"stündlich" ein Trojaner und Powershell öffnet sich immer automatisch

Sterrare · 31.05.2022, 21:35

Hallo zusammen, Stefan hier.

Mein Windows Defender meldet fast stündlich, dass ein Trojaner erkannt und entfernt wurde
und fast zeitgleich öffnet sich ein schwarzes Fenster, wohl Powershell. Leider komme ich nicht weiter, weil das mein
KnowHow übersteigt. Ich habe mehrere Scans durchlaufen lassen und entweder wurde nichts
gefunden oder der gleiche Trojaner wurde wieder erkannt.
Erkannt wird: TrojanDownloader:Win32/ChromeLoader.A
und betroffen ist folgendes Element:
amsi: \Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe

Wie empfohlen habe ich meine Logdatein beigefügt.

Könnt Ihr mir weiter helfen?,
und Vielen Dank im Voraus.

Gruß Stefan

cosinus · 31.05.2022, 21:43

Zitat:

Wie empfohlen habe ich meine Logdatein beigefügt.

Nein, du hast sie als Anhang hochgeladen. Das sollst du nur tun, wenn das ein Helfer erwähnt hat. Grundsätzlich gilt: Logfiles direkt und in CODE-Tags posten.

Sterrare · 01.06.2022, 12:21

Guten Tag cosinus, dann habe ich den Schritt 2 bei 2. Informationen zusamenstellen in der
Anleitung für Hilfesuchende falsch verstanden.

Helfen Sie mir bei meinem Trojaner Problem weiter?

cosinus · 01.06.2022, 12:58

Ja, sobald du die Logs richtig reingestellt hast.

Posten in CODE-Tags

Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Sterrare · 01.06.2022, 13:35

Danke schon mal im Voraus.
Hier die Logfile FRST:

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-05-2022 01
durchgeführt von SteMu (Administrator) auf MASTER-PC-STEFA (Micro-Star International Co., Ltd. MS-7B85) (31-05-2022 22:10:14)
Gestartet von C:\Users\SteMu\Desktop
Geladene Profile: SteMu
Plattform: Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(A-Volute SAS -> A-Volute) C:\Users\SteMu\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Nahimic\NahimicMonitorX64.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Windows\System32\mfevtps.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe
(C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(MICRO-STAR INTERNATIONAL CO., LTD) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (cFos Software GmbH -> cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe <3>
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\VSCore_20_12\mcapexe.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NZXT, Inc. -> ) C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\target\x86_64-pc-windows-msvc\release\service.exe
(services.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(sihost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MSPaint_6.2203.1037.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(svchost.exe ->) (A-Volute) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [267072 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-12-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [114379544 2021-01-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2637200 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3527240 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Discord] => C:\Users\SteMu\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3145920 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Update Plus Player] => C:\Program Files\VLC Plus Player\vlc.exe [157808 2021-01-25] (Aller Media e.K. -> VideoLAN) <==== ACHTUNG
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\SteMu\AppData\Local\Microsoft\Teams\Update.exe [2452656 2021-03-15] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\SteMu\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Samsung DeX] => C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe [10929320 2021-12-03] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Bloom] => C:\Users\SteMu\AppData\Roaming\Bloom\Bloom.exe --cwVGCq (Keine Datei)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\RunOnce: [Application Restart #0] => C:\Users\SteMu\AppData\Roaming\Bloom\Bloom.exe  --cwvgcq --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --enable-widevine-cdm --register-pepper-plugins=widevinecdmadapter.dll;a (Der Dateneintrag hat 447 mehr Zeichen). (Keine Datei)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3527240 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.63\Installer\chrmstp.exe [2022-05-31] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm Monitor.lnk [2021-03-06]
ShortcutTarget: ROCCAT Swarm Monitor.lnk -> C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_Swarm_Monitor.exe (Voyetra Turtle Beach, Inc. -> ROCCAT)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

"C:\Windows\System32\Tasks\McAfee\McAfee Idle Detection Task" wurde entsperrt. <==== ACHTUNG
Task: {004997D6-42F1-4F62-815F-22D029248C37} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [993360 2021-01-20] (McAfee, LLC -> McAfee, LLC)
Task: {04C4789A-4B01-4577-8AAA-98EA50722727} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [833704 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {060B44A6-1A87-4897-9A5A-9C7CA1A3363F} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe [1775440 2021-11-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {0EA63EAC-CBC4-4884-9EDC-E580A1BEB416} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {105DC727-7AE2-4309-83F3-90A7FE709643} - System32\Tasks\ROCCAT DEVICE SERVICE => C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_dev_service.exe [442872 2021-02-23] (Voyetra Turtle Beach, Inc. -> ROCCAT)
Task: {1144DC7B-7B9C-4917-BCAE-7549E353479E} - System32\Tasks\Opera GX scheduled Autoupdate 1628538165 => C:\Users\SteMu\AppData\Local\Programs\Opera GX\launcher.exe [2369792 2022-05-30] (Opera Software AS -> Opera Software)
Task: {219850FA-0EB6-4729-95B0-5A396460FB80} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144792 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {321ED8D6-89DC-42F3-B371-365F29B3CFBC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8304592 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {39E09673-F296-4DAB-B48C-C270109FC16E} - \chrome settings -> Keine Datei <==== ACHTUNG
Task: {3DB88F41-0BBC-42F1-9602-A823CB230B91} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4038C839-2411-4262-9D7F-D544DD31A0D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B087852-00E4-4C44-B29D-55129CD8DD28} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4BCB4C33-A903-4FD1-823B-1DE71034D603} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {57354CBB-3095-45B2-B02B-65C62670C05A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {5E78C242-D529-49ED-8BA0-95F96E8C924D} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1094824 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {64E319E4-53A9-4692-8B51-4D3127554D85} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {686EA1E2-42FF-4207-886C-EBBCA14872D3} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {6B9E794D-28B9-4090-A2CD-F5E75D9427BE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {6CCCB370-DE26-4713-AF31-75342EF8F9A1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {7DA21BAA-C92C-4C35-AAE1-23E22F9A55FA} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [965552 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8003F5BA-24F1-4F59-9A01-962A4D12B86F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2450881772-3334122637-3429325221-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4215696 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {867D51A7-4C82-4CB1-A260-091D8EEDE06C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144792 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {89358AB0-88C3-40BA-8BA8-865A9730CF6F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [67472 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D4DB410-3D91-415A-A22A-F52DE38FB61F} - System32\Tasks\MSI Task Host - MSI.True Color => C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe [47416 2021-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9639E916-CDF5-403A-904B-8CA5E908AC09} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {9871DC32-A891-42E5-8CF1-A8322EE87D32} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4215696 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9E0ACB84-6D68-4360-89CD-0C01A26A38A3} - System32\Tasks\MSI Task Host - DisplayID => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9FFB0A5E-2498-4A6C-AAE9-0FF41A762390} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8304592 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {A84FCF63-793C-44D5-8E33-3370E5550A3B} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {AC797E26-EB04-43EE-BCEE-3D07E1855840} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {B1887951-766D-4CFF-AED0-30E7A43A3C4A} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {B6507011-4A0C-4CB0-9A4F-1D4A3AD02682} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C0F46171-BE58-463A-AB30-0A9858460478} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [993360 2021-01-20] (McAfee, LLC -> McAfee, LLC)
Task: {CA3CD245-7051-4346-BFDB-5BE9B018A0C6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {D10ED619-22FD-4CA6-A546-9EEE6AF28ECE} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1629110074 => C:\Users\SteMu\AppData\Local\Programs\Opera GX\launcher.exe [2369792 2022-05-30] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\SteMu\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {DD7221BD-FF67-4A07-9597-D8AE12D354EE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DF2A1B54-9B76-480A-BC6D-0EA9D58BEA39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E2801349-A5B6-4230-92DA-70FF36C7F983} - System32\Tasks\NahimicTask32 => C:\WINDOWS\system32\..\SysWOW64\NahimicSvc32.exe [833704 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {E3DE8B83-469A-46CA-B5F7-7E6434230858} - System32\Tasks\NahimicTask64 => C:\WINDOWS\system32\.\NahimicSvc64.exe [1094824 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {EC3E8C26-9A0E-477D-8E39-5BFCD82DA41E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-06] (Google LLC -> Google LLC)
Task: {ED1D6B74-F39E-4298-B766-CD63BB32B2E2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2021-03-06] (Google LLC -> Google LLC)
Task: {ED4EAD19-1EAC-4C43-99A2-F2EE293D43CF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{03ec9416-78c3-45e6-85b3-2a4c2c0b5252}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{5b2131b5-626b-4ee1-aca6-ed86a1e22484}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\SteMu\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-26]

FireFox:
========
FF DefaultProfile: rcw8t7dl.default
FF ProfilePath: C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\rcw8t7dl.default [2021-03-06]
FF ProfilePath: C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release [2022-05-31]
FF Extension: (AdBlocker Ultimate) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2022-05-26]
FF Extension: (Starlight Grotto) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{08b48df5-318b-4f75-9628-d34fb35815e8}.xpi [2021-03-06]
FF Extension: (Lone Tree Sunset) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1d2cb394-788f-4a4f-b485-add64bf87f3d}.xpi [2021-03-06]
FF Extension: (Brushed Metal - XP) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1d57f168-529b-4d0b-a298-b9b5d2c0f137}.xpi [2021-03-06]
FF Extension: (Fantasy Canyon by candelora) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1e03f1ca-8fbe-40f3-b920-57b957603874}.xpi [2021-10-15]
FF Extension: (Yosemite) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{2197e0af-098d-4a71-b802-5c194260fbb2}.xpi [2021-03-06]
FF Extension: (City Sunset) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{36da9d30-d002-4c15-87c4-f08dbbad7dbb}.xpi [2021-03-06]
FF Extension: (Rio De Janeiro - Jen) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{40b607f2-8fb0-4a0f-b715-d86bb9e01380}.xpi [2021-03-06]
FF Extension: (Big City  Blues) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{519f7f6d-4881-47e6-b21f-ceacb5656390}.xpi [2021-03-06]
FF Extension: (Sunset Over Water by MaDonna) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{633f0fba-b472-4ac5-9584-e780977806b6}.xpi [2021-06-12]
FF Extension: (The Blue Storm) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{67e7d77c-e0c2-4834-8ff1-4242cd1c85d4}.xpi [2021-03-06]
FF Extension: (C.E.Waterfall Sunset 2) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{7e6ad547-ca94-4992-ae47-b5968ac6b9b6}.xpi [2021-03-06]
FF Extension: (Future Bmw) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{832a10b5-6b10-4e97-be5d-25dd5b2f0f16}.xpi [2021-03-06]
FF Extension: (Louder) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{8ceee5ac-ebc4-4254-9789-e8d8694becf5}.xpi [2022-02-26]
FF Extension: (Railroad 2 by CP) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{a3bbe13a-66ab-4646-b713-0d414e2ed076}.xpi [2021-03-06]
FF Extension: (Dreamy__) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e1eb26b5-452d-4dc0-a80c-79205b2a30b5}.xpi [2021-03-06]
FF Extension: (Sweet Aurora Borealis) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e2028a58-f7ee-4608-bb71-55e779d8fff4}.xpi [2021-03-06]
FF Extension: (Funny  Cats by MaDonna) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e35db73b-1cab-4392-aa4b-49a29fd8b172}.xpi [2021-12-12]
FF Extension: (Ciel d'orage) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e68e0cc1-4611-4a91-9158-4b2beeb20e30}.xpi [2021-03-06]
FF Extension: (Space Fantasy Redux) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{f5453979-a039-4066-8aee-cb64fc98f936}.xpi [2021-03-06]
FF Extension: (Fog over Dubai) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{f6809f8a-b2ea-483a-a89b-c2afb2f85814}.xpi [2021-03-06]
FF Extension: (Summerwood) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{fb7d2936-bd43-4dcd-ae06-bf7a15401808}.xpi [2021-03-06]
FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [2021-01-20] (McAfee, LLC -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @vlc.de/vlc,version=3.0.12 -> C:\Program Files\VLC Plus Player\npvlc.dll [2021-01-25] (Aller Media e.K. -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Datei ist nicht signiert]
FF Plugin-x32: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll [2021-01-20] (McAfee, LLC -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2450881772-3334122637-3429325221-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark\nplightsparkplugin.dll [Keine Datei]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\SteMu\AppData\Local\Google\Chrome\User Data\Default [2022-05-31]
CHR Extension: (Dark Space) - C:\Users\SteMu\AppData\Local\Google\Chrome\User Data\Default\Extensions\idmnciiknelklflhdlnkokcoihkidkln [2021-12-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\SteMu\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-22]
CHR Profile: C:\Users\SteMu\AppData\Local\Google\Chrome\User Data\Guest Profile [2022-01-23]

