Seit ein paar Tagen öffnet sich mein Browser nach einem System(neu)start automatisch und öffnet nacheinander 2 Tabs. In beiden Tabs wird auf "protected by reCAPTCHA" hingewiesen (siehe Anhang). In den geöffneten Tabs passiert sonst nix weiter. Der Browser hat keine Autostart funktion und soll auch keine Tabs wiederherrstellen. Ich hab Ihn auch schon deinstalliert. Das System versucht dann schlicht via Internetexplorer die Tabs mit dem selben Ergebnis zu starten. Eine vollständige Kontrolle durch Kaspersky hat kein Erfolg gebracht, ein booten via Kaspersky Secure Disk führte auch zu keinem Ergebnis.



FRST

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-09-2021 02
durchgeführt von mario (Administrator) auf LAPTOP-A8O9RBDC (HP OMEN by HP Laptop 17-an0xx) (01-10-2021 15:01:29)
Gestartet von C:\Users\mario\Desktop\FRST
Geladene Profile: mario
Platform: Windows 10 Home Version 21H1 19043.1237 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe
(Corsair Memory, Inc. -> Corsair) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe <7>
(Discord Inc. -> Discord Inc.) C:\Users\mario\AppData\Local\Discord\app-1.0.9003\Discord.exe <6>
(Electronic Arts, Inc. -> Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe <2>
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\BridgeCommunication.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe
(HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe
(Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avpui.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\mario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorsairGamingAudioCfgService64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Spotify AB -> Spotify Ltd) C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe <6>
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) D:\Steam\steam.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [321240 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709152 2018-03-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Steam] => D:\Steam\steam.exe [4282600 2021-09-17] (Valve -> Valve Corporation)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33337824 2021-09-22] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [launchOnStartup] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7611464 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Discord] => C:\Users\mario\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Spotify] => C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe [24743552 2021-09-22] (Spotify AB -> Spotify Ltd)
HKLM\...\Windows x64\Print Processors\Canon TS5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDQ.DLL [482816 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5100 series: C:\windows\system32\CNMLMDQ.DLL [1302016 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01E1407A-77A9-4968-A35A-BC3980208698} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {03C524DB-2611-450F-9559-F61486309BAE} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {232259B7-C1E2-4BA1-9D45-EC8BE6A551FB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {2C6D72B8-290F-4648-8CEF-C181BBF3EA8C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {340BCDEF-A370-497F-BFAD-24F578EA8E02} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-09-24] (Mozilla Corporation -> Mozilla Foundation)
Task: {3E6ECD32-C0E2-48BD-8112-8E8CAA285C37} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2150120 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {42519DF2-AE26-4841-B291-6D082BCC97BB} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4A615140-B80E-430F-AB96-F3F8C0E0D738} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {577684DD-2C50-44B9-A4B1-9AC9E0833127} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {57BF3EF0-5DB1-49ED-81A1-61084CBB861C} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68D9E81A-13FD-45BE-A8A0-302CA3FC8F80} - System32\Tasks\HP\HP CoolSense\HP CoolSense Start at Logon => C:\Program Files (x86)\HP\HP CoolSense\CoolSense.exe [1359728 2017-10-25] (HP Inc. -> HP Development Company, L.P.)
Task: {6A4DDB97-4FC5-4FFE-BE5A-9C826823D6A7} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {812D3D2B-9168-43C5-B9D5-61B15F7A7FD3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9679B4B5-9E2E-4471-A76F-347B6061E3B3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {AE975DD6-43B3-4DEA-8C8D-CA445135A37A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B4EAA4DE-E551-4282-B853-9876164056E1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BAEAE711-34F8-46CC-9A21-48DBB4C9AD23} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {BB1EA435-AB1D-4450-9434-99F8128B3371} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2021-09-02] (HP Inc. -> HP Inc.)
Task: {CFCF6E2F-BACA-47C6-B145-91E084A69D7D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {D888C1B5-FC34-4385-9D23-A8EDB996FF64} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [560816 2021-07-11] (HP Inc. -> HP Inc.)
Task: {D888DBB7-5C50-4489-8DEE-6C17C7409BFB} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {DAB3C388-B57D-4241-80D8-10C5777DEC85} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E4200084-73E9-483E-B3A4-9222848C2E42} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EB04C3FE-4D32-4A13-BA81-C095E82BC118} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ED24513D-4D7B-4738-818A-24B1CA825ABC} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1644472 2019-06-21] (HP Inc. -> HP Inc.)
Task: {EEC821E9-7884-4A13-A500-82D6A26A17D2} - System32\Tasks\HPJumpStartLaunch => C:\Program Files (x86)\HP\HP JumpStart Launch\HPJumpStartLaunch.exe [461824 2017-10-06] (HP Inc. -> HP Inc.)
Task: {F0607708-DAA1-46C4-9C2E-ED245BBDE3F1} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 217.68.162.126 62.117.5.126
Tcpip\..\Interfaces\{ae362ce0-3559-48ac-b1ba-5400f9c16e92}: [DhcpNameServer] 217.68.162.126 62.117.5.126

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-29]
Edge Extension: (Kaspersky Protection) - C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-09-29]
Edge HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]

FireFox:
========
FF DefaultProfile: tzu46wl5.default-1632897649030
FF ProfilePath: C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030 [2021-10-01]
FF Extension: (AdBlocker Ultimate) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\Extensions\adblockultimate@adblockultimate.net.xpi [2021-09-29]
FF Extension: (uBlock Origin) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\Extensions\uBlock0@raymondhill.net.xpi [2021-09-29]
FF Extension: (Proxy Failover) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\features\{4210c249-fbed-48ca-9520-ceb9d485974e}\proxy-failover@mozilla.com.xpi [2021-09-30]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Users\mario\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2018-12-06] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2018-12-06] <==== ACHTUNG

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm

Opera: 
=======
OPR Profile: C:\Users\mario\AppData\Roaming\Opera Software\Opera Stable [2021-09-30]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.de/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (uBlock Origin) - C:\Users\mario\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-05-05]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AVP21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avp.exe [184768 2021-06-17] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [616360 2021-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [456408 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairMsiPluginService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe [451808 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [80600 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [791112 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6841416 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [1321096 2018-09-28] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe [744000 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe [742480 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPJumpStartBridge; c:\Program Files (x86)\HP\HP JumpStart Bridge\HPJumpStartBridge.exe [477184 2017-10-06] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe [742488 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPOmenCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe [688160 2021-05-10] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1075744 2017-10-11] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe [743512 2021-08-27] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
S3 klvssbridge64_21.3; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\vssbridge64.exe [479280 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 kpm_launch_service; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm_service.exe [351424 2020-09-23] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 KSDE3.0.0; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksde.exe [617016 2018-02-28] (Kaspersky Lab -> AO Kaspersky Lab)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2557144 2021-09-10] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3475672 2021-09-10] (Electronic Arts, Inc. -> Electronic Arts)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-31] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [250032 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2021-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz150; C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [44832 2021-10-01] (CPUID S.A.R.L.U. -> CPUID)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [23960 2018-07-06] (HP Inc. -> HP Inc.)
R3 HPOmenCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys [23888 2020-04-21] (HP Inc. -> HP Inc.)
R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [110336 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [211704 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [126216 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-Malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [514840 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [674104 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\System32\drivers\klhk.sys [1469240 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [273176 2021-08-02] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1042712 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [98040 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [112392 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [112904 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [85256 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [96008 2021-06-17] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 kltap; C:\WINDOWS\System32\drivers\kltap.sys [48080 2018-02-12] (AnchorFree Inc -> The OpenVPN Project)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [265176 2021-09-20] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [315032 2021-09-20] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [113952 2021-09-20] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [225648 2021-09-29] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [155912 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [327936 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [300808 2021-02-19] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 MpKsl4fa241c9; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5BDB50D4-1F08-40C3-B2BD-BA0D2EF68B46}\MpKslDrv.sys [47336 2021-05-22] (Microsoft Windows -> Microsoft Corporation)
R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [70560 2018-09-03] (Realtek Semiconductor Corp. -> Realtek)
S3 RzXInputRaiju; C:\WINDOWS\system32\DRIVERS\RzXInputRaiju.sys [72720 2017-02-02] (Razer USA Ltd. -> Razer Inc)
R3 ViGEmBus; C:\WINDOWS\System32\DriverStore\FileRepository\vigembus.inf_amd64_e84845c70c38fbe7\x64\ViGEmBus.sys [74648 2018-08-01] (HP Inc. -> Benjamin Höglinger-Stelzer)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-12-31] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429296 2020-12-31] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-31] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-01 15:01 - 2021-10-01 15:01 - 000000000 ____D C:\FRST
2021-10-01 15:00 - 2021-10-01 15:01 - 000000000 ____D C:\Users\mario\Desktop\FRST
2021-10-01 14:59 - 2021-10-01 14:59 - 002304512 _____ (Farbar) C:\Users\mario\Downloads\FRST64.exe
2021-09-30 21:44 - 2021-09-30 21:45 - 000000000 ____D C:\KRD2018_Data
2021-09-30 19:19 - 2021-09-30 19:27 - 000000000 ____D C:\Users\mario\AppData\Local\Rufus
2021-09-30 19:17 - 2021-09-30 19:27 - 000000306 __RSH C:\ProgramData\ntuser.pol
2021-09-30 19:13 - 2021-09-30 19:13 - 001181752 _____ (Akeo Consulting) C:\Users\mario\Downloads\rufus-3.15.exe
2021-09-30 19:12 - 2021-09-30 19:16 - 643026944 _____ C:\Users\mario\Downloads\krd.iso
2021-09-29 09:47 - 2021-09-29 09:47 - 000001178 _____ C:\Users\Public\Desktop\iCUE.lnk
2021-09-29 09:47 - 2021-09-29 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair
2021-09-29 09:47 - 2021-09-29 09:47 - 000000000 ____D C:\Program Files\Corsair
2021-09-29 08:40 - 2021-09-29 08:40 - 000000000 ____D C:\Users\mario\Desktop\Alte Firefox-Daten
2021-09-29 08:18 - 2021-09-29 08:18 - 000013038 _____ C:\Users\mario\Downloads\pyur-kuendigen(1).pdf
2021-09-29 08:13 - 2021-09-29 08:13 - 000013066 _____ C:\Users\mario\Downloads\pyur-kuendigen.pdf
2021-09-26 07:42 - 2021-09-26 07:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-09-24 16:33 - 2021-09-29 10:25 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-09-20 18:05 - 2021-09-20 18:05 - 000315032 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klark.sys
2021-09-20 18:04 - 2021-09-29 09:38 - 000225648 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_mark.sys
2021-09-20 18:04 - 2021-09-20 18:04 - 000265176 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_arkmon.sys
2021-09-20 18:04 - 2021-09-20 18:04 - 000113952 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klupd_klif_klbg.sys
2021-09-16 16:42 - 2021-09-16 16:42 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-16 16:42 - 2021-09-16 16:42 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-09-16 16:42 - 2021-09-16 16:42 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-16 16:42 - 2021-09-16 16:42 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-09-16 16:42 - 2021-09-16 16:42 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-16 16:42 - 2021-09-16 16:42 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-16 16:42 - 2021-09-16 16:42 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-16 16:42 - 2021-09-16 16:42 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-09-16 16:42 - 2021-09-16 16:42 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-16 16:36 - 2021-09-16 16:36 - 000000000 ___HD C:\$WinREAgent

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-01 15:00 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-01 14:53 - 2020-09-27 12:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-01 14:46 - 2020-06-07 20:06 - 000000000 ____D C:\Users\mario\AppData\Local\Spotify
2021-10-01 14:43 - 2019-01-29 18:18 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-01 14:42 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-01 14:42 - 2018-07-13 13:05 - 000000000 ____D C:\Users\mario\AppData\LocalLow\Mozilla
2021-10-01 14:39 - 2020-09-27 12:41 - 001863008 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-01 14:39 - 2019-12-07 16:50 - 000788322 _____ C:\WINDOWS\system32\perfh007.dat
2021-10-01 14:39 - 2019-12-07 16:50 - 000168384 _____ C:\WINDOWS\system32\perfc007.dat
2021-10-01 14:39 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-01 14:34 - 2018-07-13 13:23 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2021-10-01 14:34 - 2018-01-28 18:43 - 000000000 ____D C:\ProgramData\NVIDIA
2021-10-01 14:33 - 2020-05-06 20:30 - 000000000 ____D C:\Users\mario\AppData\Roaming\discord
2021-10-01 14:32 - 2020-09-27 12:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-01 14:32 - 2020-09-27 12:31 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-01 14:32 - 2020-06-07 20:06 - 000000000 ____D C:\Users\mario\AppData\Roaming\Spotify
2021-10-01 14:32 - 2020-05-06 20:30 - 000000000 ____D C:\Users\mario\AppData\Local\Discord
2021-10-01 14:32 - 2018-07-13 13:01 - 000000000 ___RD C:\Users\mario\OneDrive
2021-10-01 14:31 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-09-30 21:44 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-09-30 21:25 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-09-30 21:25 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-09-30 21:25 - 2018-07-13 12:59 - 000000000 ____D C:\Users\mario\AppData\Local\Packages
2021-09-30 19:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-09-30 19:17 - 2017-09-29 15:46 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2021-09-29 10:25 - 2019-05-04 11:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-29 09:48 - 2021-05-05 16:28 - 000000000 ____D C:\Users\mario\AppData\Roaming\Corsair
2021-09-29 08:16 - 2018-07-13 20:19 - 000000000 ____D C:\Users\mario\AppData\Local\D3DSCache
2021-09-26 07:42 - 2019-05-04 11:12 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-26 07:36 - 2020-07-06 09:40 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-09-26 07:36 - 2020-07-06 09:40 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-09-23 17:48 - 2020-09-27 12:40 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4186713360-3844459930-3556965904-1001
2021-09-23 17:48 - 2020-09-27 12:34 - 000002406 _____ C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-09-23 15:27 - 2020-05-06 20:30 - 000002238 _____ C:\Users\mario\Desktop\Discord.lnk
2021-09-19 12:15 - 2021-05-12 13:23 - 000001534 _____ C:\Users\mario\Desktop\Kaspersky VPN Secure Connection Version 21.3.10.391 installieren.lnk
2021-09-16 22:00 - 2020-09-27 12:31 - 000411568 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-16 21:59 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-09-16 16:44 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-09-16 16:40 - 2019-02-23 21:25 - 000000000 ____D C:\ProgramData\Origin
2021-09-16 16:28 - 2018-07-13 14:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-16 16:25 - 2018-07-13 14:00 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-09-09 11:22 - 2019-06-13 09:09 - 000674104 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klgse.sys
2021-09-09 11:22 - 2018-04-24 12:45 - 001469240 _____ (AO Kaspersky Lab) C:\WINDOWS\system32\Drivers\klhk.sys

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Addition

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-09-2021 02
durchgeführt von mario (01-10-2021 15:03:56)
Gestartet von C:\Users\mario\Desktop\FRST
Windows 10 Home Version 21H1 19043.1237 (X64) (2020-09-27 10:40:26)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-4186713360-3844459930-3556965904-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4186713360-3844459930-3556965904-503 - Limited - Disabled)
Gast (S-1-5-21-4186713360-3844459930-3556965904-501 - Limited - Disabled)
mario (S-1-5-21-4186713360-3844459930-3556965904-1001 - Administrator - Enabled) => C:\Users\mario
WDAGUtilityAccount (S-1-5-21-4186713360-3844459930-3556965904-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Total Security (Enabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CORSAIR iCUE 4 Software (HKLM\...\{167F6EA4-1262-4247-B392-52C7D1E99504}) (Version: 4.15.153 - Corsair)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Epic Games Launcher (HKLM-x32\...\{565A7303-FC2C-4628-9F61-19F90163B9E2}) (Version: 1.1.215.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.15.0 - HP Inc.)
HP CoolSense (HKLM-x32\...\{10F0BF3E-DBDB-422A-8C12-B4D46711D7C8}) (Version: 2.22.2 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{cdb5f70f-5107-4613-bf69-15de903b5b5d}) (Version: 5.5.22560 - HP Inc.)
HP JumpStart Apps (HKLM-x32\...\HP JumpStart Apps) (Version: 7.0.32 - HP Inc.)
HP JumpStart Bridge (HKLM-x32\...\{3FC961DB-BD36-4D8D-B276-0C456A2BB638}) (Version: 1.4.0.441 - HP Inc.)
HP JumpStart Launch (HKLM-x32\...\{F213102E-FD30-4E22-AF73-4C682D65FFEE}) (Version: 1.4.441.0 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{5D308D1F-E37B-431A-8D35-67D16287467D}) (Version: 1.4.28 - HP Inc.)
Intel XTU SDK (HKLM-x32\...\{43A58350-CB99-4F4E-9BB6-F058D7B27985}) (Version: 1.0.9 - HP Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11003.3588 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1043 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.3.1019 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000071-0190-1031-84C8-B8D95FA3C8C3}) (Version: 19.71.0 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Kaspersky Internet Security (HKLM-x32\...\{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky) Hidden
Kaspersky Password Manager (HKLM-x32\...\{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab) Hidden
Kaspersky Password Manager (HKLM-x32\...\InstallWIX_{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611}) (Version: 9.0.2.767 - Kaspersky Lab)
Kaspersky Secure Connection (HKLM-x32\...\{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab) Hidden
Kaspersky Secure Connection (HKLM-x32\...\InstallWIX_{F10AA188-7166-430E-8810-FEAB2AD73DE3}) (Version: 19.0.0.1088 - Kaspersky Lab)
Kaspersky Total Security (HKLM-x32\...\InstallWIX_{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.31 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\OneDriveSetup.exe) (Version: 21.170.0822.0002 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B981965-2FBC-433C-B4B3-E183EE97CD29}) (Version: 2.83.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 3.1.8 (x64) (HKLM-x32\...\{3e04c2ef-ccc7-4fe6-a32f-f36572af0f42}) (Version: 3.1.8.29220 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 92.0.1 (x64 de)) (Version: 92.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)
MTG Arena (HKLM-x32\...\{396A4605-2DE0-4D51-BEE2-7565EFFB1B18}) (Version: 0.1.1864 - Wizards of the Coast)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)
NVIDIA Grafiktreiber 462.80 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 462.80 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OpenOffice 4.1.6 (HKLM-x32\...\{3651624F-019F-4B39-8AE4-A2423CE1986F}) (Version: 4.16.9790 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.104.48966 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Paradox Launcher v2 (HKLM\...\{A92DB5D9-A24D-4678-9F91-B4FA6D895718}) (Version: 2.0.4.0 - Paradox Interactive)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.320.170 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.18.526.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
SlimDX Runtime .NET 4.0 x64 (January 2012) (HKLM\...\{A2199A06-89C4-4187-AA4A-3A9676FB799D}) (Version: 2.0.13.43 - SlimDX Group)
Spotify (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Spotify) (Version: 1.1.68.632.g2b11de83 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\TeamSpeak 3 Client) (Version: 3.3.0 - TeamSpeak Systems GmbH)
Thunderbolt(TM) Software (HKLM-x32\...\{87A31923-8F18-4943-8093-17DBEE0101B7}) (Version: 16.3.61.275 - Intel Corporation)
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WinRAR 6.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 6.01.0 - win.rar GmbH)

