| |
| |||||||
Log-Analyse und Auswertung: Rogue Killer FundWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
17.06.2022, 22:25
| #1 |
 |  Rogue Killer Fund Hallo Trojaner-Board Team, bei einem Durchlauf mit Rogue Killer wurden gleich drei Dateien gefunden und als "(PUP) potentiell bösartig" aufgelistet. Code:
ATTFilter Program : RogueKiller Anti-Malware
Version : 15.5.3.0
x64 : Yes
Program Date : Jun 13 2022
Location : C:\Program Files\RogueKiller\RogueKiller64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.19043) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : K21
User is Admin : Yes
Date : 2022/06/17 17:44:22
Type : Removal
Aborted : No
Scan Mode : Standard
Duration : 1335
Found items : 3
Total scanned : 83306
Signatures Version : 20220613_075625
Truesight Driver : Yes
Updates Count : 3
Arguments : -minimize
************************* Warnings *************************
************************* Removal *************************
[PUP.MailRU (Potenziell bösartig)] HKEY_USERS\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\GameCenter -- -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.MailRU
[+] Name : HKEY_USERS\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\GameCenter
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 0
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.MailRU (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{C7CDE234-BBCF-42CC-A86F-BDD772EDBADB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe -- [%localappdata%\gamecenter\gamecenter.exe] -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.MailRU
[+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{C7CDE234-BBCF-42CC-A86F-BDD772EDBADB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe
[+] value : [%localappdata%\gamecenter\gamecenter.exe]
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 1
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.MailRU (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{AAECA656-9560-427B-AF19-9A757F0EEBDB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe -- [%localappdata%\gamecenter\gamecenter.exe] -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.MailRU
[+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{AAECA656-9560-427B-AF19-9A757F0EEBDB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe
[+] value : [%localappdata%\gamecenter\gamecenter.exe]
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 2
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2022
durchgeführt von K21 (Administrator) auf DESKTOP-EJFS8EO (HP HP Pavilion Desktop 560-p0xx) (17-06-2022 19:56:59)
Gestartet von C:\Users\K21\Downloads
Geladene Profile: K21
Plattform: Microsoft Windows 10 Home Version 21H1 19043.1766 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2>
(C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> ) C:\Windows\SysWOW64\spdsvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) RMT -> Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxAccounts.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3069768 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [Discord] => C:\Users\K21\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32653776 2022-06-17] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [Datei ist nicht signiert]
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [MicrosoftEdgeAutoLaunch_1D7C278743CD3EE84048DB042914F9A2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595192 2022-06-13] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\MountPoints2: {eec8d1ee-4ded-11ec-9529-dcfe07d64c96} - "G:\setup_vmc_lite.exe" /checkApplicationPresence
HKLM\...\Windows x64\Print Processors\us005PC: C:\Windows\System32\spool\prtprocs\x64\us005pc.dll [43520 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\us005 Langmon: C:\windows\system32\us005lm.dll [22528 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-15] (Google LLC -> Google LLC)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {06A90E0C-72D3-4039-A5C6-F42946F62335} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0990175C-E9DD-4EBE-8E06-307FE281783D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {0ADC7973-D8A3-4567-A1EA-F2FBDF5C9D56} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {0CA44867-518A-484A-BF88-A0A2698BCC9E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {1177A607-47C2-4912-8889-BD508DCBEE19} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {171130F2-1227-46DE-AE57-9135F3194E00} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> )
Task: {21150167-BB7F-48D3-9DAF-61462F74B334} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {225EF79E-3FC9-4E4C-B406-FB7A15FEFAE5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Keine Datei)
Task: {2DC1D94C-2FA5-4E8D-B569-96E0680EB74A} - System32\Tasks\HPCeeScheduleForK21 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392 2016-05-12] (Hewlett-Packard Company -> HP Development Company, L.P.)