Opera: 
=======
StartMenuInternet: (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001) Opera GXStable - "C:\Users\SteMu\AppData\Local\Programs\Opera GX\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 CAMService; C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\target\x86_64-pc-windows-msvc\release\service.exe [533232 2022-05-26] (NZXT, Inc. -> )
R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [602376 2021-07-29] (cFos Software GmbH -> cFos Software GmbH)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2018-11-15] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncHelper.exe [3406224 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
R2 LightKeeperService; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe [86776 2020-12-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_20_12\McApExe.exe [779080 2021-01-15] (McAfee, LLC -> McAfee, LLC)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R3 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1627680 2021-01-20] (McAfee, LLC -> McAfee, LLC)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe [242144 2021-02-22] (Mozilla Corporation -> Mozilla Foundation)
R2 MSI_Central_Service; C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe [147088 2020-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_Companion_Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe [143160 2021-03-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [36152 2021-08-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Mystic_Light_Service; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe [39760 2021-05-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1888424 2021-10-08] (A-Volute SAS -> Nahimic)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.089.0426.0003\OneDriveUpdaterService.exe [3843472 2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557144 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3475680 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [144632 2022-01-19] (Oculus VR, LLC -> Facebook Technologies, LLC)
R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [511736 2022-01-19] (Oculus VR, LLC -> Facebook Technologies, LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2021-03-10] (Even Balance, Inc. -> )
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2029544 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [463856 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1350672 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [254224 2021-11-16] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [298056 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533824 2022-02-18] (Razer USA Ltd. -> Razer Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [291320 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-06-23] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-06-23] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S4 uhssvc; "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 cFosSpeed; C:\WINDOWS\system32\DRIVERS\cfosspeed6.sys [1695016 2021-07-29] (cFos Software GmbH -> cFos Software GmbH)
S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [75712 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
S3 cpuz150; C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [44832 2022-03-13] (CPUID S.A.R.L.U. -> CPUID)
S3 cpuz152; C:\WINDOWS\temp\cpuz152\cpuz152_x64.sys [35840 2022-05-28] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [29200 2021-12-29] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [38544 2018-12-13] (Feature Integration Technology Inc -> FINTEK Corp.)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [544704 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [385984 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85944 2020-12-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> McAfee, LLC)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [522176 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [1027520 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [116672 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [252352 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R3 MpKsl10111d51; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{24E28866-472B-441A-A08C-7057256FCA31}\MpKslDrv.sys [137464 2022-05-31] (Microsoft Windows -> Microsoft Corporation)
S3 MpKsl67f01921; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [139536 2022-04-21] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute -> Windows (R) Win 7 DDK provider)
S3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys [14288 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 OCULUSUDSVR; C:\WINDOWS\System32\drivers\OCULUSUD.sys [3867552 2021-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Oculus VR, LLC.)
R3 oculusvad_oculusvad; C:\WINDOWS\System32\drivers\oculusvad.sys [75280 2021-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 Oculus_ViGEmBus; C:\WINDOWS\System32\drivers\Oculus_ViGEmBus.sys [32856 2021-10-01] (Oculus VR, LLC -> Facebook Inc.)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [54632 2021-03-30] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_005c; C:\WINDOWS\System32\drivers\RzDev_005c.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [44080 2020-10-26] (Shaul Eizikovich -> Nefarius Software Solutions)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
S1 EneTechIo; \??\C:\Windows\system32\drivers\ene.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-05-31 22:10 - 2022-05-31 22:10 - 000043917 _____ C:\Users\SteMu\Desktop\FRST.txt
2022-05-31 22:04 - 2022-05-31 22:10 - 000000000 ____D C:\FRST
2022-05-31 21:57 - 2022-05-31 21:57 - 002367488 _____ (Farbar) C:\Users\SteMu\Desktop\FRST64.exe
2022-05-31 18:56 - 2022-05-31 19:24 - 103809024 _____ C:\WINDOWS\system32\config\SOFTWARE
2022-05-31 18:29 - 2022-05-31 19:14 - 000000000 ____D C:\Users\SteMu\AppData\Local\Avast Software
2022-05-31 18:28 - 2022-05-31 18:28 - 000002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast One.lnk
2022-05-31 18:28 - 2022-05-31 18:28 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\Avast Software
2022-05-31 18:26 - 2022-05-31 18:26 - 000662160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswed1576d1a757d61f.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000548968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asweecf223bc28c3eb3.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000321928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa9e153e486ce91ab.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000271600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw16bb9d9558988a7e.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000269136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-05-31 18:26 - 2022-05-31 18:26 - 000255136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asweb388cbe4e9d2049.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000218608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw744c8f6166f7011a.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000111056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf8b955d4fb2f2e8f.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000102048 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw36466b1b5adce8a8.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000086120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6a6a9f261465540e.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000045072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcee02205f50e49ab.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000021936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf4313ed91aaab2b4.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-05-31 18:26 - 2022-05-31 18:25 - 000857488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw625b1b96ea05ef1a.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000382624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw0424f020e5fab84e.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000232648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa832283a74114066.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000038912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcdadb836c26834f0.tmp
2022-05-31 18:24 - 2022-05-31 19:22 - 000000000 ____D C:\Program Files\Avast Software
2022-05-31 18:20 - 2022-05-31 18:20 - 000000000 ___HD C:\$SysReset
2022-05-31 18:14 - 2022-05-31 18:14 - 002443448 _____ (Malwarebytes) C:\Users\SteMu\Downloads\MBSetup.exe
2022-05-31 18:12 - 2022-05-31 18:12 - 000267072 _____ (AVAST Software) C:\Users\SteMu\Downloads\avast_one_essential_setup_online.exe
2022-05-31 14:06 - 2022-05-31 14:06 - 003594016 _____ (RCS LT) C:\Users\SteMu\Downloads\CCSetup.exe
2022-05-30 20:28 - 2022-05-30 20:28 - 000024204 _____ C:\Users\SteMu\Downloads\PEM_20220530_202841.pdf
2022-05-29 21:42 - 2022-05-31 20:44 - 000005726 _____ C:\WINDOWS\system32\PerfStringBackup.TMP
2022-05-29 20:29 - 2022-05-29 20:29 - 000000000 ____D C:\Users\SteMu\AppData\Local\MicrosoftEdge
2022-05-25 16:52 - 2022-05-25 16:52 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2022-05-25 16:49 - 2022-05-21 05:26 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001467080 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001432304 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001432304 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001209408 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-05-25 16:49 - 2022-05-21 05:23 - 000587336 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-05-25 16:49 - 2022-05-21 05:23 - 000460496 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 002120896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001603144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001530456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001177312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000730320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000724688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000712416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-05-25 16:49 - 2022-05-21 05:21 - 006964824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 006226640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 005100752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 002932952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 000582712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 000457944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-05-25 16:49 - 2022-05-21 05:20 - 005730880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-05-25 16:49 - 2022-05-21 05:19 - 000851136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-05-25 16:49 - 2022-05-20 02:51 - 000089337 _____ C:\WINDOWS\system32\nvinfo.pb
2022-05-21 22:26 - 2022-05-21 22:26 - 000038712 _____ C:\Users\SteMu\Downloads\Verkaufsschild.pdf
2022-05-20 16:07 - 2022-05-20 21:21 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-05-11 11:52 - 2022-05-11 11:52 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-11 11:52 - 2022-05-11 11:52 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-11 11:52 - 2022-05-11 11:52 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-11 11:46 - 2022-05-11 11:46 - 000000000 ___HD C:\$WinREAgent
2022-05-03 17:29 - 2022-03-17 16:55 - 008818256 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw08.sys
2022-05-03 17:29 - 2022-03-17 16:55 - 001626192 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter08.dll
2022-05-03 17:29 - 2022-03-17 16:11 - 002687540 _____ C:\WINDOWS\system32\Drivers\Netwfw08.dat

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-05-31 22:01 - 2021-03-06 23:28 - 000000000 ____D C:\Program Files (x86)\Google
2022-05-31 21:58 - 2021-03-06 23:33 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-05-31 20:44 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-05-31 20:27 - 2021-03-06 21:35 - 000000000 ____D C:\Users\SteMu\AppData\LocalLow\Mozilla
2022-05-31 20:26 - 2021-03-13 15:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-05-31 20:05 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-05-31 19:25 - 2021-05-13 12:59 - 000003112 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2022-05-31 19:25 - 2021-05-13 12:59 - 000003092 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2022-05-31 19:25 - 2021-03-13 15:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-05-31 19:25 - 2021-03-13 15:47 - 000008192 ___SH C:\DumpStack.log.tmp
2022-05-31 19:25 - 2021-03-06 23:26 - 000000000 ____D C:\Users\SteMu\AppData\Local\Oculus
2022-05-31 19:25 - 2021-03-06 21:15 - 000000000 ____D C:\ProgramData\NVIDIA
2022-05-31 19:24 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-05-31 18:56 - 2022-02-17 12:23 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2022-05-31 18:26 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-31 18:18 - 2021-03-06 23:39 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2022-05-31 18:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-05-31 17:40 - 2021-03-09 22:24 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\vlc
2022-05-31 15:00 - 2021-03-22 19:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2022-05-30 19:55 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-05-30 19:49 - 2021-12-28 22:35 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\Sky Go
2022-05-30 17:31 - 2021-08-09 21:42 - 000004240 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1628538165
2022-05-30 17:31 - 2021-08-09 21:42 - 000001443 _____ C:\Users\SteMu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2022-05-30 17:28 - 2021-03-13 15:48 - 000000000 ____D C:\Users\SteMu
2022-05-29 20:49 - 2021-04-27 15:32 - 000000359 _____ C:\Users\SteMu\Downloads\Papierkorb - Verknüpfung.lnk
2022-05-29 14:04 - 2021-03-06 22:30 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\NZXT CAM
2022-05-29 13:29 - 2021-03-06 21:16 - 000000000 ____D C:\Program Files\Microsoft Office
2022-05-28 11:43 - 2021-03-06 23:29 - 000000000 ____D C:\Program Files\NZXT CAM
2022-05-26 22:06 - 2021-03-06 21:23 - 000000000 ____D C:\Program Files (x86)\Steam
2022-05-26 17:56 - 2021-10-06 11:40 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\obs-studio
2022-05-26 16:06 - 2021-08-23 21:09 - 000000000 ____D C:\Users\SteMu\Downloads\Stream
2022-05-25 16:52 - 2021-03-06 23:24 - 000000000 ____D C:\Users\SteMu\AppData\Local\NVIDIA
2022-05-22 20:16 - 2021-03-06 23:40 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\discord
2022-05-22 20:12 - 2021-03-06 23:40 - 000000000 ____D C:\Users\SteMu\AppData\Local\Discord
2022-05-22 19:26 - 2022-01-01 19:48 - 000000000 ____D C:\Users\SteMu\AppData\Local\ElevatedDiagnostics
2022-05-21 20:45 - 2021-03-06 21:30 - 000000000 ___RD C:\Users\SteMu\Desktop\PKW
2022-05-21 05:18 - 2021-03-07 12:04 - 007618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-05-21 05:18 - 2021-03-07 12:04 - 006465200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-05-20 17:23 - 2021-10-06 13:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-05-20 17:23 - 2021-03-06 21:35 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-05-20 16:01 - 2022-03-23 12:07 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-05-20 16:00 - 2021-03-11 19:39 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-05-19 14:08 - 2022-03-23 12:07 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-05-19 14:08 - 2022-03-23 12:07 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-05-19 14:08 - 2021-12-13 18:25 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2450881772-3334122637-3429325221-1001
2022-05-12 23:18 - 2021-03-13 15:47 - 000257920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-12 22:35 - 2022-01-01 23:35 - 000000000 ____D C:\Users\SteMu\Desktop\Kamera_Sony
2022-05-11 11:55 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-11 11:30 - 2021-03-06 23:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-11 11:28 - 2021-03-06 23:11 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-10 22:50 - 2021-04-21 21:52 - 000007621 _____ C:\Users\SteMu\AppData\Local\Resmon.ResmonCfg
2022-05-05 19:13 - 2022-02-08 19:23 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-05-04 12:17 - 2021-03-06 21:16 - 000000000 ____D C:\ProgramData\A-Volute
2022-05-01 17:47 - 2021-03-11 19:57 - 000000000 ____D C:\Users\SteMu\AppData\Local\User Data

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2021-04-21 21:52 - 2022-05-10 22:50 - 000007621 _____ () C:\Users\SteMu\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

--- --- ---

Sterrare · 01.06.2022, 13:36

Und hier die Logfile Addition:
FRST Additions Logfile:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-05-2022 01
durchgeführt von SteMu (31-05-2022 22:11:58)
Gestartet von C:\Users\SteMu\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) (2021-03-13 13:53:28)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2450881772-3334122637-3429325221-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2450881772-3334122637-3429325221-503 - Limited - Disabled)
Gast (S-1-5-21-2450881772-3334122637-3429325221-501 - Limited - Disabled)
SteMu (S-1-5-21-2450881772-3334122637-3429325221-1001 - Administrator - Enabled) => C:\Users\SteMu
WDAGUtilityAccount (S-1-5-21-2450881772-3334122637-3429325221-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Anno 1800 (HKLM-x32\...\Uplay Install 4553) (Version:  - Ubisoft)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
cFosSpeed 12.01 (HKLM\...\cFosSpeed) (Version: 12.01 - cFos Software GmbH, Bonn)
CPUID CPU-Z MSI 1.94 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.94 - CPUID, Inc.)
Discord (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.3.17 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{e201736e-db02-4616-bc33-5eda2f791ee1}) (Version: 1.0.3.17 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{d6c7bfc9-8ecb-45a5-967b-f1c3c04cc972}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden
ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.63 - Google LLC)
HWiNFO64 Version 6.42 (HKLM\...\HWiNFO64_is1) (Version: 6.42 - Martin Malik - REALiX)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Teams) (Version: 1.4.00.2781 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 100.0.2 (x64 de)) (Version: 100.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 86.0 - Mozilla)
MSI SDK (HKLM-x32\...\{EE7D557C-3AE7-4348-8DCA-3A89790D0002}}_is1) (Version: 2.2021.1110.01 - MSI)
NZXT CAM 4.34.3 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.34.3 - NZXT, Inc.)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.1.3 - OBS Project)
Oculus (HKLM\...\Oculus) (Version: <3 - Facebook Technologies, LLC)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20194 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Opera GX Stable 86.0.4363.70 (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Opera GX 86.0.4363.70) (Version: 86.0.4363.70 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.105.49133 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 9.18.7.1508 - Razer Inc.)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.7.0331.032911 - Razer Inc.)
RGSS-RTP Standard (HKLM-x32\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)
ROCCAT Swarm (HKLM-x32\...\{9D12397F-45AF-4517-B492-1D1E2FA475EE}) (Version: 1.93.860 - ROCCAT GmbH) Hidden
ROCCAT Swarm (HKLM-x32\...\InstallShield_{9D12397F-45AF-4517-B492-1D1E2FA475EE}) (Version: 1.93.860 - ROCCAT GmbH)
RPG MAKER VX Ace RTP (HKLM-x32\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain)
Samsung DeX (HKLM-x32\...\{43409A91-7C1A-4D28-B628-AD78F09DA3F0}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.) Hidden
Samsung DeX (HKLM-x32\...\{a306c372-6ec4-43f0-b372-b1de15b0e935}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.46.0 - Samsung Electronics Co., Ltd.)
SHIFT 2 UNLEASHED™ (HKLM-x32\...\{E8C37E27-5205-4C8A-BECB-B00533045AAE}) (Version: 1.0.2.2 - Electronic Arts)
Sky Go 22.4.2.0 (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\com.bskyb.skygoplayer_is1) (Version: 22.4.2.0 - Sky)
Sky Ticket 8.7.0.0 (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\com.bskyb.skyticket_is1) (Version: 8.7.0.0 - Sky Ticket)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.2781 - Microsoft Corporation)
theSettlers5 (HKLM-x32\...\Uplay Install 11786) (Version:  - )
Tom Clancy's The Division 2 (HKLM-x32\...\Uplay Install 4932) (Version:  - Ubisoft)
Trident Z Lighting Control (HKLM-x32\...\{97CD7AFC-0ED3-41B8-9CCD-22717E8631D0}_is1) (Version: 1.00.29 - ENG)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 119.0.10382 - Ubisoft)
VLC Plus Player (HKLM\...\VLC Plus Player) (Version: 3.0.12 - Aller Media e.K.) <==== ACHTUNG
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK AN1500 (HKLM-x32\...\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM-x32\...\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden

Packages:
=========
Desktop Live Wallpapers -> C:\Program Files\WindowsApps\48405AmbientSoftware.LiveDesktopWallpapers_1.2.17.0_neutral__agy8jafheqhng [2022-04-06] (Ambient Software) [Startup Task]
DragonCenter -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p [2022-04-07] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
Epson Print and Scan -> C:\Program Files\WindowsApps\SEIKOEPSONCORPORATION.EpsonPrintandScan_1.1.0.0_x64__ezaqdwkaef94e [2021-08-12] (SEIKO EPSON CORPORATION)
Fitbit -> C:\Program Files\WindowsApps\Fitbit.Fitbit_2.44.1997.0_x64__6mqt6hf9g46tw [2021-03-07] (Fitbit)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-01-06] (Microsoft Corporation)
GoPro Player -> C:\Program Files\WindowsApps\GoPro.GoProPlayer_2.0.8.0_x64__1h9vz9xjm6b8c [2022-05-21] (GoPro)
Huetro for Hue -> C:\Program Files\WindowsApps\27078NielsLaute.HuetroforHue_7.5.5.0_x64__91se88q2mhfz2 [2022-04-07] (NielsLaute)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-31] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.5120.0_x64__8wekyb3d8bbwe [2022-05-18] (Microsoft Studios) [MS Ad]
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm [2022-05-04] (A-Volute)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-16] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-05-25] (NVIDIA Corp.)
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.99.0_x64__pwbj9vvecjh7j [2022-05-25] (Amazon Development Centre (London) Ltd)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0 [2022-05-28] (Spotify AB) [Startup Task]
WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2218.8.0_x64__cv1g1gvanyjgm [2022-05-30] (WhatsApp Inc.)
Xbox Zubehör -> C:\Program Files\WindowsApps\Microsoft.XboxDevices_300.2202.25001.0_x64__8wekyb3d8bbwe [2022-03-10] (Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\SteMu\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\SteMu\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute)
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{a3d7e084-b0df-4d14-8e0a-27a572a6332c}\localserver32 -> "C:\Program Files\Sony\Imaging Edge Desktop\ied.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\SteMu\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\nvshext.dll [2022-05-21] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.089.0426.0003\FileSyncShell64.dll [2022-05-19] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2022-05-04 12:15 - 2022-05-04 12:15 - 020785152 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm\Nahimic3.dll
2021-03-07 01:55 - 2018-11-15 15:08 - 002200784 _____ (Dexin Corp -> MICRO-STAR INTERNATIONAL) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\IcMSIDll.dll
2021-03-07 01:53 - 2021-03-07 01:53 - 002972368 _____ (Dexin Corp -> MICRO-STAR INTERNATIONAL) [Datei ist nicht signiert] C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p\DCv2\Device\GM6070\IcMSIDll.dll
2021-03-06 21:46 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2021-03-07 01:55 - 2018-08-31 08:26 - 000053760 _____ (MS) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\MsIo32_Galax.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll
2021-12-23 22:08 - 2016-10-04 05:43 - 000399872 _____ (TODO: <公司名稱>) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\SDKDLL.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Oculus\Support\oculus-runtime;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\SteMu\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\SteMu\Desktop\Kamera_Sony\Auswahl\MINI\vom 09.04.2022\Insta\JPG\SW_insta_DSC2221.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

