Windows 10: Audacity von falscher Seite installiert - Presnoker WindowsDefender Meldung

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-03-2021
durchgeführt von Breuer (Administrator) auf THATCHIMERAPC (Acer Predator PH317-52) (15-03-2021 12:24:18)
Gestartet von C:\Users\Breuer\Downloads
Geladene Profile: Breuer
Platform: Windows 10 Home Version 2004 19041.867 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\PredatorSense Service\PSAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Acer\PredatorSense Service\PSAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAdminAgent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Acer\Quick Access Service\QAAgent.exe
(Acer Incorporated) C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3013.0_x64__48frkmn4z8aw4\DesktopApp\AcerRegistrationBackGroundTask.exe
(Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Extreme Tuning Utility -> Intel(R) Corporation) C:\Program Files (x86)\Intel\Intel(R) Extreme Tuning Utility\XtuService.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <8>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(OpenVPN Technologies, Inc. -> ) C:\Program Files\OpenVPN\bin\openvpn-gui.exe
(OpenVPN Technologies, Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(TeamViewer Germany GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [319520 2018-08-29] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Run: [Steam] => D:\Games\Steam\steam.exe [3411232 2020-12-21] (Valve -> Valve Corporation)
HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] (OpenVPN Technologies, Inc. -> )
HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1746776 2021-02-26] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Policies\Explorer: [] 
HKU\S-1-5-21-1791537855-830472137-460834462-1012\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] (OpenVPN Technologies, Inc. -> )
HKU\S-1-5-21-1791537855-830472137-460834462-1012\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Breuer\AppData\Local\Microsoft\Teams\Update.exe [2453720 2021-03-12] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{E5931AF4-2A8F-48A5-AFC8-3E048AC137B9}] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Edge: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00AF566F-3969-4CFA-9F6C-5A746BAE04F5} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0130ED83-5BE4-48AA-A993-FB9D789B7157} - System32\Tasks\UEIPInvitation => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UEIPOOBECheck.exe [2211120 2018-06-28] (Acer Incorporated -> Acer Incorporated)
Task: {04EEA3CA-933D-4EE7-B412-A84088EE1C56} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [694752 2021-02-22] (Mozilla Corporation -> Mozilla Foundation)
Task: {07496218-1BF2-4B30-8BE7-5F57860481B3} - System32\Tasks\CareCenter\RtHDVBg_Dolby_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {08671783-3B71-4782-A0B9-2DD438751114} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2920240 2018-08-13] (Acer Incorporated -> )
Task: {15995270-52E4-4957-AF4F-3D160B95ABE5} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {15B3CC40-09F7-486A-A064-0B7338378571} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473880 2020-07-16] (Acer Incorporated -> Acer Incorporated)
Task: {17784829-12E8-4208-A1E0-24C66229A77E} - System32\Tasks\PredatorSense => C:\Program Files (x86)\Acer\PredatorSense Service\PSLauncher.exe [580416 2018-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {19E6E5BB-E32F-413D-9604-9FC76F86F1B0} - System32\Tasks\Microsoft\Windows\UIU\UIUTask => C:\Windows\UIUTask\UIUTask.exe [1687552 2019-07-27] (Conexant Systems, Inc.) [Datei ist nicht signiert]
Task: {1BBF6D81-8C62-4F5F-876D-59E759FD91ED} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {211E6D25-06EA-4832-B1AE-05119841AA5B} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41264 2018-08-13] (Acer Incorporated -> )
Task: {23CCA74E-191D-4145-B98F-80C8910CFA9A} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [65064 2020-03-16] (Acer Incorporated -> Acer)
Task: {31462615-DF3A-43E0-A545-B1EAF6AE26B9} - System32\Tasks\ROCCAT DEVICE SERVICE => C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_dev_service.exe [443632 2020-12-07] (Voyetra Turtle Beach, Inc. -> ROCCAT)
Task: {31832AF3-84A6-4549-A321-80515FD5A4C3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {49165456-DBD8-4185-9D5C-0444C36FB0BD} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {532DD49B-29A2-48AB-A2EE-B4C69AFEF57C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {53B69D6E-0785-4BAA-A17E-3C6FC9ECC637} - System32\Tasks\CareCenter\EpicGamesLauncher_Reg_HKCURun_S-1-5-21-1791537855-830472137-460834462-1009 => D:\Games\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32952800 2021-03-12] (Epic Games Inc. -> Epic Games, Inc.)
Task: {5926E62D-F464-4A97-A713-9532D3B83F26} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {60DB8095-994D-4630-B7B7-3F38FFBF3330} - System32\Tasks\CareCenter\OPENVPN-GUI_Reg_HKCURun_S-1-5-21-1791537855-830472137-460834462-1009 => C:\Program Files\OpenVPN\bin\openvpn-gui.exe [638592 2017-07-14] (OpenVPN Technologies, Inc. -> )
Task: {646A7E4C-9333-4A45-BC29-C5D3A51AE2F9} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4761392 2018-08-13] (Acer Incorporated -> )
Task: {651B22DF-2B27-4068-B18B-C8E7E70B1FE2} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {67838F31-E00D-4313-85C8-2527DF9D1F19} - System32\Tasks\CareCenter\RtHDVBg_ASC_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3617568 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {6D522632-D018-4A55-9997-595EB4D9EA71} - System32\Tasks\Quick Access => C:\Program Files\Acer\Quick Access Service\QALauncher.exe [447528 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {7404D2C5-4D40-4428-B102-FC6DB6125092} - System32\Tasks\CareCenter\SmartAudio_Reg_HKLMRun => C:\Program Files\Sennheiser\SA3\Sennheiser\sacpl.exe [1830232 2016-03-08] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {74A1590D-2F35-4835-B61A-731A6033455E} - System32\Tasks\CareCenter\DAX2_APP_Reg_HKLMRun => C:\Program Files\Dolby\Dolby DAX2\DAX2_APP\DolbyDAX2TrayIcon.exe [876032 2017-10-12] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
Task: {795CA209-3BD4-446F-B1D9-400B96269167} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program Service\Framework\TriggerFramework.exe [268080 2018-06-28] (Acer Incorporated -> Acer Incorporated)
Task: {A72B8232-8392-4E58-A568-C173AE8C9967} - System32\Tasks\CareCenter\ROCCAT Swarm Monitor.lnk_FolderCommonAppdata => C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_Swarm_Monitor.exe [4473072 2020-12-07] (Voyetra Turtle Beach, Inc. -> ROCCAT)
Task: {C52FFC7A-B974-4A0C-97B9-A8D2B477E631} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D0C56E0C-77EA-451C-B74D-A8FE95149EAF} - System32\Tasks\Power Button => C:\Program Files\Acer\Quick Access Service\ePowerButton_NB.exe [2770984 2020-09-10] (Acer Incorporated -> Acer Incorporated)
Task: {D1B8BA32-DA07-4217-A105-CB37D1E9C19F} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D4B0D968-A7B2-44E1-AB83-643E6B04F07C} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {D6AC6F17-4D8B-48A0-BC2B-C88F40A0E896} - System32\Tasks\CareCenter\RTHDVCPL_Reg_HKLMRun => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [19677472 2020-03-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {DD52AB35-C8E3-4503-8395-8784B4DB02F7} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DDDC86A1-6D6A-4DD3-B0D0-7B4268168B66} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-26] (Overwolf Ltd -> Overwolf LTD)
Task: {E21154A2-0957-4DE0-8E1B-786C70995A5E} - System32\Tasks\AutoUpdate Allplan 2018 => C:\Program Files\Allplan\Allplan 2018\Prg\NemDownloadHandler.exe [40840 2018-06-18] (Allplan GmbH -> ALLPLAN GmbH)
Task: {F7BCE945-1DFD-4A1A-AE09-21123EB6F6D4} - System32\Tasks\CareCenter\CodeMeter Control Center.lnk_FolderCommonAppdata => C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeterCC.exe [12501952 2020-09-13] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
Task: {F8097934-D724-4BB8-AF54-E38E89C02D54} - System32\Tasks\StorPSCTL => C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe [91440 2017-09-26] (Acer Incorporated -> Microsoft)
Task: {FAEEE2B4-897A-4D4A-B9F6-9F6E891BD559} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{6379dd33-c87c-4871-955f-233c4a608b23}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{c7cc9002-1a07-44e9-88ed-3547b9725322}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Breuer\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-15]