Packages:
=========
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-02-19] (Canon Inc.)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2021-09-21] (Dropbox Inc.)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.4.443.0_x86__v10z8vjag6ke6 [2018-01-28] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.8.27.0_x64__v10z8vjag6ke6 [2021-09-02] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6 [2021-08-03] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-04-15] (Microsoft Corporation)
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.7290.0_x64__8wekyb3d8bbwe [2021-09-21] (Microsoft Studios) [MS Ad]
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.14326.20348.0_x86__8wekyb3d8bbwe [2021-09-11] (Microsoft Corporation)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-15] (Netflix, Inc.)
OMEN Gaming Hub -> C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6 [2021-09-17] (HP Inc.) [Startup Task]
Power Media Player 14 for HP Consumer PCs with DVD -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.PowerMediaPlayer14forHPConsumerPC_14.2.9528.0_x86__06qsbagp91rvg [2019-01-26] (CYBERLINKCOM CORP)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-09-21] (New Work SE)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4186713360-3844459930-3556965904-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ContextMenuHandlers1: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-04-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers2: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-04-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers4: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-04-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\shellex.dll [2021-04-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2021-09-18 09:43 - 2021-09-18 09:43 - 000160768 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BRIDGECommon\19bd684713052893dc5222c486410617\BRIDGECommon.ni.dll
2021-09-18 09:43 - 2021-09-18 09:43 - 000125440 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\BridgeExtension\d55a3606e4fe60e16662c33a31c651c1\BridgeExtension.ni.dll
2021-09-18 09:43 - 2021-09-18 09:43 - 000395264 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CleanStartController\a58a1a9c972fda698f04d45359dd1577\CleanStartController.ni.dll
2021-08-12 13:41 - 2021-08-12 13:41 - 000138240 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\d0807ebc8e3e882a7e75f3d1f9ee6260\Interop.IWshRuntimeLibrary.ni.dll
2021-08-12 13:40 - 2021-08-12 13:40 - 000145920 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Registratio4eabc192#\ad0441f4d8c4b290549c1adfef3a40e3\RegistrationUtilities.ni.dll
2021-08-12 13:41 - 2021-08-12 13:41 - 000134656 _____ (hardcodet.net) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\c68928e097030774f6c9e2157f4c7416\Hardcodet.Wpf.TaskbarNotification.ni.dll
2020-08-20 14:56 - 2020-08-20 14:56 - 000014336 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL
2021-09-16 16:33 - 2021-09-16 16:33 - 008411648 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp_UWP.dll
2020-09-25 18:09 - 2020-09-25 18:10 - 000014848 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\NativeRpcClient.DLL
2021-09-18 09:43 - 2021-09-18 09:43 - 000136192 _____ (HP Inc.) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\CommonPortable\ca79d97b13b6cbb30e34c18b96b2f291\CommonPortable.ni.dll
2021-08-12 13:41 - 2021-08-12 13:41 - 001701888 _____ (Mark Heath & Contributors) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\7233742e772e854e4ce0b8e1d34fe76b\NAudio.ni.dll
2021-08-12 13:39 - 2021-08-12 13:39 - 002306560 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\674ede3da4b4ad4b208dd2f8ef8b7a3a\Newtonsoft.Json.ni.dll
2021-08-12 13:41 - 2021-08-12 13:41 - 003060736 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\ea646a6cff017d83137f66f7a81e13a2\Newtonsoft.Json.ni.dll
2020-08-20 14:56 - 2020-08-20 14:56 - 001662976 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\SQLite.Interop.dll
2021-07-20 10:55 - 2021-07-20 10:55 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll
2021-08-12 13:41 - 2021-08-12 13:41 - 000793088 _____ (The Apache Software Foundation) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\b8de1ef0e4aafb29b26a74fc02c0175c\log4net.ni.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Origin\LIBEAY32.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Origin\ssleay32.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\platforms\qwindows.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Core.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Gui.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Network.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5WebSockets.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Widgets.dll
2021-09-16 16:41 - 2021-05-02 15:54 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Xml.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2020-09-03] (HP Inc. -> HP Inc.)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2020-09-03] (HP Inc. -> HP Inc.)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 15:46 - 2017-09-29 15:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\dotnet\
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 217.68.162.126 - 62.117.5.126
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

