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R2 MysticLight2_Service; C:\Program Files (x86)\MSI\MysticLight\MysticLight2_Service.exe [34976 2018-12-20] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [275200 2020-10-16] (TEFINCOM S.A. -> TEFINCOM S.A.) S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-11-23] (Microsoft Windows -> Microsoft Corporation) S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-11-23] (Microsoft Windows -> Microsoft Corporation) R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [1358248 2021-01-29] (Bitdefender SRL -> Bitdefender) R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5198064 2021-01-15] (Microsoft Windows Publisher -> Microsoft Corporation) R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [171272 2021-02-05] (Bitdefender SRL -> Bitdefender) R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [803576 2020-11-23] (Bitdefender SRL -> Bitdefender) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\NisSrv.exe [3206472 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1911.3-0\MsMpEng.exe [103376 2019-12-10] (Microsoft Windows Publisher -> Microsoft Corporation) S4 ibtsiva; %SystemRoot%\system32\ibtsiva [X] ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [2638328 2021-02-05] (Bitdefender SRL -> Bitdefender S.R.L. Bucharest, ROMANIA) R2 BdDci; C:\WINDOWS\system32\DRIVERS\bddci.sys [802968 2021-02-05] (Bitdefender SRL -> Bitdefender) S0 bdelam; C:\WINDOWS\System32\drivers\bdelam.sys [22960 2019-03-21] (Microsoft Windows Early Launch Anti-Malware Publisher -> Bitdefender) R0 bdprivmon; C:\WINDOWS\System32\DRIVERS\bdprivmon.sys [46056 2020-01-17] (Bitdefender SRL -> © Bitdefender SRL) R1 EneIo; C:\Windows\system32\drivers\ene.sys [17624 2019-05-22] (Microsoft Windows Hardware Compatibility Publisher -> ) R3 FocusriteUSB; C:\WINDOWS\System32\drivers\FocusriteUSB.sys [96400 2018-01-09] (Focusrite Audio Engineering Ltd. -> Focusrite Audio Engineering Ltd.) R3 FocusriteUSBAudio; C:\WINDOWS\system32\drivers\FocusriteUSBAudio.sys [54416 2018-01-09] (Focusrite Audio Engineering Ltd. -> Focusrite Audio Engineering Ltd.) R3 FocusriteUSBSwRoot; C:\WINDOWS\System32\drivers\FocusriteUSBSwRoot.sys [97936 2018-01-09] (Focusrite Audio Engineering Ltd. -> Focusrite Audio Engineering Ltd.) R0 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [481936 2021-02-05] (Bitdefender SRL -> BitDefender S.R.L. Bucharest, ROMANIA) R0 gzflt; C:\WINDOWS\System32\DRIVERS\gzflt.sys [195232 2020-11-23] (Bitdefender SRL -> BitDefender LLC) R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2019-12-10] (Martin Malik - REALiX -> REALiX(tm)) R3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (Feature Integration Technology -> FINTEK Corp.) R2 Ignis; C:\WINDOWS\system32\DRIVERS\ignis.sys [185312 2020-12-18] (Bitdefender SRL -> Bitdefender) R2 NDivert; C:\WINDOWS\System32\drivers\NDivert.sys [105184 2021-02-01] (TEFINCOM S.A. -> ) R3 nlwt; C:\WINDOWS\system32\DRIVERS\nlwt.sys [39360 2020-12-06] (TEFINCOM S.A. -> WireGuard LLC) R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [38608 2020-10-14] (TEFINCOM S.A. -> TEFINCOM S.A.) R3 NTIOLib_MBAPI; C:\Program Files (x86)\MSI\Gaming APP\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\MysticLight\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2016-05-25] (Bruce James -> Scarlet.Crush Productions) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project) R0 trufos; C:\WINDOWS\System32\DRIVERS\trufos.sys [640760 2020-11-23] (Bitdefender SRL -> Bitdefender) R3 vmulti; C:\WINDOWS\System32\drivers\vmulti.sys [10752 2019-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74120 2018-01-19] (Cisco Systems, Inc. -> Cisco Systems, Inc.) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45664 2019-12-10] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [355760 2019-12-10] (Microsoft Windows -> Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [54192 2019-12-10] (Microsoft Windows -> Microsoft Corporation) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2021-02-10 13:06 - 2021-02-10 13:06 - 000031524 _____ C:\Users\Admin\Downloads\FRST.txt 2021-02-10 13:05 - 2021-02-10 13:05 - 002297344 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe 2021-02-10 12:12 - 2021-02-10 12:12 - 000231232 _____ C:\WINDOWS\system32\containerdevicemanagement.dll 2021-02-10 12:12 - 2021-02-10 12:12 - 000010892 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2021-02-10 11:52 - 2021-02-10 13:06 - 000000000 ____D C:\FRST 2021-02-10 11:49 - 2021-02-10 11:49 - 000088460 _____ C:\ProgramData\agent.update.1612954138.bdinstall.v2.bin 2021-02-09 17:37 - 2021-02-09 17:37 - 000000112 ___SH C:\bootTel.dat 2021-02-05 17:09 - 2021-02-05 17:09 - 000035798 _____ C:\Users\****\Downloads\Natural Hairstyles for Content Patcher-7668-1-0-0-1610907900.zip 2021-02-05 17:06 - 2021-01-23 09:57 - 001855184 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2021-02-05 17:06 - 2021-01-23 09:57 - 001855184 _____ C:\WINDOWS\system32\vulkaninfo.exe 2021-02-05 17:06 - 2021-01-23 09:57 - 001453720 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2021-02-05 17:06 - 2021-01-23 09:57 - 001435872 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2021-02-05 17:06 - 2021-01-23 09:57 - 001435872 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2021-02-05 17:06 - 2021-01-23 09:57 - 001094872 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2021-02-05 17:06 - 2021-01-23 09:57 - 001094872 _____ C:\WINDOWS\system32\vulkan-1.dll 2021-02-05 17:06 - 2021-01-23 09:57 - 000948960 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2021-02-05 17:06 - 2021-01-23 09:57 - 000948960 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2021-02-05 17:06 - 2021-01-23 09:56 - 001193112 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 001512104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 001164968 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 000680088 _____ C:\WINDOWS\system32\nvofapi64.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 000672936 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 000558248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll 2021-02-05 17:06 - 2021-01-23 09:54 - 000547480 _____ C:\WINDOWS\SysWOW64\nvofapi.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 008262312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 007392920 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 004611760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 002731184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 002103448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 001732264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6446140.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 001589400 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 001491608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6446140.