FireFox:
========
FF DefaultProfile: 3qstuhn9.default
FF ProfilePath: C:\Users\Breuer\AppData\Roaming\Mozilla\Firefox\Profiles\3qstuhn9.default [2021-03-15]
FF ProfilePath: C:\Users\Breuer\AppData\Roaming\Mozilla\Firefox\Profiles\wo0bx4xp.default-release [2021-03-15]
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 ACCSvc; C:\Program Files (x86)\Acer\Care Center\ACCSvc.exe [301872 2018-08-13] (Acer Incorporated -> Acer Incorporated)
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S2 AllplanUpdateLauncher 2018; C:\Program Files\Allplan\AllplanUpdateLauncher 2018\AllplanUpdateLauncher.exe [15752 2018-06-18] (Allplan GmbH -> ALLPLAN GmbH)
S2 CmWebAdmin.exe; C:\Program Files\CodeMeter\Runtime\bin\CmWebAdmin.exe [11935680 2020-09-13] (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
S2 CxUtilSvc; C:\Program Files\Sennheiser\SA3\Sennheiser\CxUtilSvc.exe [109184 2019-07-27] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
S2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2019-01-21] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [15872 2016-11-25] () [Datei ist nicht signiert]
R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [72832 2017-07-14] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2535000 2021-02-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3480152 2021-02-24] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-26] (Overwolf Ltd -> Overwolf LTD)
S3 PSSvc; C:\Program Files (x86)\Acer\PredatorSense Service\PSSvc.exe [717120 2018-09-10] (Acer Incorporated -> Acer Incorporated)
S3 QALSvc; C:\Program Files\Acer\Quick Access Service\QALSvc.exe [465960 2020-09-10] (Acer Incorporated -> Acer Incorporated)
S3 QASvc; C:\Program Files\Acer\Quick Access Service\QASvc.exe [526888 2020-09-10] (Acer Incorporated -> Acer Incorporated)
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10969104 2020-11-17] (TeamViewer Germany GmbH -> TeamViewer GmbH)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program Service\Framework\UBTService.exe [304944 2018-06-28] (Acer Incorporated -> Acer Incorporated)
S2 UIUMPService; C:\WINDOWS\SysWOW64\UIUMPSrv.exe [104960 2019-07-27] (Conexant Systems, Inc.) [Datei ist nicht signiert]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AcerAirplaneModeController; C:\WINDOWS\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2021-03-15] (Malwarebytes Corporation -> Malwarebytes)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220616 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-03-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [155360 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 usbaud; C:\WINDOWS\system32\DRIVERS\usbaud64.sys [1911288 2019-07-27] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-03-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [420072 2021-03-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-14] (Microsoft Windows -> Microsoft Corporation)
S4 NVHDA; \SystemRoot\system32\drivers\nvhda64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-15 12:24 - 2021-03-15 12:24 - 000022287 _____ C:\Users\Breuer\Downloads\FRST.txt
2021-03-15 12:24 - 2021-03-15 12:24 - 000000000 ____D C:\FRST
2021-03-15 12:23 - 2021-03-15 12:23 - 002300928 _____ (Farbar) C:\Users\Breuer\Downloads\FRST64.exe
2021-03-15 12:14 - 2021-03-15 12:14 - 000002268 _____ C:\Users\Breuer\Desktop\Rogue.txt
2021-03-15 12:09 - 2021-03-15 12:14 - 000000000 ____D C:\ProgramData\RogueKiller
2021-03-15 12:06 - 2021-03-15 12:06 - 000001893 _____ C:\Users\Breuer\Desktop\AdwCleaner[C00].txt
2021-03-15 12:04 - 2021-03-15 12:06 - 000000000 ____D C:\AdwCleaner
2021-03-15 12:02 - 2021-03-15 12:02 - 000037200 _____ C:\Users\Breuer\Desktop\MBAM.txt
2021-03-15 12:01 - 2021-03-15 12:01 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2021-03-15 12:01 - 2021-03-15 12:01 - 000155360 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2021-03-15 12:01 - 2021-03-15 12:01 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2021-03-15 11:53 - 2021-03-15 11:53 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-03-15 11:53 - 2021-03-15 11:53 - 000220616 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-03-15 11:53 - 2021-03-15 11:53 - 000002037 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-03-15 11:53 - 2021-03-15 11:53 - 000002025 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-03-15 11:53 - 2021-03-15 11:53 - 000000000 ____D C:\Users\Breuer\AppData\Local\mbam
2021-03-15 11:53 - 2021-03-15 11:52 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-03-15 11:53 - 2021-03-15 11:52 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-03-15 11:52 - 2021-03-15 11:52 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-03-15 11:52 - 2021-03-15 11:52 - 000000000 ____D C:\Program Files\Malwarebytes
2021-03-15 11:44 - 2021-03-15 11:45 - 031051072 _____ C:\Users\Breuer\Downloads\RogueKiller_portable64.exe
2021-03-15 11:40 - 2021-03-15 11:40 - 008463216 _____ (Malwarebytes) C:\Users\Breuer\Downloads\adwcleaner_8.1.exe
2021-03-15 11:40 - 2021-03-15 11:40 - 002084016 _____ (Malwarebytes) C:\Users\Breuer\Downloads\MBSetup.exe
2021-03-15 11:31 - 2021-03-15 12:18 - 000000000 ____D C:\Users\Breuer\AppData\LocalLow\Mozilla
2021-03-15 11:31 - 2021-03-15 11:31 - 000000000 ____D C:\Users\Breuer\AppData\Roaming\Mozilla
2021-03-15 11:31 - 2021-03-15 11:31 - 000000000 ____D C:\Users\Breuer\AppData\Local\Mozilla
2021-03-11 08:35 - 2021-03-11 08:35 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-11 08:35 - 2021-03-11 08:35 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-11 08:35 - 2021-03-11 08:35 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-11 08:35 - 2021-03-11 08:35 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-11 08:35 - 2021-03-11 08:35 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-11 08:35 - 2021-03-11 08:35 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-11 08:35 - 2021-03-11 08:35 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-11 08:35 - 2021-03-11 08:35 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-11 08:34 - 2021-03-11 08:34 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-11 08:34 - 2021-03-11 08:34 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-11 08:34 - 2021-03-11 08:34 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-05 20:07 - 2021-03-05 20:08 - 000000000 ____D C:\Users\Jasmin\Desktop\Wallpaper
2021-03-05 18:24 - 2021-03-15 12:19 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-05 18:24 - 2021-03-05 18:24 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-05 18:23 - 2021-03-05 18:23 - 000333120 _____ (Mozilla) C:\Users\Jasmin\Downloads\Firefox_Installer.exe
2021-03-05 18:19 - 2021-03-14 22:44 - 000000000 ____D C:\Users\Jasmin\AppData\LocalLow\Mozilla
2021-03-05 18:19 - 2021-03-05 18:19 - 000000000 ____D C:\Users\Jasmin\AppData\Roaming\Mozilla
2021-03-05 18:19 - 2021-03-05 18:19 - 000000000 ____D C:\Users\Jasmin\AppData\Local\Mozilla