Task: {31D605FF-F973-4B98-8511-90FEB2CD2B5E} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {343BB9F9-1EE1-4C4E-9AC7-D915FFFDC964} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {36D17D92-EFB0-47BE-9132-98C7D9DAFFD2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {3D1FFA2F-207A-4289-8A51-53E97E2CD1CD} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {3F3FA2C7-939A-476F-8AB5-F61A5353FF64} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4B8FEC7B-8814-4473-87CD-BDF204D2D16E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart (Keine Datei)
Task: {51D8B97E-B4CF-41AC-BE83-36D4898950F8} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [752200 2018-05-21] (HP Inc. -> )
Task: {55F9BAC6-55D0-4EEB-BAA5-7E3BD0289848} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u (Keine Datei)
Task: {56FBFAE7-7437-4185-B62A-D905C23A230B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649216 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {6C1F209C-7D2C-42F2-B27E-ED90E8FBF664} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {747084CC-7FA4-4467-9BF7-4313288D8E26} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {753C3DE7-CB59-4407-8902-FA7202FACEEA} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {77CCB421-A321-4E0B-8C56-C5CD4056556D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send (Keine Datei)
Task: {7A0D3194-FC71-4CF5-A5ED-9911A674183D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Keine Datei)
Task: {7FB3884E-9EE7-4A0F-A2D4-1A693E291E09} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (Keine Datei)
Task: {8A6D0AF2-198C-49DD-98DC-0FC68D9FACC4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Keine Datei)
Task: {98776444-F263-45F8-AAC2-7F0DFE0FACB1} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {9C314BEB-FCB9-467B-A763-259332F1A164} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9F25C6EA-D9FF-4AE1-825C-EFBA2C36CB04} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {A61ADD4A-D024-4AC4-982D-B201A6C98E7D} - System32\Tasks\{00DF7A40-A7AF-4C08-A588-8F510D9B9302} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404
Task: {AA3A969A-698E-497E-98B4-56FEB0614BE3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport (Keine Datei)
Task: {AA7668B9-CD37-4BCD-8AB3-573A93347877} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {AD5F93C0-476C-4773-B830-B1F0F8F0F7A7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation)
Task: {AF8BE882-D6BA-42C8-A6FA-34774F048902} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BC033969-139E-44E0-8D6E-EE5656D1BD63} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C7B86C00-18CF-48EA-9EB5-71C1718CEB2B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3341312 2021-12-09] (Nvidia Corporation -> NVIDIA Corporation)
Task: {D2A08AE9-7329-4608-B8FA-406063951769} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC)
Task: {E2A97560-1BE7-40AA-BD05-9D66EF1C5C8F} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {E2BCAE47-1766-42CA-B916-8C349191D237} - System32\Tasks\{82D4A10B-C921-4EA3-9A00-096C5B65CBC2} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404
Task: {F49BAB21-627F-4F1B-AB18-93DD098A6DDD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Task: {FBA54266-2197-43A8-B435-6766BAAC9745} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForK21.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{3d7bb8f0-5a7b-49e3-aaa9-bb84d6f6de99}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{993039e8-4401-499f-998f-f67faab817b8}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{ec4688d4-2527-4b79-8a3b-47c61a42dbc8}: [DhcpNameServer] 192.168.0.1
Edge:
=======
DownloadDir: C:\Users\K21\Downloads
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\K21\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-17]
Edge DownloadDir: Default -> C:\Users\K21\Downloads
FireFox:
========
FF DefaultProfile: lf587ff4.default-1633759003238
FF ProfilePath: C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238 [2022-06-17]
FF Extension: (HTTPS Everywhere) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\https-everywhere@eff.org.xpi [2021-10-09]
FF Extension: (Watch2Gether) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{6ea0a676-b3ef-48aa-b23d-24c8876945fb}.xpi [2022-05-11]
FF Extension: (NoScript) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2022-05-31]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-01]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [Keine Datei]
Chrome:
=======
CHR Profile: C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default [2022-06-17]
CHR Extension: (Präsentationen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-04]
CHR Extension: (Docs) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-04]
CHR Extension: (Google Drive) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-09]
CHR Extension: (YouTube) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-04]