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 000813208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll 2021-02-05 17:06 - 2021-01-23 09:53 - 000657048 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll 2021-02-05 17:06 - 2021-01-23 09:50 - 006070848 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll 2021-02-05 16:37 - 2021-02-05 16:37 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb 2021-02-05 16:37 - 2021-02-05 16:37 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb 2021-02-05 16:37 - 2021-02-05 16:37 - 001314112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi 2021-02-05 16:21 - 2021-02-05 16:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 2021-02-03 12:50 - 2021-02-03 12:50 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys 2021-02-03 12:50 - 2021-02-03 12:50 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys 2021-02-03 12:50 - 2021-02-03 12:50 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys 2021-02-03 12:50 - 2021-02-03 12:50 - 000044064 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe 2021-01-22 17:54 - 2021-02-09 22:25 - 000000000 ___RD C:\Users\****\Desktop\Bleach Bath Project 2021-01-18 18:54 - 2021-01-18 18:54 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype for Business.lnk 2021-01-16 18:19 - 2021-01-16 18:20 - 000000000 ____D C:\Users\****\Downloads\Bath House Hot Spring Mod - 1.2-558- 2021-01-16 15:52 - 2021-01-16 15:52 - 000000000 ____D C:\Users\****\Downloads\StardustCore 2021-01-16 15:52 - 2021-01-16 15:52 - 000000000 ____D C:\Users\****\Downloads\HappyBirthday 2021-01-15 19:41 - 2021-01-15 19:41 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx 2021-01-15 19:41 - 2021-01-15 19:41 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr 2021-01-15 19:41 - 2021-01-15 19:41 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx 2021-01-15 19:41 - 2021-01-15 19:41 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr 2021-01-15 19:41 - 2021-01-15 19:41 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000467968 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax 2021-01-15 19:41 - 2021-01-15 19:41 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax 2021-01-15 19:41 - 2021-01-15 19:41 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax 2021-01-15 19:41 - 2021-01-15 19:41 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000138056 _____ C:\WINDOWS\system32\HvsiManagementApi.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax 2021-01-15 19:41 - 2021-01-15 19:41 - 000101704 _____ C:\WINDOWS\SysWOW64\HvsiManagementApi.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx 2021-01-15 19:41 - 2021-01-15 19:41 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx 2021-01-15 19:41 - 2021-01-15 19:41 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl 2021-01-15 19:41 - 2021-01-15 19:41 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll 2021-01-15 19:41 - 2021-01-15 19:41 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE 2021-01-15 19:40 - 2021-01-15 19:40 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv 2021-01-15 19:40 - 2021-01-15 19:40 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl 2021-01-15 19:40 - 2021-01-15 19:40 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv 2021-01-15 19:40 - 2021-01-15 19:40 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl 2021-01-15 19:40 - 2021-01-15 19:40 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl 2021-01-15 19:40 - 2021-01-15 19:40 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll 2021-01-15 19:40 - 2021-01-15 19:40 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl 2021-01-15 19:40 - 2021-01-15 19:40 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe 2021-01-15 19:40 - 2021-01-15 19:40 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe 2021-01-15 19:40 - 2021-01-15 19:40 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2021-02-10 12:45 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF 2021-02-10 12:44 - 2020-09-25 19:49 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2021-02-10 12:40 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2021-02-10 12:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2021-02-10 12:28 - 2020-09-25 19:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task 2021-02-10 12:28 - 2020-01-09 18:57 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2021-02-10 12:21 - 2020-09-25 19:55 - 002333492 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2021-02-10 12:21 - 2020-09-25 18:42 - 000477732 _____ C:\WINDOWS\system32\perfh011.dat 2021-02-10 12:21 - 2020-09-25 18:42 - 000132610 _____ C:\WINDOWS\system32\perfc011.dat 2021-02-10 12:21 - 2019-12-07 15:51 - 000743650 _____ C:\WINDOWS\system32\perfh007.dat 2021-02-10 12:21 - 2019-12-07 15:51 - 000150072 _____ C:\WINDOWS\system32\perfc007.dat 2021-02-10 12:19 - 2019-12-10 10:04 - 000000000 ____D C:\Program Files (x86)\Steam 2021-02-10 12:16 - 2020-11-24 21:37 - 000000000 ____D C:\WINDOWS\Minidump 2021-02-10 12:15 - 2020-12-18 17:44 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-12-18 17:44 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-09-25 19:54 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2020-09-25 19:54 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2021-02-10 12:15 - 2019-12-21 16:04 - 000000000 ____D C:\Users\Admin\AppData\Local\CrashDumps 2021-02-10 12:15 - 2019-12-10 00:53 - 000000000 ____D C:\ProgramData\NVIDIA Corporation 2021-02-10 12:15 - 2019-12-10 00:53 - 000000000 ____D C:\ProgramData\NVIDIA 2021-02-10 12:15 - 2019-12-10 00:53 - 000000000 ____D C:\Program Files\NVIDIA Corporation 2021-02-10 12:15 - 2019-12-10 00:53 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2021-02-10 12:14 - 2020-09-25 19:54 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2021-02-10 12:14 - 2020-09-25 19:48 - 000588360 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2021-02-10 12:14 - 2020-09-25 19:48 - 000008192 ___SH C:\DumpStack.log.tmp 2021-02-10 12:13 - 2020-09-25 18:43 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB 2021-02-10 12:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources 2021-02-10 12:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2021-02-10 12:13 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System 2021-02-10 12:13 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI 2021-02-10 12:12 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2021-02-10 12:08 - 2019-12-10 01:31 - 000000000 ____D C:\WINDOWS\system32\MRT 2021-02-10 12:07 - 2019-12-10 01:31 - 130141752 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2021-02-10 11:53 - 2019-12-15 16:30 - 000000000 ___RD C:\Users\****\Dropbox 2021-02-10 11:49 - 2019-12-27 22:00 - 000000000 ____D C:\Program Files\Bitdefender Agent 2021-02-10 11:41 - 2020-08-22 22:32 - 000000000 ____D C:\Users\****\AppData\Roaming\StardewValley 2021-02-08 19:35 - 2020-09-25 19:54 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2021-02-08 19:35 - 2020-09-25 19:54 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2021-02-06 18:45 - 2019-12-10 00:56 - 000000000 ____D C:\Users\****\AppData\Local\Packages 2021-02-06 18:45 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps 2021-02-06 09:58 - 2020-08-22 21:47 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2021-02-05 22:42 - 2019-12-10 02:09 - 000000248 ____H C:\WINDOWS\Tasks\MSILEDKeeper_Host.job 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX 2021-02-05 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2021-02-05 17:13 