Network Binding:
=============
WLAN: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 
Ethernet: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\StartupFolder: => "ROCCAT Swarm Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Imaging Edge Desktop.lnk"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "RazerCortex"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Spectrum"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Samsung DeX"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Update Plus Player"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Opera GX Browser Assistant"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Bloom"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{27D89E85-50B0-4CFA-BCF3-AE66BE323B0E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{CBF8A30C-6146-4105-A075-9E807BE61586}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{831BD685-C3FC-4AD8-AC35-ECEBF2F0E689}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{1D76AC2F-E135-401B-B163-D398BE864D37}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{EB4CDFE2-0998-4CDD-A75F-B2860DE560B8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{E0ED1B28-545F-463D-8F39-614CE98245B9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{2FC80D7F-D909-4D12-BEBA-B777EEFE6A72}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{A4013447-B23B-4D30-9E3D-E0B71D7A93B4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{CA9A7972-E80D-4DCC-964E-632BA73A46A8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG Sp. z o.o. -> GOG.com)
FirewallRules: [{6EE0117F-ACAC-42AA-8A09-210982758C5D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG Sp. z o.o. -> GOG.com)
FirewallRules: [{81E6592D-22B7-45A7-A63B-744E43C20292}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{5C547752-E19C-4AEA-A830-EA0C01352948}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{29344FC7-848F-4FB6-BA8B-A0FFD61FC3DA}] => (Allow) E:\origin\SHIFT 2 UNLEASHED\shift2u.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{B648D820-E832-42AE-8ED7-46FEF8D97D90}] => (Allow) E:\origin\SHIFT 2 UNLEASHED\shift2u.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{190F3AB8-73E2-41BB-9C06-FF911468C7B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CA60BE08-5E64-4FFF-8E5B-7F76EEE18355}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{22AB4FFF-592D-41DB-A5D4-BBF35E124C68}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{55011896-0E3E-4D22-A448-8F83E1404D1F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{55EE64FA-B72E-4887-AB93-4807AD37CCD5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{59CE0641-2873-40DB-A473-60DAFB6E249E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{CBDD761D-B76A-4E3C-8321-A264FE9DF62F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{1E151A0F-A6A3-4568-8569-BA7729DD72AD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{32BB487C-E3CD-404C-9D72-86441260BA45}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{30F76363-FDF2-4EC1-8898-2BD7660EC0B7}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FDDB741E-49DF-4487-AA7A-E5ACFE726BF7}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{F78650DE-D132-445D-A4D3-25D187CFE3F1}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{F7C64DD7-6563-469C-AE4F-4119765DDFB9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{01198E82-20A0-4729-BC15-BBD23A07372B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{40107B29-0310-4FED-BE5C-D05EB5FB4B5B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{F42DD2AF-884B-441A-A9F5-D3961F381BBE}C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{13F5A012-275F-4EF8-90DB-AD085AAFF0BB}C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [{378E5988-B72A-4C60-BBC0-4F85D446A26D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FA7BB1D3-F9CC-4F88-A4D6-DD6F7CFC917C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BE255135-E132-464E-B183-147AC99663D1}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{C51804B6-1DA0-47E5-AE5A-ADB70DA66D4B}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{03A0C3FB-85B5-45C8-8080-34736F58C89F}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64Vk\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{A1967D45-BB61-41A2-BC9D-AFC495B58320}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64Vk\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{65C73F76-4B7A-4816-BD77-1DB758AB2346}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x86\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{9BEE0879-FB0D-4A05-9F27-4EB023B34E0A}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x86\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{2D0C7FFD-D14C-4756-B68F-13A3CA7BAC36}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{294F7FD4-4B96-4423-B917-18A14450DB49}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{E24D0C4C-9A2A-4461-BF66-38C36E963E0C}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{37B54C28-268E-42B5-BF50-FE19BA102AFD}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{EEBFAEC0-53FE-4B94-AF5C-FD072982FBE3}C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe] => (Allow) C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe => Keine Datei
FirewallRules: [UDP Query User{FD41CE3A-F4E9-4589-ACBD-3BC5B110600B}C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe] => (Allow) C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe => Keine Datei
FirewallRules: [TCP Query User{0DA68740-FF2C-4096-AD5A-E4A35E375851}H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{004E59AD-864D-40D2-9DB5-1C7F2752E6E9}H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [{532694F7-ED10-46BD-89C1-7DFA8CE3B485}] => (Allow) C:\Program Files (x86)\Ubisoft\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [TCP Query User{F495D941-8698-4CAC-AE44-B7AFD0F07759}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{7597D4B1-08C3-4DFC-A0B7-3150A7E5552E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{689F68BF-7A0E-4AFA-895F-25DC40A87E2E}D:\0\_02\25-\elritclover\app.exe] => (Allow) D:\0\_02\25-\elritclover\app.exe => Keine Datei
FirewallRules: [UDP Query User{0FC57338-B45A-402C-9106-F3EB2AC398AA}D:\0\_02\25-\elritclover\app.exe] => (Allow) D:\0\_02\25-\elritclover\app.exe => Keine Datei
FirewallRules: [TCP Query User{EA9ED269-9024-43DC-8FD1-54BB24C1A057}C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe] => (Allow) C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E1802155-9994-4612-929B-512916B90CED}C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe] => (Allow) C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe () [Datei ist nicht signiert]
FirewallRules: [{E1F1CC0B-43A0-4BDB-BD8A-1E95AE45BD45}] => (Allow) E:\SteamLibrary2\steamapps\common\Forts\Forts.exe (EarthWork Games Pty Ltd -> )
FirewallRules: [{51CA02AB-08E7-4877-9A40-C7C7ADF80223}] => (Allow) E:\SteamLibrary2\steamapps\common\Forts\Forts.exe (EarthWork Games Pty Ltd -> )
FirewallRules: [{CDB56E25-87B1-4963-B2F9-46B5E5E930EE}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\mcclauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{3AA536A0-8587-41FF-AC68-A1EBA4AAA782}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\mcclauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{2AADE91B-7D43-448E-82CB-12595AE4684D}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\MCC\Binaries\Win64\MCC-Win64-Shipping.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{9E3B3064-67DA-4930-B156-F0ED3CB5B0AB}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\MCC\Binaries\Win64\MCC-Win64-Shipping.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{1A6FD18D-009F-45FC-8BAF-714E9BC69BC4}] => (Allow) E:\SteamLibrary2\steamapps\common\Sid Meier's Civilization VI\2KLauncher\LauncherPatcher.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [{8936435A-F697-460A-AC82-47D663E0FAEE}] => (Allow) E:\SteamLibrary2\steamapps\common\Sid Meier's Civilization VI\2KLauncher\LauncherPatcher.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{B2E0B638-C102-43AE-AD70-90FA1B976A44}C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe => Keine Datei
FirewallRules: [UDP Query User{DA0476B7-0D49-493A-8FB6-546C6164F9E2}C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe => Keine Datei
FirewallRules: [TCP Query User{F2C85D79-9738-4E06-A956-3176838A0D1E}C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [UDP Query User{DA89A261-F5D8-4391-8973-1E71E9F2E036}C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [TCP Query User{5DB6DB68-992A-4484-9E40-A3B21653C568}D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe] => (Block) D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe => Keine Datei
FirewallRules: [UDP Query User{EC408871-7628-42DE-899D-5C49AE3AF7BC}D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe] => (Block) D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe => Keine Datei
FirewallRules: [TCP Query User{171EF606-4960-4C50-857E-E8508BA770AA}D:\0\_01\40\escapedungeon\escapedungeon.exe] => (Block) D:\0\_01\40\escapedungeon\escapedungeon.exe => Keine Datei
FirewallRules: [UDP Query User{6C8401DA-774D-4010-98C4-746641CD53E3}D:\0\_01\40\escapedungeon\escapedungeon.exe] => (Block) D:\0\_01\40\escapedungeon\escapedungeon.exe => Keine Datei
FirewallRules: [TCP Query User{72241E99-72CD-44D6-BE48-1228AE7FB121}D:\0\_01\80\midsummer\midsummer.exe] => (Block) D:\0\_01\80\midsummer\midsummer.exe => Keine Datei
FirewallRules: [UDP Query User{DAA7623E-45BD-4965-A7EC-5AAFC4311880}D:\0\_01\80\midsummer\midsummer.exe] => (Block) D:\0\_01\80\midsummer\midsummer.exe => Keine Datei
FirewallRules: [TCP Query User{6693DC47-722D-4897-9AD1-5EA5B05DE12D}D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe] => (Block) D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe => Keine Datei
FirewallRules: [UDP Query User{4791D2D6-F206-421D-9B28-1A1A77432441}D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe] => (Block) D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe => Keine Datei
FirewallRules: [TCP Query User{E19E2410-D801-4B4C-BF71-4197813CAE39}D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [UDP Query User{1FB78A77-EDC0-457B-A43B-E9057A9F6F22}D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [TCP Query User{1FD38A02-5ACB-4B5F-A97D-D20F53F076E8}D:\0\_03\neuer ordner (12)\elritclover\app.exe] => (Block) D:\0\_03\neuer ordner (12)\elritclover\app.exe => Keine Datei
FirewallRules: [UDP Query User{AB8FA77A-10E1-4308-97F7-4CC2EBB29BB0}D:\0\_03\neuer ordner (12)\elritclover\app.exe] => (Block) D:\0\_03\neuer ordner (12)\elritclover\app.exe => Keine Datei
FirewallRules: [TCP Query User{D9FDA407-1C34-4F5B-8800-F5F7045CEEEA}D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe] => (Block) D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe => Keine Datei
FirewallRules: [UDP Query User{89B48EA9-C2A4-4291-B9BC-360EDFE4A87D}D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe] => (Block) D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe => Keine Datei
FirewallRules: [TCP Query User{4D2AF492-1B55-4305-A536-5C53AE89E283}C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe] => (Block) C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [UDP Query User{1F3446AC-AA6E-4A18-85B5-EE99987EA930}C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe] => (Block) C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [{4B0B517C-E36B-4C0D-8DCB-965E946B4D86}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{449DE480-7990-41F9-A1C2-04D71A057996}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{39BA714D-E192-4E8E-8657-73A435F09758}] => (Allow) E:\SteamLibrary2\steamapps\common\Subnautica\Subnautica.exe () [Datei ist nicht signiert]
FirewallRules: [{76113DD7-4380-4D8A-84FA-FD2C8F751653}] => (Allow) E:\SteamLibrary2\steamapps\common\Subnautica\Subnautica.exe () [Datei ist nicht signiert]
FirewallRules: [{D6FA12FA-A69C-4E38-88CE-A26B33143121}] => (Allow) C:\Program Files (x86)\GoPro\GoPro Webcam\GoPro Webcam.exe => Keine Datei
FirewallRules: [{D5AF52F1-96B8-4666-89FE-11194B509CEB}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [{086AB0C4-EDA2-4D38-BBE4-E4F636AA7596}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [{C537E9B4-1108-4CF0-B092-D3D03AC8F989}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{CB9245B4-6437-4223-8CEE-FA8FCAF801C9}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{D7DF18D6-5CF5-4F5A-9178-B2C906E03124}] => (Allow) E:\SteamLibrary2\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{119BEC8D-9B38-49F9-882E-1B2702482AF9}] => (Allow) E:\SteamLibrary2\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{1387E2A0-E570-4404-897C-7A1F69B3258E}] => (Allow) E:\SteamLibrary2\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{DB25DDAB-49CB-4E4E-96DC-1BBC5F16BF30}] => (Allow) E:\SteamLibrary2\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{AC3BA4A6-DE31-41B3-9E17-485E233B9667}] => (Allow) E:\SteamLibrary2\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{8FD9A268-B669-404A-8876-C4091D43013F}] => (Allow) E:\SteamLibrary2\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{90B8A9E2-A3D2-492B-B4D6-971CCEDA609E}C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe => Keine Datei
FirewallRules: [UDP Query User{A1975813-67AA-4D29-8F6E-CBD4D075BDBA}C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe => Keine Datei
FirewallRules: [{8E708F15-3004-4F65-BA8D-9354CA4EAD7E}] => (Allow) E:\SteamLibrary2\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{1873E62E-E8FF-4145-9B24-5CA2C4894B4E}] => (Allow) E:\SteamLibrary2\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{325266B6-BED5-487A-BCE8-5E0F631C2585}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{4B0B98C6-922A-4E89-9C41-C46FBE899E62}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{2E04C337-DD44-47A7-BCE4-5542BF18E78D}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{0E9CC60D-C375-443F-982B-EEE0617A151D}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{15A35F1D-2B33-4253-8517-5AA1884030C4}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{E2E162F5-B65B-46A4-B913-6D5C310E73C5}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{E75CFD0D-F7B7-435A-BF64-2692CC3A9A5A}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Oculus VR, LLC -> )
FirewallRules: [{E5586DD3-E145-48D5-B838-41776E383EA2}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Oculus VR, LLC -> )
FirewallRules: [{F803968D-0434-4541-A126-7D5391A7644D}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{F46B7FC0-CCDC-4035-98A1-76CFD7EF14B3}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{E0CDC248-3601-4FFA-961D-9BF122054C49}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe (Oculus VR, LLC -> Epic Games, Inc.)
FirewallRules: [{4717C4E3-7187-4F57-9182-F4CC96250278}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe (Oculus VR, LLC -> Epic Games, Inc.)
FirewallRules: [{3BDEE3C4-4F2D-43BB-AEFE-82F1FD7CAC29}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{5B4DC059-6CAD-4EF8-ADDE-9011AE66DBBD}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{641C413B-A045-4889-AAFA-D110A589B739}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe (Oculus VR, LLC) [Datei ist nicht signiert]
FirewallRules: [{11E29CF3-AA0F-4361-8B1A-C4F4562CCC88}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe (Oculus VR, LLC) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{F911DFBF-64D3-43D7-81F8-A06EA952F7A4}C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe => Keine Datei
FirewallRules: [UDP Query User{7FE5DB1B-2354-4A47-9614-EF51F1762D85}C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe => Keine Datei
FirewallRules: [TCP Query User{0B6884A1-AE74-4797-9256-719D5A96C166}C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe => Keine Datei
FirewallRules: [UDP Query User{6F20D371-E53E-4E8D-AFF7-97630860AE03}C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe => Keine Datei
FirewallRules: [TCP Query User{A506E202-3E27-4EB8-8125-33A8587B97CF}C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe => Keine Datei
FirewallRules: [UDP Query User{842CC649-79C3-4DFE-A38B-C2B1766528DB}C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe => Keine Datei
FirewallRules: [{C306DE98-634B-42D1-A19D-C8A582CB756A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Halo Infinite\HaloInfinite.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{658E62DB-C09D-48AD-BD29-1343FE33FF92}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Halo Infinite\HaloInfinite.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{8F11A758-F2BF-457D-874A-2BDFAA2F47EA}] => (Allow) E:\SteamLibrary2\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc)
FirewallRules: [{0AE02A77-5D1C-48B3-8082-0EB5AE16E0C1}] => (Allow) E:\SteamLibrary2\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc)
FirewallRules: [TCP Query User{D77AD6DD-3483-406F-927C-BB73CD3D9BBC}C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{EC896965-29B8-4752-A5CF-8B4FEEF2648C}C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe => Keine Datei
FirewallRules: [{3FA605A1-FCEA-4BB5-9282-19A0CCE593E8}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{B5D3D976-28A4-49F0-B236-9619D930D5C9}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{2232BF50-C2BF-4962-96AC-1CCAD359638E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\ui32.exe (Skutta, Kristjan -> )
FirewallRules: [{3E7E67FF-0F68-4BFA-A525-25AED24DD333}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\ui32.exe (Skutta, Kristjan -> )
FirewallRules: [{637E01AD-26FE-495F-8F65-2701F1898828}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Neon Abyss\NeonAbyss.exe () [Datei ist nicht signiert]
FirewallRules: [{BB05ECEF-CC90-4F59-959B-00B0911669C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Neon Abyss\NeonAbyss.exe () [Datei ist nicht signiert]
FirewallRules: [{94C1494F-74F1-4853-AF63-70E23F2E5BCC}] => (Allow) E:\uplay\Anno 2205\Bin\Win64\Anno2205.exe (Blue Byte GmbH -> Ubisoft)
FirewallRules: [{1CA55264-D690-4C96-A32E-C9DE25656DC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Foundation\foundation.exe (Polymorph Games) [Datei ist nicht signiert]
FirewallRules: [{2D320FE5-0E05-40F0-A828-28B159F58FD9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Foundation\foundation.exe (Polymorph Games) [Datei ist nicht signiert]
FirewallRules: [{5F1623AA-36E6-476A-AD69-42AFA35F4513}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{553EBF20-24B4-45DB-ACF1-D26CA13F26C3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6FCED8C6-8036-44B8-BD9B-EE92622ED8D7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{633BE488-612B-4318-B5ED-6B77AB7B55AE}D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe] => (Allow) D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe => Keine Datei
FirewallRules: [UDP Query User{8D91F7C8-4168-4677-B53F-9BC7FDDCF43D}D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe] => (Allow) D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe => Keine Datei
FirewallRules: [{D164AECF-CBE6-48ED-A314-4E15AB3EF202}] => (Allow) E:\SteamLibrary2\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) [Datei ist nicht signiert]
FirewallRules: [{7D870EAE-02FD-4ED9-A64F-680DE2EE42FA}] => (Allow) E:\SteamLibrary2\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) [Datei ist nicht signiert]
FirewallRules: [{CBB2BED3-8E3C-4858-95F8-6FCDF6D321B9}] => (Allow) E:\SteamLibrary2\steamapps\common\SubnauticaZero\SubnauticaZero.exe () [Datei ist nicht signiert]
FirewallRules: [{D4FA8492-4F6C-4589-9667-9DFDC862E37F}] => (Allow) E:\SteamLibrary2\steamapps\common\SubnauticaZero\SubnauticaZero.exe () [Datei ist nicht signiert]
FirewallRules: [{BB8B8D1F-139C-4F51-A49B-389176CC34ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{819BA527-594E-4348-B8ED-227E59116B42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [TCP Query User{337C4C1A-FB9B-452A-93A9-A2955D00EFB9}H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe] => (Block) H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe => Keine Datei
FirewallRules: [UDP Query User{A7B547A1-F9A4-4380-91CD-5B534D0E0C44}H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe] => (Block) H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe => Keine Datei
FirewallRules: [TCP Query User{D1808664-E481-4387-900D-9EFDF37B2800}G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe] => (Block) G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{64217669-1936-4CA3-80DC-604E6324C93B}G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe] => (Block) G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{0B823868-74D4-4778-B24E-7FE3228B84BC}G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe] => (Block) G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe => Keine Datei
FirewallRules: [UDP Query User{4A4F4F0E-2BE8-41F2-A89C-B8BDE3A798FB}G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe] => (Block) G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe => Keine Datei
FirewallRules: [{B385F106-07C1-421D-AB6D-03C0EAED0B68}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{3D207969-A13F-42A5-9164-61DEDF31984B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{2739595E-AFA0-4184-BC93-0C2E5152795A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{844613D5-CAF2-4722-8C9B-9456733DE63C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{316F72D2-B23F-4D9D-9570-D12A9EB391C8}C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [UDP Query User{9EEAF25D-4AA6-43A8-8F83-621E9047E04A}C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{0C846FE2-2367-4B5C-93F8-068601B063CC}] => (Block) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{87D924C4-D73E-4C0F-BF0C-7C8C6381B6C6}] => (Block) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{0FA936C1-B238-4FF4-9D79-3BDA963A67F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Alyx\game\bin\win64\hlvr.exe (Valve -> )
FirewallRules: [{8D5F284B-14AB-4490-A65C-688A6E7E2C25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Alyx\game\bin\win64\hlvr.exe (Valve -> )
FirewallRules: [{8B8CE640-4840-4D1A-BB7F-29524BF5CBA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A883831C-89F9-4757-AD8A-D69267ED7A6C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AE3C6381-F470-45F5-8922-6D6DD6CA5280}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DA977AB-22A4-4DAF-9FBC-4CD88C5FFAD0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4F4914E9-3297-4224-9A97-D7EA904B0046}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3294EBDE-AFF4-47A9-B94D-048F1AC43EA0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{50014B3F-4CDE-4619-9A99-322B132C75B7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D7A74222-5731-4FE4-BE9C-842EEF5B9AC3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1F7459D0-CDF4-4433-BF34-0CD51C947157}] => (Allow) LPort=32682
FirewallRules: [{FBB1EDCE-B87C-41BD-B6DA-F469A4974342}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