Network Binding:
=============
WLAN: Realtek LightWeight Filter (NDIS6.40) -> nt_rtf64 (enabled) 
Ethernet: Realtek LightWeight Filter (NDIS6.40) -> nt_rtf64 (enabled) 
Ethernet 2: Realtek LightWeight Filter (NDIS6.40) -> nt_rtf64 (enabled) 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{5F975EF1-53B6-461A-A2E2-D28CC57E0B2A}] => (Allow) D:\Steam\steamapps\common\Star Renegades\Star Renegades.exe () [Datei ist nicht signiert]
FirewallRules: [{9F73CD3D-6B79-4DA6-8A4A-B3654C0C0EBF}] => (Allow) D:\Steam\steamapps\common\Star Renegades\Star Renegades.exe () [Datei ist nicht signiert]
FirewallRules: [{848E32E4-7EAC-4308-A6E0-100173435A05}] => (Allow) D:\Steam\steamapps\common\Monster Train\MonsterTrain.exe () [Datei ist nicht signiert]
FirewallRules: [{060BC4DC-3EFE-4B2B-A6C4-08EA2FD5E1C7}] => (Allow) D:\Steam\steamapps\common\Monster Train\MonsterTrain.exe () [Datei ist nicht signiert]
FirewallRules: [{E6BE87B3-8B58-43D6-BB76-2334EE16D77B}] => (Allow) D:\Steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe => Keine Datei
FirewallRules: [{946BA0E5-DC3F-44CE-A5E4-F051223E2D35}] => (Allow) D:\Steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe => Keine Datei
FirewallRules: [{61D26A22-09C4-4D6C-B3AB-FC97C033A909}] => (Allow) D:\Steam\steamapps\common\Gunfire Reborn\Gunfire Reborn.exe (广州多益网络股份有限公司 -> )
FirewallRules: [{C7A430F1-36A0-44B1-AFB1-295D1FEF41CF}] => (Allow) D:\Steam\steamapps\common\Gunfire Reborn\Gunfire Reborn.exe (广州多益网络股份有限公司 -> )
FirewallRules: [{0C56719E-17C2-4286-B640-92946E6F5376}] => (Allow) D:\Steam\steamapps\common\Enter the Gungeon\EtG.exe () [Datei ist nicht signiert]
FirewallRules: [{FFDEE279-7B81-4ECD-9C38-C908405390D7}] => (Allow) D:\Steam\steamapps\common\Enter the Gungeon\EtG.exe () [Datei ist nicht signiert]
FirewallRules: [{5AA458B4-2BFD-4C4E-8B20-69B0E03F9E3C}] => (Allow) D:\Steam\steamapps\common\Legend of Keepers\LegendOfKeepers.exe () [Datei ist nicht signiert]
FirewallRules: [{9169EE49-38D1-4F9A-AC43-77F9D875D33F}] => (Allow) D:\Steam\steamapps\common\Legend of Keepers\LegendOfKeepers.exe () [Datei ist nicht signiert]
FirewallRules: [{43C6B583-CED8-43DF-BD6B-5246FE2F6BCF}] => (Allow) D:\Steam\steamapps\common\The Legend of Bum-Bo\the legend of bum-bo.exe () [Datei ist nicht signiert]
FirewallRules: [{1EC3F3FB-3262-4F88-940F-74200AFB2015}] => (Allow) D:\Steam\steamapps\common\The Legend of Bum-Bo\the legend of bum-bo.exe () [Datei ist nicht signiert]
FirewallRules: [{F628EDFB-B248-443D-B424-4949F5BE2C45}] => (Allow) D:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [{1C7E5953-B953-4D21-9A53-5C3B7127994F}] => (Allow) D:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [{03E7C402-F914-4DE1-8528-C75DB374635D}] => (Allow) D:\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{DEC0B70F-3372-483F-A468-C1FC188293B6}] => (Allow) D:\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{59AE8D85-7EF5-472B-B3AA-AC5E2D0585B3}] => (Allow) D:\Steam\steamapps\common\Taur\Taur.exe () [Datei ist nicht signiert]
FirewallRules: [{5500B1C3-6E20-4D77-BDE2-14FD56EE68E0}] => (Allow) D:\Steam\steamapps\common\Taur\Taur.exe () [Datei ist nicht signiert]
FirewallRules: [{4715D6B8-31C2-469E-A9C7-293FC32A9B21}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\Launcher.exe (Slitherine Software UK Limited -> Slitherine Ltd.)
FirewallRules: [{65A7D6E4-F81A-45CF-B134-1B4AFF9F9DCE}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\Launcher.exe (Slitherine Software UK Limited -> Slitherine Ltd.)
FirewallRules: [{F8D8F210-FE1D-40F4-98C6-88D743A3C6DE}] => (Allow) D:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe () [Datei ist nicht signiert]
FirewallRules: [{36D94621-BCE9-4773-B61B-B62A6F1499F5}] => (Allow) D:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe () [Datei ist nicht signiert]
FirewallRules: [{10F27CD9-5431-493E-AAF3-BCAC46D354E3}] => (Allow) D:\Steam\steamapps\common\tbs3\win32\The Banner Saga 3.exe () [Datei ist nicht signiert]
FirewallRules: [{17BE5F50-E213-47BF-9F0F-AAEBADE33048}] => (Allow) D:\Steam\steamapps\common\tbs3\win32\The Banner Saga 3.exe () [Datei ist nicht signiert]
FirewallRules: [{F1A4A9B8-0CDC-4DFD-BF9E-DA2E1392FF05}] => (Allow) D:\Steam\steamapps\common\tbs2\win32\The Banner Saga 2.exe () [Datei ist nicht signiert]
FirewallRules: [{EB1C6BDD-C45F-488A-BEED-B83AE1F970B4}] => (Allow) D:\Steam\steamapps\common\tbs2\win32\The Banner Saga 2.exe () [Datei ist nicht signiert]
FirewallRules: [{90F7B1BD-7BE2-4DC1-BA2D-2BE0201CBD2E}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe () [Datei ist nicht signiert]
FirewallRules: [{3B1B25A9-297C-481A-99AC-E2D7EC54388B}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe () [Datei ist nicht signiert]
FirewallRules: [{BA715798-351A-4496-97F8-66A09C6A8064}] => (Allow) D:\Steam\steamapps\common\Risk of Rain 2\Risk of Rain 2.exe () [Datei ist nicht signiert]
FirewallRules: [{8D8EACB5-541E-4A45-B2C0-86111F7B2886}] => (Allow) D:\Steam\steamapps\common\Risk of Rain 2\Risk of Rain 2.exe () [Datei ist nicht signiert]
FirewallRules: [{04629834-AFE0-4CDB-9A6D-0356EB04B02D}] => (Allow) D:\Steam\steamapps\common\Disco Elysium\disco.exe () [Datei ist nicht signiert]
FirewallRules: [{BB9FC9F1-0C0D-4262-8EE3-655DF3B8C064}] => (Allow) D:\Steam\steamapps\common\Disco Elysium\disco.exe () [Datei ist nicht signiert]
FirewallRules: [{AFA5724E-C6BD-4AD9-B5C8-D90D88BABF23}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{E5DC74F0-C636-44FF-B594-DA24C9E26550}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{C8FEF409-2691-4125-B982-815A75F931EF}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{70B98F22-337E-4336-BD1E-C8CF4DE0897E}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{8D1F3199-C8FD-4059-B7C1-CAFE458F6362}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{171C5A25-8A9E-4266-8FFE-1B0810FDDCD4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3554365D-A452-4638-9E9F-3ECA69EB27F6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{05CE3A46-152C-480B-8B64-ADA5E132C80F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29487266-90EC-49AB-8FFD-82C25C7CECD1}] => (Allow) D:\Steam\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer_x64_11.exe => Keine Datei
FirewallRules: [{D10BC149-570C-4872-A1B0-8DB284FE88A9}] => (Allow) D:\Steam\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer_x64_11.exe => Keine Datei
FirewallRules: [{7E74F334-C765-4ACE-BC90-9A6E8534B420}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4C29C526-7DCB-4BF1-B3E4-FB6F5A4DFE25}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{680B5CCE-2728-4FB2-B7F0-12DA2E470DB8}] => (Allow) D:\Steam\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{AF2D0DAF-B6F4-4386-88CD-C15BD7D30D08}] => (Allow) D:\Steam\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{FCA4BD63-9172-4135-80CB-4068D176F00F}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells.exe () [Datei ist nicht signiert]
FirewallRules: [{0E46EB01-4B4D-46B0-8DD2-EEC3CE69A858}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells.exe () [Datei ist nicht signiert]
FirewallRules: [{B13A11E4-0457-489D-9C25-441A0D2DA14A}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells_gl.exe () [Datei ist nicht signiert]
FirewallRules: [{7240BB10-F232-4082-AB8F-1D8A05FF81D5}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells_gl.exe () [Datei ist nicht signiert]
FirewallRules: [{95BA644F-5088-41CA-A5A6-5B6150ECAC92}] => (Allow) D:\Steam\steamapps\common\Mechanicus\Mechanicus.exe () [Datei ist nicht signiert]
FirewallRules: [{CF464DB6-5FB6-4DA4-A909-1251E5F7D6FC}] => (Allow) D:\Steam\steamapps\common\Mechanicus\Mechanicus.exe () [Datei ist nicht signiert]
FirewallRules: [{F89AD2ED-3906-4834-A57C-7C0848CA5A38}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{8F667B84-6463-400E-8B88-6180DB84AAF8}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{DAA36B58-9DD3-4E36-BF8E-5DE24DA82770}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{E8A126FC-C0A9-4AC0-B5A5-8EA108ABC7FC}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{3A54555C-5E45-4065-BD10-F340F220424B}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe => Keine Datei
FirewallRules: [{52ADF340-3A17-46AA-AA2F-082621D5717D}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Keine Datei
FirewallRules: [{061B5B19-DB0B-4984-9C4C-AF0B6FEEE212}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{1BAEAB19-4830-4CB8-9607-E8B31F79F487}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{5E18B062-9BB4-4876-B703-B7DF9760D858}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{F8F6ED84-C59F-4FB5-906D-4D0D501E2AB7}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{075BCF34-0E71-4CD6-9A24-DFA3F2EA7923}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe => Keine Datei
FirewallRules: [{D619F188-2439-4EAC-940A-934CBAB661D4}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Keine Datei
FirewallRules: [{FA13B315-01F3-4062-9A8B-BFCA1BE64D95}] => (Allow) D:\Steam\steamapps\common\Into the Breach\Breach.exe () [Datei ist nicht signiert]
FirewallRules: [{D8D1E071-3F53-4876-87AA-207D720F0ED4}] => (Allow) D:\Steam\steamapps\common\Into the Breach\Breach.exe () [Datei ist nicht signiert]
FirewallRules: [{BAD4F5C4-17A4-4682-A241-0C1DAA7BBE12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7122C234-C805-4FDC-BD67-F2C87C35744B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F9E75107-7410-4BDD-B443-2E28407AECDE}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\SlayTheSpire.exe () [Datei ist nicht signiert]
FirewallRules: [{035E05F4-0C17-4C83-B620-7C5ADED7E79B}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\SlayTheSpire.exe () [Datei ist nicht signiert]
FirewallRules: [{9E3FED8F-E8F1-47BA-99E5-175ED1232869}] => (Allow) D:\Steam\steamapps\common\Deck of Ashes\Deck of Ashes.exe () [Datei ist nicht signiert]
FirewallRules: [{2C512E0B-3816-490E-B5B0-A94728A8247F}] => (Allow) D:\Steam\steamapps\common\Deck of Ashes\Deck of Ashes.exe () [Datei ist nicht signiert]
FirewallRules: [{B655B713-B391-4833-AACC-08E4BDF32D43}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A78B36C1-CC9F-4829-8AEE-9717280FB286}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{84384BE6-E0A7-4878-8BA1-46A97B0D1424}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\autorun.exe => Keine Datei
FirewallRules: [{5A1B9B6F-B5FB-4E31-9E5D-8186B2ADEABC}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\autorun.exe => Keine Datei
FirewallRules: [{3BC848F2-5496-472F-A14B-5ABFA7E07E09}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{3B7CBEF0-59D3-42BC-8059-C99B2F488FBA}] => (Allow) D:\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe (Numantian Games) [Datei ist nicht signiert]
FirewallRules: [{D051D457-16B2-4B8D-B18D-3B658C7766A3}] => (Allow) D:\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe (Numantian Games) [Datei ist nicht signiert]
FirewallRules: [{8F7EC96A-C629-4B06-AA93-28C6E40EC545}] => (Allow) D:\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe () [Datei ist nicht signiert]
FirewallRules: [{A1DFAA06-2090-4D6C-BC06-3AA9CAEE5A35}] => (Allow) D:\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe () [Datei ist nicht signiert]
FirewallRules: [{9AE5CF78-2291-4312-899E-7A23091E6FDD}] => (Allow) D:\Steam\steamapps\common\Gordian Quest\GordianQuest.exe () [Datei ist nicht signiert]
FirewallRules: [{35730B63-793A-4E89-BBB9-701EE9807D8D}] => (Allow) D:\Steam\steamapps\common\Gordian Quest\GordianQuest.exe () [Datei ist nicht signiert]
FirewallRules: [{9A2D5543-2299-45CC-A1B8-042FBD170603}] => (Allow) D:\Steam\steamapps\common\Othercide\Othercide.exe (Focus Home Interactive S.A -> )
FirewallRules: [{416B325B-7BC7-48B4-9711-3D5D52971D67}] => (Allow) D:\Steam\steamapps\common\Othercide\Othercide.exe (Focus Home Interactive S.A -> )
FirewallRules: [{C2DD9322-181C-4803-B474-F7FF556C0A17}] => (Allow) D:\Steam\steamapps\common\Iratus Lord of the Dead\Iratus.exe () [Datei ist nicht signiert]
FirewallRules: [{E6D6D344-3594-4A19-B92A-B9B75E72499B}] => (Allow) D:\Steam\steamapps\common\Iratus Lord of the Dead\Iratus.exe () [Datei ist nicht signiert]
FirewallRules: [{837F2409-6EC8-4EA9-837D-D6E3E1F2D3A6}] => (Allow) D:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{5C58CDA9-BEF3-4AD3-8A12-06A44EFCDAE2}] => (Allow) D:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{174F2A6D-27D6-40CA-BA46-8C8ABECBC229}] => (Allow) D:\Steam\steamapps\common\Skul\Skul.exe () [Datei ist nicht signiert]
FirewallRules: [{655B1D60-6CC8-4EB1-8509-8447409502B3}] => (Allow) D:\Steam\steamapps\common\Skul\Skul.exe () [Datei ist nicht signiert]
FirewallRules: [{3C23EFB5-2260-4F55-A978-9B68617705F9}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [{F755B2AC-295D-4C63-AD63-3EBC74E33BB3}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [TCP Query User{21C0DF17-B30D-465A-A783-D7A8F76AC181}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{97FD2210-AE9E-4A03-B689-D454E9BF6920}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{95A234C8-FD5D-4FCA-B797-4C7A046BFA3B}] => (Allow) D:\Steam\steamapps\common\Noita\noita.exe () [Datei ist nicht signiert]
FirewallRules: [{FA2A0D0F-55E4-4468-9CED-023703EB45F6}] => (Allow) D:\Steam\steamapps\common\Noita\noita.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{76843CDB-0C10-46BB-85CC-C1A3DA97927B}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{C681D679-2388-43D9-8043-65F532C7D791}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2E6A713B-62CB-4ED3-926E-E7838F7F67FF}] => (Allow) D:\Steam\steamapps\common\Curse of the Dead Gods\Curse of the Dead Gods.exe (Focus Home Interactive S.A -> Passtech Games)
FirewallRules: [{F14F3156-4693-4C40-8D02-95C112DA8529}] => (Allow) D:\Steam\steamapps\common\Curse of the Dead Gods\Curse of the Dead Gods.exe (Focus Home Interactive S.A -> Passtech Games)
FirewallRules: [{21CCD2CA-50E8-4571-A530-D3933FBF07DB}] => (Allow) D:\Steam\steamapps\common\Crying Suns\cs.exe () [Datei ist nicht signiert]
FirewallRules: [{BC569D65-208C-43E5-933C-5FD6E4896A28}] => (Allow) D:\Steam\steamapps\common\Crying Suns\cs.exe () [Datei ist nicht signiert]
FirewallRules: [{0BBD5A90-4528-4579-8778-0B5689EA9D2C}] => (Allow) D:\Steam\steamapps\common\Despot's Game Demo\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{372BCED5-BA41-4E3F-9D46-5CB79577AD9C}] => (Allow) D:\Steam\steamapps\common\Despot's Game Demo\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{F4DC8A2C-35C0-4AA4-83C3-EF53B59D5D11}] => (Allow) D:\Steam\steamapps\common\King Arthur Knight's Tale\KA_KT.exe (NeocoreGames) [Datei ist nicht signiert]
FirewallRules: [{C511820F-E4B2-421B-BC40-E23567EF582D}] => (Allow) D:\Steam\steamapps\common\King Arthur Knight's Tale\KA_KT.exe (NeocoreGames) [Datei ist nicht signiert]
FirewallRules: [{B1911800-399D-4D09-A73B-8F7F8B02F936}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{034FE985-F5F5-4068-8869-F16E29D0363D}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{E0A0591D-5843-41FB-AE42-A7A31457E29B}] => (Allow) D:\Steam\steamapps\common\Hadean Tactics\HadeanTactics.exe () [Datei ist nicht signiert]
FirewallRules: [{C2C6E0B1-F21E-41FD-9F95-AB92989ACCE0}] => (Allow) D:\Steam\steamapps\common\Hadean Tactics\HadeanTactics.exe () [Datei ist nicht signiert]
FirewallRules: [{065E2895-8A4E-4AAE-A25D-C760304885BF}] => (Allow) D:\Steam\steamapps\common\Fights in Tight Spaces\FightsInTightSpaces.exe () [Datei ist nicht signiert]
FirewallRules: [{2AF0E5CE-C8C0-45FD-A11B-D1686BDA9124}] => (Allow) D:\Steam\steamapps\common\Fights in Tight Spaces\FightsInTightSpaces.exe () [Datei ist nicht signiert]
FirewallRules: [{62005B2E-A758-4CE3-A619-A8B83A3F0669}] => (Allow) D:\Steam\steamapps\common\Ratropolis\Ratropolis.exe () [Datei ist nicht signiert]
FirewallRules: [{25D64760-A84B-4F73-B1D8-C55870E7FCF9}] => (Allow) D:\Steam\steamapps\common\Ratropolis\Ratropolis.exe () [Datei ist nicht signiert]
FirewallRules: [{F2389DE5-AEBE-4393-B5F5-C1D62F867EC6}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{FD3F94F9-0E2F-42D8-89DB-773F01D174F4}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{854817D4-EC84-4463-BF18-641ABB72BB08}] => (Allow) D:\Steam\steamapps\common\Loop Hero\Loop Hero.exe (FourQuarters team) [Datei ist nicht signiert]
FirewallRules: [{A0467E07-D9C2-41DA-BF5B-3BF28029FE92}] => (Allow) D:\Steam\steamapps\common\Loop Hero\Loop Hero.exe (FourQuarters team) [Datei ist nicht signiert]
FirewallRules: [{03277C07-EA29-4A9F-B2EB-1715F2C860DF}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{45D623EE-6EAE-4DBF-8A3C-238E039E20C0}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{F5BC846C-1CD3-49DB-B141-298CC573212A}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{7F92A3FD-4A8E-44F4-9869-A432DDFC3236}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{F66B890D-5E38-4D6D-9985-E37EC580A8DF}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{F313FDE7-CEFE-438C-B455-69753B0F883F}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{7601CF1C-E591-4778-955C-1AB6D5D1F5E1}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{475EB710-6EE6-42A2-99FC-59CCAC270C14}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{D613BD79-E532-447F-A9AD-D602E147B8BE}] => (Allow) D:\Steam\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{5699709B-2F96-45CA-A810-BCA527F22165}] => (Allow) D:\Steam\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{22BC0D30-8898-4A87-89D9-418E6390DB26}] => (Allow) D:\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{D20BE685-CF21-44AD-B4D4-B3974D210434}] => (Allow) D:\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{FE29ED6B-3A5A-4161-912B-6D1F4D225527}] => (Allow) D:\Steam\steamapps\common\ChildrenOfMorta\ChildrenOfMorta.exe () [Datei ist nicht signiert]
FirewallRules: [{B1761749-B2C4-43B4-8964-D20A23CB28E6}] => (Allow) D:\Steam\steamapps\common\ChildrenOfMorta\ChildrenOfMorta.exe () [Datei ist nicht signiert]
FirewallRules: [{22532E6D-6487-413E-80AF-591BE1BB218A}] => (Allow) D:\Steam\steamapps\common\Tainted Grail\Tainted Grail.exe () [Datei ist nicht signiert]
FirewallRules: [{9C2098E6-F2E6-463B-9802-AAFF5B0DFAA2}] => (Allow) D:\Steam\steamapps\common\Tainted Grail\Tainted Grail.exe () [Datei ist nicht signiert]
FirewallRules: [{26A6FFAF-B2BB-440A-9C35-F9AF2BC136B1}] => (Allow) D:\Steam\steamapps\common\The Last Spell\The Last Spell.exe () [Datei ist nicht signiert]
FirewallRules: [{E963FB32-61C2-472F-8137-78AD34E54ECE}] => (Allow) D:\Steam\steamapps\common\The Last Spell\The Last Spell.exe () [Datei ist nicht signiert]
FirewallRules: [{DC99F418-044B-426E-9293-48F4C11704E6}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{0804A426-7CF6-4EA7-BF88-0E73E40C48EC}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{7811C3E3-2351-4E78-8488-9AFC086A7A38}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{E8340352-1358-482B-B1C2-E396D5CE205E}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{45321B25-9B29-436F-B7CB-2B7159211D5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D90E7833-0EE2-42D0-96F5-6D1190E29417}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A2A87E39-C3FD-402E-A2CF-560CFA72F091}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CF553CE7-1ADE-42BC-A577-A47868828770}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FBA5F889-2ACA-4889-A8DF-B5FF5B03381B}] => (Allow) D:\Steam\steamapps\common\Death's Door\DeathsDoor.exe () [Datei ist nicht signiert]
FirewallRules: [{97F5FDBB-8144-45EE-940B-1085C58F2370}] => (Allow) D:\Steam\steamapps\common\Death's Door\DeathsDoor.exe () [Datei ist nicht signiert]
FirewallRules: [{BD9AC966-2407-46F4-8AD7-E35D00A4311F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9F7C821C-8D07-4816-B51F-63B76CA943EA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{04414D1A-4FCC-4D44-A07F-C0245FDD4C91}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{93F4831F-CA71-4466-8ECE-983D5A85ACDA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B7F09FAB-E419-41AB-9B00-3585EE4538D5}] => (Allow) D:\Steam\steamapps\common\Despot's Game Playtest\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{9BB973C6-8B82-4A9E-8EDE-C018DD5B85A8}] => (Allow) D:\Steam\steamapps\common\Despot's Game Playtest\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{9BD789F7-D85F-4A5B-B3F3-955E014BFC64}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{D0E5CBAE-361C-4C1A-9DC0-EC20B5A9415F}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{55281726-6F27-4245-94EC-0A157B9D32DC}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{E151E196-3340-4F50-BC3F-A1BFAF5B673A}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{6415933D-8AD9-462E-B8C1-E5DBEFF1A742}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14326.20348.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E50AB807-F472-43C0-8DB0-E4C38FDB9105}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{C27F0C1E-AE74-4208-91E9-D44DD3D01A04}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{3ABE525A-AA73-4ED5-B56E-A3148F57CF99}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{BD7DB8BC-69C6-404B-A117-C5877CCA9D7C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{9E03DD21-1640-4B08-9312-A5A03036529A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{82CDF6FA-10FE-49F4-BC50-4AABD220E05B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{B8584045-F62E-4C27-B14D-2551822B7B9E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{6C35DD1D-E5A0-4FE9-9F0F-29EC41AC8031}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{B597E126-29F8-47A1-8301-8D615F954AC4}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{92B03896-2B6E-4DA8-9641-AAFBE3FBAB72}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{180A8AE4-1F87-4A56-A9EC-B76AFFE2DF06}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7EAA220A-9E68-43FA-A27B-806DBDF24A88}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{30AF64B8-9C6B-4E52-A1D9-85166EC1F0E3}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{52F0A24E-9B72-4978-B092-49F6BA9C2E54}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{00C8D8A5-1575-4F9C-87F8-C3C9E325AA1F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7CAC480B-88F9-40D1-8754-C6D675AEEA59}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{DB6362C5-5418-402C-B043-0B845361F4DF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{9D98546F-930C-4FE7-86A9-41A03610222C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{A471FBFD-A8C1-45BB-BDAF-654E182A9057}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (HP Inc. -> HP Inc.)
FirewallRules: [{9AE0D208-2C49-4C27-B6D7-C9E9D6947AED}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (HP Inc. -> HP Inc.)
FirewallRules: [{96B4DBDA-98CB-4499-83DA-043C22A0F088}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{B77C48D8-329E-410F-B74C-65E19655A2C7}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{4A6F1249-B381-4393-8E98-0B239C43C450}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{041E0F50-FF2D-49A7-98BC-928D42E51C0D}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{B26B3F7D-0D50-40FF-95AD-5EF3C3741A12}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{0BE107A6-C352-4195-9D73-5377F995CD80}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{093FA6F4-9128-41A8-8742-F1388176EC35}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [{8CF581AB-995B-456E-AD92-538847E65271}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe

==================== Wiederherstellungspunkte =========================

24-09-2021 14:01:03 Geplanter Prüfpunkt
29-09-2021 09:45:47 Installed CORSAIR iCUE 4 Software

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/01/2021 02:32:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-A8O9RBDC.local already in use; will try LAPTOP-A8O9RBDC-2.local instead

Error: (10/01/2021 02:32:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister    4 LAPTOP-A8O9RBDC.local. Addr 192.168.0.13

Error: (10/01/2021 02:32:35 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353   16 LAPTOP-A8O9RBDC.local. AAAA 2A02:2454:8D62:2200:0000:0000:0000:0004

Error: (10/01/2021 02:31:50 PM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.

Error: (10/01/2021 02:31:50 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]

Error: (10/01/2021 02:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   25 0.3.0.B.6.9.0.6.4.4.C.4.0.0.9.4.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR LAPTOP-A8O9RBDC-2.local.

Error: (10/01/2021 02:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353   23 0.3.0.B.6.9.0.6.4.4.C.4.0.0.9.4.0.0.0.0.0.0.0.0.0.0.0.0.0.8.E.F.ip6.arpa. PTR LAPTOP-A8O9RBDC.local.

Error: (10/01/2021 02:30:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Unexpected conflict discarding   25 C.D.A.C.C.E.4.F.3.8.0.E.F.C.0.C.0.0.2.2.2.6.D.8.4.5.4.2.2.0.A.2.ip6.arpa. PTR LAPTOP-A8O9RBDC-2.local.


Systemfehler:
=============
Error: (10/01/2021 02:30:23 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)
Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.

Error: (10/01/2021 02:28:39 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-A8O9RBDC)
Description: Der Server "{FD06603A-2BDF-4BB1-B7DF-5DC68F353601}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/30/2021 09:27:53 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-A8O9RBDC)
Description: Der Server "{38E441FB-3D16-422F-8750-B2DACEC5CEFC}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/30/2021 07:43:51 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-A8O9RBDC)
Description: Der Server "Microsoft.YourPhone_1.21084.76.0_x64__8wekyb3d8bbwe!App.AppXvctmff39365zg14pgmystcwtys462fpa.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/30/2021 07:42:07 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-A8O9RBDC)
Description: Der Server "{5F7F3F7B-1177-4D4B-B1DB-BC6F671B8F25}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/30/2021 07:36:04 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-A8O9RBDC)
Description: Der Server "{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/30/2021 07:35:52 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎09.‎2021 um 19:21:36 unerwartet heruntergefahren.