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-15 12:14 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-15 12:09 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-15 12:06 - 2018-12-06 07:52 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-15 12:01 - 2020-11-09 12:38 - 000000000 __SHD C:\Users\Breuer\IntelGraphicsProfiles
2021-03-15 12:01 - 2020-11-06 23:20 - 000000306 __RSH C:\ProgramData\ntuser.pol
2021-03-15 12:01 - 2020-09-18 17:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-15 12:01 - 2020-09-18 17:18 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-15 12:01 - 2019-12-07 10:03 - 001835008 _____ C:\WINDOWS\system32\config\BBI
2021-03-15 12:01 - 2019-08-23 15:02 - 000000068 ___SH C:\WINDOWS\system32\Drivers\xinputhid.winsecurity
2021-03-15 12:01 - 2019-08-23 15:02 - 000000068 ___SH C:\WINDOWS\system32\Drivers\WUDFPf.winsecurity
2021-03-15 12:01 - 2019-08-23 15:02 - 000000068 ___SH C:\WINDOWS\system32\Drivers\ws2ifsl.winsecurity
2021-03-15 12:01 - 2019-08-23 15:02 - 000000068 ___SH C:\WINDOWS\system32\Drivers\vwifibus.winsecurity
2021-03-15 12:00 - 2020-09-18 17:19 - 000000000 ____D C:\Users\flaus
2021-03-15 12:00 - 2018-12-06 07:38 - 000000000 ____D C:\ProgramData\Package Cache
2021-03-15 11:53 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-03-15 11:30 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-03-15 11:02 - 2020-09-18 17:18 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-15 07:46 - 2018-12-06 08:09 - 000000000 ____D C:\ProgramData\Acer
2021-03-15 07:37 - 2020-09-18 17:22 - 001723002 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-15 07:37 - 2019-12-07 15:50 - 000744968 _____ C:\WINDOWS\system32\perfh007.dat
2021-03-15 07:37 - 2019-12-07 15:50 - 000150354 _____ C:\WINDOWS\system32\perfc007.dat
2021-03-14 22:50 - 2020-09-18 17:18 - 000266768 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-14 22:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-14 22:50 - 2018-12-06 08:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-14 21:26 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-14 21:26 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-14 19:56 - 2018-12-06 07:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-14 19:47 - 2020-09-18 08:24 - 000000000 __SHD C:\Users\Jasmin\IntelGraphicsProfiles
2021-03-14 19:46 - 2020-11-20 22:30 - 000000000 ____D C:\Users\flaus\AppData\Local\Overwolf
2021-03-13 19:04 - 2019-09-22 15:55 - 000000000 ____D C:\Users\flaus\AppData\Roaming\Sky Go
2021-03-13 15:24 - 2019-09-22 15:54 - 000000000 ____D C:\Users\flaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky
2021-03-13 15:23 - 2019-07-26 12:11 - 000000000 ___RD C:\Users\flaus\OneDrive
2021-03-13 15:22 - 2020-09-18 17:26 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1791537855-830472137-460834462-1001
2021-03-13 15:22 - 2020-09-18 17:19 - 000002426 _____ C:\Users\flaus\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-12 20:22 - 2020-11-16 09:54 - 000002416 _____ C:\Users\Breuer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-03-12 20:22 - 2020-11-16 09:54 - 000002408 _____ C:\Users\Breuer\Desktop\Microsoft Teams.lnk
2021-03-12 19:54 - 2020-09-18 17:26 - 000003688 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-12 19:54 - 2020-09-18 17:26 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-12 19:54 - 2018-12-06 08:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-03-12 19:52 - 2020-08-01 12:18 - 000002423 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-11 12:00 - 2019-08-21 15:59 - 000002140 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-03-11 08:37 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-11 08:32 - 2019-08-14 11:46 - 000000000 ____D C:\Program Files (x86)\Origin
2021-03-11 08:32 - 2019-08-14 11:40 - 000000000 ____D C:\ProgramData\Origin
2021-03-11 08:21 - 2019-07-26 14:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-11 08:20 - 2020-11-30 09:03 - 000000000 ____D C:\Users\Breuer\AppData\Local\CrashDumps
2021-03-11 08:19 - 2020-09-18 11:21 - 000000000 ___HD C:\$WinREAgent
2021-03-11 08:19 - 2019-07-26 14:45 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-09 14:30 - 2020-11-20 22:30 - 000000000 ____D C:\Program Files (x86)\Overwolf
2021-03-08 08:16 - 2020-09-18 08:25 - 000000000 ____D C:\Users\Jasmin\AppData\Local\CrashDumps
2021-03-06 23:49 - 2020-09-18 19:07 - 000000000 ____D C:\Users\Jasmin\AppData\Local\Battle.net
2021-03-06 23:49 - 2020-09-18 08:36 - 000000000 ____D C:\Users\Jasmin\AppData\Roaming\Discord
2021-03-05 18:24 - 2018-12-06 08:12 - 000001232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-05 18:10 - 2019-08-28 16:19 - 000000000 ____D C:\Users\flaus\AppData\Roaming\Twitch
2021-03-05 17:54 - 2020-09-18 16:59 - 000001894 _____ C:\Users\Jasmin\Desktop\Twitch.lnk
2021-03-05 08:18 - 2020-11-09 12:39 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1791537855-830472137-460834462-1012
2021-03-05 08:18 - 2020-11-09 12:39 - 000000000 ___RD C:\Users\Breuer\OneDrive
2021-03-05 08:18 - 2020-11-09 12:38 - 000002429 _____ C:\Users\Breuer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-04 19:39 - 2020-12-06 19:00 - 000002178 _____ C:\Users\Jasmin\Desktop\CurseForge.lnk
2021-03-04 19:39 - 2020-11-21 19:49 - 000000000 ____D C:\Users\Jasmin\AppData\Local\OverWolf
2021-03-04 19:21 - 2020-09-18 17:26 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1791537855-830472137-460834462-1009
2021-03-04 19:21 - 2020-09-18 17:19 - 000002429 _____ C:\Users\Jasmin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-04 19:21 - 2020-09-18 08:26 - 000000000 ___RD C:\Users\Jasmin\OneDrive
2021-02-28 09:43 - 2021-01-25 13:59 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-02-27 20:46 - 2019-07-26 12:46 - 000000000 ____D C:\Program Files (x86)\Battle.net
2021-02-26 07:56 - 2020-09-18 17:26 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-02-19 17:35 - 2020-09-22 18:52 - 000000000 ____D C:\Users\Jasmin\AppData\Roaming\Origin
2021-02-19 17:23 - 2019-08-14 14:06 - 000000000 ____D C:\Program Files (x86)\Origin Games
2021-02-19 17:22 - 2020-09-22 18:52 - 000000000 ____D C:\Users\Jasmin\AppData\Local\Origin
2021-02-19 17:22 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-03-2021
durchgeführt von Breuer (15-03-2021 12:25:14)
Gestartet von C:\Users\Breuer\Downloads
Windows 10 Home Version 2004 19041.867 (X64) (2020-09-18 16:26:57)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1791537855-830472137-460834462-500 - Administrator - Disabled)
Breuer (S-1-5-21-1791537855-830472137-460834462-1012 - Administrator - Enabled) => C:\Users\Breuer
DefaultAccount (S-1-5-21-1791537855-830472137-460834462-503 - Limited - Disabled)
Gast (S-1-5-21-1791537855-830472137-460834462-501 - Limited - Disabled)
Jasmin (S-1-5-21-1791537855-830472137-460834462-1009 - Administrator - Enabled) => C:\Users\Jasmin
S&P_Breuer (S-1-5-21-1791537855-830472137-460834462-1001 - Administrator - Enabled) => C:\Users\flaus
WDAGUtilityAccount (S-1-5-21-1791537855-830472137-460834462-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Acer Configuration Manager (HKLM-x32\...\{414D554E-4453-454E-0201-000000016258}) (Version: 2.1.16258 - Acer)