==================== Wiederherstellungspunkte =========================

25-05-2022 19:59:39 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: NBW1001 A2DP SNK
Description: Microsoft Bluetooth A2dp-Senke
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthA2dp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/31/2022 07:25:04 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/31/2022 06:31:49 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" in Zeile 0.
Ungültige XML-Syntax.

Error: (05/31/2022 06:19:24 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/31/2022 06:18:47 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Razer Synapse Service Process.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0020001, Ausnahmeadresse 75CAC3A2
Stapel:

Error: (05/31/2022 06:17:26 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: MASTER-PC-STEFA)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (05/31/2022 06:17:26 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: MASTER-PC-STEFA)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (05/31/2022 06:17:26 PM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: MASTER-PC-STEFA)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.

Error: (05/31/2022 05:57:14 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0


Systemfehler:
=============
Error: (05/31/2022 06:57:15 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (05/31/2022 06:56:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (05/31/2022 06:18:47 PM) (Source: DCOM) (EventID: 10010) (User: MASTER-PC-STEFA)
Description: Der Server "Microsoft.Windows.ContentDeliveryManager_10.0.19041.1023_neutral_neutral_cw5n1h2txyewy!App.AppXx4zfy1ffv3wctgdz2vypnybzjkh27jhw.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/31/2022 06:18:47 PM) (Source: DCOM) (EventID: 10010) (User: MASTER-PC-STEFA)
Description: Der Server "4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8!Netflix.App.AppX5pc7brg014reh5jmy9aek351wvkx5hkm.wwa" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/31/2022 06:18:47 PM) (Source: DCOM) (EventID: 10010) (User: MASTER-PC-STEFA)
Description: Der Server "microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe!microsoft.windowslive.calendar.AppXwkn9j84yh1kvnt49k5r8h6y1ecsv09hs.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/31/2022 06:18:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ComboCleaner.Guard" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/31/2022 06:18:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ComboCleaner.WinService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/31/2022 06:16:38 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "ComboCleaner.Guard" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Windows Defender:
================
Date: 2022-05-31 21:51:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.792.0, AS: 1.367.792.0, NIS: 1.367.792.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-05-31 21:01:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.792.0, AS: 1.367.792.0, NIS: 1.367.792.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-05-31 20:11:50
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.792.0, AS: 1.367.792.0, NIS: 1.367.792.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-05-31 19:36:53
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {1740AF92-300A-484F-979B-5D61968819C3}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-05-31 18:11:38
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Ransom:MSIL/Crawl&threatid=2147768618&enterprise=0
Name: Ransom:MSIL/Crawl
Schweregrad: Schwerwiegend
Kategorie: Ransomware
Pfad: file:_C:\Users\SteMu\Downloads\Spyware112TerminatorSetup(1).exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.367.787.0, AS: 1.367.787.0, NIS: 1.367.787.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

CodeIntegrity:
===============
Date: 2022-05-31 19:36:54
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2022-05-31 18:58:43
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2022-05-31 18:27:33
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2022-05-31 18:27:32
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1.B0 11/08/2019
Hauptplatine: Micro-Star International Co., Ltd. B450 GAMING PRO CARBON AC (MS-7B85)
Prozessor: AMD Ryzen 7 2700X Eight-Core Processor 
Prozentuale Nutzung des RAM: 24%
Installierter physikalischer RAM: 32717.17 MB
Verfügbarer physikalischer RAM: 24697.57 MB
Summe virtueller Speicher: 37581.17 MB
Verfügbarer virtueller Speicher: 27113.65 MB

==================== Laufwerke ================================

Drive c: (M.2_1) (Fixed) (Total:930.95 GB) (Free:193.08 GB) (Model: SanDisk Extreme Pro 1TB) NTFS
Drive e: (SSD_2) (Fixed) (Total:931.51 GB) (Free:495.45 GB) (Model: SanDisk SSD PLUS 1000GB) NTFS
Drive f: (SSD_1) (Fixed) (Total:930.95 GB) (Free:247.89 GB) (Model: SanDisk SSD PLUS 1000GB) NTFS
Drive g: (M.2_2) (Fixed) (Total:465.76 GB) (Free:465.55 GB) (Model: SanDisk Extreme Pro 500GB) NTFS

\\?\Volume{83da91a0-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:0.57 GB) (Free:0.53 GB) NTFS
\\?\Volume{05673095-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.57 GB) (Free:0.1 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 83DA91A0)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CF86942C)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 05673095)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: C87B859B)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================

--- --- ---

cosinus · 01.06.2022, 13:43

Zitat:

VLC Plus Player

Downloadquellen

Lade keine Software von Chip.de, Softonic.de, sourceforge.net, openoffice.de, VLC.de, audacity.de, gimp24.de oder updatestar.com.
Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software (Potentially unwanted programs, kurz PUP) oder Adware installiert.
Auf manchen Seiten wird direkt PUP / Adware zum Download angeboten.

Für Windows gibt es seit einiger Zeit einen brauchbaren Paketmanager, der mit einfachen Befehlen es erlaubt, automatisiert Software herunterzuladen und zu installieren. Das erspart eine Menge Arbeit, denn ohne einen Paketmanager muss man jedes Programm selbst prüfen und separat manuell updaten, vorher manuell noch runterladen etc. pp. - siehe auch --> chocolatey Paketmanager für Windows

Wir empfehlen dringend, alle Programme, sofern verfügbar, über chocolatey zu installieren. Falls du schon mit Linux zu tun hattest, wird dir die Syntax sehr vertraut sein.
Die FAQs zu choco findest du da --> Chocolatey: Häufig gestellte Fragen (englisch)
Selbstverständlich darfst du auch Fragen zu chocolatey im o.g. Thread zu chocolatey stellen.

Für den seltenen Fall, dass du das benötigte Programm nicht im repository von chocolatey findest: Lade diese Software direkt beim jeweiligen Hersteller / Entwickler.

Störende, veraltete oder unnötige Programme deinstallieren

Bitte über Programme und Features (appwiz.cpl) deinstallieren:

cFosSpeed 12.01
Google Chrome (durch Mozilla Firefox ersetzen)
VLC Plus Player
HWiNFO64 Version 6.42

Sterrare · 02.06.2022, 17:12

Guten Tag,

habe alles wie empfohlen durchgeführt. Auch wenn ich die Programme schon seit Jahren auf dem PC besitze und direkt vom Entwickler bezogen habe.
Das Problem, bzw der Trojaner, ist immer noch da und macht sich wie vorher genauso bemerkbar, sprich es öffnet sich kurz ein schwarzes Fenster während Windows den Trojaner erkennt und in die Quarantäne steckt.

Hier die aktuelle Logfile FRST:

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-06-2022 01
durchgeführt von SteMu (Administrator) auf MASTER-PC-STEFA (Micro-Star International Co., Ltd. MS-7B85) (02-06-2022 18:03:48)
Gestartet von C:\Users\SteMu\Desktop
Geladene Profile: SteMu
Plattform: Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(A-Volute SAS -> A-Volute) C:\Users\SteMu\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Nahimic\NahimicMonitorX64.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Windows\System32\mfevtps.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe
(C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe
(MICRO-STAR INTERNATIONAL CO., LTD) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <11>
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe <3>
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\VSCore_20_12\mcapexe.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <4>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (NZXT, Inc. -> ) C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\target\x86_64-pc-windows-msvc\release\service.exe
(services.exe ->) (Oculus VR, LLC -> Facebook Technologies, LLC) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(sihost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MSPaint_6.2203.1037.0_x64__8wekyb3d8bbwe\PaintStudio.View.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicSvc64.exe
(svchost.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\SysWOW64\NahimicSvc32.exe
(svchost.exe ->) (A-Volute) C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm\Nahimic3.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [267072 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-12-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [114379544 2021-01-28] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (Keine Datei)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632096 2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3527240 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Discord] => C:\Users\SteMu\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3145920 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Update Plus Player] => "C:\Program Files\VLC Plus Player\vlc.exe" --no-qt-system-tray --no-qt-privacy-ask --qt-start-updatecheck (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\SteMu\AppData\Local\Microsoft\Teams\Update.exe [2452656 2021-03-15] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\SteMu\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Samsung DeX] => C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe [10929320 2021-12-03] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Run: [Bloom] => C:\Users\SteMu\AppData\Roaming\Bloom\Bloom.exe --cwVGCq (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\RunOnce: [Application Restart #0] => C:\Users\SteMu\AppData\Roaming\Bloom\Bloom.exe  --cwvgcq --ppapi-flash-path=pepflashplayer.dll --ppapi-flash-version=32.0.0.223 --enable-widevine-cdm --register-pepper-plugins=widevinecdmadapter.dll;a (Der Dateneintrag hat 447 mehr Zeichen). (Keine Datei)
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3527240 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm Monitor.lnk [2021-03-06]
ShortcutTarget: ROCCAT Swarm Monitor.lnk -> C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_Swarm_Monitor.exe (Voyetra Turtle Beach, Inc. -> ROCCAT)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {004997D6-42F1-4F62-815F-22D029248C37} - System32\Tasks\McAfee\McAfee Idle Detection Task => {ABCDCA3B-DE6B-5A7C-B132-6D7CBA63E5C5} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [993360 2021-01-20] (McAfee, LLC -> McAfee, LLC)
Task: {04C4789A-4B01-4577-8AAA-98EA50722727} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [833704 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {060B44A6-1A87-4897-9A5A-9C7CA1A3363F} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe [1775440 2021-11-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {0EA63EAC-CBC4-4884-9EDC-E580A1BEB416} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {105DC727-7AE2-4309-83F3-90A7FE709643} - System32\Tasks\ROCCAT DEVICE SERVICE => C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_dev_service.exe [442872 2021-02-23] (Voyetra Turtle Beach, Inc. -> ROCCAT)
Task: {106D31A2-6C01-4B9E-8D90-E7E524FDA5DC} - System32\Tasks\NahimicTask64 => C:\WINDOWS\system32\.\NahimicSvc64.exe [1094824 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {1144DC7B-7B9C-4917-BCAE-7549E353479E} - System32\Tasks\Opera GX scheduled Autoupdate 1628538165 => C:\Users\SteMu\AppData\Local\Programs\Opera GX\launcher.exe [2369792 2022-05-30] (Opera Software AS -> Opera Software)
Task: {219850FA-0EB6-4729-95B0-5A396460FB80} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144792 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {321ED8D6-89DC-42F3-B371-365F29B3CFBC} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8304592 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {3717770D-D835-49B5-8E23-7A8F31A8E3CB} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4215192 2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {39E09673-F296-4DAB-B48C-C270109FC16E} - \chrome settings -> Keine Datei <==== ACHTUNG
Task: {3DB88F41-0BBC-42F1-9602-A823CB230B91} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4038C839-2411-4262-9D7F-D544DD31A0D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B087852-00E4-4C44-B29D-55129CD8DD28} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4BCB4C33-A903-4FD1-823B-1DE71034D603} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {57354CBB-3095-45B2-B02B-65C62670C05A} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {5E78C242-D529-49ED-8BA0-95F96E8C924D} - System32\Tasks\NahimicSvc64Run => C:\Windows\system32\NahimicSvc64.exe [1094824 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {64E319E4-53A9-4692-8B51-4D3127554D85} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {686EA1E2-42FF-4207-886C-EBBCA14872D3} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {6B9E794D-28B9-4090-A2CD-F5E75D9427BE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {6CCCB370-DE26-4713-AF31-75342EF8F9A1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {7DA21BAA-C92C-4C35-AAE1-23E22F9A55FA} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [965552 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8003F5BA-24F1-4F59-9A01-962A4D12B86F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2450881772-3334122637-3429325221-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4215192 2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {867D51A7-4C82-4CB1-A260-091D8EEDE06C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144792 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {89358AB0-88C3-40BA-8BA8-865A9730CF6F} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [67472 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D4DB410-3D91-415A-A22A-F52DE38FB61F} - System32\Tasks\MSI Task Host - MSI.True Color => C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe [47416 2021-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9639E916-CDF5-403A-904B-8CA5E908AC09} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {9E0ACB84-6D68-4360-89CD-0C01A26A38A3} - System32\Tasks\MSI Task Host - DisplayID => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9FFB0A5E-2498-4A6C-AAE9-0FF41A762390} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [8304592 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {A84FCF63-793C-44D5-8E33-3370E5550A3B} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {AC797E26-EB04-43EE-BCEE-3D07E1855840} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {B1887951-766D-4CFF-AED0-30E7A43A3C4A} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {B6507011-4A0C-4CB0-9A4F-1D4A3AD02682} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C0F46171-BE58-463A-AB30-0A9858460478} - System32\Tasks\McAfee\McAfee Auto Maintenance Task Agent => {ABCECA3B-EA5A-496B-A021-5C6BAB365E5C} C:\Program Files\Common Files\McAfee\TaskScheduler\McAMTaskAgent.exe [993360 2021-01-20] (McAfee, LLC -> McAfee, LLC)
Task: {CA3CD245-7051-4346-BFDB-5BE9B018A0C6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {D10ED619-22FD-4CA6-A546-9EEE6AF28ECE} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1629110074 => C:\Users\SteMu\AppData\Local\Programs\Opera GX\launcher.exe [2369792 2022-05-30] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\SteMu\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {DD7221BD-FF67-4A07-9597-D8AE12D354EE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DF2A1B54-9B76-480A-BC6D-0EA9D58BEA39} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ED4EAD19-1EAC-4C43-99A2-F2EE293D43CF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {FCE6D7A9-5AF9-44EE-B2C2-9824998AE054} - System32\Tasks\NahimicTask32 => C:\WINDOWS\system32\..\SysWOW64\NahimicSvc32.exe [833704 2021-10-08] (A-Volute SAS -> Nahimic)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{03ec9416-78c3-45e6-85b3-2a4c2c0b5252}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{5b2131b5-626b-4ee1-aca6-ed86a1e22484}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\SteMu\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-01]