Error: (09/30/2021 07:35:40 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225684Bei der Verarbeitung der Wiederherstellungsdaten ist ein schwerwiegender Fehler aufgetreten.


CodeIntegrity:
===============
Date: 2021-10-01 14:34:26
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. F.19 04/18/2019
Hauptplatine: HP 8393
Prozessor: Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 16334.88 MB
Verfügbarer physikalischer RAM: 9213.77 MB
Summe virtueller Speicher: 18766.88 MB
Verfügbarer virtueller Speicher: 8473.52 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.71 GB) (Free:357.85 GB) NTFS
Drive d: (DATA) (Fixed) (Total:917.37 GB) (Free:126.08 GB) NTFS
Drive e: (RECOVERY) (Fixed) (Total:14.14 GB) (Free:1.7 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

\\?\Volume{1180ab1c-e33e-4675-8ce1-c43c03d1451e}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.31 GB) NTFS
\\?\Volume{7305f353-517a-434b-9738-ed3b1979fe8c}\ () (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 54DE0185)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 1426F8F0)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Shortcut

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 22-09-2021 02
durchgeführt von mario (01-10-2021 15:05:48)
Gestartet von C:\Users\mario\Desktop\FRST
Start-Modus: Normal

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk -> D:\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Audio Switch.lnk -> C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe (HP Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbolt(TM) Software\Thunderbolt(TM) Software.lnk -> C:\Program Files (x86)\Intel\Thunderbolt Software\Thunderbolt.exe (Intel Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> D:\Steam\steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Deinstallieren.lnk -> C:\Users\mario\Picasa3\uninstall.exe (Google)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Picasa 3.lnk -> C:\Users\mario\Picasa3\Picasa3.exe (Google Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch\Overwatch.lnk -> D:\Overwatch\Overwatch\Overwatch Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Base.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sbase.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Calc.lnk -> C:\Program Files (x86)\OpenOffice 4\program\scalc.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Draw.lnk -> C:\Program Files (x86)\OpenOffice 4\program\sdraw.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Impress.lnk -> C:\Program Files (x86)\OpenOffice 4\program\simpress.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Math.lnk -> C:\Program Files (x86)\OpenOffice 4\program\smath.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice Writer.lnk -> C:\Program Files (x86)\OpenOffice 4\program\swriter.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.6\OpenOffice.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MTG Arena\MTG Arena.lnk -> D:\mtg\MTGArena\MTGALauncher\MTGALauncher.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher\Minecraft Launcher.lnk -> C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe (Mojang)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\Uninstall League of Legends.lnk -> D:\Programme\Uninstall League of Legends.exe (Riot Games, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security\Kaspersky im Internet besuchen.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\kl.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security\Kaspersky Total Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avpui.exe (AO Kaspersky Lab)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection\Endbenutzer-Lizenzvertrag.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\Doc\KSDE\de-DE\eula.txt ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection\Kaspersky Secure Connection.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe (AO Kaspersky Lab)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection\My Kaspersky.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\kl.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Kaspersky Password Manager Hilfe.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\help.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Kaspersky Password Manager.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe (AO Kaspersky Lab)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Weiter zu My Kaspersky.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpc.url ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Manager.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm\Heroes of the Storm.lnk -> D:\Overwatch\Heroes of the Storm\Heroes of the Storm.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hearthstone\Hearthstone.lnk -> D:\Overwatch\Hearthstone\Hearthstone Beta Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\GOG Galaxy\GOG Galaxy.lnk -> C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III\Diablo III.lnk -> D:\Overwatch\Diablo III\Diablo III Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Corsair\iCUE.lnk -> C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe (Corsair Memory, Inc.)
Shortcut: C:\ProgramData\HP\Recovery\Links\RM.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\mario\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\Links\Desktop.lnk -> C:\Users\mario\Desktop ()
Shortcut: C:\Users\mario\Links\Downloads.lnk -> C:\Users\mario\Downloads ()
Shortcut: C:\Users\mario\Documents\Heroes of the Storm\T_44696412_420@2.lnk -> C:\Users\mario\Documents\Heroes of the Storm\Accounts\112455878\2-Hero-1-1454966 ()
Shortcut: C:\Users\mario\Desktop\Kaspersky Secure Connection Version 20.0.14.1085 installieren.lnk -> C:\ProgramData\Kaspersky Lab\KSDE3.0.0\Temp\Setup\avp_7D65C94A-2E46-4ABA-A075-8DB61D2FD6CD.exe (Kaspersky)
Shortcut: C:\Users\mario\Desktop\Kaspersky VPN Secure Connection Version 21.3.10.391 installieren.lnk -> C:\ProgramData\Kaspersky Lab\KSDE3.0.0\Temp\Setup\avp_7D65C94A-2E46-4ABA-A075-8DB61D2FD6CD.exe (Kaspersky)
Shortcut: C:\Users\mario\Desktop\Spotify.lnk -> C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
Shortcut: C:\Users\mario\Desktop\TeamSpeak 3 Client.lnk -> D:\TS\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\mario\Desktop\Spiele\Diablo III.lnk -> D:\Overwatch\Diablo III\Diablo III Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\mario\Desktop\Spiele\Hearthstone.lnk -> D:\Overwatch\Hearthstone\Hearthstone Beta Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\mario\Desktop\Spiele\Heroes of the Storm.lnk -> D:\Overwatch\Heroes of the Storm\Heroes of the Storm.exe (Blizzard Entertainment)
Shortcut: C:\Users\mario\Desktop\Spiele\League of Legends.lnk -> D:\Programme\LeagueClient.exe (Riot Games, Inc.)
Shortcut: C:\Users\mario\Desktop\Spiele\Minecraft Launcher.lnk -> C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe (Mojang)
Shortcut: C:\Users\mario\Desktop\Spiele\MTG Arena.lnk -> D:\mtg\MTGArena\MtgaLauncher.exe (Keine Datei)
Shortcut: C:\Users\mario\Desktop\Spiele\Overwatch.lnk -> D:\Overwatch\Overwatch\Overwatch Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\mario\Desktop\Sonstiges\Kaspersky VPN Secure Connection Version 21.2.16.590 installieren.lnk -> C:\ProgramData\Kaspersky Lab\KSDE3.0.0\Temp\Setup\avp_7D65C94A-2E46-4ABA-A075-8DB61D2FD6CD.exe (Kaspersky)
Shortcut: C:\Users\mario\Desktop\Sonstiges\Kaspersky VPN Secure Connection Version 21.3.10.391 installieren.lnk -> C:\ProgramData\Kaspersky Lab\KSDE3.0.0\Temp\Setup\avp_7D65C94A-2E46-4ABA-A075-8DB61D2FD6CD.exe (Kaspersky)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\mario\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk -> C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe (Spotify Ltd)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk -> D:\TS\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Tombstones\iCUE (2).lnk -> C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe (Corsair Memory, Inc.)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\e905798aaaed4ebe\League of Legends.lnk -> D:\Programme\LeagueClient.exe (Riot Games, Inc.)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\b15f30ab853b7d31\Diablo III.lnk -> D:\Overwatch\Diablo (Keine Datei)
Shortcut: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7111c0ce965b7246\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net.exe (Blizzard Entertainment)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\Public\Desktop\Epic Games Launcher.lnk -> D:\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)
Shortcut: C:\Users\Public\Desktop\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\GOG Galaxy.lnk -> C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)
Shortcut: C:\Users\Public\Desktop\HP Support Assistant.lnk -> C:\Program Files (x86)\HP\HP Support Framework\HP Support Assistant.ico ()
Shortcut: C:\Users\Public\Desktop\iCUE.lnk -> C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe (Corsair Memory, Inc.)
Shortcut: C:\Users\Public\Desktop\Kaspersky Password Manager.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Password Manager 9.0.2\kpm.exe (AO Kaspersky Lab)
Shortcut: C:\Users\Public\Desktop\Kaspersky Secure Connection.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Secure Connection 3.0\ksdeui.exe (AO Kaspersky Lab)
Shortcut: C:\Users\Public\Desktop\Kaspersky Total Security.lnk -> C:\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\avpui.exe (AO Kaspersky Lab)
Shortcut: C:\Users\Public\Desktop\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\OpenOffice 4.1.6.lnk -> C:\Program Files (x86)\OpenOffice 4\program\soffice.exe (Apache Software Foundation)
Shortcut: C:\Users\Public\Desktop\Origin.lnk -> D:\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\Users\Public\Desktop\Picasa 3.lnk -> C:\Users\mario\Picasa3\Picasa3.exe (Google Inc.)
Shortcut: C:\Users\Public\Desktop\Steam.lnk -> D:\Steam\steam.exe (Valve Corporation)


ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oculus\Download Oculus.lnk -> C:\Program Files (x86)\HP\Shared\WizLink.exe () -> hxxp://www.oculus.com/setup


ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk -> C:\Windows\Installer\{B2CFD444-5088-4ECC-A1F1-28620C082C36}\_HPEPrintIcon.exe (HP) -> /DASLaunch
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OMEN Audio Control.lnk -> C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) ->  /LAUNCH_BY_STARTMENU
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Picasa 3\Picasa Photo Viewer konfigurieren.lnk -> C:\Users\mario\Picasa3\PicasaPhotoViewer.exe (Google Inc.) -> /reconfig
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk -> D:\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product=league_of_legends --launch-patchline=live
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Total Security\Kaspersky Total Security entfernen.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976} REMOVE=ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Secure Connection\Kaspersky Secure Connection entfernen.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{F10AA188-7166-430E-8810-FEAB2AD73DE3} REMOVE=ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Password Manager\Löschen Kaspersky Password Manager.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i{B2F7333E-6C8D-4994-AAC4-FEC8EBBF9611} REMOVE=ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Documentation.lnk -> C:\Program Files\HP\Documentation\platform_guides\languages\index.html () -> /Arguments:Shortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Media Creation.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \CRM
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\Apps.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \SWR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\BTR.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \BTR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\Driver.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \SWR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\RMC.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \CRM
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\mario\Desktop\Discord.lnk -> C:\Users\mario\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\mario\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\mario\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default


InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/
InternetURL: C:\Users\Default\Favorites\HP\HP Store.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=cnnb&s=stemea_consumer_ie_nb&tp=iefavs
InternetURL: C:\Users\mario\Picasa3\cdautorun\Download Picasa.url -> URL: hxxp://www.google.com/picasa
InternetURL: C:\Users\mario\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\mario\Favorites\HP\HP Store.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=cnnb&s=stemea_consumer_ie_nb&tp=iefavs
InternetURL: C:\Users\mario\Desktop\Baldur's Gate 3.url -> URL: steam://rungameid/1086940
InternetURL: C:\Users\mario\Desktop\Children of Morta.url -> URL: steam://rungameid/330020
InternetURL: C:\Users\mario\Desktop\Death's Door.url -> URL: steam://rungameid/894020
InternetURL: C:\Users\mario\Desktop\Despot's Game Playtest.url -> URL: steam://rungameid/1518950
InternetURL: C:\Users\mario\Desktop\STAR WARS Jedi Fallen Order™.url -> URL: steam://rungameid/1172380
InternetURL: C:\Users\mario\Desktop\Tainted Grail.url -> URL: steam://rungameid/1199030
InternetURL: C:\Users\mario\Desktop\The Last Spell.url -> URL: steam://rungameid/1105670
InternetURL: C:\Users\mario\Desktop\Spiele\Battle Brothers.url -> URL: steam://rungameid/365360
InternetURL: C:\Users\mario\Desktop\Spiele\Battlefleet Gothic Armada II.url -> URL: steam://rungameid/573100
InternetURL: C:\Users\mario\Desktop\Spiele\Borderlands 2.url -> URL: steam://rungameid/49520
InternetURL: C:\Users\mario\Desktop\Spiele\Borderlands 3.url -> URL: com.epicgames.launcher://apps/Catnip?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\Borderlands The Pre-Sequel.url -> URL: steam://rungameid/261640
InternetURL: C:\Users\mario\Desktop\Spiele\Crown Trick.url -> URL: steam://rungameid/1000010
InternetURL: C:\Users\mario\Desktop\Spiele\Crusader Kings III.url -> URL: steam://rungameid/1158310
InternetURL: C:\Users\mario\Desktop\Spiele\Crying Suns.url -> URL: steam://rungameid/873940
InternetURL: C:\Users\mario\Desktop\Spiele\Curse of the Dead Gods.url -> URL: steam://rungameid/1123770
InternetURL: C:\Users\mario\Desktop\Spiele\DARK SOULS™ III.url -> URL: steam://rungameid/374320
InternetURL: C:\Users\mario\Desktop\Spiele\Darkest Dungeon.url -> URL: steam://rungameid/262060
InternetURL: C:\Users\mario\Desktop\Spiele\Dead Cells.url -> URL: steam://rungameid/588650
InternetURL: C:\Users\mario\Desktop\Spiele\Deck of Ashes.url -> URL: steam://rungameid/1016730
InternetURL: C:\Users\mario\Desktop\Spiele\Despot's Game Demo.url -> URL: steam://rungameid/1515100
InternetURL: C:\Users\mario\Desktop\Spiele\Disco Elysium.url -> URL: steam://rungameid/632470
InternetURL: C:\Users\mario\Desktop\Spiele\Divinity Original Sin 2 - Kopie.url -> URL: steam://rungameid/435150
InternetURL: C:\Users\mario\Desktop\Spiele\Divinity Original Sin 2.url -> URL: steam://rungameid/435150
InternetURL: C:\Users\mario\Desktop\Spiele\Don't Starve Together - Kopie.url -> URL: steam://rungameid/322330
InternetURL: C:\Users\mario\Desktop\Spiele\Don't Starve Together.url -> URL: steam://rungameid/322330
InternetURL: C:\Users\mario\Desktop\Spiele\DOOM Eternal.url -> URL: steam://rungameid/782330
InternetURL: C:\Users\mario\Desktop\Spiele\Dota 2.url -> URL: steam://rungameid/570
InternetURL: C:\Users\mario\Desktop\Spiele\Enter the Gungeon.url -> URL: steam://rungameid/311690
InternetURL: C:\Users\mario\Desktop\Spiele\Fallout 4.url -> URL: steam://rungameid/377160
InternetURL: C:\Users\mario\Desktop\Spiele\Fights in Tight Spaces - Kopie.url -> URL: steam://rungameid/1265820
InternetURL: C:\Users\mario\Desktop\Spiele\Fights in Tight Spaces.url -> URL: steam://rungameid/1265820
InternetURL: C:\Users\mario\Desktop\Spiele\Frostpunk.url -> URL: steam://rungameid/323190
InternetURL: C:\Users\mario\Desktop\Spiele\FTL Faster Than Light - Kopie.url -> URL: steam://rungameid/212680
InternetURL: C:\Users\mario\Desktop\Spiele\FTL Faster Than Light.url -> URL: steam://rungameid/212680
InternetURL: C:\Users\mario\Desktop\Spiele\Gears Tactics.url -> URL: steam://rungameid/1184050
InternetURL: C:\Users\mario\Desktop\Spiele\Gordian Quest.url -> URL: steam://rungameid/981430
InternetURL: C:\Users\mario\Desktop\Spiele\Griftlands.url -> URL: steam://rungameid/601840
InternetURL: C:\Users\mario\Desktop\Spiele\Grim Dawn.url -> URL: steam://rungameid/219990
InternetURL: C:\Users\mario\Desktop\Spiele\Gunfire Reborn.url -> URL: steam://rungameid/1217060
InternetURL: C:\Users\mario\Desktop\Spiele\Hadean Tactics - Kopie.url -> URL: steam://rungameid/1260590
InternetURL: C:\Users\mario\Desktop\Spiele\Hadean Tactics.url -> URL: steam://rungameid/1260590
InternetURL: C:\Users\mario\Desktop\Spiele\Hades.url -> URL: com.epicgames.launcher://apps/Min?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\Hand of Fate 2.url -> URL: steam://rungameid/456670
InternetURL: C:\Users\mario\Desktop\Spiele\Into the Breach.url -> URL: steam://rungameid/590380
InternetURL: C:\Users\mario\Desktop\Spiele\Invisible, Inc..url -> URL: steam://rungameid/243970
InternetURL: C:\Users\mario\Desktop\Spiele\Iratus Lord of the Dead.url -> URL: steam://rungameid/807120
InternetURL: C:\Users\mario\Desktop\Spiele\King Arthur Knight's Tale - Kopie.url -> URL: steam://rungameid/1157390
InternetURL: C:\Users\mario\Desktop\Spiele\King Arthur Knight's Tale.url -> URL: steam://rungameid/1157390
InternetURL: C:\Users\mario\Desktop\Spiele\Legend of Keepers.url -> URL: steam://rungameid/978520
InternetURL: C:\Users\mario\Desktop\Spiele\Limbo.url -> URL: com.epicgames.launcher://apps/Hazelnut?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\Loop Hero - Kopie.url -> URL: steam://rungameid/1282730
InternetURL: C:\Users\mario\Desktop\Spiele\Loop Hero.url -> URL: steam://rungameid/1282730
InternetURL: C:\Users\mario\Desktop\Spiele\Monster Train.url -> URL: steam://rungameid/1102190
InternetURL: C:\Users\mario\Desktop\Spiele\MORDHAU.url -> URL: steam://rungameid/629760
InternetURL: C:\Users\mario\Desktop\Spiele\Mordheim City of the Damned.url -> URL: steam://rungameid/276810
InternetURL: C:\Users\mario\Desktop\Spiele\MOTHERGUNSHIP.url -> URL: steam://rungameid/574090
InternetURL: C:\Users\mario\Desktop\Spiele\Mutant Year Zero Road to Eden.url -> URL: steam://rungameid/760060
InternetURL: C:\Users\mario\Desktop\Spiele\Noita.url -> URL: steam://rungameid/881100
InternetURL: C:\Users\mario\Desktop\Spiele\Othercide.url -> URL: steam://rungameid/798490
InternetURL: C:\Users\mario\Desktop\Spiele\Pathfinder Kingmaker.url -> URL: steam://rungameid/640820
InternetURL: C:\Users\mario\Desktop\Spiele\Phoenix Point Content.url -> URL: com.epicgames.launcher://apps/IrisContent?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\Phoenix Point.url -> URL: com.epicgames.launcher://apps/Iris?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\RAD.url -> URL: steam://rungameid/722560
InternetURL: C:\Users\mario\Desktop\Spiele\Ratropolis.url -> URL: steam://rungameid/1108370
InternetURL: C:\Users\mario\Desktop\Spiele\Remnant From the Ashes.url -> URL: steam://rungameid/617290
InternetURL: C:\Users\mario\Desktop\Spiele\Ring of Pain.url -> URL: steam://rungameid/998740
InternetURL: C:\Users\mario\Desktop\Spiele\Risk of Rain 2.url -> URL: steam://rungameid/632360
InternetURL: C:\Users\mario\Desktop\Spiele\Skul The Hero Slayer.url -> URL: steam://rungameid/1147560
InternetURL: C:\Users\mario\Desktop\Spiele\Slay the Spire.url -> URL: steam://rungameid/646570
InternetURL: C:\Users\mario\Desktop\Spiele\Star Renegades.url -> URL: steam://rungameid/651670
InternetURL: C:\Users\mario\Desktop\Spiele\Taur.url -> URL: steam://rungameid/1227780
InternetURL: C:\Users\mario\Desktop\Spiele\The Banner Saga 2.url -> URL: steam://rungameid/281640
InternetURL: C:\Users\mario\Desktop\Spiele\The Banner Saga 3.url -> URL: steam://rungameid/485460
InternetURL: C:\Users\mario\Desktop\Spiele\The Banner Saga.url -> URL: steam://rungameid/237990
InternetURL: C:\Users\mario\Desktop\Spiele\The Binding of Isaac Rebirth.url -> URL: steam://rungameid/250900
InternetURL: C:\Users\mario\Desktop\Spiele\The Legend of Bum-Bo.url -> URL: steam://rungameid/1148650
InternetURL: C:\Users\mario\Desktop\Spiele\The Witcher 3 Wild Hunt.url -> URL: steam://rungameid/292030
InternetURL: C:\Users\mario\Desktop\Spiele\They Are Billions.url -> URL: steam://rungameid/644930
InternetURL: C:\Users\mario\Desktop\Spiele\This War of Mine.url -> URL: com.epicgames.launcher://apps/Cardinal?action=launch&silent=true
InternetURL: C:\Users\mario\Desktop\Spiele\Total War WARHAMMER II.url -> URL: steam://rungameid/594570
InternetURL: C:\Users\mario\Desktop\Spiele\Warframe.url -> URL: steam://rungameid/230410
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer 40,000 Gladius - Relics of War.url -> URL: steam://rungameid/489630
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer 40,000 Inquisitor - Martyr.url -> URL: steam://rungameid/527430
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer 40,000 Inquisitor - Prophecy.url -> URL: steam://rungameid/1042800
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer 40,000 Mechanicus.url -> URL: steam://rungameid/673880
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer Underworlds Online - Kopie.url -> URL: steam://rungameid/1022310
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer Underworlds Online.url -> URL: steam://rungameid/1022310
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer Vermintide 2 Closed Test.url -> URL: steam://rungameid/737010
InternetURL: C:\Users\mario\Desktop\Spiele\Warhammer Vermintide 2.url -> URL: steam://rungameid/552500
InternetURL: C:\Users\mario\Desktop\Spiele\We. The Revolution.url -> URL: steam://rungameid/736850
InternetURL: C:\Users\mario\Desktop\Spiele\XCOM 2.url -> URL: steam://rungameid/268500
InternetURL: C:\Users\mario\Desktop\Spiele\Yakuza Like a Dragon.url -> URL: steam://rungameid/1235140
InternetURL: C:\Users\mario\Desktop\Spiele\Yes, Your Grace.url -> URL: steam://rungameid/1115690