CHR Extension: (Tabellen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-09-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-09]
CHR Extension: (Netflix Party is now Teleparty) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2022-06-17]
CHR Extension: (Google Mail) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-09]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8885112 2022-05-18] (BattlEye Innovations e.K. -> )
S3 brlapi; C:\WINDOWS\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [812520 2022-02-26] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-06] (Epic Games Inc. -> Epic Games, Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 IRMTService; C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe [181360 2016-06-21] (Intel(R) RMT -> Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8677120 2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
S3 NGS; C:\WINDOWS\NGService.exe [3097648 2019-07-17] (NEXON Korea Corporation. -> NEXON Korea Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2466608 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3344176 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. -> CyberLink)
R2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14592472 2022-06-13] (ADLICE -> )
R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\\spdsvc.exe [508488 2018-05-24] (HP Inc. -> )
R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2019-09-22] (Samsung Electronics CO., LTD. -> )
S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [337112 2021-10-05] (Twitch Interactive, Inc. -> )
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10595144 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2355952 2022-01-12] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 IntelReadyModeDriver; C:\WINDOWS\System32\drivers\IntelReadyModeDriver.sys [34952 2016-06-21] (Intel(R) RMT -> Intel Corporation)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-06-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl7bb520e3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3BBF853E-3CB4-4E1F-8FBF-8F11EBDBD49E}\MpKslDrv.sys [137464 2022-06-17] (Microsoft Windows -> Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2022-06-17] (ADLICE (Julien ASCOET) -> )
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8596912 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2021-02-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-06-17 19:56 - 2022-06-17 19:57 - 000030380 ____C C:\Users\K21\Downloads\FRST.txt
2022-06-17 19:55 - 2022-06-17 19:57 - 000000000 ___DC C:\FRST
2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(3).exe
2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(2).exe
2022-06-17 19:46 - 2022-06-17 19:46 - 000007276 ____C C:\Users\K21\Desktop\RogueKiller.txt
2022-06-17 19:20 - 2022-06-17 19:20 - 000041920 ____C C:\WINDOWS\system32\Drivers\truesight.sys
2022-06-17 19:19 - 2022-06-17 19:43 - 000000000 ___DC C:\ProgramData\RogueKiller
2022-06-17 19:19 - 2022-06-17 19:19 - 000000906 ____C C:\Users\Public\Desktop\RogueKiller.lnk
2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\Program Files\RogueKiller
2022-06-17 19:18 - 2022-06-17 19:18 - 043599792 ____C (Adlice Software ) C:\Users\K21\Downloads\RogueKiller_setup.exe
2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64.exe
2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(1).exe
2022-06-17 19:06 - 2022-06-17 19:07 - 000000000 ___DC C:\AdwCleaner
2022-06-17 19:06 - 2022-06-17 19:06 - 008551608 ____C (Malwarebytes) C:\Users\K21\Desktop\adwcleaner.exe
2022-06-17 19:03 - 2022-06-17 19:03 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup(1).exe
2022-06-17 17:31 - 2022-06-17 19:05 - 000002040 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-06-17 17:31 - 2022-06-17 19:05 - 000002028 ____C C:\Users\Public\Desktop\Malwarebytes.lnk
2022-06-17 17:31 - 2022-06-17 17:31 - 000239544 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-06-17 17:31 - 2022-06-17 17:31 - 000158640 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-06-17 17:31 - 2022-06-17 17:30 - 000021480 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-06-17 17:30 - 2022-06-17 19:04 - 000000000 ___DC C:\ProgramData\Malwarebytes
2022-06-17 17:25 - 2022-06-17 19:04 - 000000000 ___DC C:\Program Files\Malwarebytes
2022-06-17 17:24 - 2022-06-17 17:24 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup.exe
2022-06-16 22:51 - 2022-06-16 22:51 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-16 22:51 - 2022-06-16 22:51 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-16 22:50 - 2022-06-16 22:50 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-16 22:50 - 2022-06-16 22:50 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-16 22:50 - 2022-06-16 22:50 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-16 22:44 - 2022-06-16 22:44 - 000000000 __HDC C:\$WinREAgent