FireFox:
========
FF DefaultProfile: rcw8t7dl.default
FF ProfilePath: C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\rcw8t7dl.default [2021-03-06]
FF ProfilePath: C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release [2022-06-02]
FF Extension: (AdBlocker Ultimate) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2022-05-26]
FF Extension: (Starlight Grotto) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{08b48df5-318b-4f75-9628-d34fb35815e8}.xpi [2021-03-06]
FF Extension: (Lone Tree Sunset) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1d2cb394-788f-4a4f-b485-add64bf87f3d}.xpi [2021-03-06]
FF Extension: (Brushed Metal - XP) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1d57f168-529b-4d0b-a298-b9b5d2c0f137}.xpi [2021-03-06]
FF Extension: (Fantasy Canyon by candelora) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{1e03f1ca-8fbe-40f3-b920-57b957603874}.xpi [2021-10-15]
FF Extension: (Yosemite) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{2197e0af-098d-4a71-b802-5c194260fbb2}.xpi [2021-03-06]
FF Extension: (City Sunset) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{36da9d30-d002-4c15-87c4-f08dbbad7dbb}.xpi [2021-03-06]
FF Extension: (Rio De Janeiro - Jen) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{40b607f2-8fb0-4a0f-b715-d86bb9e01380}.xpi [2021-03-06]
FF Extension: (Big City  Blues) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{519f7f6d-4881-47e6-b21f-ceacb5656390}.xpi [2021-03-06]
FF Extension: (Sunset Over Water by MaDonna) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{633f0fba-b472-4ac5-9584-e780977806b6}.xpi [2021-06-12]
FF Extension: (The Blue Storm) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{67e7d77c-e0c2-4834-8ff1-4242cd1c85d4}.xpi [2021-03-06]
FF Extension: (C.E.Waterfall Sunset 2) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{7e6ad547-ca94-4992-ae47-b5968ac6b9b6}.xpi [2021-03-06]
FF Extension: (Future Bmw) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{832a10b5-6b10-4e97-be5d-25dd5b2f0f16}.xpi [2021-03-06]
FF Extension: (Louder) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{8ceee5ac-ebc4-4254-9789-e8d8694becf5}.xpi [2022-02-26]
FF Extension: (Railroad 2 by CP) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{a3bbe13a-66ab-4646-b713-0d414e2ed076}.xpi [2021-03-06]
FF Extension: (Dreamy__) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e1eb26b5-452d-4dc0-a80c-79205b2a30b5}.xpi [2021-03-06]
FF Extension: (Sweet Aurora Borealis) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e2028a58-f7ee-4608-bb71-55e779d8fff4}.xpi [2021-03-06]
FF Extension: (Funny  Cats by MaDonna) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e35db73b-1cab-4392-aa4b-49a29fd8b172}.xpi [2021-12-12]
FF Extension: (Ciel d'orage) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{e68e0cc1-4611-4a91-9158-4b2beeb20e30}.xpi [2021-03-06]
FF Extension: (Space Fantasy Redux) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{f5453979-a039-4066-8aee-cb64fc98f936}.xpi [2021-03-06]
FF Extension: (Fog over Dubai) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{f6809f8a-b2ea-483a-a89b-c2afb2f85814}.xpi [2021-03-06]
FF Extension: (Summerwood) - C:\Users\SteMu\AppData\Roaming\Mozilla\Firefox\Profiles\x7p6umia.default-release\Extensions\{fb7d2936-bd43-4dcd-ae06-bf7a15401808}.xpi [2021-03-06]
FF Plugin: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\McAfee\MSC\npMcSnFFPl64.dll [2021-01-20] (McAfee, LLC -> )
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Datei ist nicht signiert]
FF Plugin-x32: @java.com/DTPlugin,version=11.281.2 -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\dtplugin\npDeployJava1.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.281.2 -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\plugin2\npjp2.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\MSC\npMcSnFFPl.dll [2021-01-20] (McAfee, LLC -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-2450881772-3334122637-3429325221-1001: @lightspark.github.com/Lightspark;version=1 -> C:\Program Files\Lightspark\nplightsparkplugin.dll [Keine Datei]

Opera: 
=======
StartMenuInternet: (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001) Opera GXStable - "C:\Users\SteMu\AppData\Local\Programs\Opera GX\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 CAMService; C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\rust-cam\dist\target\x86_64-pc-windows-msvc\release\service.exe [533232 2022-05-26] (NZXT, Inc. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2018-11-15] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncHelper.exe [3401112 2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
R2 LightKeeperService; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe [86776 2020-12-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_20_12\McApExe.exe [779080 2021-01-15] (McAfee, LLC -> McAfee, LLC)
S3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R3 mfevtp; C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe [645736 2020-12-10] (McAfee, Inc. -> McAfee, LLC)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1627680 2021-01-20] (McAfee, LLC -> McAfee, LLC)
S3 MozillaMaintenance; C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice_tmp.exe [242144 2021-02-22] (Mozilla Corporation -> Mozilla Foundation)
R2 MSI_Central_Service; C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe [147088 2020-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_Companion_Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe [143160 2021-03-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [36152 2021-08-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Mystic_Light_Service; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe [39760 2021-05-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1888424 2021-10-08] (A-Volute SAS -> Nahimic)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.099.0508.0001\OneDriveUpdaterService.exe [3842464 2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557144 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3475680 2021-10-01] (Electronic Arts, Inc. -> Electronic Arts)
S3 OVRLibraryService; C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe [144632 2022-01-19] (Oculus VR, LLC -> Facebook Technologies, LLC)
R2 OVRService; C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe [511736 2022-01-19] (Oculus VR, LLC -> Facebook Technologies, LLC)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2021-03-10] (Even Balance, Inc. -> )
R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [2029544 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [463856 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1350672 2022-03-18] (Razer USA Ltd. -> Razer Inc.)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [254224 2021-11-16] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [298056 2022-03-29] (Razer USA Ltd. -> Razer Inc.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533824 2022-02-18] (Razer USA Ltd. -> Razer Inc.)
R2 RzKLService; C:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [291320 2021-11-25] (Razer USA Ltd. -> Razer Inc.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-06-23] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-06-23] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S4 uhssvc; "C:\Program Files\Microsoft Update Health Tools\uhssvc.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [75712 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
S3 cpuz150; C:\WINDOWS\temp\cpuz150\cpuz150_x64.sys [44832 2022-03-13] (CPUID S.A.R.L.U. -> CPUID)
S3 cpuz152; C:\WINDOWS\temp\cpuz152\cpuz152_x64.sys [35840 2022-05-28] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [29200 2021-12-29] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [38544 2018-12-13] (Feature Integration Technology Inc -> FINTEK Corp.)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [544704 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [385984 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85944 2020-12-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> McAfee, LLC)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [522176 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [1027520 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [116672 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [252352 2020-12-11] (McAfee, Inc. -> McAfee, LLC)
S3 MpKsl67f01921; C:\WINDOWS\system32\MpEngineStore\MpKslDrv.sys [139536 2022-04-21] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute -> Windows (R) Win 7 DDK provider)
S3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys [14288 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 OCULUSUDSVR; C:\WINDOWS\System32\drivers\OCULUSUD.sys [3867552 2021-03-07] (Microsoft Windows Hardware Compatibility Publisher -> Oculus VR, LLC.)
R3 oculusvad_oculusvad; C:\WINDOWS\System32\drivers\oculusvad.sys [75280 2021-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 Oculus_ViGEmBus; C:\WINDOWS\System32\drivers\Oculus_ViGEmBus.sys [32856 2021-10-01] (Oculus VR, LLC -> Facebook Inc.)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [54632 2021-03-30] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_005c; C:\WINDOWS\System32\drivers\RzDev_005c.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [44080 2020-10-26] (Shaul Eizikovich -> Nefarius Software Solutions)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
S1 EneTechIo; \??\C:\Windows\system32\drivers\ene.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-06-02 18:03 - 2022-06-02 18:04 - 000041472 _____ C:\Users\SteMu\Desktop\FRST.txt
2022-06-02 18:03 - 2022-06-02 18:03 - 000000000 ____D C:\Users\SteMu\Desktop\Log
2022-06-02 18:03 - 2022-06-02 18:03 - 000000000 ____D C:\Users\SteMu\Desktop\FRST-OlderVersion
2022-06-01 14:07 - 2022-06-01 14:07 - 103284736 _____ C:\WINDOWS\system32\config\SOFTWARE
2022-05-31 22:37 - 2022-05-31 22:37 - 000000000 ____D C:\ProgramData\Avast Software
2022-05-31 22:04 - 2022-06-02 18:04 - 000000000 ____D C:\FRST
2022-05-31 21:57 - 2022-06-02 18:03 - 002368000 _____ (Farbar) C:\Users\SteMu\Desktop\FRST64.exe
2022-05-31 18:28 - 2022-05-31 18:28 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\Avast Software
2022-05-31 18:26 - 2022-05-31 18:26 - 000662160 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswed1576d1a757d61f.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000548968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asweecf223bc28c3eb3.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000321928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa9e153e486ce91ab.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000271600 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw16bb9d9558988a7e.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000269136 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2022-05-31 18:26 - 2022-05-31 18:26 - 000255136 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asweb388cbe4e9d2049.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000218608 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw744c8f6166f7011a.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000111056 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf8b955d4fb2f2e8f.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000102048 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw36466b1b5adce8a8.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000086120 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw6a6a9f261465540e.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000045072 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcee02205f50e49ab.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000021936 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswf4313ed91aaab2b4.tmp
2022-05-31 18:26 - 2022-05-31 18:26 - 000000000 ____D C:\WINDOWS\system32\gf2engine
2022-05-31 18:26 - 2022-05-31 18:25 - 000857488 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw625b1b96ea05ef1a.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000382624 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw0424f020e5fab84e.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000232648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswa832283a74114066.tmp
2022-05-31 18:26 - 2022-05-31 18:25 - 000038912 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswcdadb836c26834f0.tmp
2022-05-31 18:24 - 2022-05-31 19:22 - 000000000 ____D C:\Program Files\Avast Software
2022-05-31 18:20 - 2022-05-31 18:20 - 000000000 ___HD C:\$SysReset
2022-05-31 18:14 - 2022-05-31 18:14 - 002443448 _____ (Malwarebytes) C:\Users\SteMu\Downloads\MBSetup.exe
2022-05-31 14:06 - 2022-05-31 14:06 - 003594016 _____ (RCS LT) C:\Users\SteMu\Downloads\CCSetup.exe
2022-05-30 20:28 - 2022-05-30 20:28 - 000024204 _____ C:\Users\SteMu\Downloads\PEM_20220530_202841.pdf
2022-05-29 21:42 - 2022-06-01 13:12 - 000005726 _____ C:\WINDOWS\system32\PerfStringBackup.TMP
2022-05-29 20:29 - 2022-05-29 20:29 - 000000000 ____D C:\Users\SteMu\AppData\Local\MicrosoftEdge
2022-05-25 16:52 - 2022-05-25 16:52 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2022-05-25 16:49 - 2022-05-21 05:26 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001905912 _____ C:\WINDOWS\system32\vulkaninfo.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001478384 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-05-25 16:49 - 2022-05-21 05:26 - 001467080 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001432304 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001432304 _____ C:\WINDOWS\system32\vulkan-1.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001209408 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-05-25 16:49 - 2022-05-21 05:26 - 001145584 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-05-25 16:49 - 2022-05-21 05:23 - 000587336 _____ C:\WINDOWS\system32\nvofapi64.dll
2022-05-25 16:49 - 2022-05-21 05:23 - 000460496 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 002120896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001603144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001530456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 001177312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000730320 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000724688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-05-25 16:49 - 2022-05-21 05:22 - 000712416 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-05-25 16:49 - 2022-05-21 05:21 - 006964824 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 006226640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 005100752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 002932952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 000582712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-05-25 16:49 - 2022-05-21 05:21 - 000457944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-05-25 16:49 - 2022-05-21 05:20 - 005730880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-05-25 16:49 - 2022-05-21 05:19 - 000851136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-05-25 16:49 - 2022-05-20 02:51 - 000089337 _____ C:\WINDOWS\system32\nvinfo.pb
2022-05-21 22:26 - 2022-05-21 22:26 - 000038712 _____ C:\Users\SteMu\Downloads\Verkaufsschild.pdf
2022-05-20 16:07 - 2022-06-02 17:39 - 000000000 ____D C:\Program Files\Mozilla Firefox
2022-05-11 11:52 - 2022-05-11 11:52 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll
2022-05-11 11:52 - 2022-05-11 11:52 - 000093696 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2022-05-11 11:52 - 2022-05-11 11:52 - 000011799 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-05-11 11:46 - 2022-05-11 11:46 - 000000000 ___HD C:\$WinREAgent
2022-05-03 17:29 - 2022-03-17 16:55 - 008818256 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw08.sys
2022-05-03 17:29 - 2022-03-17 16:55 - 001626192 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter08.dll
2022-05-03 17:29 - 2022-03-17 16:11 - 002687540 _____ C:\WINDOWS\system32\Drivers\Netwfw08.dat