==================== Ende vom Shortcut.txt =============================
         

Leider konnte ich das Beispielbild nicht anhängen.
Ich hoffe Ihr könnt mir helfen.

FW: Kaspersky Total Security

Kasperletheater Total Schwachsinn bitte umgehend deinstallieren. Windows 10 hat bereits ausreichende Sicheheitsfunktionen an Bord.

Bitte bei der Gelegenheit auch das alte OpenOffice wegschmeißen und später durch LibreOffice ersetzen. Den ganzen vorinstallieren HP-Krempel kannste auch entsorgen.

Vielen Dank für den Hinweis. Leider hilft mir dies bei meinen Problem derzeit nicht weiter. Ich hab jetzt das Bild von der Problematik im Anhang hinterlegt. Ich wäre ja schon beruhigt wenn man mir sagen könnte ob es sich schlicht um einen Bug handelt oder doch um ggf. Schadsoftware.

Es wurde auch nirgends geschrieben, dass danach alles wieder gut sei. Diesen Unsinn nie wieder zu nutzen gehörte zur Vorbereitung. Hast du das jetzt deinstalliert?

Ja alles deinstalliert.

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab

Alles erledigt, hier die Log-Datei

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-09-09.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    10-04-2021
# Duration: 00:00:02
# OS:       Windows 10 Home
# Cleaned:  28
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPAudioSwitch   Folder   C:\Program Files (x86)\HP\HPAUDIOSWITCH
Deleted       Preinstalled.HPAudioSwitch   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{ED24513D-4D7B-4738-818A-24B1CA825ABC} 
Deleted       Preinstalled.HPAudioSwitch   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HPAudioSwitch
Deleted       Preinstalled.HPAudioSwitch   Task   C:\Windows\System32\Tasks\HPAUDIOSWITCH
Deleted       Preinstalled.HPCoolSense   Folder   C:\Program Files (x86)\HP\HP COOLSENSE
Deleted       Preinstalled.HPCoolSense   Folder   C:\Users\mario\AppData\Local\HP\HP COOLSENSE
Deleted       Preinstalled.HPCoolSense   Folder   C:\Windows\System32\Tasks\HP\HP COOLSENSE
Deleted       Preinstalled.HPCoolSense   Registry   HKLM\Software\Classes\CLSID\{224695A4-BD5E-4C38-B354-A4C828E61BF7}
Deleted       Preinstalled.HPJumpStartLaunch   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EEC821E9-7884-4A13-A500-82D6A26A17D2} 
Deleted       Preinstalled.HPJumpStartLaunch   Registry   HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HPJumpStartLaunch
Deleted       Preinstalled.HPJumpStartLaunch   Task   C:\Windows\System32\Tasks\HPJUMPSTARTLAUNCH
Deleted       Preinstalled.HPRegistrationService   Folder   C:\Program Files (x86)\HP\HP REGISTRATION SERVICE
Deleted       Preinstalled.HPRegistrationService   Folder   C:\ProgramData\HP\HP REGISTRATION SERVICE
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\HP\SUPPORT
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted       Preinstalled.HPSupportAssistant   Folder   C:\Users\mario\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted       Preinstalled.HPSupportAssistant   Registry   HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted       Preinstalled.HPSupportAssistant   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{4AAC4B07-77EF-4BCF-88DC-D24E4DE683E8}
Deleted       Preinstalled.HPSureConnect   Folder   C:\Program Files\HPCOMMRECOVERY
Deleted       Preinstalled.HPSureConnect   Registry   HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{6468C4A5-E47E-405F-B675-A70A70983EA6}
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4620 octets] - [04/10/2021 17:38:08]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
         

Was sollst du tun wenn adwCleaner fündig wurde?

Ups

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-09-09.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    10-05-2021
# Duration: 00:00:00
# OS:       Windows 10 Home
# Cleaned:  2
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPSupportAssistant   Folder   C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [4620 octets] - [04/10/2021 17:38:08]
AdwCleaner[C00].txt - [5172 octets] - [04/10/2021 17:39:01]
AdwCleaner[S01].txt - [1695 octets] - [05/10/2021 10:40:04]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C01].txt ##########
         

Hier der 2. Durchlauf

Und da er nochmal etwas gefunden hat hier der Scan ohne Funde

# -------------------------------
# Malwarebytes AdwCleaner 8.3.0.0
# -------------------------------
# Build:    06-29-2021
# Database: 2021-09-09.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    10-05-2021
# Duration: 00:00:06
# OS:       Windows 10 Home
# Scanned:  31991
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [4620 octets] - [04/10/2021 17:38:08]
AdwCleaner[C00].txt - [5172 octets] - [04/10/2021 17:39:01]
AdwCleaner[S01].txt - [1695 octets] - [05/10/2021 10:40:04]
AdwCleaner[C01].txt - [1909 octets] - [05/10/2021 10:40:29]
AdwCleaner[S02].txt - [1720 octets] - [05/10/2021 10:46:48]
AdwCleaner[C02].txt - [1921 octets] - [05/10/2021 10:47:07]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
         

Dann jetzt bitte ne neue FRST.txt und Addition.txt

Alles klar

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-09-2021 02
durchgeführt von mario (06-10-2021 15:19:54)
Gestartet von C:\Users\mario\Desktop\FRST
Windows 10 Home Version 21H1 19043.1237 (X64) (2020-09-27 10:40:26)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-4186713360-3844459930-3556965904-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-4186713360-3844459930-3556965904-503 - Limited - Disabled)
Gast (S-1-5-21-4186713360-3844459930-3556965904-501 - Limited - Disabled)
mario (S-1-5-21-4186713360-3844459930-3556965904-1001 - Administrator - Enabled) => C:\Users\mario
WDAGUtilityAccount (S-1-5-21-4186713360-3844459930-3556965904-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CORSAIR iCUE 4 Software (HKLM\...\{167F6EA4-1262-4247-B392-52C7D1E99504}) (Version: 4.15.153 - Corsair)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Discord (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Epic Games Launcher (HKLM-x32\...\{565A7303-FC2C-4628-9F61-19F90163B9E2}) (Version: 1.1.215.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP CoolSense (HKLM-x32\...\{10F0BF3E-DBDB-422A-8C12-B4D46711D7C8}) (Version: 2.22.2 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{cdb5f70f-5107-4613-bf69-15de903b5b5d}) (Version: 5.5.22560 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{5D308D1F-E37B-431A-8D35-67D16287467D}) (Version: 1.4.28 - HP Inc.)
Intel XTU SDK (HKLM-x32\...\{43A58350-CB99-4F4E-9BB6-F058D7B27985}) (Version: 1.0.9 - HP Inc.) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.2.11003.3588 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1043 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 15.7.3.1019 - Intel Corporation)
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000071-0190-1031-84C8-B8D95FA3C8C3}) (Version: 19.71.0 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{17408817-d415-4768-a160-ae6d46d6bdb0}) (Version: 10.1.1.44 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 94.0.992.38 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\OneDriveSetup.exe) (Version: 21.180.0905.0007 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B981965-2FBC-433C-B4B3-E183EE97CD29}) (Version: 2.83.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 3.1.8 (x64) (HKLM-x32\...\{3e04c2ef-ccc7-4fe6-a32f-f36572af0f42}) (Version: 3.1.8.29220 - Microsoft Corporation)
Minecraft Launcher (HKLM-x32\...\{E15F69FA-660D-45CC-B28F-6CBC4CAD2091}) (Version: 1.0.0.0 - Mojang)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 92.0.1 (x64 de)) (Version: 92.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 66.0.3 - Mozilla)
MTG Arena (HKLM-x32\...\{396A4605-2DE0-4D51-BEE2-7565EFFB1B18}) (Version: 0.1.1864 - Wizards of the Coast)
NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)
NVIDIA Grafiktreiber 462.80 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 462.80 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.105.49133 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Paradox Launcher v2 (HKLM\...\{A92DB5D9-A24D-4678-9F91-B4FA6D895718}) (Version: 2.0.4.0 - Paradox Interactive)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9.141.259 - Google, Inc.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.320.170 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.18.526.2017 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
SlimDX Runtime .NET 4.0 x64 (January 2012) (HKLM\...\{A2199A06-89C4-4187-AA4A-3A9676FB799D}) (Version: 2.0.13.43 - SlimDX Group)
Spotify (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Spotify) (Version: 1.1.69.612.gb7409abc - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
TAP-Windows 9.21.2 (HKLM\...\TAP-Windows) (Version: 9.21.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\TeamSpeak 3 Client) (Version: 3.3.0 - TeamSpeak Systems GmbH)
Thunderbolt(TM) Software (HKLM-x32\...\{87A31923-8F18-4943-8093-17DBEE0101B7}) (Version: 16.3.61.275 - Intel Corporation)
UE4 Prerequisites (x64) (HKLM-x32\...\{2890ae6b-90e9-448d-b3e6-97e43c21e2fd}) (Version: 1.0.13.0 - Epic Games, Inc.) Hidden
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{16AD6161-2E47-4BF1-AA77-0946EFE93E08}) (Version: 2.61.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WinRAR 6.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 6.01.0 - win.rar GmbH)

Packages:
=========
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2021-02-19] (Canon Inc.)
Dropbox-Sonderaktion -> C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96 [2021-09-21] (Dropbox Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.8.27.0_x64__v10z8vjag6ke6 [2021-09-02] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6 [2021-08-03] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-04-15] (Microsoft Corporation)
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-29] (Microsoft Corporation) [MS Ad]
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.10.7290.0_x64__8wekyb3d8bbwe [2021-09-21] (Microsoft Studios) [MS Ad]
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.14430.20234.0_x86__8wekyb3d8bbwe [2021-10-03] (Microsoft Corporation)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-07-15] (Netflix, Inc.)
OMEN Gaming Hub -> C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6 [2021-09-17] (HP Inc.) [Startup Task]
Power Media Player 14 for HP Consumer PCs with DVD -> C:\Program Files\WindowsApps\CyberLinkCorp.hs.PowerMediaPlayer14forHPConsumerPC_14.2.9528.0_x86__06qsbagp91rvg [2019-01-26] (CYBERLINKCOM CORP)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-4186713360-3844459930-3556965904-1001_Classes\CLSID\{C591CFEA-E432-495d-A0BE-58E4CCD87B17}\Shell\Open\Command -> C:\Program Files\Synaptics\SynTP\SynTPCpl.dll (Synaptics Incorporated -> Synaptics Incorporated)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2020-01-14 16:49 - 2020-01-14 16:49 - 032162304 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96\DropboxUniversal.dll
2018-12-19 21:23 - 2018-12-19 21:24 - 001123840 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\C27EB4BA.DropboxOEM_20.4.3.0_x64__xbfy0k16fey96\e_sqlite3.dll
2020-08-20 14:56 - 2020-08-20 14:56 - 000014336 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6\SystemEventUtility\NativeRpcClient.DLL
2021-09-16 16:33 - 2021-09-16 16:33 - 008411648 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\OmenCommandCenterApp_UWP.dll
2020-09-25 18:09 - 2020-09-25 18:10 - 000014848 _____ (HP Inc.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\NativeRpcClient.DLL
2020-08-20 14:56 - 2020-08-20 14:56 - 001662976 _____ (Robert Simpson, et al.) [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\SQLite.Interop.dll
2021-07-20 10:55 - 2021-07-20 10:55 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Origin\LIBEAY32.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\Origin\ssleay32.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\platforms\qwindows.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Core.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Gui.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Network.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5WebSockets.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Widgets.dll
2021-10-04 20:18 - 2021-05-02 15:54 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] D:\Origin\Qt5Xml.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 15:46 - 2017-09-29 15:44 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files\dotnet\
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Desktop-Hintergrund.bmp
DNS Servers: 217.68.162.126 - 62.117.5.126
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