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing 2021-02-05 17:12 - 2019-12-10 15:03 - 000000000 ____D C:\Users\****\AppData\Roaming\KeePass 2021-02-05 17:11 - 2020-09-06 11:57 - 002638328 _____ (Bitdefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\atc.sys 2021-02-05 17:11 - 2020-09-06 11:57 - 000802968 _____ (Bitdefender) C:\WINDOWS\system32\Drivers\bddci.sys 2021-02-05 17:10 - 2020-09-06 11:57 - 000481936 _____ (BitDefender S.R.L. Bucharest, ROMANIA) C:\WINDOWS\system32\Drivers\gemma.sys 2021-02-05 16:56 - 2019-12-10 19:25 - 000000000 ____D C:\ProgramData\ProductData 2021-02-05 16:21 - 2019-12-10 09:57 - 000000000 ____D C:\Program Files (x86)\Dropbox 2021-02-05 16:15 - 2020-12-06 22:34 - 000000000 ____D C:\Users\****\AppData\Local\NordVPN 2021-02-05 16:15 - 2020-12-06 22:34 - 000000000 ____D C:\Users\Admin\AppData\Local\NordVPN 2021-02-05 16:15 - 2020-12-06 22:34 - 000000000 ____D C:\ProgramData\NordVPN 2021-02-05 16:15 - 2020-12-06 22:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec 2021-02-05 16:15 - 2020-12-06 22:34 - 000000000 ____D C:\Program Files\NordVPN 2021-02-05 16:10 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM 2021-02-01 14:25 - 2021-01-05 17:58 - 000105184 _____ C:\WINDOWS\system32\Drivers\NDivert.sys 2021-01-27 12:17 - 2020-12-18 17:44 - 002797808 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll 2021-01-27 12:17 - 2020-12-18 17:44 - 002154224 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll 2021-01-27 12:17 - 2020-12-18 17:44 - 001295088 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvRtmpStreamer64.dll 2021-01-25 04:38 - 2020-11-23 08:57 - 000070896 _____ C:\WINDOWS\system32\FvSDK_x64.dll 2021-01-25 04:38 - 2020-11-23 08:57 - 000059632 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll 2021-01-23 20:04 - 2019-12-10 10:44 - 000000000 ____D C:\Users\****\AppData\Roaming\Ableton 2021-01-23 09:50 - 2020-08-22 20:03 - 007116688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll 2021-01-22 23:59 - 2020-08-22 20:03 - 000061071 _____ C:\WINDOWS\system32\nvinfo.pb 2021-01-22 22:57 - 2020-09-25 18:58 - 000000000 ____D C:\Users\**** 2021-01-22 20:53 - 2019-12-28 15:43 - 000000000 ____D C:\Users\****\Desktop\Sortieren in Festplatte und Tower 2021-01-22 20:04 - 2019-12-10 00:54 - 005629168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll 2021-01-22 20:04 - 2019-12-10 00:54 - 002637040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll 2021-01-22 20:04 - 2019-12-10 00:54 - 001759472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll 2021-01-22 20:04 - 2019-12-10 00:54 - 000991472 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll 2021-01-22 20:04 - 2019-12-10 00:54 - 000121584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll 2021-01-22 20:04 - 2019-12-10 00:54 - 000083696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll 2021-01-22 18:22 - 2019-12-10 10:12 - 000000000 ____D C:\ProgramData\Ableton 2021-01-22 18:00 - 2019-12-10 09:57 - 000001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job 2021-01-22 18:00 - 2019-12-10 09:57 - 000001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job 2021-01-22 17:45 - 2020-09-25 19:54 - 000004292 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA 2021-01-22 17:45 - 2020-09-25 19:54 - 000004060 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore 2021-01-22 09:45 - 2019-12-10 00:54 - 009482357 _____ C:\WINDOWS\system32\nvcoproc.bin 2021-01-21 19:33 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Registration 2021-01-20 21:11 - 2020-04-13 16:11 - 000000000 ____D C:\Users\****\Documents\Finanzen 2021-01-18 18:54 - 2019-12-10 09:54 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000002450 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000002414 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000002413 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000002407 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000002401 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk 2021-01-18 18:54 - 2019-12-10 09:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2021-01-18 18:54 - 2019-12-10 09:45 - 000000000 ____D C:\Program Files\Microsoft Office 2021-01-18 18:24 - 2020-09-25 19:54 - 000004196 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1575943109 2021-01-18 18:24 - 2019-12-10 02:58 - 000001411 _____ C:\Users\****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk 2021-01-16 01:12 - 2020-06-14 19:37 - 000000000 ____D C:\Users\****\Documents\Engagement 2021-01-16 00:44 - 2019-12-14 22:26 - 000000000 ____D C:\Users\****\Documents\Persönlichkeitstests und Astrologie 2021-01-16 00:42 - 2019-12-14 22:26 - 000000000 ____D C:\Users\****\Documents\Backups 2021-01-15 22:47 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer 2021-01-15 22:47 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2021-01-15 22:47 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME 2021-01-15 22:47 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender 2021-01-15 19:40 - 2020-09-25 19:49 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2021-01-15 19:25 - 2019-12-10 09:41 - 000001186 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk 2021-01-15 19:25 - 2019-12-10 09:41 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2 2021-01-15 19:24 - 2019-12-10 19:11 - 000000000 ___RD C:\Users\****\Software 2021-01-11 17:26 - 2020-12-18 17:44 - 000001951 _____ C:\WINDOWS\NvContainerRecovery.bat ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-02-2021 01 durchgeführt von Admin (10-02-2021 13:07:23) Gestartet von C:\Users\Admin\Downloads Windows 10 Pro Version 20H2 19042.804 (X64) (2020-09-25 18:54:33) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Admin (S-1-5-21-325946354-4117544360-2876072073-1002 - Administrator - Enabled) => C:\Users\Admin Administrator (S-1-5-21-325946354-4117544360-2876072073-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-325946354-4117544360-2876072073-503 - Limited - Disabled) Gast (S-1-5-21-325946354-4117544360-2876072073-501 - Limited - Disabled) **** (S-1-5-21-325946354-4117544360-2876072073-1001 - Limited - Enabled) => C:\Users\**** WDAGUtilityAccount (S-1-5-21-325946354-4117544360-2876072073-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Bitdefender Antivirus (Enabled - Up to date) {0E17DB7D-A20F-62CE-B95B-17DB0CDFE318} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Bitdefender Firewall (Enabled) {362C5A58-E860-6396-9204-BEEEF20CA463} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Ableton Live 10 Lite (HKLM\...\{29402EA5-8D2F-4E28-B1A2-C282912F0CC9}) (Version: 10.0.0.0 - Ableton) Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 21.001.20135 - Adobe Systems Incorporated) AMD Ryzen Master SDK (HKLM\...\{DBD50508-5F75-416B-995D-C42433A00944}) (Version: 2.1.0.1236 - Advanced Micro Devices, Inc.) AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.28 - Advanced Micro Devices, Inc.) Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 1.0.1 - Bitdefender) Bitdefender Total Security (HKLM\...\Bitdefender) (Version: 25.0.2.14 - Bitdefender) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.5.04029 - Cisco Systems, Inc.) Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{3AA4F1C9-87A4-437A-B3F4-69100178F709}) (Version: 4.5.04029 - Cisco Systems, Inc.) Hidden Corel Graphics - Windows Shell Extension (HKLM\...\_{E7F9082A-E477-4DBC-8FBC-E19B53B7BBC9}) (Version: 19.0.0.328 - Corel Corporation) Corel Graphics - Windows Shell Extension (HKLM\...\{E7F9082A-E477-4DBC-8FBC-E19B53B7BBC9}) (Version: 19.0.328 - Corel Corporation) Hidden Corel Graphics - Windows Shell Extension 32 Bit Keys (HKLM\...\{58B4F27F-B90B-4188-AA05-088B9788F8FF}) (Version: 19.0.328 - Corel Corporation) Hidden Corel Update Manager (HKLM\...\{9E1EE683-0C7B-46E7-83EC-1F5A1D8F2296}) (Version: 2.12.582 - Corel corporation) Hidden CorelDRAW Graphics Suite 2017 - BR (x64) (HKLM\...\{8ABF5677-0748-4A42-A7DF-81F13027A18F}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Capture (x64) (HKLM\...\{AC9BB7B7-A763-43C5-9830-F3B78FDB051D}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Common (x64) (HKLM\...\{B8C51F00-63AE-4327-A533-375CB7B6BF26}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Common Retail (x64) (HKLM\...\{D3CBB13B-4FE7-451A-9C8F-06FBD9A36F0B}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Connect (x64) (HKLM\...\{BD0F92AD-DFDB-4BC5-BAA5-FB27892F9483}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - CS (x64) (HKLM\...\{8B4A60F8-3AFC-4AA3-98AC-5098B9162E44}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - CT (x64) (HKLM\...\{802B4AB8-5AF1-4A85-9F01-83DFE159FFB9}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Custom Data (x64) (HKLM\...\{E7975CC5-05E4-45E3-AFD3-234809F694A0}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - CZ (x64) (HKLM\...\{25D8B1EE-C79D-46B3-A70B-F8E5E4D1A195}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - DE (x64) (HKLM\...\{DC94E7B7-DE6C-4293-A3EF-DC41FC2FA9BC}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Draw (x64) (HKLM\...\{A16C7EEB-69CB-42A1-AD10-0E19A133D957}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - EN (x64) (HKLM\...\{DB9ECE8C-5065-4388-B70D-D137A2C03152}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - ES (x64) (HKLM\...\{0EAC29D4-5379-4595-ACE9-FA6A3DC08418}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Filters (x64) (HKLM\...\{EEC42BAD-9517-450D-AF99-FA3C16D0377C}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Font Manager (x64) (HKLM\...\{D276DE88-654E-4738-A736-6E18D12F0C34}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - FR (x64) (HKLM\...\{24BE747D-7DBA-4322-9B6D-6F7F2E931E31}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - IPM (x64) (HKLM\...\{904B10A6-0D9C-4645-9C61-504FA92B9220}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - IPM Content (x64) (HKLM\...\{54F024CB-16AF-4CC0-9BC2-D2507E7C6C01}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - IT (x64) (HKLM\...\{546B4AB1-64CF-4713-8750-B21CD86874F9}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - JP (x64) (HKLM\...\{01F81F13-5C9A-4530-B034-FE7682CF362D}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - NL (x64) (HKLM\...\{6A8F754C-F722-4C4C-AAC2-50B386FD604A}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - PHOTO-PAINT (x64) (HKLM\...\{B2D66383-4F98-4108-B6A3-F9CF8715875C}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - PL (x64) (HKLM\...\{6466CDCC-F5E9-4A7A-98D8-CEF00E99936F}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Redist (x64) (HKLM\...\{47865C60-4ED8-4678-B23F-C2D1C2DDC09C}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - RU (x64) (HKLM\...\{01DC4563-9FFD-4500-AF4B-14A6DACC3FD7}) (Version: 19.0 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Setup Files (x64) (HKLM\...\{07B49D5C-2AB6-4D40-8A9B-BEDA6021A7C7}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - VBA (x64) (HKLM\...\{5330DEB9-A612-4679-ACC1-D3D9C6190824}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - VideoBrowser (x64) (HKLM\...\{C451F155-26B7-48F2-8A8F-9428B4D479D2}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Workspaces (x64) (HKLM\...\{F3EFAF0E-DF3C-4384-8A0F-90D79FEFD7F5}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 - Writing Tools (x64) (HKLM\...\{E38357D4-1B80-400F-A6D7-B4D5DD83D979}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 (64-Bit) (HKLM\...\_{07B49D5C-2AB6-4D40-8A9B-BEDA6021A7C7}) (Version: 19.1.0.419 - Corel Corporation) CorelDRAW Graphics Suite 2017 (HKLM\...\{03E21392-CE4A-4FC6-B593-370E7A7E345A}) (Version: 19.1 - Corel Corporation) Hidden CorelDRAW Graphics Suite 2017 -TR (x64) (HKLM\...\{46D13AD3-1B07-47EC-9FF1-AD7328A95AB5}) (Version: 19.0 - Corel Corporation) Hidden CPUID CPU-Z MSI 1.90 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.90 - CPUID, Inc.) Discord (HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Discord) (Version: 0.0.309 - Discord Inc.) Dropbox (HKLM-x32\...\Dropbox) (Version: 115.4.601 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.415.1 - Dropbox, Inc.) Hidden Dual Controller (HKLM-x32\...\{BFF9E0A4-2669-4139-8320-9C5F76727DAA}) (Version: 1.54 - LG Electronics Inc) ENE IO Driver (HKLM-x32\...\{D0512FFD-6194-4D2E-967E-25B82A3322FF}) (Version: 2.0.8 - ENE TECHNOLOGY INC.) Hidden ENE RGB HAL (HKLM\...\{87316426-A33E-41E9-942B-968E928A9A47}) (Version: 1.00.10 - Ene Tech.) Hidden ENE RGB HAL (HKLM-x32\...\{9f93601b-15ea-4e69-8d7c-dfa0f29ae04e}) (Version: 1.00.10 - Ene Tech.) Hidden ENE_EHD_M2_HAL (HKLM\...\{1CD178C9-BB49-4E59-9DA6-3C152E2A9844}) (Version: 1.00.01 - ENE TECHNOLOGY INC.) Hidden ENE_EHD_M2_HAL (HKLM-x32\...\{fe81cfd3-9db4-409d-b0f9-26707d1423c6}) (Version: 1.00.01 - ENE TECHNOLOGY INC.) Hidden Focusrite USB 4.36.5.0 (HKLM\...\Focusrite USB_is1) (Version: 4.36.5.0 - Focusrite Audio Engineering Ltd.) GamingOSD(x64) (HKLM\...\{11E14722-1213-4021-AD72-32252315CB8B}) (Version: 0.0.2.3 - MICRO-STAR INT'L,.LTD.) Hidden GamingOSD(x64) (HKLM-x32\...\Installshield_{11E14722-1213-4021-AD72-32252315CB8B}) (Version: 0.0.2.3 - MICRO-STAR INT'L,.LTD.) Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\_{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Ghostscript GPL 8.64 (Msi Setup) (HKLM-x32\...\{06CD45E6-FF5E-4D8E-BC01-B276A90DADF2}) (Version: 8.64 - Corel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000040-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.40.0.1 - Intel Corporation) Intel® PROSet/Wireless Software (HKLM-x32\...\{cf961541-ca37-4826-a285-3a9cb22cd5a2}) (Version: 21.40.2 - Intel Corporation) JetBrains Toolbox (HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Toolbox) (Version: 1.18.7609 - JetBrains) KeePass Password Safe 2.47 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.47 - Dominik Reichl) MediBang Paint Pro 25.3 (64-bit) (HKLM\...\MediBang Paint Pro_is1) (Version: 25.3 - Medibang) Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.13127.21064 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 88.0.705.63 - Microsoft Corporation) Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.141.59 - ) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation) Microsoft Visual Studio Tools for Applications 2015 (HKLM-x32\...\{dd8b09df-3ef8-49f1-bd1a-65278435860b}) (Version: 14.0.23217 - Microsoft Corporation) Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) MSI APP Manager (HKLM-x32\...