Acer Jumpstart (HKLM-x32\...\{353B4583-ED04-4DF2-A1D6-A5A3EF5C4EBF}) (Version: 3.2.18270.20 - Acer)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 21.001.20145 - Adobe Systems Incorporated)
Affinity Photo (HKLM\...\{D39FC096-62B2-4F21-BA48-04DAC525F929}) (Version: 1.8.3.641 - Serif (Europe) Ltd)
Allplan 2018 (HKLM-x32\...\{364FB963-78C6-4DBE-B66C-F43295E11793}) (Version: 2018.0 - Allplan GmbH)
Ashampoo ZIP Free (HKLM-x32\...\{0A11EA01-5173-F4C2-0973-35C932D5C674}_is1) (Version: 1.0.7 - Ashampoo GmbH & Co. KG)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Care Center Service (HKLM\...\{7409ED35-2013-4F8D-9C06-61B70E807660}) (Version: 3.00.3008 - Acer Incorporated)
CodeMeter Runtime Kit v7.10a (HKLM\...\{09EE0E38-7A94-462F-99AC-4F05E092D935}) (Version: 7.10.4196.501 - WIBU-SYSTEMS AG)
CurseForge (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.168.2.1 - Overwolf app)
CurseForge (HKU\S-1-5-21-1791537855-830472137-460834462-1009\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.168.2.1 - Overwolf app)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Diablo II (HKLM-x32\...\Diablo II) (Version: 0.0.0.0 - Blizzard Entertainment)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.70.84.1020 - Electronic Arts Inc.)
Die Sims™ 4 Ab ins Schneeparadies (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}_The Sims 4 Snowy Escape) (Version: 38.0.175.1020 - Electronic Arts Inc.)
Discord (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Discord) (Version: 0.0.308 - Discord Inc.)
Discord (HKU\S-1-5-21-1791537855-830472137-460834462-1009\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dolby Audio X2 Windows API SDK (HKLM\...\{F290F786-5F69-48D4-B20B-D21C7DE56EF0}) (Version: 0.8.8.88 - Dolby Laboratories, Inc.)
Dolby Audio X2 Windows APP (HKLM\...\{4A02DCED-C2B0-4DD3-87BD-7D8E68D6AF3C}) (Version: 0.8.6.75 - Dolby Laboratories, Inc.)
DriverSetupUtility (HKLM\...\{2B51C83A-465D-4EA9-9CDC-1ED95ED09AC6}) (Version: 1.00.3026 - Acer Incorporated)
Epic Games Launcher (HKLM-x32\...\{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
FARO LS 1.1.600.6 (64bit) (HKLM-x32\...\{510A08AF-1649-4844-94E5-EAC43A023685}) (Version: 6.0.6.5 - FARO Scanner Production)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
General Runtime Files for Allplan 2018-1-12 (HKLM-x32\...\{9A0E044F-DDDF-CBEC-6205-47C96FE1DA9F}) (Version: 1.11.0.0 - ALLPLAN Deutschland GmbH) Hidden
General Runtime Files for Allplan 2018-1-12 x64 (HKLM\...\{A2F8F5CD-14CE-E0E0-155C-D6446DFC6912}) (Version: 1.8.0.0 - ALLPLAN Deutschland GmbH) Hidden
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{AA67D612-0BE5-44D6-9A91-592958F754A1}) (Version: 13.0.198 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1805.12.0.1097 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 23.20.16.5018 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.7.1.1012 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.1727.1 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{66129f84-d3f0-4884-ac54-369ae6fc2cf6}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{55d73ea7-6354-42db-8831-02d048ae57f8}) (Version: 10.1.17541.8066 - Intel(R) Corporation) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 89.0.774.50 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\OneDriveSetup.exe) (Version: 21.030.0211.0002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1791537855-830472137-460834462-1009\...\OneDriveSetup.exe) (Version: 21.030.0211.0002 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1791537855-830472137-460834462-1012\...\OneDriveSetup.exe) (Version: 21.030.0211.0002 - Microsoft Corporation)
Microsoft Report Viewer 2012 Runtime (HKLM-x32\...\{A047101C-A3AE-4FAD-802F-01C965079F66}) (Version: 11.1.3010.3 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft System CLR Types for SQL Server 2012 (x64) (HKLM\...\{99AC7F47-A4E0-4706-9C65-8948775C2652}) (Version: 11.1.3000.0 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\Teams) (Version: 1.3.00.13565 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-1791537855-830472137-460834462-1012\...\Teams) (Version: 1.4.00.4167 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{99FAF70F-9B61-4AB0-9EC0-B31F98FFDC4A}) (Version: 2.75.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 86.0 (x64 de) (HKLM\...\Mozilla Firefox 86.0 (x64 de)) (Version: 86.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 86.0 - Mozilla)
NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)
NVIDIA Grafiktreiber 461.09 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 461.09 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OpenVPN 2.4.3-I602  (HKLM\...\OpenVPN) (Version: 2.4.3-I602 - OpenVPN Technologies, Inc.)
Origin (HKLM-x32\...\Origin) (Version: 10.5.94.46774 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.166.1.16 - Overwolf Ltd.)
PredatorSense Service (HKLM-x32\...\{4363B9A5-03C2-48DD-A76A-A84685C2DC3F}) (Version: 3.01.3002 - Acer Incorporated)
Quick Access Service (HKLM\...\{AB25551C-74EF-4BAB-9989-891517FCF9FF}) (Version: 3.00.3017 - Acer Incorporated)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.16299.21304 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.31.828.2018 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8907.1 - Realtek Semiconductor Corp.)
ROCCAT Swarm (HKLM-x32\...\{1594022A-AB87-4C5B-A12A-14E4B4D8EAFF}) (Version: 1.93.820 - ROCCAT GmbH) Hidden
ROCCAT Swarm (HKLM-x32\...\InstallShield_{1594022A-AB87-4C5B-A12A-14E4B4D8EAFF}) (Version: 1.93.820 - ROCCAT GmbH)
Sennheiser Audio (HKLM\...\Sennheiser Game Dongle) (Version: 1.31.35.10 - Sennheiser)
Sennheiser Audio (HKLM-x32\...\{1CAB4BF9-BDFF-4FDA-9633-F22EEB518488}) (Version: 1.0.15.0 - Sennheiser)
Sky Go 21.2.2.0 (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\com.bskyb.skygoplayer_is1) (Version: 21.2.2.0 - Sky)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\TeamSpeak 3 Client) (Version: 3.3.0 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.259024 - TeamViewer)
Twitch (HKU\S-1-5-21-1791537855-830472137-460834462-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Twitch (HKU\S-1-5-21-1791537855-830472137-460834462-1009\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{2E8B8BDD-03DF-4C1C-8C99-E6A4BCBF43CE}) (Version: 2.51.0.0 - Microsoft Corporation)
User Experience Improvement Program Service (HKLM\...\{E9495FD3-F73D-4D33-A104-047F9E8BE6C7}) (Version: 4.00.3004 - Acer Incorporated)
Verfügbare Autodesk-Apps 2016-2018 (HKLM-x32\...\{384C4B74-B749-4AB6-9367-4D51A6AA9CB8}) (Version: 2.4.0 - Autodesk)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.7.1 - VideoLAN)
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-2) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.1.70.0 (HKLM\...\VulkanRT1.1.70.0-3) (Version: 1.1.70.0 - LunarG, Inc.) Hidden
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warcraft Classic (HKLM-x32\...\World of Warcraft Classic) (Version:  - Blizzard Entertainment)
XSplit Gamecaster (HKLM-x32\...\{1B52322C-EEDB-42CE-BF10-DC577E89DDB6}) (Version: 3.1.1708.2943 - SplitmediaLabs)