Network Binding:
=============
WLAN: Realtek LightWeight Filter (NDIS6.40) -> nt_rtf64 (enabled) 
Ethernet 2: Realtek LightWeight Filter (NDIS6.40) -> nt_rtf64 (enabled) 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{5F975EF1-53B6-461A-A2E2-D28CC57E0B2A}] => (Allow) D:\Steam\steamapps\common\Star Renegades\Star Renegades.exe () [Datei ist nicht signiert]
FirewallRules: [{9F73CD3D-6B79-4DA6-8A4A-B3654C0C0EBF}] => (Allow) D:\Steam\steamapps\common\Star Renegades\Star Renegades.exe () [Datei ist nicht signiert]
FirewallRules: [{848E32E4-7EAC-4308-A6E0-100173435A05}] => (Allow) D:\Steam\steamapps\common\Monster Train\MonsterTrain.exe () [Datei ist nicht signiert]
FirewallRules: [{060BC4DC-3EFE-4B2B-A6C4-08EA2FD5E1C7}] => (Allow) D:\Steam\steamapps\common\Monster Train\MonsterTrain.exe () [Datei ist nicht signiert]
FirewallRules: [{E6BE87B3-8B58-43D6-BB76-2334EE16D77B}] => (Allow) D:\Steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe => Keine Datei
FirewallRules: [{946BA0E5-DC3F-44CE-A5E4-F051223E2D35}] => (Allow) D:\Steam\steamapps\common\Grim Dawn\x64\Grim Dawn.exe => Keine Datei
FirewallRules: [{61D26A22-09C4-4D6C-B3AB-FC97C033A909}] => (Allow) D:\Steam\steamapps\common\Gunfire Reborn\Gunfire Reborn.exe (广州多益网络股份有限公司 -> )
FirewallRules: [{C7A430F1-36A0-44B1-AFB1-295D1FEF41CF}] => (Allow) D:\Steam\steamapps\common\Gunfire Reborn\Gunfire Reborn.exe (广州多益网络股份有限公司 -> )
FirewallRules: [{0C56719E-17C2-4286-B640-92946E6F5376}] => (Allow) D:\Steam\steamapps\common\Enter the Gungeon\EtG.exe () [Datei ist nicht signiert]
FirewallRules: [{FFDEE279-7B81-4ECD-9C38-C908405390D7}] => (Allow) D:\Steam\steamapps\common\Enter the Gungeon\EtG.exe () [Datei ist nicht signiert]
FirewallRules: [{5AA458B4-2BFD-4C4E-8B20-69B0E03F9E3C}] => (Allow) D:\Steam\steamapps\common\Legend of Keepers\LegendOfKeepers.exe () [Datei ist nicht signiert]
FirewallRules: [{9169EE49-38D1-4F9A-AC43-77F9D875D33F}] => (Allow) D:\Steam\steamapps\common\Legend of Keepers\LegendOfKeepers.exe () [Datei ist nicht signiert]
FirewallRules: [{43C6B583-CED8-43DF-BD6B-5246FE2F6BCF}] => (Allow) D:\Steam\steamapps\common\The Legend of Bum-Bo\the legend of bum-bo.exe () [Datei ist nicht signiert]
FirewallRules: [{1EC3F3FB-3262-4F88-940F-74200AFB2015}] => (Allow) D:\Steam\steamapps\common\The Legend of Bum-Bo\the legend of bum-bo.exe () [Datei ist nicht signiert]
FirewallRules: [{F628EDFB-B248-443D-B424-4949F5BE2C45}] => (Allow) D:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [{1C7E5953-B953-4D21-9A53-5C3B7127994F}] => (Allow) D:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [{03E7C402-F914-4DE1-8528-C75DB374635D}] => (Allow) D:\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{DEC0B70F-3372-483F-A468-C1FC188293B6}] => (Allow) D:\Steam\steamapps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{59AE8D85-7EF5-472B-B3AA-AC5E2D0585B3}] => (Allow) D:\Steam\steamapps\common\Taur\Taur.exe () [Datei ist nicht signiert]
FirewallRules: [{5500B1C3-6E20-4D77-BDE2-14FD56EE68E0}] => (Allow) D:\Steam\steamapps\common\Taur\Taur.exe () [Datei ist nicht signiert]
FirewallRules: [{4715D6B8-31C2-469E-A9C7-293FC32A9B21}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\Launcher.exe (Slitherine Software UK Limited -> Slitherine Ltd.)
FirewallRules: [{65A7D6E4-F81A-45CF-B134-1B4AFF9F9DCE}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\Launcher.exe (Slitherine Software UK Limited -> Slitherine Ltd.)
FirewallRules: [{F8D8F210-FE1D-40F4-98C6-88D743A3C6DE}] => (Allow) D:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe () [Datei ist nicht signiert]
FirewallRules: [{36D94621-BCE9-4773-B61B-B62A6F1499F5}] => (Allow) D:\Steam\steamapps\common\InvisibleInc\invisibleinc.exe () [Datei ist nicht signiert]
FirewallRules: [{10F27CD9-5431-493E-AAF3-BCAC46D354E3}] => (Allow) D:\Steam\steamapps\common\tbs3\win32\The Banner Saga 3.exe () [Datei ist nicht signiert]
FirewallRules: [{17BE5F50-E213-47BF-9F0F-AAEBADE33048}] => (Allow) D:\Steam\steamapps\common\tbs3\win32\The Banner Saga 3.exe () [Datei ist nicht signiert]
FirewallRules: [{F1A4A9B8-0CDC-4DFD-BF9E-DA2E1392FF05}] => (Allow) D:\Steam\steamapps\common\tbs2\win32\The Banner Saga 2.exe () [Datei ist nicht signiert]
FirewallRules: [{EB1C6BDD-C45F-488A-BEED-B83AE1F970B4}] => (Allow) D:\Steam\steamapps\common\tbs2\win32\The Banner Saga 2.exe () [Datei ist nicht signiert]
FirewallRules: [{90F7B1BD-7BE2-4DC1-BA2D-2BE0201CBD2E}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe () [Datei ist nicht signiert]
FirewallRules: [{3B1B25A9-297C-481A-99AC-E2D7EC54388B}] => (Allow) D:\Steam\steamapps\common\tbs\win32\The Banner Saga.exe () [Datei ist nicht signiert]
FirewallRules: [{BA715798-351A-4496-97F8-66A09C6A8064}] => (Allow) D:\Steam\steamapps\common\Risk of Rain 2\Risk of Rain 2.exe () [Datei ist nicht signiert]
FirewallRules: [{8D8EACB5-541E-4A45-B2C0-86111F7B2886}] => (Allow) D:\Steam\steamapps\common\Risk of Rain 2\Risk of Rain 2.exe () [Datei ist nicht signiert]
FirewallRules: [{04629834-AFE0-4CDB-9A6D-0356EB04B02D}] => (Allow) D:\Steam\steamapps\common\Disco Elysium\disco.exe () [Datei ist nicht signiert]
FirewallRules: [{BB9FC9F1-0C0D-4262-8EE3-655DF3B8C064}] => (Allow) D:\Steam\steamapps\common\Disco Elysium\disco.exe () [Datei ist nicht signiert]
FirewallRules: [{AFA5724E-C6BD-4AD9-B5C8-D90D88BABF23}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{E5DC74F0-C636-44FF-B594-DA24C9E26550}] => (Allow) D:\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{C8FEF409-2691-4125-B982-815A75F931EF}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{70B98F22-337E-4336-BD1E-C8CF4DE0897E}] => (Allow) D:\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{8D1F3199-C8FD-4059-B7C1-CAFE458F6362}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{171C5A25-8A9E-4266-8FFE-1B0810FDDCD4}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{3554365D-A452-4638-9E9F-3ECA69EB27F6}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{05CE3A46-152C-480B-8B64-ADA5E132C80F}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{29487266-90EC-49AB-8FFD-82C25C7CECD1}] => (Allow) D:\Steam\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer_x64_11.exe => Keine Datei
FirewallRules: [{D10BC149-570C-4872-A1B0-8DB284FE88A9}] => (Allow) D:\Steam\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer_x64_11.exe => Keine Datei
FirewallRules: [{7E74F334-C765-4ACE-BC90-9A6E8534B420}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{4C29C526-7DCB-4BF1-B3E4-FB6F5A4DFE25}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{680B5CCE-2728-4FB2-B7F0-12DA2E470DB8}] => (Allow) D:\Steam\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{AF2D0DAF-B6F4-4386-88CD-C15BD7D30D08}] => (Allow) D:\Steam\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{FCA4BD63-9172-4135-80CB-4068D176F00F}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells.exe () [Datei ist nicht signiert]
FirewallRules: [{0E46EB01-4B4D-46B0-8DD2-EEC3CE69A858}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells.exe () [Datei ist nicht signiert]
FirewallRules: [{B13A11E4-0457-489D-9C25-441A0D2DA14A}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells_gl.exe () [Datei ist nicht signiert]
FirewallRules: [{7240BB10-F232-4082-AB8F-1D8A05FF81D5}] => (Allow) D:\Steam\steamapps\common\Dead Cells\deadcells_gl.exe () [Datei ist nicht signiert]
FirewallRules: [{95BA644F-5088-41CA-A5A6-5B6150ECAC92}] => (Allow) D:\Steam\steamapps\common\Mechanicus\Mechanicus.exe () [Datei ist nicht signiert]
FirewallRules: [{CF464DB6-5FB6-4DA4-A909-1251E5F7D6FC}] => (Allow) D:\Steam\steamapps\common\Mechanicus\Mechanicus.exe () [Datei ist nicht signiert]
FirewallRules: [{F89AD2ED-3906-4834-A57C-7C0848CA5A38}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{8F667B84-6463-400E-8B88-6180DB84AAF8}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{DAA36B58-9DD3-4E36-BF8E-5DE24DA82770}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{E8A126FC-C0A9-4AC0-B5A5-8EA108ABC7FC}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{3A54555C-5E45-4065-BD10-F340F220424B}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe => Keine Datei
FirewallRules: [{52ADF340-3A17-46AA-AA2F-082621D5717D}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Keine Datei
FirewallRules: [{061B5B19-DB0B-4984-9C4C-AF0B6FEEE212}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{1BAEAB19-4830-4CB8-9607-E8B31F79F487}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{5E18B062-9BB4-4876-B703-B7DF9760D858}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe => Keine Datei
FirewallRules: [{F8F6ED84-C59F-4FB5-906D-4D0D501E2AB7}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe => Keine Datei
FirewallRules: [{075BCF34-0E71-4CD6-9A24-DFA3F2EA7923}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe => Keine Datei
FirewallRules: [{D619F188-2439-4EAC-940A-934CBAB661D4}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe => Keine Datei
FirewallRules: [{FA13B315-01F3-4062-9A8B-BFCA1BE64D95}] => (Allow) D:\Steam\steamapps\common\Into the Breach\Breach.exe () [Datei ist nicht signiert]
FirewallRules: [{D8D1E071-3F53-4876-87AA-207D720F0ED4}] => (Allow) D:\Steam\steamapps\common\Into the Breach\Breach.exe () [Datei ist nicht signiert]
FirewallRules: [{BAD4F5C4-17A4-4682-A241-0C1DAA7BBE12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7122C234-C805-4FDC-BD67-F2C87C35744B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{F9E75107-7410-4BDD-B443-2E28407AECDE}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\SlayTheSpire.exe () [Datei ist nicht signiert]
FirewallRules: [{035E05F4-0C17-4C83-B620-7C5ADED7E79B}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\SlayTheSpire.exe () [Datei ist nicht signiert]
FirewallRules: [{9E3FED8F-E8F1-47BA-99E5-175ED1232869}] => (Allow) D:\Steam\steamapps\common\Deck of Ashes\Deck of Ashes.exe () [Datei ist nicht signiert]
FirewallRules: [{2C512E0B-3816-490E-B5B0-A94728A8247F}] => (Allow) D:\Steam\steamapps\common\Deck of Ashes\Deck of Ashes.exe () [Datei ist nicht signiert]
FirewallRules: [{B655B713-B391-4833-AACC-08E4BDF32D43}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A78B36C1-CC9F-4829-8AEE-9717280FB286}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{84384BE6-E0A7-4878-8BA1-46A97B0D1424}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\autorun.exe => Keine Datei
FirewallRules: [{5A1B9B6F-B5FB-4E31-9E5D-8186B2ADEABC}] => (Allow) D:\Steam\steamapps\common\Warhammer 40000 Gladius - Relics of War\autorun.exe => Keine Datei
FirewallRules: [{3BC848F2-5496-472F-A14B-5ABFA7E07E09}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{3B7CBEF0-59D3-42BC-8059-C99B2F488FBA}] => (Allow) D:\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe (Numantian Games) [Datei ist nicht signiert]
FirewallRules: [{D051D457-16B2-4B8D-B18D-3B658C7766A3}] => (Allow) D:\Steam\steamapps\common\They Are Billions\TheyAreBillions.exe (Numantian Games) [Datei ist nicht signiert]
FirewallRules: [{8F7EC96A-C629-4B06-AA93-28C6E40EC545}] => (Allow) D:\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe () [Datei ist nicht signiert]
FirewallRules: [{A1DFAA06-2090-4D6C-BC06-3AA9CAEE5A35}] => (Allow) D:\Steam\steamapps\common\FTL Faster Than Light\FTLGame.exe () [Datei ist nicht signiert]
FirewallRules: [{9AE5CF78-2291-4312-899E-7A23091E6FDD}] => (Allow) D:\Steam\steamapps\common\Gordian Quest\GordianQuest.exe () [Datei ist nicht signiert]
FirewallRules: [{35730B63-793A-4E89-BBB9-701EE9807D8D}] => (Allow) D:\Steam\steamapps\common\Gordian Quest\GordianQuest.exe () [Datei ist nicht signiert]
FirewallRules: [{9A2D5543-2299-45CC-A1B8-042FBD170603}] => (Allow) D:\Steam\steamapps\common\Othercide\Othercide.exe (Focus Home Interactive S.A -> )
FirewallRules: [{416B325B-7BC7-48B4-9711-3D5D52971D67}] => (Allow) D:\Steam\steamapps\common\Othercide\Othercide.exe (Focus Home Interactive S.A -> )
FirewallRules: [{C2DD9322-181C-4803-B474-F7FF556C0A17}] => (Allow) D:\Steam\steamapps\common\Iratus Lord of the Dead\Iratus.exe () [Datei ist nicht signiert]
FirewallRules: [{E6D6D344-3594-4A19-B92A-B9B75E72499B}] => (Allow) D:\Steam\steamapps\common\Iratus Lord of the Dead\Iratus.exe () [Datei ist nicht signiert]
FirewallRules: [{837F2409-6EC8-4EA9-837D-D6E3E1F2D3A6}] => (Allow) D:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{5C58CDA9-BEF3-4AD3-8A12-06A44EFCDAE2}] => (Allow) D:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{174F2A6D-27D6-40CA-BA46-8C8ABECBC229}] => (Allow) D:\Steam\steamapps\common\Skul\Skul.exe () [Datei ist nicht signiert]
FirewallRules: [{655B1D60-6CC8-4EB1-8509-8447409502B3}] => (Allow) D:\Steam\steamapps\common\Skul\Skul.exe () [Datei ist nicht signiert]
FirewallRules: [{3C23EFB5-2260-4F55-A978-9B68617705F9}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [{F755B2AC-295D-4C63-AD63-3EBC74E33BB3}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [TCP Query User{21C0DF17-B30D-465A-A783-D7A8F76AC181}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{97FD2210-AE9E-4A03-B689-D454E9BF6920}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{95A234C8-FD5D-4FCA-B797-4C7A046BFA3B}] => (Allow) D:\Steam\steamapps\common\Noita\noita.exe () [Datei ist nicht signiert]
FirewallRules: [{FA2A0D0F-55E4-4468-9CED-023703EB45F6}] => (Allow) D:\Steam\steamapps\common\Noita\noita.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{76843CDB-0C10-46BB-85CC-C1A3DA97927B}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{C681D679-2388-43D9-8043-65F532C7D791}C:\users\mario\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\mario\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{2E6A713B-62CB-4ED3-926E-E7838F7F67FF}] => (Allow) D:\Steam\steamapps\common\Curse of the Dead Gods\Curse of the Dead Gods.exe (Focus Home Interactive S.A -> Passtech Games)
FirewallRules: [{F14F3156-4693-4C40-8D02-95C112DA8529}] => (Allow) D:\Steam\steamapps\common\Curse of the Dead Gods\Curse of the Dead Gods.exe (Focus Home Interactive S.A -> Passtech Games)
FirewallRules: [{21CCD2CA-50E8-4571-A530-D3933FBF07DB}] => (Allow) D:\Steam\steamapps\common\Crying Suns\cs.exe () [Datei ist nicht signiert]
FirewallRules: [{BC569D65-208C-43E5-933C-5FD6E4896A28}] => (Allow) D:\Steam\steamapps\common\Crying Suns\cs.exe () [Datei ist nicht signiert]
FirewallRules: [{0BBD5A90-4528-4579-8778-0B5689EA9D2C}] => (Allow) D:\Steam\steamapps\common\Despot's Game Demo\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{372BCED5-BA41-4E3F-9D46-5CB79577AD9C}] => (Allow) D:\Steam\steamapps\common\Despot's Game Demo\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{F4DC8A2C-35C0-4AA4-83C3-EF53B59D5D11}] => (Allow) D:\Steam\steamapps\common\King Arthur Knight's Tale\KA_KT.exe (NeocoreGames) [Datei ist nicht signiert]
FirewallRules: [{C511820F-E4B2-421B-BC40-E23567EF582D}] => (Allow) D:\Steam\steamapps\common\King Arthur Knight's Tale\KA_KT.exe (NeocoreGames) [Datei ist nicht signiert]
FirewallRules: [{B1911800-399D-4D09-A73B-8F7F8B02F936}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{034FE985-F5F5-4068-8869-F16E29D0363D}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{E0A0591D-5843-41FB-AE42-A7A31457E29B}] => (Allow) D:\Steam\steamapps\common\Hadean Tactics\HadeanTactics.exe () [Datei ist nicht signiert]
FirewallRules: [{C2C6E0B1-F21E-41FD-9F95-AB92989ACCE0}] => (Allow) D:\Steam\steamapps\common\Hadean Tactics\HadeanTactics.exe () [Datei ist nicht signiert]
FirewallRules: [{065E2895-8A4E-4AAE-A25D-C760304885BF}] => (Allow) D:\Steam\steamapps\common\Fights in Tight Spaces\FightsInTightSpaces.exe () [Datei ist nicht signiert]
FirewallRules: [{2AF0E5CE-C8C0-45FD-A11B-D1686BDA9124}] => (Allow) D:\Steam\steamapps\common\Fights in Tight Spaces\FightsInTightSpaces.exe () [Datei ist nicht signiert]
FirewallRules: [{62005B2E-A758-4CE3-A619-A8B83A3F0669}] => (Allow) D:\Steam\steamapps\common\Ratropolis\Ratropolis.exe () [Datei ist nicht signiert]
FirewallRules: [{25D64760-A84B-4F73-B1D8-C55870E7FCF9}] => (Allow) D:\Steam\steamapps\common\Ratropolis\Ratropolis.exe () [Datei ist nicht signiert]
FirewallRules: [{F2389DE5-AEBE-4393-B5F5-C1D62F867EC6}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{FD3F94F9-0E2F-42D8-89DB-773F01D174F4}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{854817D4-EC84-4463-BF18-641ABB72BB08}] => (Allow) D:\Steam\steamapps\common\Loop Hero\Loop Hero.exe (FourQuarters team) [Datei ist nicht signiert]
FirewallRules: [{A0467E07-D9C2-41DA-BF5B-3BF28029FE92}] => (Allow) D:\Steam\steamapps\common\Loop Hero\Loop Hero.exe (FourQuarters team) [Datei ist nicht signiert]
FirewallRules: [{03277C07-EA29-4A9F-B2EB-1715F2C860DF}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{45D623EE-6EAE-4DBF-8A3C-238E039E20C0}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{F5BC846C-1CD3-49DB-B141-298CC573212A}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{7F92A3FD-4A8E-44F4-9869-A432DDFC3236}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{F66B890D-5E38-4D6D-9985-E37EC580A8DF}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{F313FDE7-CEFE-438C-B455-69753B0F883F}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{7601CF1C-E591-4778-955C-1AB6D5D1F5E1}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{475EB710-6EE6-42A2-99FC-59CCAC270C14}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{D613BD79-E532-447F-A9AD-D602E147B8BE}] => (Allow) D:\Steam\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{5699709B-2F96-45CA-A810-BCA527F22165}] => (Allow) D:\Steam\steamapps\common\Baldurs Gate 3\Launcher\LariLauncher.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{22BC0D30-8898-4A87-89D9-418E6390DB26}] => (Allow) D:\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{D20BE685-CF21-44AD-B4D4-B3974D210434}] => (Allow) D:\Steam\steamapps\common\Divinity Original Sin 2\bin\SupportTool.exe (Larian Studios Games Ltd. -> LariLauncher)
FirewallRules: [{FE29ED6B-3A5A-4161-912B-6D1F4D225527}] => (Allow) D:\Steam\steamapps\common\ChildrenOfMorta\ChildrenOfMorta.exe () [Datei ist nicht signiert]
FirewallRules: [{B1761749-B2C4-43B4-8964-D20A23CB28E6}] => (Allow) D:\Steam\steamapps\common\ChildrenOfMorta\ChildrenOfMorta.exe () [Datei ist nicht signiert]
FirewallRules: [{22532E6D-6487-413E-80AF-591BE1BB218A}] => (Allow) D:\Steam\steamapps\common\Tainted Grail\Tainted Grail.exe () [Datei ist nicht signiert]
FirewallRules: [{9C2098E6-F2E6-463B-9802-AAFF5B0DFAA2}] => (Allow) D:\Steam\steamapps\common\Tainted Grail\Tainted Grail.exe () [Datei ist nicht signiert]
FirewallRules: [{26A6FFAF-B2BB-440A-9C35-F9AF2BC136B1}] => (Allow) D:\Steam\steamapps\common\The Last Spell\The Last Spell.exe () [Datei ist nicht signiert]
FirewallRules: [{E963FB32-61C2-472F-8137-78AD34E54ECE}] => (Allow) D:\Steam\steamapps\common\The Last Spell\The Last Spell.exe () [Datei ist nicht signiert]
FirewallRules: [{DC99F418-044B-426E-9293-48F4C11704E6}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{0804A426-7CF6-4EA7-BF88-0E73E40C48EC}] => (Allow) D:\Steam\steamapps\common\Yakuza Like a Dragon\runtime\media\startup.exe => Keine Datei
FirewallRules: [{7811C3E3-2351-4E78-8488-9AFC086A7A38}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{E8340352-1358-482B-B1C2-E396D5CE205E}] => (Allow) D:\Steam\steamapps\common\Crusader Kings III\launcher\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{45321B25-9B29-436F-B7CB-2B7159211D5A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D90E7833-0EE2-42D0-96F5-6D1190E29417}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A2A87E39-C3FD-402E-A2CF-560CFA72F091}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CF553CE7-1ADE-42BC-A577-A47868828770}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{FBA5F889-2ACA-4889-A8DF-B5FF5B03381B}] => (Allow) D:\Steam\steamapps\common\Death's Door\DeathsDoor.exe () [Datei ist nicht signiert]
FirewallRules: [{97F5FDBB-8144-45EE-940B-1085C58F2370}] => (Allow) D:\Steam\steamapps\common\Death's Door\DeathsDoor.exe () [Datei ist nicht signiert]
FirewallRules: [{BD9AC966-2407-46F4-8AD7-E35D00A4311F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9F7C821C-8D07-4816-B51F-63B76CA943EA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{04414D1A-4FCC-4D44-A07F-C0245FDD4C91}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{93F4831F-CA71-4466-8ECE-983D5A85ACDA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.75.140.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{B7F09FAB-E419-41AB-9B00-3585EE4538D5}] => (Allow) D:\Steam\steamapps\common\Despot's Game Playtest\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{9BB973C6-8B82-4A9E-8EDE-C018DD5B85A8}] => (Allow) D:\Steam\steamapps\common\Despot's Game Playtest\Despot's Game.exe () [Datei ist nicht signiert]
FirewallRules: [{9BD789F7-D85F-4A5B-B3F3-955E014BFC64}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{D0E5CBAE-361C-4C1A-9DC0-EC20B5A9415F}] => (Allow) D:\Steam\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd)
FirewallRules: [{55281726-6F27-4245-94EC-0A157B9D32DC}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{E151E196-3340-4F50-BC3F-A1BFAF5B673A}] => (Allow) D:\Steam\steamapps\common\Griftlands\bin\Griftlands.exe () [Datei ist nicht signiert]
FirewallRules: [{E50AB807-F472-43C0-8DB0-E4C38FDB9105}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{C27F0C1E-AE74-4208-91E9-D44DD3D01A04}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{3ABE525A-AA73-4ED5-B56E-A3148F57CF99}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{BD7DB8BC-69C6-404B-A117-C5877CCA9D7C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (HP Inc. -> HP Inc)
FirewallRules: [{9E03DD21-1640-4B08-9312-A5A03036529A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{82CDF6FA-10FE-49F4-BC50-4AABD220E05B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{B8584045-F62E-4C27-B14D-2551822B7B9E}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{6C35DD1D-E5A0-4FE9-9F0F-29EC41AC8031}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{B597E126-29F8-47A1-8301-8D615F954AC4}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{92B03896-2B6E-4DA8-9641-AAFBE3FBAB72}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{180A8AE4-1F87-4A56-A9EC-B76AFFE2DF06}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7EAA220A-9E68-43FA-A27B-806DBDF24A88}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{30AF64B8-9C6B-4E52-A1D9-85166EC1F0E3}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{52F0A24E-9B72-4978-B092-49F6BA9C2E54}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{00C8D8A5-1575-4F9C-87F8-C3C9E325AA1F}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{7CAC480B-88F9-40D1-8754-C6D675AEEA59}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{DB6362C5-5418-402C-B043-0B845361F4DF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{9D98546F-930C-4FE7-86A9-41A03610222C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (HP Inc. -> HP Inc.)
FirewallRules: [{A471FBFD-A8C1-45BB-BDAF-654E182A9057}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (HP Inc. -> HP Inc.)
FirewallRules: [{9AE0D208-2C49-4C27-B6D7-C9E9D6947AED}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (HP Inc. -> HP Inc.)
FirewallRules: [{4A6F1249-B381-4393-8E98-0B239C43C450}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{041E0F50-FF2D-49A7-98BC-928D42E51C0D}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin64\dontstarve_steam_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{B26B3F7D-0D50-40FF-95AD-5EF3C3741A12}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{0BE107A6-C352-4195-9D73-5377F995CD80}] => (Allow) D:\Steam\steamapps\common\Don't Starve Together\bin\dontstarve_steam.exe () [Datei ist nicht signiert]
FirewallRules: [{093FA6F4-9128-41A8-8742-F1388176EC35}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [{8CF581AB-995B-456E-AD92-538847E65271}] => (Allow) D:\Steam\steamapps\common\SlayTheSpire\jre\bin\javaw.exe
FirewallRules: [{3A366559-1EC7-4F6B-A1B7-39A3D9070199}] => (Allow) C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.14430.20234.0_x86__8wekyb3d8bbwe\Office16\OUTLOOK.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{21635116-A003-4B1F-9A8F-1EAFB7AAC7CF}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]
FirewallRules: [{355D22A0-3979-4860-8BA7-5CCB8B445B2F}] => (Allow) D:\Steam\steamapps\common\DarkestDungeon\_windows\Darkest.exe () [Datei ist nicht signiert]