\{00F47104-12BA-4E58-A7E6-F456C1BA338E}}_is1) (Version: 1.0.0.34 - MSI) MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 3.0.0.99 - MSI) MSI Display Kit(x64) (HKLM\...\{5A8E3E72-D260-4DB3-BCE3-AF47C364F275}) (Version: 0.0.1.1 - MSI) Hidden MSI Display Kit(x64) (HKLM-x32\...\Installshield_{5A8E3E72-D260-4DB3-BCE3-AF47C364F275}) (Version: 0.0.1.1 - MICRO-STAR INT'L,.LTD.) MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 6.2.0.96 - MSI) MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.69 - MSI) MSI MysticLight (HKLM-x32\...\{93874B70-6C5E-446A-AF4D-E5AC776A0386}}_is1) (Version: 3.0.0.66 - MSI) MSI Smart Tool (HKLM-x32\...\{DDCCA038-DAB1-4D09-B85C-848020AA75D6}}_is1) (Version: 1.0.0.43 - MSI) MSI Super Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.3.0.29 - MSI) MSI X Boost (HKLM-x32\...\{515143BB-7A11-4D85-B941-D520AAAA099C}_is1) (Version: 1.0.0.46 - MSI) MSIRegister (HKLM-x32\...\{80B995A4-3A86-4690-98A6-563F1A788835}_is1) (Version: 2.0.0.19 - MSI) NordVPN (HKLM\...\{19465C24-3D5D-4327-B99F-3CC0A1D38151}_is1) (Version: 6.34.4.0 - TEFINCOM S.A.) NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN) NordVPN network TUN (HKLM\...\{BD0E4F38-D3F6-452D-A32E-B14D721839AC}) (Version: 1.0.1 - NordVPN) Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.9.1 - Notepad++ Team) NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden NVIDIA FrameView SDK 1.1.4923.29548709 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29548709 - NVIDIA Corporation) NVIDIA GeForce Experience 3.21.0.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.21.0.36 - NVIDIA Corporation) NVIDIA Grafiktreiber 461.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 461.40 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation) NVIDIA USBC Driver 1.46.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.46.831.832 - NVIDIA Corporation) NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13127.21064 - Microsoft Corporation) Hidden OnScreen Control (HKLM-x32\...\{E5C1B339-0E4E-49A5-859E-5E1DE1938706}) (Version: 3.29 - LG Electronics Inc) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Opera Stable 73.0.3856.344 (HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\Opera 73.0.3856.344) (Version: 73.0.3856.344 - Opera Software) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.35.510.2019 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8844.1 - Realtek Semiconductor Corp.) Seafile 7.0.10 (HKLM-x32\...\{D21D1108-878F-43D9-A3A2-39F4B38A5694}) (Version: 7.0.10 - HaiWenHuZhi ltd.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.24753 - Microsoft Corporation) UninstallTabletDeviceDriver (HKLM\...\{39089688-F09E-4DAD-8C80-647D3DF68630}_is1) (Version: 12.2.14 - ) Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{3BAE4496-6F6C-4330-A8AA-B93D3D346FA5}) (Version: 2.53.0.0 - Microsoft Corporation) WiinUSoft version 3.0 (HKLM\...\{1BFC4F9F-BB85-4CE3-AC22-0CBFF78D5EE4}_is1) (Version: 3.0 - Justin Keys) Windows-Treiberpaket - Graphics Tablet (WinUsb) USBDevice (04/10/2014 8.33.30.0) (HKLM\...\142118DF51345EA02D2B1583E102C8FB95FD6D52) (Version: 04/10/2014 8.33.30.0 - Graphics Tablet) Packages: ========= Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.6.23362.0_x64__8wekyb3d8bbwe [2019-12-21] (Microsoft Corporation) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ShellIconOverlayIdentifiers: [ ".01SeafileExtIconSynced"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE609} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".02SeafileExtIconSyncing"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE607} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".03SeafileExtIconPartialSynced"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE60A} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".04SeafileExtIconLockedByOthers"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE60D} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".05SeafileExtIconLockedByMe"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE60E} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".06SeafileExtIconReadOnly"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE60C} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".07SeafileExtIconCloud"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE60B} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ ".08SeafileExtIconError"] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE608} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2019-01-01] (Notepad++ -> ) ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers1: [SeafileExt] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE606} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers4: [SeafileExt] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE606} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.46.0.dll [2020-11-17] (Dropbox, Inc -> Dropbox, Inc.) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-01-22] (NVIDIA Corporation -> NVIDIA Corporation) ContextMenuHandlers5: [SeafileExt] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE606} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ContextMenuHandlers6: [SeafileExt] -> {AD201805-4E05-4F2F-B0DE-D0381E6AE606} => C:\ProgramData\SeafileExt\seafile_ext64.dll [2020-10-12] () [Datei ist nicht signiert] ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== ==================== Verknüpfungen & WMI ======================== ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2019-12-10 01:39 - 2005-07-18 13:43 - 000160256 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\APP Manager\unrar.dll 2020-12-18 16:38 - 2005-07-18 13:43 - 000160256 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Live Update\unrar.dll 2019-12-10 01:40 - 2016-04-20 14:12 - 000772608 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\MSI OC Kit\ActiveX_Service\Lib\USB_DLL.dll 2019-12-10 01:41 - 2017-08-02 14:48 - 000237568 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\MysticLight\LEDControl.dll 2019-06-19 10:25 - 2019-06-19 10:25 - 000209920 _____ () [Datei ist nicht signiert] C:\Program Files\ENE\Aac_ENE RGB HAL\x86\AacHal_x86.dll 2018-03-20 14:34 - 2018-03-20 14:34 - 000265728 _____ () [Datei ist nicht signiert] C:\Program Files\ENE\Aac_ENE RGB HAL\x86\SB_SMBUS_SDK.dll 2018-04-11 14:28 - 2018-04-11 14:28 - 006160384 _____ () [Datei ist nicht signiert] C:\Program Files\GamingOSD\MysticLight\Library\MSIMysticDll.dll 2020-10-12 11:14 - 2020-10-12 11:14 - 013996217 _____ () [Datei ist nicht signiert] C:\ProgramData\SeafileExt\seafile_ext64.dll 2019-12-10 09:20 - 2015-06-23 16:41 - 000082432 _____ (Fintek) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Gaming APP\Lib\FintekUSBDll.dll 2019-12-10 01:41 - 2016-10-03 13:43 - 000399872 _____ (TODO: <公司名稱>) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\MysticLight\Lib\SDKDLL.