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-06-02 17:40 - 2021-03-06 20:45 - 000000000 ____D C:\ProgramData\Packages
2022-06-02 17:40 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-02 17:40 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-02 17:39 - 2021-03-06 21:35 - 000000000 ____D C:\Users\SteMu\AppData\LocalLow\Mozilla
2022-06-02 17:38 - 2022-03-23 12:07 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-02 17:38 - 2022-03-23 12:07 - 000002153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-02 17:38 - 2022-03-23 12:07 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-02 17:38 - 2021-12-13 18:25 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2450881772-3334122637-3429325221-1001
2022-06-02 17:37 - 2021-03-06 21:15 - 000000000 ____D C:\ProgramData\NVIDIA
2022-06-02 17:34 - 2021-03-06 23:26 - 000000000 ____D C:\Users\SteMu\AppData\Local\Oculus
2022-06-01 20:11 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-01 19:40 - 2021-03-06 23:28 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-01 18:13 - 2021-03-13 15:47 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-01 14:56 - 2021-03-07 01:55 - 000312042 _____ C:\WINDOWS\cFosSpeed_Setup_Log.txt
2022-06-01 14:56 - 2021-03-06 21:15 - 000000000 ____D C:\Program Files\HWiNFO64
2022-06-01 14:56 - 2021-03-06 21:15 - 000000000 ____D C:\Program Files\cFosSpeed
2022-06-01 14:55 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-01 14:06 - 2022-02-17 12:23 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2022-06-01 13:46 - 2021-03-11 19:39 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-01 13:08 - 2021-05-13 12:59 - 000003112 _____ C:\WINDOWS\system32\Tasks\NahimicTask32
2022-06-01 13:08 - 2021-05-13 12:59 - 000003092 _____ C:\WINDOWS\system32\Tasks\NahimicTask64
2022-06-01 13:07 - 2021-03-13 15:53 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-01 13:07 - 2021-03-13 15:47 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-01 13:03 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-05-31 18:26 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-05-31 18:18 - 2021-03-06 23:39 - 000000000 ____D C:\Program Files (x86)\InstallShield Installation Information
2022-05-31 15:00 - 2021-03-22 19:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2022-05-30 19:49 - 2021-12-28 22:35 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\Sky Go
2022-05-30 17:31 - 2021-08-09 21:42 - 000004240 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1628538165
2022-05-30 17:31 - 2021-08-09 21:42 - 000001443 _____ C:\Users\SteMu\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2022-05-30 17:28 - 2021-03-13 15:48 - 000000000 ____D C:\Users\SteMu
2022-05-29 20:49 - 2021-04-27 15:32 - 000000359 _____ C:\Users\SteMu\Downloads\Papierkorb - Verknüpfung.lnk
2022-05-29 14:04 - 2021-03-06 22:30 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\NZXT CAM
2022-05-29 13:29 - 2021-03-06 21:16 - 000000000 ____D C:\Program Files\Microsoft Office
2022-05-28 11:43 - 2021-03-06 23:29 - 000000000 ____D C:\Program Files\NZXT CAM
2022-05-26 22:06 - 2021-03-06 21:23 - 000000000 ____D C:\Program Files (x86)\Steam
2022-05-26 17:56 - 2021-10-06 11:40 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\obs-studio
2022-05-26 16:06 - 2021-08-23 21:09 - 000000000 ____D C:\Users\SteMu\Downloads\Stream
2022-05-25 16:52 - 2021-03-06 23:24 - 000000000 ____D C:\Users\SteMu\AppData\Local\NVIDIA
2022-05-22 20:16 - 2021-03-06 23:40 - 000000000 ____D C:\Users\SteMu\AppData\Roaming\discord
2022-05-22 20:12 - 2021-03-06 23:40 - 000000000 ____D C:\Users\SteMu\AppData\Local\Discord
2022-05-22 19:26 - 2022-01-01 19:48 - 000000000 ____D C:\Users\SteMu\AppData\Local\ElevatedDiagnostics
2022-05-21 20:45 - 2021-03-06 21:30 - 000000000 ___RD C:\Users\SteMu\Desktop\PKW
2022-05-21 05:18 - 2021-03-07 12:04 - 007618584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-05-21 05:18 - 2021-03-07 12:04 - 006465200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-05-20 17:23 - 2021-10-06 13:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-05-20 17:23 - 2021-03-06 21:35 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-05-12 23:18 - 2021-03-13 15:47 - 000257920 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-05-12 23:17 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-05-12 22:35 - 2022-01-01 23:35 - 000000000 ____D C:\Users\SteMu\Desktop\Kamera_Sony
2022-05-11 11:55 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-05-11 11:30 - 2021-03-06 23:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-05-11 11:28 - 2021-03-06 23:11 - 145501456 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-05-10 22:50 - 2021-04-21 21:52 - 000007621 _____ C:\Users\SteMu\AppData\Local\Resmon.ResmonCfg
2022-05-05 19:13 - 2022-02-08 19:23 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2022-05-04 12:17 - 2021-03-06 21:16 - 000000000 ____D C:\ProgramData\A-Volute

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2021-04-21 21:52 - 2022-05-10 22:50 - 000007621 _____ () C:\Users\SteMu\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

--- --- ---

Sterrare · 02.06.2022, 17:13

und hier die aktuelle Addition Logfile:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-06-2022 01
durchgeführt von SteMu (02-06-2022 18:05:21)
Gestartet von C:\Users\SteMu\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1706 (X64) (2021-03-13 13:53:28)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2450881772-3334122637-3429325221-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2450881772-3334122637-3429325221-503 - Limited - Disabled)
Gast (S-1-5-21-2450881772-3334122637-3429325221-501 - Limited - Disabled)
SteMu (S-1-5-21-2450881772-3334122637-3429325221-1001 - Administrator - Enabled) => C:\Users\SteMu
WDAGUtilityAccount (S-1-5-21-2450881772-3334122637-3429325221-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 19.00 (x64) (HKLM\...\7-Zip) (Version: 19.00 - Igor Pavlov)
Anno 1800 (HKLM-x32\...\Uplay Install 4553) (Version:  - Ubisoft)
Anno 2205 (HKLM-x32\...\Uplay Install 1253) (Version:  - Ubisoft)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
CPUID CPU-Z MSI 1.94 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.94 - CPUID, Inc.)
Discord (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
ENE_DRAM_RGB_AIO (HKLM\...\{1745D314-9077-46C9-8562-1C62BAE189B7}) (Version: 1.0.3.17 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{e201736e-db02-4616-bc33-5eda2f791ee1}) (Version: 1.0.3.17 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{d6c7bfc9-8ecb-45a5-967b-f1c3c04cc972}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X-JMI_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.5.1 - ENE Tech) Hidden
ENE_X-JMI_HAL (HKLM-x32\...\{50ec3a07-291b-463e-be86-487eb8cbb71c}) (Version: 1.0.5.1 - ENE Tech) Hidden
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version:  - Seiko Epson Corporation)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Microsoft OneDrive (HKU\.DEFAULT\...\OneDriveSetup.exe) (Version: 18.151.0729.0013 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Teams) (Version: 1.4.00.2781 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 100.0.2 (x64 de)) (Version: 100.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 86.0 - Mozilla)
MSI SDK (HKLM-x32\...\{EE7D557C-3AE7-4348-8DCA-3A89790D0002}}_is1) (Version: 2.2021.1110.01 - MSI)
NZXT CAM 4.34.3 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.34.3 - NZXT, Inc.)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.1.3 - OBS Project)
Oculus (HKLM\...\Oculus) (Version: <3 - Facebook Technologies, LLC)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20194 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Opera GX Stable 86.0.4363.70 (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\Opera GX 86.0.4363.70) (Version: 86.0.4363.70 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.105.49133 - Electronic Arts, Inc.)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 9.18.7.1508 - Razer Inc.)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.7.0331.032911 - Razer Inc.)
RGSS-RTP Standard (HKLM-x32\...\{5A9FE525-8B8F-4701-A937-7F6745A4E9C7}) (Version: 1.0.0 - Enterbrain)
ROCCAT Swarm (HKLM-x32\...\{9D12397F-45AF-4517-B492-1D1E2FA475EE}) (Version: 1.93.860 - ROCCAT GmbH) Hidden
ROCCAT Swarm (HKLM-x32\...\InstallShield_{9D12397F-45AF-4517-B492-1D1E2FA475EE}) (Version: 1.93.860 - ROCCAT GmbH)
RPG MAKER VX Ace RTP (HKLM-x32\...\RPGVXAce_RTP_is1) (Version: 1.00 - Enterbrain)
Samsung DeX (HKLM-x32\...\{43409A91-7C1A-4D28-B628-AD78F09DA3F0}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.) Hidden
Samsung DeX (HKLM-x32\...\{a306c372-6ec4-43f0-b372-b1de15b0e935}) (Version: 2.4.0.27 - Samsung Electronics Co., Ltd.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.46.0 - Samsung Electronics Co., Ltd.)
SHIFT 2 UNLEASHED™ (HKLM-x32\...\{E8C37E27-5205-4C8A-BECB-B00533045AAE}) (Version: 1.0.2.2 - Electronic Arts)
Sky Go 22.4.2.0 (HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\com.bskyb.skygoplayer_is1) (Version: 22.4.2.0 - Sky)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.2781 - Microsoft Corporation)
theSettlers5 (HKLM-x32\...\Uplay Install 11786) (Version:  - )
Tom Clancy's The Division 2 (HKLM-x32\...\Uplay Install 4932) (Version:  - Ubisoft)
Trident Z Lighting Control (HKLM-x32\...\{97CD7AFC-0ED3-41B8-9CCD-22717E8631D0}_is1) (Version: 1.00.29 - ENG)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 119.0.10382 - Ubisoft)
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1-2) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK AN1500 (HKLM-x32\...\{9c94735f-73fd-4b0f-9ddb-8be7b3cc4681}) (Version: 1.0.12.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK D50 (HKLM-x32\...\{a1d1ba00-92b7-4a99-8ebd-65b25c0e9e44}) (Version: 1.0.9.0 - ENE TECHNOLOGY INC.) Hidden