==================== Wiederherstellungspunkte =========================

24-09-2021 14:01:03 Geplanter Prüfpunkt
29-09-2021 09:45:47 Installed CORSAIR iCUE 4 Software
01-10-2021 23:53:57 OpenOffice 4.1.6 wird entfernt
03-10-2021 09:14:27 Removed Kaspersky Password Manager
04-10-2021 17:32:54 Windows Modules Installer
04-10-2021 17:38:48 AdwCleaner_BeforeCleaning_04/10/2021_17:38:48
05-10-2021 10:40:18 AdwCleaner_BeforeCleaning_05/10/2021_10:40:17
05-10-2021 10:46:57 AdwCleaner_BeforeCleaning_05/10/2021_10:46:57
06-10-2021 15:16:39 Windows Modules Installer

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/06/2021 03:17:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-A8O9RBDC.local already in use; will try LAPTOP-A8O9RBDC-2.local instead

Error: (10/06/2021 03:17:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister    4 LAPTOP-A8O9RBDC.local. Addr 192.168.0.13

Error: (10/06/2021 03:17:00 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353   16 LAPTOP-A8O9RBDC.local. AAAA 2A02:2454:8D62:2200:0000:0000:0000:0004

Error: (10/05/2021 10:37:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-A8O9RBDC.local already in use; will try LAPTOP-A8O9RBDC-2.local instead

Error: (10/05/2021 10:37:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister    4 LAPTOP-A8O9RBDC.local. Addr 192.168.0.13

Error: (10/05/2021 10:37:01 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.13:5353   16 LAPTOP-A8O9RBDC.local. AAAA 2A02:2454:8D62:2200:0000:0000:0000:0004

Error: (10/04/2021 05:44:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-A8O9RBDC.local already in use; will try LAPTOP-A8O9RBDC-2.local instead

Error: (10/04/2021 05:44:52 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 0; will deregister    4 LAPTOP-A8O9RBDC.local. Addr 192.168.0.13


Systemfehler:
=============
Error: (10/06/2021 03:18:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "HP Comm Recovery" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (10/05/2021 09:19:35 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter04.dll

Error: (10/05/2021 09:19:35 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter04.dll

Error: (10/05/2021 09:19:33 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.

Modulpfad: C:\WINDOWS\system32\IntelIHVRouter04.dll

Error: (10/05/2021 10:47:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/05/2021 10:47:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "HP Analytics service" wurde unerwartet beendet. Dies ist bereits 2 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/05/2021 10:47:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Corsair Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (10/05/2021 10:47:07 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Display Container LS" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.


Windows Defender:
================
Date: 2021-10-03 09:41:43
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4AF10936-114C-4137-9905-7A5275F61FD1}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2021-10-03 09:19:24
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.339.1178.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\Netzwerkdienst
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.18100.6
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 

Date: 2021-10-03 09:19:24
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.339.1178.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiSpyware
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\Netzwerkdienst
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.18100.6
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 

Date: 2021-10-03 09:19:24
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.339.1178.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\Netzwerkdienst
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.18100.6
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 

Date: 2021-10-03 09:19:24
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.339.1178.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\Netzwerkdienst
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.18100.6
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 

Date: 2021-10-03 09:19:24
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.339.1178.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiSpyware
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\Netzwerkdienst
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.18100.6
Fehlercode: 0x80072ee7
Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 

CodeIntegrity:
===============
Date: 2021-10-03 09:12:56
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.

Date: 2021-10-03 09:12:49
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.

Date: 2021-10-03 08:56:05
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume5\Program Files (x86)\Kaspersky Lab\Kaspersky Internet Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. F.19 04/18/2019
Hauptplatine: HP 8393
Prozessor: Intel(R) Core(TM) i7-7700HQ CPU @ 2.80GHz
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 16334.88 MB
Verfügbarer physikalischer RAM: 9947.66 MB
Summe virtueller Speicher: 18766.88 MB
Verfügbarer virtueller Speicher: 9478.32 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.71 GB) (Free:355.84 GB) NTFS
Drive d: (DATA) (Fixed) (Total:917.37 GB) (Free:125.56 GB) NTFS
Drive e: (RECOVERY) (Fixed) (Total:14.14 GB) (Free:1.7 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]

\\?\Volume{1180ab1c-e33e-4675-8ce1-c43c03d1451e}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.31 GB) NTFS
\\?\Volume{7305f353-517a-434b-9738-ed3b1979fe8c}\ () (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: 54DE0185)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 1426F8F0)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-09-2021 02
durchgeführt von mario (Administrator) auf LAPTOP-A8O9RBDC (HP OMEN by HP Laptop 17-an0xx) (06-10-2021 15:18:35)
Gestartet von C:\Users\mario\Desktop\FRST
Geladene Profile: mario
Platform: Windows 10 Home Version 21H1 19043.1237 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe
(Corsair Memory, Inc. -> Corsair) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe <7>
(Discord Inc. -> Discord Inc.) C:\Users\mario\AppData\Local\Discord\app-1.0.9003\Discord.exe <6>
(Electronic Arts, Inc. -> Electronic Arts) D:\Origin\OriginWebHelperService.exe
(Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <5>
(Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe <2>
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(GOG Sp. z o.o. -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\BridgeCommunication.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe
(HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.2.11.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(HP Inc.) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.9.4.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe
(Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\mario\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1220_none_7e21bc567c7ed16b\TiWorker.exe
(Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorsairGamingAudioCfgService64.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <6>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Spotify AB -> Spotify Ltd) C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe <6>
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) D:\Steam\steam.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [321240 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709152 2018-03-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Steam] => D:\Steam\steam.exe [4282600 2021-09-17] (Valve -> Valve Corporation)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33432544 2021-10-04] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [launchOnStartup] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [7611464 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Discord] => C:\Users\mario\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\Run: [Spotify] => C:\Users\mario\AppData\Roaming\Spotify\Spotify.exe [18616456 2021-10-02] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\mario\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe"
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\mario\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe"
HKU\S-1-5-21-4186713360-3844459930-3556965904-1001\...\RunOnce: [Uninstall 21.170.0822.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\mario\AppData\Local\Microsoft\OneDrive\21.170.0822.0002"
HKLM\...\Windows x64\Print Processors\Canon TS5100 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDQ.DLL [482816 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5100 series: C:\windows\system32\CNMLMDQ.DLL [1302016 2017-03-23] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {03C524DB-2611-450F-9559-F61486309BAE} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {232259B7-C1E2-4BA1-9D45-EC8BE6A551FB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {340BCDEF-A370-497F-BFAD-24F578EA8E02} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [680888 2021-09-24] (Mozilla Corporation -> Mozilla Foundation)
Task: {3E6ECD32-C0E2-48BD-8112-8E8CAA285C37} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2150120 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {3F26B0C5-0210-4088-9FEB-74E8A732486C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42519DF2-AE26-4841-B291-6D082BCC97BB} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4A615140-B80E-430F-AB96-F3F8C0E0D738} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {577684DD-2C50-44B9-A4B1-9AC9E0833127} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {57BF3EF0-5DB1-49ED-81A1-61084CBB861C} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {68D9E81A-13FD-45BE-A8A0-302CA3FC8F80} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Keine Datei <==== ACHTUNG
Task: {6A4DDB97-4FC5-4FFE-BE5A-9C826823D6A7} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {7F0DDF65-512F-4B77-9F1B-831D9BA01228} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {812D3D2B-9168-43C5-B9D5-61B15F7A7FD3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9679B4B5-9E2E-4471-A76F-347B6061E3B3} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {AE975DD6-43B3-4DEA-8C8D-CA445135A37A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BAEAE711-34F8-46CC-9A21-48DBB4C9AD23} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {BB1EA435-AB1D-4450-9434-99F8128B3371} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [136368 2021-09-02] (HP Inc. -> HP Inc.)
Task: {CFCF6E2F-BACA-47C6-B145-91E084A69D7D} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {D1450642-07EB-43D9-8494-FB018AF96770} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D888C1B5-FC34-4385-9D23-A8EDB996FF64} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [560816 2021-07-11] (HP Inc. -> HP Inc.)
Task: {D888DBB7-5C50-4489-8DEE-6C17C7409BFB} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2017-03-16] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {DAB3C388-B57D-4241-80D8-10C5777DEC85} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E4200084-73E9-483E-B3A4-9222848C2E42} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F0607708-DAA1-46C4-9C2E-ED245BBDE3F1} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F9B669D9-3A86-4BDD-AFFC-CBC496064D3A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 217.68.162.126 62.117.5.126
Tcpip\..\Interfaces\{ae362ce0-3559-48ac-b1ba-5400f9c16e92}: [DhcpNameServer] 217.68.162.126 62.117.5.126