2022-06-11 06:25 - 2022-06-17 19:04 - 000000001 ____C C:\WINDOWS\vgkbootstatus.dat
2022-06-10 14:41 - 2022-06-10 14:41 - 000000000 ___DC C:\Program Files\Riot Vanguard
2022-06-10 14:37 - 2022-06-10 14:37 - 000000323 ____C C:\Users\K21\Desktop\VALORANT.url
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-06-17 19:56 - 2017-05-15 14:43 - 000000000 ___DC C:\Users\K21\AppData\LocalLow\Mozilla
2022-06-17 19:53 - 2020-08-06 19:29 - 001882176 ____C C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-17 19:53 - 2019-12-07 16:50 - 000803488 ____C C:\WINDOWS\system32\perfh007.dat
2022-06-17 19:53 - 2019-12-07 16:50 - 000175462 ____C C:\WINDOWS\system32\perfc007.dat
2022-06-17 19:53 - 2019-12-07 11:13 - 000000000 ___DC C:\WINDOWS\INF
2022-06-17 19:49 - 2019-07-10 12:45 - 000000593 ____C C:\WINDOWS\system32\Drivers\etc\hosts.ics
2022-06-17 19:43 - 2020-08-06 19:18 - 000000000 ___DC C:\WINDOWS\system32\SleepStudy
2022-06-17 19:43 - 2019-12-07 11:14 - 000000000 ___DC C:\ProgramData\regid.1991-06.com.microsoft
2022-06-17 19:31 - 2017-11-04 12:34 - 000000000 ___DC C:\Program Files (x86)\Google
2022-06-17 19:20 - 2017-05-15 14:42 - 000000000 ___DC C:\Program Files\Mozilla Firefox
2022-06-17 19:07 - 2017-06-17 15:43 - 000000000 ___DC C:\Users\K21\AppData\Roaming\discord
2022-06-17 19:02 - 2018-05-01 23:19 - 000000000 ___DC C:\Users\K21\AppData\Local\Discord
2022-06-17 19:01 - 2020-08-06 19:26 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2022-06-17 19:01 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-06-17 19:01 - 2017-01-13 03:10 - 000000000 ___DC C:\ProgramData\NVIDIA
2022-06-17 18:55 - 2018-05-16 12:14 - 000000000 ___DC C:\Users\K21\AppData\Local\D3DSCache
2022-06-17 17:59 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\NDF
2022-06-17 17:49 - 2017-04-20 17:50 - 000000000 ___DC C:\Users\K21\AppData\Local\CrashDumps
2022-06-17 17:31 - 2019-12-07 11:14 - 000000000 __HDC C:\WINDOWS\ELAMBKUP
2022-06-17 17:21 - 2021-01-13 14:24 - 000000000 ___DC C:\Users\K21\AppData\Roaming\Telegram Desktop
2022-06-17 16:41 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\AppReadiness
2022-06-17 16:39 - 2020-08-06 19:18 - 000577120 ____C C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-17 16:39 - 2017-04-21 11:49 - 000000356 ____C C:\WINDOWS\Tasks\HPCeeScheduleForK21.job
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 __RDC C:\WINDOWS\ImmersiveControlPanel
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lv-LV
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lt-LT
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\et-EE
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\es-MX
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\Dism
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\ShellExperiences
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\oobe
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lv-LV
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lt-LT
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\et-EE
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\es-MX
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\Dism
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\DDFs
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\bcastdvr
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-17 16:38 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-17 16:38 - 2017-06-09 18:47 - 000000000 ___DC C:\Program Files (x86)\Steam
2022-06-17 12:37 - 2019-08-16 22:34 - 000000000 ___DC C:\ProgramData\Riot Games
2022-06-16 22:53 - 2019-12-07 11:03 - 000000000 ___DC C:\WINDOWS\CbsTemp
2022-06-16 22:50 - 2020-08-06 19:20 - 002877952 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-16 22:43 - 2017-04-22 02:05 - 000000000 ___DC C:\WINDOWS\system32\MRT
2022-06-16 22:41 - 2017-04-22 02:05 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-16 14:49 - 2022-01-22 22:41 - 000000000 ___DC C:\Users\K21\Desktop\Carola
2022-06-16 12:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-16 12:02 - 2021-01-19 23:03 - 000000000 ___DC C:\Users\K21\Downloads\Telegram Desktop
2022-06-15 08:35 - 2020-06-14 12:57 - 000002443 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-15 08:35 - 2020-06-14 12:57 - 000002281 ____C C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-15 00:09 - 2020-09-28 09:04 - 000002246 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-15 00:09 - 2020-09-28 09:04 - 000002205 ____C C:\Users\Public\Desktop\Google Chrome.lnk
2022-06-13 23:06 - 2020-08-06 19:26 - 000003240 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForK21
2022-06-13 22:28 - 2021-12-11 10:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1967584404-1960276878-1159121988-1001
2022-06-13 22:28 - 2020-08-06 19:26 - 000003376 ____C C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1967584404-1960276878-1159121988-1001