Packages:
=========
Acer Collection S -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCollectionS_1.0.3004.0_x64__48frkmn4z8aw4 [2019-07-26] (Acer Incorporated)
Acer Product Registration -> C:\Program Files\WindowsApps\AcerIncorporated.AcerRegistration_2.0.3013.0_x64__48frkmn4z8aw4 [2019-12-11] (Acer Incorporated)
Care Center -> C:\Program Files\WindowsApps\AcerIncorporated.AcerCareCenter_3.0.3008.0_x64__48frkmn4z8aw4 [2018-12-06] (Acer Incorporated)
Ihr Smartphone -> C:\Program Files\WindowsApps\Microsoft.YourPhone_1.20092.123.0_x64__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
LinkedIn -> C:\Program Files\WindowsApps\7EE7776C.LinkedInforWindows_2.1.7098.0_neutral__w1wdnht996qgy [2019-07-26] (LinkedIn)
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.8101.0_x64__8wekyb3d8bbwe [2020-08-19] (Microsoft Studios) [MS Ad]
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.13231.20390.0_x86__8wekyb3d8bbwe [2020-10-19] (Microsoft Corporation)
Microsoft-Remotedesktop -> C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.2.1534.0_x64__8wekyb3d8bbwe [2020-09-29] (Microsoft Corporation)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-18] (Netflix, Inc.)
PhotoDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PhotoDirectorforacerDesktop_8.0.5229.0_x64__ypz87dpxkv292 [2019-07-26] (CYBERLINK COM CORP)
PowerDirector for acer -> C:\Program Files\WindowsApps\CyberLinkCorp.ac.PowerDirectorforacerDesktop_14.0.4304.0_x64__ypz87dpxkv292 [2018-12-06] (CYBERLINK COM CORP)
PredatorSense_V31 -> C:\Program Files\WindowsApps\AcerIncorporated.PredatorSenseV31_3.1.3002.0_x64__48frkmn4z8aw4 [2018-12-06] (Acer Incorporated)
QuickAccess -> C:\Program Files\WindowsApps\AcerIncorporated.QuickAccess_3.0.3009.0_x64__48frkmn4z8aw4 [2019-10-11] (Acer Incorporated)
Übersetzer -> C:\Program Files\WindowsApps\Microsoft.BingTranslator_5.6.0.0_x64__8wekyb3d8bbwe [2019-08-02] (Microsoft Corporation)
User Experience Improvement Program -> C:\Program Files\WindowsApps\AcerIncorporated.UserExperienceImprovementProgram_4.0.3004.0_x64__48frkmn4z8aw4 [2018-12-06] (Acer Incorporated)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1791537855-830472137-460834462-1012_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Breuer\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20289.5\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1791537855-830472137-460834462-1012_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Breuer\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll => Keine Datei
ContextMenuHandlers1-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers1: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT64.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-15] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_6bb02522ea3fdb0d\igfxDTCM.dll [2018-05-22] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2020-12-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6-x32: [ASZipF] -> {e03d3e68-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [ASZipF64] -> {e03d3e78-0f44-3d45-b15f-bcfd8a8b4c7e} => C:\Program Files (x86)\Ashampoo\Ashampoo ZIP Free\ASZSHLEXT64.DLL [2017-10-10] (Ashampoo GmbH & Co. KG -> Ashampoo GmbH)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-03-15] (Malwarebytes Corporation -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [447752 2014-09-16] (Electronic Arts -> On2.com)