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\****\Documents\Engagement:com.dropbox.attrs [52] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== BHO: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\bdtbie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) BHO: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Bitdefender Trackers Blocking -> {159ff5d5-55f1-4d2f-b706-767a55f77abb} -> C:\Program Files\Bitdefender\Bitdefender Security\antispam32\bdtbie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) BHO-x32: Bitdefender Wallet -> {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} -> C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Toolbar: HKLM - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\pmbxie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) Toolbar: HKLM-x32 - Bitdefender Wallet - {1DAC0C53-7D23-4AB3-856A-B04D98CD982A} - C:\Program Files\Bitdefender\Bitdefender Security\Antispam32\pmbxie.dll [2021-02-05] (Bitdefender SRL -> Bitdefender) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-01-18] (Microsoft Corporation -> Microsoft Corporation) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) IE trusted site: HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\sharepoint.com -> hxxps://uniwuerzburg-files.sharepoint.com ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2017-09-29 14:46 - 2021-02-10 12:14 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-325946354-4117544360-2876072073-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper HKU\S-1-5-21-325946354-4117544360-2876072073-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg DNS Servers: 192.168.2.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: ) ist aktiviert. Network Binding: ============= Ethernet 2: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet 3: NordVPN LightWeight Firewall -> NordLwf (enabled) Ethernet: NordVPN LightWeight Firewall -> NordLwf (enabled) WLAN: NordVPN LightWeight Firewall -> NordLwf (enabled) ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) HKLM\...\StartupApproved\Run: => "XboxStat" HKLM\...\StartupApproved\Run: => "iTunesHelper" HKLM\...\StartupApproved\Run32: => "APP Manager" HKLM\...\StartupApproved\Run32: => "OnScreen Control" HKLM\...\StartupApproved\Run32: => "MSIRegister" HKLM\...\StartupApproved\Run32: => "X_Boost" HKLM\...\StartupApproved\Run32: => "Super Charger" HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows" HKLM\...\StartupApproved\Run32: => "Dropbox" HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\StartupFolder: => "EvernoteClipper.lnk" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\Run: => "OneDrive" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\Run: => "Discord" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-325946354-4117544360-2876072073-1001\...\StartupApproved\Run: => "JetBrains Toolbox" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [{55A23051-094B-4890-B567-868035542D7E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lost Ember\LostEmber.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{183197FC-DD75-41AD-8C41-AF93AA4C5EC2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Lost Ember\LostEmber.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{BCFB4530-7E08-4E4D-A49B-D57E99DF3A76}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Journey\Journey.exe () [Datei ist nicht signiert] FirewallRules: [{C98F85E0-3BCB-43B5-847B-BC7DC8806AA2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Journey\Journey.exe () [Datei ist nicht signiert] FirewallRules: [{A12F67B7-1067-4279-B41D-6536BEFDEBE4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [Datei ist nicht signiert] FirewallRules: [{FA5A616B-2875-4020-A7DC-D55AEADB8842}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Stardew Valley\Stardew Valley.exe (ConcernedApe) [Datei ist nicht signiert] FirewallRules: [{2E450434-0C38-4999-9604-4D04CAF603EA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Flower\Flower.exe () [Datei ist nicht signiert] FirewallRules: [{8992D5D0-D9C6-42C0-B563-D8E7DF394F1B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Flower\Flower.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{E7293787-D27F-4BD9-9DF8-30E0CFC5A875}C:\program files (x86)\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [TCP Query User{B69832ED-7CCB-47D4-A689-92C09BD8ADC9}C:\program files (x86)\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\abzu\abzugame\binaries\win64\abzugame-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{A1E114AE-78E3-41CC-914C-1308B30406CD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ABZU\AbzuGame.exe () [Datei ist nicht signiert] FirewallRules: [{2E6E4E46-B6E6-4A34-9F92-CE48B8C105BC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ABZU\AbzuGame.exe () [Datei ist nicht signiert] FirewallRules: [{1FC7AF33-CAE0-47DF-A0CA-9DB20B2AB363}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Without A Voice\WithoutaVoice.exe () [Datei ist nicht signiert] FirewallRules: [{0A43015B-2F05-4286-920C-4637F8808C41}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Without A Voice\WithoutaVoice.exe () [Datei ist nicht signiert] FirewallRules: [UDP Query User{6089BC37-44D0-4F7D-A747-A55B07545184}C:\users\****\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\66.0.3515.72\opera.exe => Keine Datei FirewallRules: [TCP Query User{0A248E00-4FF0-44F5-893B-EE20C1D03AE7}C:\users\****\appdata\local\programs\opera\66.0.3515.72\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\66.0.3515.72\opera.exe => Keine Datei FirewallRules: [{98DC9F04-7139-4083-B7A0-1197F449E12A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe (Chucklefish LTD) [Datei ist nicht signiert] FirewallRules: [{CBB08A6A-8004-46E2-A97D-57D0B7C7E6F6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win32\starbound.exe (Chucklefish LTD) [Datei ist nicht signiert] FirewallRules: [{D02B3AA7-FD16-4369-91F7-ED48285BB662}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe () [Datei ist nicht signiert] FirewallRules: [{BF2F1745-0D16-4A0E-ADA6-0193432D676F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\mod_uploader.exe () [Datei ist nicht signiert] FirewallRules: [{970CBCE5-902D-4832-AB5A-C0AFB8F236BA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe () [Datei ist nicht signiert] FirewallRules: [{7DB43A2F-894B-45B6-B40D-284BC50E0EE6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound_server.exe () [Datei ist nicht signiert] FirewallRules: [{B20C1680-6E64-48D2-B2A6-0B54F6C3C8E9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe (Chucklefish LTD) [Datei ist nicht signiert] FirewallRules: [{356B5E9B-796C-442F-8970-478F7C4C6E27}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Starbound\win64\starbound.exe (Chucklefish LTD) [Datei ist nicht signiert] FirewallRules: [{F89CEA41-491C-44C8-A453-261C925B215D}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F3CDE2F5-DB7C-4AB4-B937-AB883FE5C999}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{5E8E69BF-20B8-4DCD-942E-F5AC4926AA51}C:\users\****\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\65.0.3467.78\opera.exe => Keine Datei FirewallRules: [TCP Query User{916F2E1A-4986-4500-B53D-0B30F43A1BEC}C:\users\****\appdata\local\programs\opera\65.0.3467.78\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\65.0.3467.78\opera.exe => Keine Datei FirewallRules: [{0ADE67EE-3942-49D8-AFD5-BD02822CD5E6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.) FirewallRules: [{72602365-3BEB-4A8A-A81B-58D35757DD8D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe (CAPCOM CO., LTD. -> CAPCOM