Packages:
=========
Desktop Live Wallpapers -> C:\Program Files\WindowsApps\48405AmbientSoftware.LiveDesktopWallpapers_1.2.17.0_neutral__agy8jafheqhng [2022-04-06] (Ambient Software) [Startup Task]
DragonCenter -> C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p [2022-04-07] (MICRO-STAR INTERNATIONAL CO., LTD) [Startup Task]
Epson Print and Scan -> C:\Program Files\WindowsApps\SEIKOEPSONCORPORATION.EpsonPrintandScan_1.1.0.0_x64__ezaqdwkaef94e [2021-08-12] (SEIKO EPSON CORPORATION)
Fitbit -> C:\Program Files\WindowsApps\Fitbit.Fitbit_2.44.1997.0_x64__6mqt6hf9g46tw [2021-03-07] (Fitbit)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-01-06] (Microsoft Corporation)
GoPro Player -> C:\Program Files\WindowsApps\GoPro.GoProPlayer_2.0.8.0_x64__1h9vz9xjm6b8c [2022-05-21] (GoPro)
Huetro for Hue -> C:\Program Files\WindowsApps\27078NielsLaute.HuetroforHue_7.5.5.0_x64__91se88q2mhfz2 [2022-04-07] (NielsLaute)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-31] (Microsoft Corporation)
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.12.5120.0_x64__8wekyb3d8bbwe [2022-05-18] (Microsoft Studios) [MS Ad]
Nahimic -> C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm [2022-05-04] (A-Volute)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-16] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-05-25] (NVIDIA Corp.)
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.99.0_x64__pwbj9vvecjh7j [2022-05-25] (Amazon Development Centre (London) Ltd)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0 [2022-05-28] (Spotify AB) [Startup Task]
WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2218.8.0_x64__cv1g1gvanyjgm [2022-05-30] (WhatsApp Inc.)
Xbox Zubehör -> C:\Program Files\WindowsApps\Microsoft.XboxDevices_300.2202.25001.0_x64__8wekyb3d8bbwe [2022-03-10] (Microsoft Corporation)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\SteMu\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\SteMu\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute)
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{a3d7e084-b0df-4d14-8e0a-27a572a6332c}\localserver32 -> "C:\Program Files\Sony\Imaging Edge Desktop\ied.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-2450881772-3334122637-3429325221-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\SteMu\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20244.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\SteMu\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_7ad37590e62d4afc\nvshext.dll [2022-05-21] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2019-02-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\McAfee\MSC\McCtxMenuFrmWrk.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers1_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5_.DEFAULT: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\22.099.0508.0001\FileSyncShell64.dll [2022-06-02] (Microsoft Corporation -> Microsoft Corporation)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2022-05-04 12:15 - 2022-05-04 12:15 - 020785152 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\A-Volute.Nahimic_1.9.8.0_x64__w2gh52qy24etm\Nahimic3.dll
2021-03-07 01:55 - 2018-11-15 15:08 - 002200784 _____ (Dexin Corp -> MICRO-STAR INTERNATIONAL) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\IcMSIDll.dll
2021-03-07 01:53 - 2021-03-07 01:53 - 002972368 _____ (Dexin Corp -> MICRO-STAR INTERNATIONAL) [Datei ist nicht signiert] C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.DragonCenter_2.0.121.0_x64__kzh8wxbdkxb8p\DCv2\Device\GM6070\IcMSIDll.dll
2021-03-06 21:46 - 2019-02-21 18:00 - 000078336 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2021-03-07 01:55 - 2018-08-31 08:26 - 000053760 _____ (MS) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\MsIo32_Galax.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll
2021-03-07 20:29 - 2021-03-07 20:28 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2021-10-15 13:48 - 2021-03-07 20:28 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll
2021-12-23 22:08 - 2016-10-04 05:43 - 000399872 _____ (TODO: <公司名稱>) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\SDKDLL.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2022-04-07] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2022-03-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_281\bin\jp2ssv.dll [2021-03-06] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\McAfee\MSC\McSnIePl64.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\MSC\McSnIePl.dll [2021-01-20] (McAfee, LLC -> McAfee, LLC)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-03-19 06:49 - 2019-03-19 06:49 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Oculus\Support\oculus-runtime;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\WINDOWS\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Users\SteMu\AppData\Local\Microsoft\WindowsApps
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\SteMu\Desktop\Kamera_Sony\Auswahl\MINI\vom 09.04.2022\Insta\JPG\SW_insta_DSC2221.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\StartupFolder: => "ROCCAT Swarm Monitor.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Imaging Edge Desktop.lnk"
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKLM\...\StartupApproved\Run32: => "RazerCortex"
HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"
HKLM\...\StartupApproved\Run32: => "Spectrum"
HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Synapse3"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Samsung DeX"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Update Plus Player"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Opera GX Browser Assistant"
HKU\S-1-5-21-2450881772-3334122637-3429325221-1001\...\StartupApproved\Run: => "Bloom"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{27D89E85-50B0-4CFA-BCF3-AE66BE323B0E}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{CBF8A30C-6146-4105-A075-9E807BE61586}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB)
FirewallRules: [{831BD685-C3FC-4AD8-AC35-ECEBF2F0E689}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{1D76AC2F-E135-401B-B163-D398BE864D37}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )
FirewallRules: [{EB4CDFE2-0998-4CDD-A75F-B2860DE560B8}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{E0ED1B28-545F-463D-8F39-614CE98245B9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )
FirewallRules: [{2FC80D7F-D909-4D12-BEBA-B777EEFE6A72}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{A4013447-B23B-4D30-9E3D-E0B71D7A93B4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{CA9A7972-E80D-4DCC-964E-632BA73A46A8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG Sp. z o.o. -> GOG.com)
FirewallRules: [{6EE0117F-ACAC-42AA-8A09-210982758C5D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG Sp. z o.o. -> GOG.com)
FirewallRules: [{81E6592D-22B7-45A7-A63B-744E43C20292}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{5C547752-E19C-4AEA-A830-EA0C01352948}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{29344FC7-848F-4FB6-BA8B-A0FFD61FC3DA}] => (Allow) E:\origin\SHIFT 2 UNLEASHED\shift2u.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{B648D820-E832-42AE-8ED7-46FEF8D97D90}] => (Allow) E:\origin\SHIFT 2 UNLEASHED\shift2u.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{190F3AB8-73E2-41BB-9C06-FF911468C7B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CA60BE08-5E64-4FFF-8E5B-7F76EEE18355}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{22AB4FFF-592D-41DB-A5D4-BBF35E124C68}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{55011896-0E3E-4D22-A448-8F83E1404D1F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.68.96.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{55EE64FA-B72E-4887-AB93-4807AD37CCD5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{59CE0641-2873-40DB-A473-60DAFB6E249E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{CBDD761D-B76A-4E3C-8321-A264FE9DF62F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{1E151A0F-A6A3-4568-8569-BA7729DD72AD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{32BB487C-E3CD-404C-9D72-86441260BA45}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{30F76363-FDF2-4EC1-8898-2BD7660EC0B7}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FDDB741E-49DF-4487-AA7A-E5ACFE726BF7}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{F78650DE-D132-445D-A4D3-25D187CFE3F1}] => (Allow) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{F7C64DD7-6563-469C-AE4F-4119765DDFB9}] => (Allow) C:\Program Files (x86)\Common Files\Mcafee\MMSSHost\MMSSHost.exe (McAfee, LLC -> McAfee, LLC)
FirewallRules: [{01198E82-20A0-4729-BC15-BBD23A07372B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{40107B29-0310-4FED-BE5C-D05EB5FB4B5B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{F42DD2AF-884B-441A-A9F5-D3961F381BBE}C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{13F5A012-275F-4EF8-90DB-AD085AAFF0BB}C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) C:\users\stemu\desktop\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [{378E5988-B72A-4C60-BBC0-4F85D446A26D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{FA7BB1D3-F9CC-4F88-A4D6-DD6F7CFC917C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{BE255135-E132-464E-B183-147AC99663D1}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{C51804B6-1DA0-47E5-AE5A-ADB70DA66D4B}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{03A0C3FB-85B5-45C8-8080-34736F58C89F}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64Vk\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{A1967D45-BB61-41A2-BC9D-AFC495B58320}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x64Vk\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{65C73F76-4B7A-4816-BD77-1DB758AB2346}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x86\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{9BEE0879-FB0D-4A05-9F27-4EB023B34E0A}] => (Allow) E:\SteamLibrary2\steamapps\common\Hades\x86\Hades.exe () [Datei ist nicht signiert]
FirewallRules: [{2D0C7FFD-D14C-4756-B68F-13A3CA7BAC36}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{294F7FD4-4B96-4423-B917-18A14450DB49}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{E24D0C4C-9A2A-4461-BF66-38C36E963E0C}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [{37B54C28-268E-42B5-BF50-FE19BA102AFD}] => (Allow) E:\SteamLibrary2\steamapps\common\F1 2020\F1_2020.exe (Codemasters Software Company Limited) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{EEBFAEC0-53FE-4B94-AF5C-FD072982FBE3}C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe] => (Allow) C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe => Keine Datei
FirewallRules: [UDP Query User{FD41CE3A-F4E9-4589-ACBD-3BC5B110600B}C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe] => (Allow) C:\users\stemu\downloads\neuer ordner\neuer ordner (3)\gspot master\g-spot-master.exe => Keine Datei
FirewallRules: [TCP Query User{0DA68740-FF2C-4096-AD5A-E4A35E375851}H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{004E59AD-864D-40D2-9DB5-1C7F2752E6E9}H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe] => (Allow) H:\neuer ordner (3)\vizonica_v0.22e_by_rizgames\vizonica\binaries\win64\vizonica-win64-shipping.exe => Keine Datei
FirewallRules: [{532694F7-ED10-46BD-89C1-7DFA8CE3B485}] => (Allow) C:\Program Files (x86)\Ubisoft\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [TCP Query User{F495D941-8698-4CAC-AE44-B7AFD0F07759}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{7597D4B1-08C3-4DFC-A0B7-3150A7E5552E}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{689F68BF-7A0E-4AFA-895F-25DC40A87E2E}D:\0\_02\25-\elritclover\app.exe] => (Allow) D:\0\_02\25-\elritclover\app.exe => Keine Datei
FirewallRules: [UDP Query User{0FC57338-B45A-402C-9106-F3EB2AC398AA}D:\0\_02\25-\elritclover\app.exe] => (Allow) D:\0\_02\25-\elritclover\app.exe => Keine Datei
FirewallRules: [TCP Query User{EA9ED269-9024-43DC-8FD1-54BB24C1A057}C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe] => (Allow) C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E1802155-9994-4612-929B-512916B90CED}C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe] => (Allow) C:\program files\oculus\software\software\hyperbolic-magnetism-beat-saber\beat saber.exe () [Datei ist nicht signiert]
FirewallRules: [{E1F1CC0B-43A0-4BDB-BD8A-1E95AE45BD45}] => (Allow) E:\SteamLibrary2\steamapps\common\Forts\Forts.exe (EarthWork Games Pty Ltd -> )
FirewallRules: [{51CA02AB-08E7-4877-9A40-C7C7ADF80223}] => (Allow) E:\SteamLibrary2\steamapps\common\Forts\Forts.exe (EarthWork Games Pty Ltd -> )
FirewallRules: [{CDB56E25-87B1-4963-B2F9-46B5E5E930EE}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\mcclauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{3AA536A0-8587-41FF-AC68-A1EBA4AAA782}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\mcclauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{2AADE91B-7D43-448E-82CB-12595AE4684D}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\MCC\Binaries\Win64\MCC-Win64-Shipping.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{9E3B3064-67DA-4930-B156-F0ED3CB5B0AB}] => (Allow) E:\SteamLibrary2\steamapps\common\Halo The Master Chief Collection\MCC\Binaries\Win64\MCC-Win64-Shipping.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{1A6FD18D-009F-45FC-8BAF-714E9BC69BC4}] => (Allow) E:\SteamLibrary2\steamapps\common\Sid Meier's Civilization VI\2KLauncher\LauncherPatcher.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [{8936435A-F697-460A-AC82-47D663E0FAEE}] => (Allow) E:\SteamLibrary2\steamapps\common\Sid Meier's Civilization VI\2KLauncher\LauncherPatcher.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{B2E0B638-C102-43AE-AD70-90FA1B976A44}C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe => Keine Datei
FirewallRules: [UDP Query User{DA0476B7-0D49-493A-8FB6-546C6164F9E2}C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner\datejournal\datejournal.exe => Keine Datei
FirewallRules: [TCP Query User{F2C85D79-9738-4E06-A956-3176838A0D1E}C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [UDP Query User{DA89A261-F5D8-4391-8973-1E71E9F2E036}C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) C:\users\stemu\downloads\neuer ordner\neuer ordner (4)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [TCP Query User{5DB6DB68-992A-4484-9E40-A3B21653C568}D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe] => (Block) D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe => Keine Datei
FirewallRules: [UDP Query User{EC408871-7628-42DE-899D-5C49AE3AF7BC}D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe] => (Block) D:\0\_01\25\jerez's arena [v1.0.16] [eternal alice]\jerez's arena\jerez'sarena.exe => Keine Datei
FirewallRules: [TCP Query User{171EF606-4960-4C50-857E-E8508BA770AA}D:\0\_01\40\escapedungeon\escapedungeon.exe] => (Block) D:\0\_01\40\escapedungeon\escapedungeon.exe => Keine Datei
FirewallRules: [UDP Query User{6C8401DA-774D-4010-98C4-746641CD53E3}D:\0\_01\40\escapedungeon\escapedungeon.exe] => (Block) D:\0\_01\40\escapedungeon\escapedungeon.exe => Keine Datei
FirewallRules: [TCP Query User{72241E99-72CD-44D6-BE48-1228AE7FB121}D:\0\_01\80\midsummer\midsummer.exe] => (Block) D:\0\_01\80\midsummer\midsummer.exe => Keine Datei
FirewallRules: [UDP Query User{DAA7623E-45BD-4965-A7EC-5AAFC4311880}D:\0\_01\80\midsummer\midsummer.exe] => (Block) D:\0\_01\80\midsummer\midsummer.exe => Keine Datei
FirewallRules: [TCP Query User{6693DC47-722D-4897-9AD1-5EA5B05DE12D}D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe] => (Block) D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe => Keine Datei
FirewallRules: [UDP Query User{4791D2D6-F206-421D-9B28-1A1A77432441}D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe] => (Block) D:\0\_04\neuer ordner (8)\datejournal\datejournal.exe => Keine Datei
FirewallRules: [TCP Query User{E19E2410-D801-4B4C-BF71-4197813CAE39}D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [UDP Query User{1FB78A77-EDC0-457B-A43B-E9057A9F6F22}D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe] => (Block) D:\0\_04\neuer ordner (5)\otaku's rage waifu strikes back\otaku's rage.exe => Keine Datei
FirewallRules: [TCP Query User{1FD38A02-5ACB-4B5F-A97D-D20F53F076E8}D:\0\_03\neuer ordner (12)\elritclover\app.exe] => (Block) D:\0\_03\neuer ordner (12)\elritclover\app.exe => Keine Datei
FirewallRules: [UDP Query User{AB8FA77A-10E1-4308-97F7-4CC2EBB29BB0}D:\0\_03\neuer ordner (12)\elritclover\app.exe] => (Block) D:\0\_03\neuer ordner (12)\elritclover\app.exe => Keine Datei
FirewallRules: [TCP Query User{D9FDA407-1C34-4F5B-8800-F5F7045CEEEA}D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe] => (Block) D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe => Keine Datei
FirewallRules: [UDP Query User{89B48EA9-C2A4-4291-B9BC-360EDFE4A87D}D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe] => (Block) D:\0\_03\neuer ordner\the.suffering.of.larina\the suffering of larina\engine\binaries\win64\ue4game.exe => Keine Datei
FirewallRules: [TCP Query User{4D2AF492-1B55-4305-A536-5C53AE89E283}C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe] => (Block) C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [UDP Query User{1F3446AC-AA6E-4A18-85B5-EE99987EA930}C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe] => (Block) C:\program files (x86)\steam\steamapps\common\steamvr\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [{4B0B517C-E36B-4C0D-8DCB-965E946B4D86}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{449DE480-7990-41F9-A1C2-04D71A057996}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{39BA714D-E192-4E8E-8657-73A435F09758}] => (Allow) E:\SteamLibrary2\steamapps\common\Subnautica\Subnautica.exe () [Datei ist nicht signiert]
FirewallRules: [{76113DD7-4380-4D8A-84FA-FD2C8F751653}] => (Allow) E:\SteamLibrary2\steamapps\common\Subnautica\Subnautica.exe () [Datei ist nicht signiert]
FirewallRules: [{D6FA12FA-A69C-4E38-88CE-A26B33143121}] => (Allow) C:\Program Files (x86)\GoPro\GoPro Webcam\GoPro Webcam.exe => Keine Datei
FirewallRules: [{D5AF52F1-96B8-4666-89FE-11194B509CEB}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [{086AB0C4-EDA2-4D38-BBE4-E4F636AA7596}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [{C537E9B4-1108-4CF0-B092-D3D03AC8F989}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{CB9245B4-6437-4223-8CEE-FA8FCAF801C9}] => (Allow) E:\SteamLibrary2\steamapps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{D7DF18D6-5CF5-4F5A-9178-B2C906E03124}] => (Allow) E:\SteamLibrary2\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{119BEC8D-9B38-49F9-882E-1B2702482AF9}] => (Allow) E:\SteamLibrary2\steamapps\common\Cities_Skylines\dowser.exe (Paradox Interactive AB (publ) -> )
FirewallRules: [{1387E2A0-E570-4404-897C-7A1F69B3258E}] => (Allow) E:\SteamLibrary2\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{DB25DDAB-49CB-4E4E-96DC-1BBC5F16BF30}] => (Allow) E:\SteamLibrary2\steamapps\common\Company of Heroes 2\RelicCoH2.exe (RELIC ENTERTAINMENT, INC. -> Relic Entertainment Inc.)
FirewallRules: [{AC3BA4A6-DE31-41B3-9E17-485E233B9667}] => (Allow) E:\SteamLibrary2\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{8FD9A268-B669-404A-8876-C4091D43013F}] => (Allow) E:\SteamLibrary2\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{90B8A9E2-A3D2-492B-B4D6-971CCEDA609E}C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe => Keine Datei
FirewallRules: [UDP Query User{A1975813-67AA-4D29-8F6E-CBD4D075BDBA}C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (5)\succubuscafe\succubuscafe.exe => Keine Datei
FirewallRules: [{8E708F15-3004-4F65-BA8D-9354CA4EAD7E}] => (Allow) E:\SteamLibrary2\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{1873E62E-E8FF-4145-9B24-5CA2C4894B4E}] => (Allow) E:\SteamLibrary2\steamapps\common\Frostpunk\Frostpunk.exe (11 bit studios S.A.) [Datei ist nicht signiert]
FirewallRules: [{325266B6-BED5-487A-BCE8-5E0F631C2585}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{4B0B98C6-922A-4E89-9C41-C46FBE899E62}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRRedir.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{2E04C337-DD44-47A7-BCE4-5542BF18E78D}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{0E9CC60D-C375-443F-982B-EEE0617A151D}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServer_x64.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{15A35F1D-2B33-4253-8517-5AA1884030C4}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{E2E162F5-B65B-46A4-B913-6D5C310E73C5}] => (Allow) C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe (Oculus VR, LLC -> Facebook Technologies, LLC)
FirewallRules: [{E75CFD0D-F7B7-435A-BF64-2692CC3A9A5A}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Oculus VR, LLC -> )
FirewallRules: [{E5586DD3-E145-48D5-B838-41776E383EA2}] => (Allow) C:\Program Files\Oculus\Support\oculus-dash\dash\bin\OculusDash.exe (Oculus VR, LLC -> )
FirewallRules: [{F803968D-0434-4541-A126-7D5391A7644D}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{F46B7FC0-CCDC-4035-98A1-76CFD7EF14B3}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{E0CDC248-3601-4FFA-961D-9BF122054C49}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe (Oculus VR, LLC -> Epic Games, Inc.)
FirewallRules: [{4717C4E3-7187-4F57-9182-F4CC96250278}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Home2\Binaries\Win64\Home2-Win64-Shipping.exe (Oculus VR, LLC -> Epic Games, Inc.)
FirewallRules: [{3BDEE3C4-4F2D-43BB-AEFE-82F1FD7CAC29}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{5B4DC059-6CAD-4EF8-ADDE-9011AE66DBBD}] => (Allow) C:\Program Files\Oculus\Support\oculus-worlds\Engine\Binaries\Win64\UnrealCEFSubProcess.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{641C413B-A045-4889-AAFA-D110A589B739}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe (Oculus VR, LLC) [Datei ist nicht signiert]
FirewallRules: [{11E29CF3-AA0F-4361-8B1A-C4F4562CCC88}] => (Allow) C:\Program Files\Oculus\Support\oculus-client\OculusClient.exe (Oculus VR, LLC) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{F911DFBF-64D3-43D7-81F8-A06EA952F7A4}C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe => Keine Datei
FirewallRules: [UDP Query User{7FE5DB1B-2354-4A47-9614-EF51F1762D85}C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (3)\holyknightricca(demo)_210917\game\holyknightricca_demo.exe => Keine Datei
FirewallRules: [TCP Query User{0B6884A1-AE74-4797-9256-719D5A96C166}C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe => Keine Datei
FirewallRules: [UDP Query User{6F20D371-E53E-4E8D-AFF7-97630860AE03}C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe] => (Block) C:\users\stemu\downloads\neuer ordner g\neuer ordner (15)\succubus hunt for meal\succubus_hunt_for_meal_clean.exe => Keine Datei
FirewallRules: [TCP Query User{A506E202-3E27-4EB8-8125-33A8587B97CF}C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe => Keine Datei
FirewallRules: [UDP Query User{842CC649-79C3-4DFE-A38B-C2B1766528DB}C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (18)\adorable witch 2\adorablewitch2.exe => Keine Datei
FirewallRules: [{C306DE98-634B-42D1-A19D-C8A582CB756A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Halo Infinite\HaloInfinite.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{658E62DB-C09D-48AD-BD29-1343FE33FF92}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Halo Infinite\HaloInfinite.exe (343 Industries (Microsoft Corporation) -> Microsoft Corporation)
FirewallRules: [{8F11A758-F2BF-457D-874A-2BDFAA2F47EA}] => (Allow) E:\SteamLibrary2\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc)
FirewallRules: [{0AE02A77-5D1C-48B3-8082-0EB5AE16E0C1}] => (Allow) E:\SteamLibrary2\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc)
FirewallRules: [TCP Query User{D77AD6DD-3483-406F-927C-BB73CD3D9BBC}C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{EC896965-29B8-4752-A5CF-8B4FEEF2648C}C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe] => (Allow) C:\users\stemu\downloads\neuer ordner g\neuer ordner (4)\cute honey bunny girl\cute honey bunny girl\cutehoneybunnygirl\binaries\win64\cutehoneybunnygirl-win64-shipping.exe => Keine Datei
FirewallRules: [{3FA605A1-FCEA-4BB5-9282-19A0CCE593E8}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{B5D3D976-28A4-49F0-B236-9619D930D5C9}] => (Allow) C:\Program Files (x86)\Samsung\Samsung DeX\SamsungDeX.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{2232BF50-C2BF-4962-96AC-1CCAD359638E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\ui32.exe (Skutta, Kristjan -> )
FirewallRules: [{3E7E67FF-0F68-4BFA-A525-25AED24DD333}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\ui32.exe (Skutta, Kristjan -> )
FirewallRules: [{637E01AD-26FE-495F-8F65-2701F1898828}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Neon Abyss\NeonAbyss.exe () [Datei ist nicht signiert]
FirewallRules: [{BB05ECEF-CC90-4F59-959B-00B0911669C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Neon Abyss\NeonAbyss.exe () [Datei ist nicht signiert]
FirewallRules: [{94C1494F-74F1-4853-AF63-70E23F2E5BCC}] => (Allow) E:\uplay\Anno 2205\Bin\Win64\Anno2205.exe (Blue Byte GmbH -> Ubisoft)
FirewallRules: [{1CA55264-D690-4C96-A32E-C9DE25656DC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Foundation\foundation.exe (Polymorph Games) [Datei ist nicht signiert]
FirewallRules: [{2D320FE5-0E05-40F0-A828-28B159F58FD9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Foundation\foundation.exe (Polymorph Games) [Datei ist nicht signiert]
FirewallRules: [{5F1623AA-36E6-476A-AD69-42AFA35F4513}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{553EBF20-24B4-45DB-ACF1-D26CA13F26C3}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6FCED8C6-8036-44B8-BD9B-EE92622ED8D7}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{633BE488-612B-4318-B5ED-6B77AB7B55AE}D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe] => (Allow) D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe => Keine Datei
FirewallRules: [UDP Query User{8D91F7C8-4168-4677-B53F-9BC7FDDCF43D}D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe] => (Allow) D:\neuer ordner g\neuer ordner (11)\lockdownlewdup\lolu.exe => Keine Datei
FirewallRules: [{D164AECF-CBE6-48ED-A314-4E15AB3EF202}] => (Allow) E:\SteamLibrary2\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) [Datei ist nicht signiert]
FirewallRules: [{7D870EAE-02FD-4ED9-A64F-680DE2EE42FA}] => (Allow) E:\SteamLibrary2\steamapps\common\the witcher 2\Launcher.exe (CD Projekt RED) [Datei ist nicht signiert]
FirewallRules: [{CBB2BED3-8E3C-4858-95F8-6FCDF6D321B9}] => (Allow) E:\SteamLibrary2\steamapps\common\SubnauticaZero\SubnauticaZero.exe () [Datei ist nicht signiert]
FirewallRules: [{D4FA8492-4F6C-4589-9667-9DFDC862E37F}] => (Allow) E:\SteamLibrary2\steamapps\common\SubnauticaZero\SubnauticaZero.exe () [Datei ist nicht signiert]
FirewallRules: [{BB8B8D1F-139C-4F51-A49B-389176CC34ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{819BA527-594E-4348-B8ED-227E59116B42}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [TCP Query User{337C4C1A-FB9B-452A-93A9-A2955D00EFB9}H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe] => (Block) H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe => Keine Datei
FirewallRules: [UDP Query User{A7B547A1-F9A4-4380-91CD-5B534D0E0C44}H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe] => (Block) H:\neuer ordner g\neuer ordner\onlyfuck - ruru's adventures test\onlyfuck - ruru's adventures.exe => Keine Datei
FirewallRules: [TCP Query User{D1808664-E481-4387-900D-9EFDF37B2800}G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe] => (Block) G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{64217669-1936-4CA3-80DC-604E6324C93B}G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe] => (Block) G:\g\neuer ordner (3)\engine\binaries\win32\ue4game-win32-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{0B823868-74D4-4778-B24E-7FE3228B84BC}G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe] => (Block) G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe => Keine Datei
FirewallRules: [UDP Query User{4A4F4F0E-2BE8-41F2-A89C-B8BDE3A798FB}G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe] => (Block) G:\g\neuer ordner (2)\sorceresstale\binaries\win64\sorceresstale.exe => Keine Datei
FirewallRules: [{B385F106-07C1-421D-AB6D-03C0EAED0B68}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{3D207969-A13F-42A5-9164-61DEDF31984B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{2739595E-AFA0-4184-BC93-0C2E5152795A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{844613D5-CAF2-4722-8C9B-9456733DE63C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{316F72D2-B23F-4D9D-9570-D12A9EB391C8}C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [UDP Query User{9EEAF25D-4AA6-43A8-8F83-621E9047E04A}C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe] => (Allow) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{0C846FE2-2367-4B5C-93F8-068601B063CC}] => (Block) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{87D924C4-D73E-4C0F-BF0C-7C8C6381B6C6}] => (Block) C:\users\stemu\appdata\local\discord\app-1.0.9004\discord.exe (Discord Inc. -> Discord Inc.)
FirewallRules: [{0FA936C1-B238-4FF4-9D79-3BDA963A67F5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Alyx\game\bin\win64\hlvr.exe (Valve -> )
FirewallRules: [{8D5F284B-14AB-4490-A65C-688A6E7E2C25}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life Alyx\game\bin\win64\hlvr.exe (Valve -> )
FirewallRules: [{8B8CE640-4840-4D1A-BB7F-29524BF5CBA5}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A883831C-89F9-4757-AD8A-D69267ED7A6C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{AE3C6381-F470-45F5-8922-6D6DD6CA5280}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DA977AB-22A4-4DAF-9FBC-4CD88C5FFAD0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4F4914E9-3297-4224-9A97-D7EA904B0046}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3294EBDE-AFF4-47A9-B94D-048F1AC43EA0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{50014B3F-4CDE-4619-9A99-322B132C75B7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{D7A74222-5731-4FE4-BE9C-842EEF5B9AC3}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.186.857.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{E5629B03-4258-4185-9352-9F3972992B0C}] => (Allow) LPort=32682