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============


==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Windows:CM_27543075bfe25de71fba632609d9a8c299aaa834b4b39fb5e96af4087605169d [74]
AlternateDataStreams: C:\Windows:CM_9e91cb0270ae4957f35e15b3e4fbc0435a493f2da610f65678bd90d060ec2b93 [74]
AlternateDataStreams: C:\Windows:CM_cdfdf49505024624d2decf3e9557d51162be6aba9545d69de4a936f7ba6139f4 [74]
AlternateDataStreams: C:\Windows:CM_d1cca5b43b23e7a102fa897d892102fdacb2faaf6f5875efce3bd0a2c56874f8 [74]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-1791537855-830472137-460834462-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://acer17win10.msn.com/?pc=ACTE

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2018-04-12 00:38 - 2018-04-12 00:36 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Intel\Shared Libraries\redist\intel64\compiler;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Windows Live\Shared;C:\Program Files\OpenVPN\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\nodejs\
HKU\S-1-5-21-1791537855-830472137-460834462-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\flaus\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\desktop-hintergrund.bmp
HKU\S-1-5-21-1791537855-830472137-460834462-1009\Control Panel\Desktop\\Wallpaper -> c:\users\jasmin\desktop\4fadf8c7276a6fba1de5c1c1de7ce43e.jpg
HKU\S-1-5-21-1791537855-830472137-460834462-1012\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxGipSvc => 3
MSCONFIG\Services: XboxNetApiSvc => 3
HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{295DA4B9-C5C7-42DD-87DA-80523709A0C8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{475C2B58-8A6C-417B-BF7A-4376EDFF4930}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{759B8FB4-77A7-4091-AED5-4A690F0A5867}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8DF66B2A-3303-45DE-B375-3E52E113B573}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.64.80.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{215AB18D-59DB-49D6-BE5B-365DFF4A9264}] => (Allow) D:\Games\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]
FirewallRules: [{47ECE270-9148-4EF5-B4CA-E0C6293C7F12}] => (Allow) D:\Games\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]
FirewallRules: [{199FE2D3-BD41-4899-A4E5-02B418987E5D}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{9931A620-FFB0-40EA-9789-89F2558CE621}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{531AD849-BF27-4AAE-B648-94EE4B8F2F3B}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{E1BC03BB-5E84-4106-9341-C9DE61B1607F}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{729EAB52-943D-4F3C-877B-6048E82BF4C3}C:\users\flaus\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\flaus\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{A04274E1-D8F0-4F08-BB4C-CFA6E7ACA7B1}C:\users\flaus\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\flaus\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{232D0E20-CB61-4210-8F54-67585B474A8B}] => (Allow) LPort=1900
FirewallRules: [{B12BCCDA-FFCB-49C6-BD5D-DB3C6E714FAE}] => (Allow) LPort=2869
FirewallRules: [{A45D3189-A58D-4F98-9D85-B1BF7E8A75F3}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{263FF51E-8137-4232-BA5C-58DE9E0E56E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{5ED402E8-A57F-43AE-98E9-50DCF33874F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B5C40990-1A50-4366-B50B-23FE27A4F548}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe (SplitmediaLabs Limited -> SplitmediaLabs)
FirewallRules: [{22831612-3391-4C9B-8F0A-0976BC145C12}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.Gamecaster.exe (SplitmediaLabs Limited -> SplitmediaLabs)
FirewallRules: [{DEBB71B3-77D1-4781-A8ED-9727323D62DE}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe (SplitmediaLabs Limited -> SplitmediaLabs Limited)
FirewallRules: [{DA96887D-202C-45F5-AA9A-009D32C786AC}] => (Allow) C:\Program Files (x86)\SplitmediaLabs\XSplit Gamecaster\XSplit.cam.exe (SplitmediaLabs Limited -> SplitmediaLabs Limited)
FirewallRules: [{C1958358-749D-4EE5-8E3C-6E5F29394987}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{978947C8-3E16-4D66-BFAD-872AEF436564}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{9B10145E-A450-4C47-9B73-06600A51B0AD}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe (Voyetra Turtle Beach, Inc. -> ROCCAT)
FirewallRules: [UDP Query User{49EDABB9-6D48-4368-AD7F-E4A90EE785C2}C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe] => (Allow) C:\program files (x86)\roccat\roccat swarm\roccat_swarm_monitor.exe (Voyetra Turtle Beach, Inc. -> ROCCAT)
FirewallRules: [{EFD7868F-875F-4A3C-9CF4-1DD84B72FA41}] => (Allow) D:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{D176437B-91F1-4FCC-80BF-6C0314FA018D}] => (Allow) D:\Games\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{ECC2C909-F743-41ED-8E5F-2F42E6B9DB96}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{79A2D82D-33CC-4CE6-94A5-B47D70D36CE4}] => (Allow) D:\Games\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{7AEB3B9A-5762-4A52-8D39-8DC919E30BE3}] => (Allow) D:\Games\Steam\steamapps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe (CAPCOM U.S.A, INC.) [Datei ist nicht signiert]
FirewallRules: [{E683E83F-9AA4-456F-A9AC-81A948A5BC2F}] => (Allow) D:\Games\Steam\steamapps\common\Super Street Fighter IV - Arcade Edition\SSFIV.exe (CAPCOM U.S.A, INC.) [Datei ist nicht signiert]
FirewallRules: [{6B99BF88-3A4E-4B48-A29A-4A9871A5A232}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{A02BA9F2-AFC6-4A0C-AE74-54BCCBA508E4}] => (Allow) D:\Games\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )
FirewallRules: [{92C810F5-4F6D-4351-A97E-D1CCE841F110}] => (Allow) D:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{DED9903B-A206-4D63-9B3F-488F7933465F}] => (Allow) D:\Games\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{ECA9DBC2-E779-4D1B-8B5C-31983B916E08}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe => Keine Datei
FirewallRules: [{7E07CBFD-9688-4016-A4EC-011C6B8B565E}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe => Keine Datei