CO., LTD.) FirewallRules: [{A11C7CA8-DF83-4B79-B5E5-D17E4EBE4CED}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{73378386-F53D-4C84-8F68-5BE52EB6E94F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [UDP Query User{05EA8662-6DF6-434D-8835-FA2ADC232BFC}C:\users\****\appdata\local\programs\opera\65.0.3467.72\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\65.0.3467.72\opera.exe => Keine Datei FirewallRules: [TCP Query User{F52653DE-11BE-4BED-BE6C-4513E7D038D7}C:\users\****\appdata\local\programs\opera\65.0.3467.72\opera.exe] => (Block) C:\users\****\appdata\local\programs\opera\65.0.3467.72\opera.exe => Keine Datei FirewallRules: [{0B663E7B-A07E-4413-9E04-B020503CBA9D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert] FirewallRules: [{BCD35008-831C-471A-B019-A726ACA1DB35}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert] FirewallRules: [{54BF0B23-BA6A-4036-8C0F-D584FD28EBAE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert] FirewallRules: [{67DA92E2-ACB1-44EE-A5A5-1C1B61CBE672}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert] FirewallRules: [{BD7ECFE4-0E1E-4EE1-9F85-CC1C2A3C020E}] => (Allow) LPort=26789 FirewallRules: [{A759EFF5-809C-45BF-A352-F2A1F574FCAD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NieRAutomata\NieRAutomata.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.) FirewallRules: [{64CBA033-96B3-4FA4-9796-CA8397D4F34D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\NieRAutomata\NieRAutomata.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.) FirewallRules: [{BED706A1-D626-4B3C-B4A3-4E7E31F1E727}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 6 for Steam\DriverBooster.exe (IObit Information Technology -> IObit) FirewallRules: [{A0F4506B-9032-4ED1-8359-207BA9F89D90}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Driver Booster 6 for Steam\DriverBooster.exe (IObit Information Technology -> IObit) FirewallRules: [{D7C53094-6FC8-4F56-B6B8-3F01162FFD53}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Keine Datei FirewallRules: [{53AE768F-E3A6-4443-A6F2-5111A4BB221E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe => Keine Datei FirewallRules: [{72A1CF48-7D16-4BC1-B7F1-68E55C70F14B}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Keine Datei FirewallRules: [{7CB1ABB1-5F93-4660-BA0F-B3F7B4F72625}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe => Keine Datei FirewallRules: [{837F348E-B194-40A7-8709-C480C4B1BBD3}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{54063119-19F9-47AE-9D58-D800D2EB1C92}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve -> Valve Corporation) FirewallRules: [{F8515FDD-5CDB-4FE9-921A-0ECDC9C2A63B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{F9853065-E038-4472-A00D-5DF0AD49ACF7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation) FirewallRules: [{C2532C30-3C41-4545-B0C9-94ED95169DAF}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{78DD45B0-B172-4ED7-94AD-4F06305D1025}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{03BCB886-4F34-418C-BDBC-1849060035F9}C:\users\****\appdata\local\programs\opera\65.0.3467.62_0\opera.exe] => (Allow) C:\users\****\appdata\local\programs\opera\65.0.3467.62_0\opera.exe => Keine Datei FirewallRules: [TCP Query User{4BBA8E92-38FE-48D0-9B0C-517C42AFD9F4}C:\users\****\appdata\local\programs\opera\65.0.3467.62_0\opera.exe] => (Allow) C:\users\****\appdata\local\programs\opera\65.0.3467.62_0\opera.exe => Keine Datei FirewallRules: [UDP Query User{69F84E87-1D45-4913-9FBB-3E7D4430EB39}C:\users\****\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\****\appdata\local\programs\opera\65.0.3467.62\opera.exe => Keine Datei FirewallRules: [TCP Query User{4B514B8E-BD9B-4921-93D4-9808CA88CBF7}C:\users\****\appdata\local\programs\opera\65.0.3467.62\opera.exe] => (Allow) C:\users\****\appdata\local\programs\opera\65.0.3467.62\opera.exe => Keine Datei FirewallRules: [{5FE3A8D0-9148-4DDD-A560-236EF669092A}] => (Allow) C:\program files\GamingOSD\GamingOSD.exe (Micro-Star International CO., LTD. -> MICRO-STAR INT'L,.LTD.) FirewallRules: [{45B68BBE-9442-4082-BE19-56ED8C82A6AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{4F27F580-A90A-4FC0-8254-01EAD15FC57A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{D320164C-C220-477C-A62C-871A7A897B36}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{C3DF7C72-5FCA-4FAA-AD45-6797D7DA5E21}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{F26A512C-1B3C-4BE0-AFE6-07B0704C82D4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert] FirewallRules: [{57CDEA1A-BD87-460B-B33B-DC0C98F6BB7E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert] FirewallRules: [{8AD5A8BD-EC69-4A6F-987D-BA056AF2A389}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2017\Programs64\CorelDrw.exe (Corel Corporation -> Corel Corporation) FirewallRules: [{F6DFE4BE-166C-4015-91C8-0C9EB3778B1C}] => (Block) c:\Program Files\Corel\CorelDRAW Graphics Suite 2017\Programs64\CorelPP.exe (Corel Corporation -> Corel Corporation) FirewallRules: [{974F57D8-FDEE-45AA-8FE4-9C89A7628CAF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{1AEBC5DF-862C-4818-B980-489E54908082}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{80624161-D75A-4198-A879-5057BB0D6419}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fable Anniversary\Binaries\Win32\Fable Anniversary.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{49105301-8F26-4F6B-AC61-81ECE186AF6C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fable Anniversary\Binaries\Win32\Fable Anniversary.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{50508DD6-B299-4B4E-809D-A41E69A6FFF1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Persona 4 Golden\P4G.exe (Sega of America, Inc. -> ) FirewallRules: [{FE84FDB7-E0CE-421F-9F93-BB1704EAB9B0}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Persona 4 Golden\P4G.exe (Sega of America, Inc. -> ) FirewallRules: [{5E03E740-8B57-4D2E-9DE9-581ECC3BE598}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Untitled Goose Game\Untitled.exe () [Datei ist nicht signiert] FirewallRules: [{BBE4E026-9AEA-4335-B49D-CB8428E6FABD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Untitled Goose Game\Untitled.exe () [Datei ist nicht signiert] FirewallRules: [{3B292721-76DF-4236-A25A-4AC990839577}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{4097BE48-6C06-4FC2-A460-0E6A107A015A}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.) FirewallRules: [{EC1B18A7-8732-4EDD-8A31-467524E4073F}] => (Allow) LPort=26820 FirewallRules: [{6F17C8EB-7EAF-47D4-8BE4-47FA0BFAD4B8}] => (Allow) LPort=26822 FirewallRules: [{45EC0599-8931-4416-A63D-D7B92B47FA81}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{1EB855B1-3FBB-4D37-8414-5FDFAFDB5F72}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{2B38C208-75CA-4A81-9677-8D630025CA07}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{3EE2F722-FD23-402E-B828-D966176C3BF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) ==================== Wiederherstellungspunkte ========================= 05-02-2021 16:32:39 Windows Modules Installer 10-02-2021 12:08:38 Windows Modules Installer ==================== Fehlerhafte Geräte im Gerätemanager ============ Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: Cisco Systems Service: vpnva Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Fehlereinträge in der Ereignisanzeige: ======================== Applikationsfehler: ================== Error: (02/10/2021 12:15:03 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: MSI_LED.exe, Version: 6.2.0.96, Zeitstempel: 0xf3f2611b Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.804, Zeitstempel: 0xb610d74d Ausnahmecode: 0xe0434352 Fehleroffset: 0x0012a8b2 ID des fehlerhaften Prozesses: 0x26b4 Startzeit der fehlerhaften Anwendung: 0x01d6ff9de84bcdfc Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\MSI\Gaming APP\MSI_LED.