==================== Wiederherstellungspunkte =========================

25-05-2022 19:59:39 Geplanter Prüfpunkt
01-06-2022 16:25:09 Removed RGSS-RTP Standard
01-06-2022 16:25:30 Removed RGSS-RTP Standard

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: NBW1001 A2DP SNK
Description: Microsoft Bluetooth A2dp-Senke
Class Guid: {4d36e96c-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: BthA2dp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (06/01/2022 04:27:00 PM) (Source: MsiInstaller) (EventID: 11721) (User: MASTER-PC-STEFA)
Description: Product: RGSS-RTP Standard -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _28CDB486_34DB_4675_A77B_AA0908059BA7, location: C:\Users\SteMu\Downloads\Neuer Ordner G\Neuer Ordner (8)\Inst\Graphics.exe, command: /Uninstall

Error: (06/01/2022 04:25:25 PM) (Source: MsiInstaller) (EventID: 11721) (User: MASTER-PC-STEFA)
Description: Product: RGSS-RTP Standard -- Error 1721. There is a problem with this Windows Installer package. A program required for this install to complete could not be run. Contact your support personnel or package vendor. Action: _28CDB486_34DB_4675_A77B_AA0908059BA7, location: C:\Users\SteMu\Downloads\Neuer Ordner G\Neuer Ordner (8)\Inst\Graphics.exe, command: /Uninstall

Error: (06/01/2022 03:07:33 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AvastUI.exe, Version: 22.5.7263.0, Zeitstempel: 0x628cc030
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1706, Zeitstempel: 0x458acb5b
Ausnahmecode: 0xe06d7363
Fehleroffset: 0x0000000000034fd9
ID des fehlerhaften Prozesses: 0x40e8
Startzeit der fehlerhaften Anwendung: 0x01d875b869d0bf2f
Pfad der fehlerhaften Anwendung: C:\Program Files\Avast Software\Avast\AvastUI.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: 1e32d805-8c86-49eb-8079-2fb46940a598
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (06/01/2022 01:07:30 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/31/2022 10:42:47 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/31/2022 10:38:16 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: AvastUI.exe, Version: 22.5.7263.0, Zeitstempel: 0x628cc030
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1706, Zeitstempel: 0x458acb5b
Ausnahmecode: 0xe06d7363
Fehleroffset: 0x0000000000034fd9
ID des fehlerhaften Prozesses: 0x47c4
Startzeit der fehlerhaften Anwendung: 0x01d8752e36bfe96c
Pfad der fehlerhaften Anwendung: C:\Program Files\Avast Software\Avast\AvastUI.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: 992ef3ad-9f5f-4ad0-bd30-a265a9a80b4a
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (05/31/2022 07:25:04 PM) (Source: OVRServiceLauncher) (EventID: 0) (User: )
Description: Event-ID 0

Error: (05/31/2022 06:31:49 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe". Fehler in Manifest- oder Richtliniendatei "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" in Zeile 0.
Ungültige XML-Syntax.


Systemfehler:
=============
Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:17 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:16 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.

Error: (06/01/2022 08:02:16 PM) (Source: disk) (EventID: 7) (User: )
Description: Fehlerhafter Block bei Gerät \Device\Harddisk0\DR0.


Windows Defender:
================
Date: 2022-06-02 18:01:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.910.0, AS: 1.367.910.0, NIS: 1.367.910.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-06-01 20:09:30
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {E3AF7AAE-B82F-4297-992A-0864918C2BA7}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2022-06-01 19:31:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.837.0, AS: 1.367.837.0, NIS: 1.367.837.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-06-01 18:41:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.837.0, AS: 1.367.837.0, NIS: 1.367.837.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

Date: 2022-06-01 17:51:48
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=TrojanDownloader:Win32/ChromeLoader.A&threatid=2147819672&enterprise=0
Name: TrojanDownloader:Win32/ChromeLoader.A
Schweregrad: Schwerwiegend
Kategorie: Downloadtrojaner
Pfad: amsi:_\Device\HarddiskVolume2\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: AMSI
Benutzer: MASTER-PC-STEFA\SteMu
Prozessname: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Sicherheitsversion: AV: 1.367.837.0, AS: 1.367.837.0, NIS: 1.367.837.0
Modulversion: AM: 1.1.19200.6, NIS: 1.1.19200.6

CodeIntegrity:
===============
Date: 2022-06-01 20:09:30
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2022-05-31 18:58:43
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.

Date: 2022-05-31 18:27:33
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume2\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2022-05-31 18:27:32
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Avast Software\Avast\AvastSvc.exe) attempted to load \Device\HarddiskVolume2\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1.B0 11/08/2019
Hauptplatine: Micro-Star International Co., Ltd. B450 GAMING PRO CARBON AC (MS-7B85)
Prozessor: AMD Ryzen 7 2700X Eight-Core Processor 
Prozentuale Nutzung des RAM: 25%
Installierter physikalischer RAM: 32717.17 MB
Verfügbarer physikalischer RAM: 24328.95 MB
Summe virtueller Speicher: 37581.17 MB
Verfügbarer virtueller Speicher: 26853.86 MB

==================== Laufwerke ================================

Drive c: (M.2_1) (Fixed) (Total:930.95 GB) (Free:191.04 GB) (Model: SanDisk Extreme Pro 1TB) NTFS
Drive e: (SSD_2) (Fixed) (Total:931.51 GB) (Free:495.45 GB) (Model: SanDisk SSD PLUS 1000GB) NTFS
Drive f: (SSD_1) (Fixed) (Total:930.95 GB) (Free:247.89 GB) (Model: SanDisk SSD PLUS 1000GB) NTFS
Drive g: (M.2_2) (Fixed) (Total:465.76 GB) (Free:465.55 GB) (Model: SanDisk Extreme Pro 500GB) NTFS

\\?\Volume{83da91a0-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:0.57 GB) (Free:0.53 GB) NTFS
\\?\Volume{05673095-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.57 GB) (Free:0.1 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 83DA91A0)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: CF86942C)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 05673095)
Partition 1: (Active) - (Size=579 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=930.9 GB) - (Type=07 NTFS)

==========================================================
Disk: 3 (MBR Code: Windows 7/8/10) (Size: 465.8 GB) (Disk ID: C87B859B)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================

cosinus · 02.06.2022, 17:55

Zitat:

Zitat von Sterrare

habe alles wie empfohlen durchgeführt. Auch wenn ich die Programme schon seit Jahren auf dem PC besitze und direkt vom Entwickler bezogen habe.
Das Problem, bzw der Trojaner, ist immer noch da und macht sich wie vorher genauso bemerkbar, sprich es öffnet sich kurz ein schwarzes Fenster während Windows den Trojaner erkennt und in die Quarantäne steckt.

Es wurde ja auch nicht geschrieben, dass diese Programme die Ursache für deinen (angeblichen) Trojaner und dass nach der Deinstallation alle Probleme weg seien. Es ist halt ein Schritt von vielen. Und wenn ich unnötige bis kontraproduktive Programme sehe, werden die zuerst deininstalliert. Wo wir von deinstallieren reden:

Zitat:

C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, Inc. -> McAfee, LLC) C:\Windows\System32\mfevtps.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\MMSSHost\MMSSHOST.exe
(C:\Program Files\Common Files\McAfee\SystemCore\mfemms.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\Common Files\McAfee\ModuleCore\ProtectedModuleHost.exe

Wieso ist dieses Geraffel von McAfee noch drauf? Wie kommt das da überhaupt drauf? UMGEHEND deinstallieren. Womöglich brauchst du dafür https://winfuture.de/downloadvorschalt,3670.html

Sterrare · 02.06.2022, 18:33

Moin, ich wollte nur den aktuellen Stand berichten. Nach den Ablauf des McAfee Abos ist bei der deinstallation wohl etwas schief gelaufen, weswegen dies im Hintergrund noch drauf ist. Allerdingst schaffe ich es nicht dieses "Fragment" zu deinstallieren. Das von dir
empfohlenden Tool kann die Deinstallation leider auch nicht abschließen. Kann dir das Ergebnis (Logfile) davon posten, wenn es dir hilft.

cosinus · 02.06.2022, 18:37

Dann wirst du McAfee nicht mehr sauber von diesem Rechner bekommen und solltest daher eine komplette Neuinstallation in Betracht ziehen.

Sterrare · 02.06.2022, 18:45

Werde ich wohl auch wegen dem Trojaner in betracht ziehen müssen, ich habe nur die sorge das er sich vielleicht auf einer anderen Festplatte befindet.
by the way: Während unserer Unterhaltung hat windows zweimal den Trojaner blockiert.
Wenn ich mir den Schutzverlauf so ansehe, geschieht das echt fast genau stündlich.

cosinus · 02.06.2022, 19:05

Den Schädling kriegen wir bestimmt weg, aber das macht bei diesem System so keinen Sinn mehr. So ein Schrott wie von Norton, Kaspersky und am schlimmsten McAfee sind bei Deinstallationen hartnäckiger als Malware. McAfee ist besonders negativ in Erinnerung geblieben weil eigentlich immer MCPR benutzt werden musste und dieses Tool auch oft scheiterte.

Wir können aber versuchen die Reste mit FRST zu entfernen.

Sterrare · 02.06.2022, 19:09

Habe dazu die selbe Meinung.

Was muss ich nun machen?

02.06.2022, 18:37	#12
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	"stündlich" ein Trojaner und Powershell öffnet sich immer automatisch Dann wirst du McAfee nicht mehr sauber von diesem Rechner bekommen und solltest daher eine komplette Neuinstallation in Betracht ziehen. __________________ Logfiles bitte immer in CODE-Tags posten

"stündlich" ein Trojaner und Powershell öffnet sich immer automatisch

Log-Analyse und Auswertung: "stündlich" ein Trojaner und Powershell öffnet sich immer automatisch