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default [2021-10-02]
Edge Extension: (Kaspersky Protection) - C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-09-29]

FireFox:
========
FF DefaultProfile: tzu46wl5.default-1632897649030
FF ProfilePath: C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030 [2021-10-06]
FF Extension: (AdBlocker Ultimate) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\Extensions\adblockultimate@adblockultimate.net.xpi [2021-09-29]
FF Extension: (uBlock Origin) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\Extensions\uBlock0@raymondhill.net.xpi [2021-10-04]
FF Extension: (Proxy Failover) - C:\Users\mario\AppData\Roaming\Mozilla\Firefox\Profiles\tzu46wl5.default-1632897649030\features\{4210c249-fbed-48ca-9520-ceb9d485974e}\proxy-failover@mozilla.com.xpi [2021-09-30]
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Users\mario\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)

Opera: 
=======
OPR Profile: C:\Users\mario\AppData\Roaming\Opera Software\Opera Stable [2021-09-30]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.de/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (uBlock Origin) - C:\Users\mario\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2019-05-05]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [616360 2021-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [456408 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairMsiPluginService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairMsiPluginService.exe [451808 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [80600 2021-08-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [791112 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6841416 2019-09-23] (GOG Sp. z o.o. -> GOG.com)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\AppHelperCap.exe [744000 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\DiagsCap.exe [742480 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\NetworkCap.exe [742488 2021-08-27] (HP Inc. -> HP Inc.)
R2 HPOmenCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapcomp.inf_amd64_f70676215ebef294\x64\OmenCap.exe [688160 2021-05-10] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1075744 2017-10-11] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_4ae87038c758c4f5\x64\SysInfoCap.exe [743512 2021-08-27] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_35df954651b1f88f\x64\TouchpointAnalyticsClientService.exe [489584 2021-06-18] (HP Inc. -> HP Inc.)
R2 HPWMISVC; C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2557144 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3475680 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\NisSrv.exe [2772856 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2108.7-0\MsMpEng.exe [136640 2021-10-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 HP Comm Recover; "C:\Program Files\HPCommRecovery\HPCommRecovery.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2021-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz150; C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [44832 2021-10-06] (CPUID S.A.R.L.U. -> CPUID)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1f5602eb8a12ac4c\x64\hpcustomcapdriver.sys [23960 2018-07-06] (HP Inc. -> HP Inc.)
R3 HPOmenCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpomencustomcapdriver.inf_amd64_326f2e1d16385daf\x64\hpomencustomcapdriver.sys [23888 2020-04-21] (HP Inc. -> HP Inc.)
R1 rtf64; C:\WINDOWS\system32\DRIVERS\rtf64x64.sys [70560 2018-09-03] (Realtek Semiconductor Corp. -> Realtek)
S3 RzXInputRaiju; C:\WINDOWS\system32\DRIVERS\RzXInputRaiju.sys [72720 2017-02-02] (Razer USA Ltd. -> Razer Inc)
R3 ViGEmBus; C:\WINDOWS\System32\DriverStore\FileRepository\vigembus.inf_amd64_e84845c70c38fbe7\x64\ViGEmBus.sys [74648 2018-08-01] (HP Inc. -> Benjamin Höglinger-Stelzer)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2021-10-03] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [433384 2021-10-03] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-03] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-04 17:36 - 2021-10-04 17:38 - 000000000 ____D C:\AdwCleaner
2021-10-04 17:35 - 2021-10-04 17:35 - 008553680 _____ (Malwarebytes) C:\Users\mario\Downloads\adwcleaner_8.3.0.exe
2021-10-03 09:14 - 2021-10-03 09:14 - 000000000 ____D C:\Users\mario\AppData\Local\Kaspersky Lab
2021-10-02 08:43 - 2021-10-02 08:44 - 000000000 ____D C:\Users\mario\Desktop\screenshot
2021-10-01 15:01 - 2021-10-06 15:18 - 000000000 ____D C:\FRST
2021-10-01 15:00 - 2021-10-04 17:39 - 000000000 ____D C:\Users\mario\Desktop\FRST
2021-09-30 21:44 - 2021-09-30 21:45 - 000000000 ____D C:\KRD2018_Data
2021-09-30 19:19 - 2021-09-30 19:27 - 000000000 ____D C:\Users\mario\AppData\Local\Rufus
2021-09-30 19:17 - 2021-09-30 19:27 - 000000306 __RSH C:\ProgramData\ntuser.pol
2021-09-29 09:47 - 2021-09-29 09:47 - 000001178 _____ C:\Users\Public\Desktop\iCUE.lnk
2021-09-29 09:47 - 2021-09-29 09:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Corsair
2021-09-29 09:47 - 2021-09-29 09:47 - 000000000 ____D C:\Program Files\Corsair
2021-09-29 08:40 - 2021-09-29 08:40 - 000000000 ____D C:\Users\mario\Desktop\Alte Firefox-Daten
2021-09-26 07:42 - 2021-09-26 07:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-09-24 16:33 - 2021-10-03 09:12 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-09-16 16:42 - 2021-09-16 16:42 - 002295296 _____ (Digimarc) C:\WINDOWS\system32\DMRCDecoder.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 002111488 _____ (Digimarc) C:\WINDOWS\SysWOW64\DMRCDecoder.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 001313608 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-09-16 16:42 - 2021-09-16 16:42 - 001164288 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-09-16 16:42 - 2021-09-16 16:42 - 000672768 _____ C:\WINDOWS\system32\FsNVSDeviceSource.dll
2021-09-16 16:42 - 2021-09-16 16:42 - 000570368 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-09-16 16:42 - 2021-09-16 16:42 - 000566784 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-09-16 16:42 - 2021-09-16 16:42 - 000452096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-09-16 16:42 - 2021-09-16 16:42 - 000426496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-09-16 16:42 - 2021-09-16 16:42 - 000272384 _____ C:\WINDOWS\system32\TpmTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000223744 _____ C:\WINDOWS\SysWOW64\TpmTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000162816 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-09-16 16:42 - 2021-09-16 16:42 - 000147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshom.ocx
2021-09-16 16:42 - 2021-09-16 16:42 - 000122880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wshom.ocx
2021-09-16 16:42 - 2021-09-16 16:42 - 000098816 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-09-16 16:42 - 2021-09-16 16:42 - 000011355 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-09-16 16:36 - 2021-09-16 16:36 - 000000000 ___HD C:\$WinREAgent

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-10-06 15:19 - 2018-07-13 19:07 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-10-06 15:18 - 2020-05-06 20:30 - 000000000 ____D C:\Users\mario\AppData\Roaming\discord
2021-10-06 15:18 - 2018-01-28 18:43 - 000000000 ____D C:\ProgramData\NVIDIA
2021-10-06 15:17 - 2020-09-27 12:40 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4186713360-3844459930-3556965904-1001
2021-10-06 15:17 - 2020-09-27 12:34 - 000002406 _____ C:\Users\mario\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-10-06 15:17 - 2020-05-06 20:30 - 000000000 ____D C:\Users\mario\AppData\Local\Discord
2021-10-06 15:17 - 2019-01-29 18:18 - 000000000 ____D C:\ProgramData\Mozilla
2021-10-06 15:17 - 2018-07-13 13:01 - 000000000 ___RD C:\Users\mario\OneDrive
2021-10-06 15:16 - 2020-09-27 12:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-10-06 15:16 - 2020-09-27 12:31 - 000008192 ___SH C:\DumpStack.log.tmp
2021-10-06 15:16 - 2020-06-07 20:06 - 000000000 ____D C:\Users\mario\AppData\Roaming\Spotify
2021-10-06 15:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-10-06 15:16 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-10-06 15:16 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-10-06 15:16 - 2018-07-13 13:05 - 000000000 ____D C:\Users\mario\AppData\LocalLow\Mozilla
2021-10-05 21:19 - 2020-09-27 12:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-10-05 21:19 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2021-10-05 10:47 - 2017-11-14 09:41 - 000000000 ____D C:\ProgramData\HP
2021-10-05 10:40 - 2017-11-14 09:41 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2021-10-04 20:18 - 2019-02-23 21:25 - 000000000 ____D C:\ProgramData\Origin
2021-10-04 17:52 - 2020-09-27 12:41 - 001863008 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-10-04 17:52 - 2019-12-07 16:50 - 000788322 _____ C:\WINDOWS\system32\perfh007.dat
2021-10-04 17:52 - 2019-12-07 16:50 - 000168384 _____ C:\WINDOWS\system32\perfc007.dat
2021-10-04 17:52 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-10-04 17:39 - 2018-07-13 13:03 - 000000000 ____D C:\Users\mario\AppData\Roaming\Hewlett-Packard
2021-10-04 17:39 - 2017-11-14 09:40 - 000000000 ____D C:\Program Files (x86)\HP
2021-10-04 17:39 - 2017-11-14 09:40 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2021-10-04 17:39 - 2017-11-01 01:51 - 000000000 ___HD C:\hp
2021-10-04 17:38 - 2020-09-27 12:40 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2021-10-04 17:38 - 2018-07-13 12:59 - 000000000 ____D C:\Users\mario\AppData\Local\HP
2021-10-03 10:13 - 2020-07-06 09:40 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-10-03 10:13 - 2020-07-06 09:40 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-10-03 10:13 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-10-03 10:13 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-10-03 09:21 - 2020-12-31 11:51 - 000803176 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-10-03 09:15 - 2018-07-13 13:23 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2021-10-03 09:15 - 2018-07-13 13:23 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2021-10-03 09:13 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-10-03 09:13 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-10-03 09:12 - 2018-07-14 23:22 - 000000000 ____D C:\Program Files\Common Files\AV
2021-10-03 09:07 - 2018-07-13 12:59 - 000000000 ____D C:\Users\mario\AppData\Local\Packages
2021-10-02 17:52 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-10-02 09:07 - 2020-09-27 12:40 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-10-02 09:07 - 2020-09-27 12:40 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-10-02 08:42 - 2020-06-07 20:06 - 000000000 ____D C:\Users\mario\AppData\Local\Spotify
2021-10-02 08:37 - 2020-09-27 12:31 - 000374672 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-09-30 19:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-09-30 19:17 - 2017-09-29 15:46 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2021-09-29 10:25 - 2019-05-04 11:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-09-29 09:48 - 2021-05-05 16:28 - 000000000 ____D C:\Users\mario\AppData\Roaming\Corsair
2021-09-29 08:16 - 2018-07-13 20:19 - 000000000 ____D C:\Users\mario\AppData\Local\D3DSCache
2021-09-26 07:42 - 2019-05-04 11:12 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-09-23 15:27 - 2020-05-06 20:30 - 000002238 _____ C:\Users\mario\Desktop\Discord.lnk
2021-09-19 12:15 - 2021-05-12 13:23 - 000001534 _____ C:\Users\mario\Desktop\Kaspersky VPN Secure Connection Version 21.3.10.391 installieren.lnk
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-09-16 21:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-09-16 21:59 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2021-09-16 16:28 - 2018-07-13 14:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-09-16 16:25 - 2018-07-13 14:00 - 135637312 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Scripting/Repair mit FRST64

WARNUNG AN ALLE MITLESER !!!
Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!

• Kopiere den gesamten Inhalt der folgenden Code-Box:
  

  Start::
  CloseProcesses:
  Virustotal: C:\WINDOWS\system32\DRIVERS\RzXInputRaiju.sys
  AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
  AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
  AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
  FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
  FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}
  GroupPolicy: Beschränkung ? <==== ACHTUNG
  Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
  Task: {68D9E81A-13FD-45BE-A8A0-302CA3FC8F80} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Keine Datei <==== ACHTUNG
  C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm
  C:\Users\mario\AppData\Local\Kaspersky Lab
  C:\ProgramData\Kaspersky Lab
  C:\Program Files (x86)\Kaspersky Lab
  C:\Users\mario\Desktop\Kaspersky*.*
  emptytemp:
  End::
           

• Starte nun FRST und klicke direkt den Reparieren Button.Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
• Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
• Gegebenenfalls muss dein Rechner neu gestartet werden.
• Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.

Gesagt getan

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 06-10-2021
durchgeführt von mario (07-10-2021 18:06:59) Run:1
Gestartet von C:\Users\mario\Desktop\FRST
Geladene Profile: mario
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CloseProcesses:
Virustotal: C:\WINDOWS\system32\DRIVERS\RzXInputRaiju.sys
AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}
AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}
AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}
FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
Task: {68D9E81A-13FD-45BE-A8A0-302CA3FC8F80} - \HP\HP CoolSense\HP CoolSense Start at Logon -> Keine Datei <==== ACHTUNG
C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm
C:\Users\mario\AppData\Local\Kaspersky Lab
C:\ProgramData\Kaspersky Lab
C:\Program Files (x86)\Kaspersky Lab
C:\Users\mario\Desktop\Kaspersky*.*
emptytemp:

*****************

Prozesse erfolgreich geschlossen.
VirusTotal: C:\WINDOWS\system32\DRIVERS\RzXInputRaiju.sys => https://www.virustotal.com/gui/file/0463b3abaae2ed969ce90d06dd0fffec7e3aee0580aa56d49593c0df0e999e15/detection/f-0463b3abaae2ed969ce90d06dd0fffec7e3aee0580aa56d49593c0df0e999e15-1597877704
"AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}" => erfolgreich entfernt
"AV: Kaspersky Internet Security (Enabled - Up to date) {0AB30972-4BAC-7BEE-CBCA-B8F9E68797D8}" => erfolgreich entfernt
"AS: Kaspersky Internet Security (Enabled - Up to date) {B1D2E896-6D96-7460-F17A-838B9D00DD65}" => erfolgreich entfernt
"FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}" => erfolgreich entfernt
"FW: Kaspersky Internet Security (Enabled) {32888857-01C3-7AB6-E095-11CC1854D0A3}" => erfolgreich entfernt
C:\WINDOWS\system32\GroupPolicy\Machine => erfolgreich verschoben
C:\WINDOWS\system32\GroupPolicy\GPT.ini => erfolgreich verschoben
C:\WINDOWS\SysWOW64\GroupPolicy\GPT.ini => erfolgreich verschoben
C:\ProgramData\NTUSER.pol => erfolgreich verschoben
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{68D9E81A-13FD-45BE-A8A0-302CA3FC8F80}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{68D9E81A-13FD-45BE-A8A0-302CA3FC8F80}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\HP\HP CoolSense\HP CoolSense Start at Logon" => erfolgreich entfernt
C:\Users\mario\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm => erfolgreich verschoben
C:\Users\mario\AppData\Local\Kaspersky Lab => erfolgreich verschoben
C:\ProgramData\Kaspersky Lab => erfolgreich verschoben
C:\Program Files (x86)\Kaspersky Lab => erfolgreich verschoben

=========== "C:\Users\mario\Desktop\Kaspersky*.*" ==========

C:\Users\mario\Desktop\Kaspersky Secure Connection Version 20.0.14.1085 installieren.lnk => erfolgreich verschoben
C:\Users\mario\Desktop\Kaspersky VPN Secure Connection Version 21.3.10.391 installieren.lnk => erfolgreich verschoben

========= Ende -> "C:\Users\mario\Desktop\Kaspersky*.*" ========


=========== EmptyTemp: ==========

BITS transfer queue => 5767168 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 843652942 B
Java, Flash, Steam htmlcache => 689701426 B
Windows/system/drivers => 64481890 B
Edge => 3597701 B
Firefox => 73618150 B
Opera => 11511 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 906620 B
NetworkService => 963560 B
mario => 83984748 B
OVRLibraryService => 83991404 B

RecycleBin => 4063241022 B
EmptyTemp: => 5.5 GB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 18:07:36 ====
         

Kontrollscans mit MBAM und RK

Wir sind fast fertig. Jetzt ist es an der Zeit für Kontrollscans mit

• Malwarebytes
• RogueKiller

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.