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll Berichtskennung: 5552b54e-a782-4283-9e3f-b049b2fb543e Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Error: (02/10/2021 12:15:03 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: MSI_LED.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.ArgumentOutOfRangeException bei System.ThrowHelper.ThrowArgumentOutOfRangeException(System.ExceptionArgument, System.ExceptionResource) bei System.Collections.Generic.List`1[[System.__Canon, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089]].get_Item(Int32) bei MSI_LED.App.Application_Startup(System.Object, System.Windows.StartupEventArgs) bei System.Windows.Application.OnStartup(System.Windows.StartupEventArgs) bei System.Windows.Application.<.ctor>b__1_0(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.DispatcherOperation.InvokeImpl() bei System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object) bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object) bei System.Windows.Threading.DispatcherOperation.Invoke() bei System.Windows.Threading.Dispatcher.ProcessQueue() bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef) bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object) bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32) bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate) bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32) bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr) bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef) bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame) bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame) bei System.Windows.Application.RunDispatcher(System.Object) bei System.Windows.Application.RunInternal(System.Windows.Window) bei System.Windows.Application.Run(System.Windows.Window) bei System.Windows.Application.Run() bei MSI_LED.App.Main() Error: (02/10/2021 12:13:35 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren. . Error: (02/10/2021 12:13:35 PM) (Source: VSS) (EventID: 13) (User: ) Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren. ] Error: (02/08/2021 07:34:16 PM) (Source: Office 2016 Licensing Service) (EventID: 0) (User: ) Description: Event-ID 0 Error: (02/05/2021 05:13:27 PM) (Source: VSS) (EventID: 8193) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren. . Error: (02/05/2021 05:13:27 PM) (Source: VSS) (EventID: 13) (User: ) Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren. ] Error: (02/05/2021 04:21:52 PM) (Source: DbxSvc) (EventID: 281) (User: ) Description: CertFindCertificateInStore failed with: (-2146885628) Das Objekt oder die Eigenschaft wurde nicht gefunden. Systemfehler: ============= Error: (02/10/2021 12:13:11 PM) (Source: DCOM) (EventID: 10010) (User: ****) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/10/2021 12:13:11 PM) (Source: DCOM) (EventID: 10010) (User: ****) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/10/2021 12:13:11 PM) (Source: DCOM) (EventID: 10010) (User: ****) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/10/2021 12:13:11 PM) (Source: DCOM) (EventID: 10010) (User: ****) Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (02/10/2021 11:48:07 AM) (Source: BugCheck) (EventID: 1001) (User: ) Description: Der Computer wurde nach einem schwerwiegenden Fehler neu gestartet. Der Fehlercode war: 0x0000009f (0x0000000000000004, 0x000000000000012c, 0xffffe4847e242040, 0xffffab02ac27d880). Ein volles Abbild wurde gespeichert in: C:\WINDOWS\MEMORY.DMP. Berichts-ID: 0c74a9e8-fd37-40bd-bb60-c8ad2e6dd099. Error: (02/10/2021 11:48:03 AM) (Source: Service Control Manager) (EventID: 7023) (User: ) Description: Der Dienst "ZeroConfigService" wurde mit folgendem Fehler beendet: %%2147770990 Error: (02/10/2021 11:47:55 AM) (Source: volmgr) (EventID: 161) (User: ) Description: Erstellung einer Abbilddatei aufgrund eines Fehlers beim Erstellen der Abbildkopie fehlgeschlagen. Error: (02/10/2021 11:42:12 AM) (Source: DCOM) (EventID: 10010) (User: ****) Description: Der Server "{FD06603A-2BDF-4BB1-B7DF-5DC68F353601}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. CodeIntegrity: =================================== Date: 2021-01-21 22:26:09.1680000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\WindowManagementAPI.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 22:26:08.5180000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 22:26:08.3950000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 22:11:43.4210000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\WindowManagementAPI.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 22:11:42.7110000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 22:11:42.5430000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 17:30:03.7840000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\WindowManagementAPI.dll because the set of per-page image hashes could not be found on the system. Date: 2021-01-21 17:30:03.1340000Z Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume4\Windows\System32\cryptnet.dll because the set of per-page image hashes could not be found on the system. ==================== Speicherinformationen =========================== BIOS: American Megatrends Inc. 3.40 10/25/2019 Hauptplatine: Micro-Star International Co., Ltd B450 TOMAHAWK MAX (MS-7C02) Prozessor: AMD Ryzen 5 3600 6-Core Processor Prozentuale Nutzung des RAM: 31% Installierter physikalischer RAM: 16333.34 MB Verfügbarer physikalischer RAM: 11193.59 MB Summe virtueller Speicher: 18765.34 MB Verfügbarer virtueller Speicher: 10384.57 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:930.91 GB) (Free:332.08 GB) NTFS \\?\Volume{bbccb910-13a0-45e3-b564-7475a575f07f}\ () (Fixed) (Total:0.49 GB) (Free:0.04 GB) NTFS \\?\Volume{ea7183fe-35fc-4459-85ab-cd62121cd1f1}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32 ==================== MBR & Partitionstabelle ==================== ========================================================== Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000) Partition: GPT. ==================== Ende von Addition.txt ======================= |
Themen zu Win10 Pro Performanceprobleme und Driver_Power_State_Failure |
adobe, antivirus, bonjour, canon, computer, defender, driver_power_state_failure, explorer, failed, festplatte, firewall, internet, internet explorer, mozilla, nvcontainer.exe, performanceprobleme, problem, prozesse, realtek, registry, rundll, scan, security, server, software, tower, udp, updates, win10 pro 64bit, windows, windows updates |