FirewallRules: [TCP Query User{B603BF14-8508-409B-8043-5BB1D694A85F}D:\games\world of warcraft\_classic_\utils\wowvoiceproxy.exe] => (Allow) D:\games\world of warcraft\_classic_\utils\wowvoiceproxy.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{940AB2A5-8782-432B-992E-D70C0CCE2D39}D:\games\world of warcraft\_classic_\utils\wowvoiceproxy.exe] => (Allow) D:\games\world of warcraft\_classic_\utils\wowvoiceproxy.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{F6CE5CF5-8D2D-4D84-94FB-410FA3370C67}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{75D5D73E-E090-47D4-AC1C-60FDD1867699}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D5F685C0-69A8-4E16-9DE9-8DFB37B556F5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C9C45F89-AB71-4375-AC8C-AED9D09E0B20}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{5456C723-1774-4704-9C04-F51003225B4D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{BCBB5787-631D-45D2-9818-233A8F5BD289}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A887F227-D559-42CB-AD87-8E6600C3E8D3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DB889AB7-B0BC-4E67-841F-8454707B876D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.143.700.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{B65428AE-E3C2-4F99-B76E-DA6177052EF2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{25240923-1A28-40D6-B44D-AE94EB1FD0E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8F9CA92D-DF40-4BA8-96DF-0BED44A3CD58}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{7203EE77-89F5-475E-A08C-897630E4AD74}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8C1BC7C8-B71E-4EB0-AC3B-B4C6950ED711}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{C238C970-982C-4024-8FBC-EBBBD813F8EE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{881921B1-63EB-4501-8F83-3467075D875C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{9088EF4C-937E-42B5-8924-E7278E3E42F2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.144.538.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DD493FED-446F-4A87-AA46-B00D02BF9820}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.13231.20390.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B1A096F9-DBE8-4F46-95CE-E0A34005B495}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{49480BD8-E1FF-4A63-88D5-395086336203}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2BBF6C12-EB59-445C-86DE-E598E103D78E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{B95FC9BF-43F7-4197-815B-BDB54272A5DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{BBCB54D6-8276-405D-914E-0B4BF33DAD13}] => (Allow) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe (WIBU-SYSTEMS AG -> WIBU-SYSTEMS AG)
FirewallRules: [{362C4E1D-0A2E-47AE-A9B9-5CE29F0CC834}] => (Allow) D:\Games\Steam\steamapps\common\Soundpad\Soundpad.exe (Arthur Lepp -> Leppsoft)
FirewallRules: [{647421B4-76EB-4BD5-B9FB-52180E50C99E}] => (Allow) D:\Games\Steam\steamapps\common\Soundpad\Soundpad.exe (Arthur Lepp -> Leppsoft)
FirewallRules: [TCP Query User{9619D558-9203-4EFF-B463-5C0B3E1E0862}D:\games\overwatch\_retail_\overwatch.exe] => (Allow) D:\games\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{D173206A-FE71-47FA-A6FE-98A296DF3472}D:\games\overwatch\_retail_\overwatch.exe] => (Allow) D:\games\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{CB1BACA5-279A-49F5-BC3A-E0652FF62BE0}] => (Allow) D:\Games\Steam\steamapps\common\Scribble It!\ScribbleIt.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{E7ED63F6-23E9-42B5-B284-6F169DF054A8}] => (Allow) D:\Games\Steam\steamapps\common\Scribble It!\ScribbleIt.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{04BEC917-4D2B-4254-8FBE-30A87B7D4A97}] => (Allow) D:\Games\Steam\steamapps\common\Scribble It!\ScribbleIt\Binaries\Win64\ScribbleIt-Win64-Shipping.exe (Detach Entertainment) [Datei ist nicht signiert]
FirewallRules: [{A51CA69C-6C55-4DFF-80B4-E988941C08BC}] => (Allow) D:\Games\Steam\steamapps\common\Scribble It!\ScribbleIt\Binaries\Win64\ScribbleIt-Win64-Shipping.exe (Detach Entertainment) [Datei ist nicht signiert]
FirewallRules: [{8FFB0428-807E-49E5-B1AA-538E6F493950}] => (Allow) D:\Games\Steam\steamapps\common\Overcooked! 2\Overcooked2.exe () [Datei ist nicht signiert]
FirewallRules: [{C44F6FF0-9B78-4EE2-A72C-F980C2EB0406}] => (Allow) D:\Games\Steam\steamapps\common\Overcooked! 2\Overcooked2.exe () [Datei ist nicht signiert]
FirewallRules: [{CA66E12C-B1EB-48C5-84ED-73C4D2E6A7B5}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer GmbH)
FirewallRules: [{DE43C903-FF08-40FF-820D-90E5C3DCB260}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer GmbH)
FirewallRules: [{3013BAA5-491D-4460-BC60-AB0D2F680187}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer GmbH)
FirewallRules: [{E3B7F4D9-B8CD-4988-BCD5-6892E3156C62}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer GmbH)
FirewallRules: [{A0897CCF-B733-4337-94DD-9ED6E5EBE99E}] => (Allow) D:\Games\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe (G=Barrel Roll Games) [Datei ist nicht signiert]
FirewallRules: [{52CA5B4E-5332-4BB5-9BCD-03E1002FE857}] => (Allow) D:\Games\Steam\steamapps\common\WitchIt\WitchIt\Binaries\Win64\PropWitchHuntModule-Win64-Shipping.exe (G=Barrel Roll Games) [Datei ist nicht signiert]
FirewallRules: [{10D5EE01-2247-45F4-8133-61CC28FF5992}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{717A948E-6D1E-48CE-A8AA-6DA0D088481B}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin_LE\TS4.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{F2ADB679-23C2-43CA-ADB6-8B8E3E2EA1AA}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{A9C8FD70-1A79-4845-86F7-8DC35D738437}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{7C38CEAB-E6C4-4F6D-9F23-E47E5C3868FD}] => (Allow) C:\Program Files (x86)\Overwolf\0.166.1.16\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{03E998B1-F740-46AC-AD3D-5EE7750DAC88}] => (Allow) C:\Program Files (x86)\Overwolf\0.166.1.16\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{796D5B75-5160-4794-9693-3707BD67E6B0}] => (Block) C:\Program Files (x86)\Overwolf\0.166.1.16\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{66D71DB7-518A-4AFA-BE44-33106F19ABC2}] => (Block) C:\Program Files (x86)\Overwolf\0.166.1.16\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
DomainProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe] => Enabled:CodeMeter Runtime Server

==================== Wiederherstellungspunkte =========================

28-02-2021 22:01:06 Windows Modules Installer
08-03-2021 08:28:04 Geplanter Prüfpunkt
11-03-2021 08:31:06 Windows Modules Installer

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (03/15/2021 12:01:25 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.

Error: (03/15/2021 12:01:25 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]

Error: (03/14/2021 10:48:44 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: THATCHIMERAPC)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (03/14/2021 10:48:44 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: THATCHIMERAPC)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (03/14/2021 10:06:59 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf Data (D:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)

Error: (03/14/2021 07:46:03 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: THATCHIMERAPC)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (03/13/2021 03:22:40 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: THATCHIMERAPC)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (03/11/2021 08:20:41 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: RAVBg64.exe, Version: 1.0.296.1, Zeitstempel: 0x5d9d9331
Name des fehlerhaften Moduls: RAVBg64.exe, Version: 1.0.296.1, Zeitstempel: 0x5d9d9331
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000030aa1
ID des fehlerhaften Prozesses: 0x2f0c
Startzeit der fehlerhaften Anwendung: 0x01d716470ac443b9
Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
Berichtskennung: 0d9ad46a-973a-47f2-81f7-c4f516ac5c2a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Predator Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Quick Access Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dolby DAX2 API Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ACC Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Content Protection HECI Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Conexant UIU MP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (03/15/2021 12:06:25 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.


Windows Defender:
================
Date: 2021-03-14 21:26:06
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6BECFAF3-B17E-41D7-991C-BFD199F4798A}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2021-03-12 20:06:40
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {D889C78E-AA13-4986-B475-DDAAB957208A}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2021-03-11 08:31:04
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {DD6EB384-5132-4AE5-9F34-8A6050568087}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2021-03-09 08:36:30
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {7BF441D1-F90F-427C-A016-F10080080D53}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2021-03-08 08:24:01
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {43D760F8-31B4-424B-956D-EA94B5FD3CAD}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

CodeIntegrity:
===============
Date: 2021-03-15 11:54:40
Description: 
Windows blocked file \Device\HarddiskVolume3\Windows\System32\scrobj.dll which has been disallowed for protected processes.

Date: 2021-03-04 21:15:14
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.165.0.28\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2021-03-04 19:40:21
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Users\Jasmin\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.165.0.28\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2021-02-11 18:55:38
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Users\Jasmin\AppData\Local\Discord\app-0.0.309\Discord.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.162.0.13\win32\OWExplorer.dll that did not meet the Microsoft signing level requirements.

Date: 2021-01-25 17:56:12
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2021-01-12 17:27:48
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Overwolf\0.159.0.31\OWExplorer.dll that did not meet the Microsoft signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: Insyde Corp. V1.19 07/13/2018
Hauptplatine: CFL Sienna_CFS
Prozessor: Intel(R) Core(TM) i7-8750H CPU @ 2.20GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 16226.3 MB
Verfügbarer physikalischer RAM: 10950.98 MB
Summe virtueller Speicher: 18658.3 MB
Verfügbarer virtueller Speicher: 12083.41 MB

==================== Laufwerke ================================

Drive c: (Acer) (Fixed) (Total:237.35 GB) (Free:85.5 GB) NTFS
Drive d: (Data) (Fixed) (Total:931.51 GB) (Free:731.81 GB) NTFS

\\?\Volume{3b193c92-323b-46ed-869c-9f87c05128ea}\ (Recovery) (Fixed) (Total:1 GB) (Free:0.49 GB) NTFS
\\?\Volume{aec510e6-d8f3-4a88-b5b6-28444bba6cc7}\ (ESP) (Fixed) (Total:0.09 GB) (Free:0.04 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: F61285B2)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: F6128590)

Partition: GPT.

==================== Ende von Addition.txt =======================