2022-06-13 22:28 - 2020-08-06 19:19 - 000002400 ____C C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-11 07:24 - 2020-08-06 19:26 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-11 07:24 - 2020-08-06 19:26 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-11 06:26 - 2021-10-06 11:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-11 06:26 - 2017-05-15 14:42 - 000001012 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-10 20:37 - 2021-10-09 10:01 - 000000795 ____C C:\Users\K21\Desktop\Riot Client.lnk
2022-06-10 14:38 - 2019-11-07 21:24 - 000000000 ___DC C:\Users\K21\AppData\Local\Riot Games
2022-06-10 11:26 - 2021-11-12 10:54 - 000000000 ___DC C:\Users\K21\AppData\Roaming\slobs-client
2022-06-09 12:37 - 2018-05-01 23:19 - 000002228 ____C C:\Users\K21\Desktop\Discord.lnk
2022-06-08 14:34 - 2019-11-14 21:58 - 000000000 ___DC C:\Users\K21\AppData\Local\WEB2Print
2022-06-02 08:04 - 2018-07-10 00:30 - 000000000 ___DC C:\ProgramData\Packages
2022-06-01 11:04 - 2021-11-12 10:54 - 000000000 ___DC C:\Program Files\Streamlabs OBS
2022-05-28 17:22 - 2017-01-13 02:26 - 000000000 ___DC C:\Program Files (x86)\Microsoft Office
2022-05-19 20:01 - 2018-04-12 02:55 - 000000000 ___DC C:\Users\K21\AppData\Local\ElevatedDiagnostics
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2017-07-09 15:49 - 2017-07-09 15:49 - 000000063 ____C () C:\Users\K21\AppData\Local\emaildefaults
2017-07-09 23:41 - 2017-07-09 23:41 - 000000417 ____C () C:\Users\K21\AppData\Local\karboncalligraphyrc
2021-12-03 13:21 - 2021-12-03 13:21 - 000000039 ____C () C:\Users\K21\AppData\Local\kritadisplayrc
2017-07-09 15:49 - 2021-12-03 13:21 - 000022946 ____C () C:\Users\K21\AppData\Local\kritarc
2022-02-03 21:18 - 2022-02-03 21:18 - 000000000 ____C () C:\Users\K21\AppData\Local\{1456B631-EBD3-4E17-A59D-484928FA013C}
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-06-2022
durchgeführt von K21 (17-06-2022 19:58:16)
Gestartet von C:\Users\K21\Downloads
Microsoft Windows 10 Home Version 21H1 19043.1766 (X64) (2020-08-06 17:26:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1967584404-1960276878-1159121988-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1967584404-1960276878-1159121988-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1967584404-1960276878-1159121988-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-1967584404-1960276878-1159121988-501 - Limited - Disabled)
K21 (S-1-5-21-1967584404-1960276878-1159121988-1001 - Administrator - Enabled) => C:\Users\K21
WDAGUtilityAccount (S-1-5-21-1967584404-1960276878-1159121988-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Bandicam (HKLM-x32\...\Bandicam) (Version: 4.1.4.1413 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.5.6909 - CyberLink Corp.)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2.3309 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Discord (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.583.1 - Dropbox, Inc.) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Epic Games Launcher (HKLM-x32\...\{42D23AAF-7D6F-48C7-A62C-8E02D6234156}) (Version: 1.1.147.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Game Installer (HKLM-x32\...\Game Installer 1.0.0) (Version: 1.0.0 - Intrepid Studios, Inc.)
Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.115 - Google LLC)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{64228DFB-7450-49B7-935C-B97342CB6659}) (Version: 6.0.10.1 - HP Development Company, L.P.) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.2 - HP Inc.)
HP ePrint SW (HKLM\...\{1B1E721E-4843-465C-867F-E8651E5ABCD1}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{70FF7FA8-1775-4D18-855B-DDB5AE876486}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{804E6C19-C29C-4C2A-AB7D-84F657F36A1A}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{9E79DC8C-9CBD-4BFF-B1C6-DDE56471600E}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{2460D024-A262-43EE-B83B-D990D7188252}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{E1FE22DE-22EF-4235-A56A-287CE38AA584}) (Version: 5.1.19895 - HP Inc.) Hidden
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Support Solutions Framework (HKLM-x32\...\{624DA112-9F71-492E-BAF9-0E5E4224626C}) (Version: 12.12.32.3 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{025C1573-2F1D-46AF-BAB8-594EBF56A889}) (Version: 1.4.11 - HP Inc.)
Intel(R) Chipset Device Software (HKLM\...\{3AE6FD56-D431-4B53-94F0-95E844206ADF}) (Version: 10.1.1.32 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{7B3B60EB-197B-4B06-ADFF-D0B50E755D4F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{EC465D35-92DC-4DAE-9EA8-01215688F709}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{E5B5A486-C7F5-429C-9324-13835620F2FD}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{B66F70B4-34E5-429A-9F55-7129E0833A45}) (Version: 14.8.0.1042 - Intel Corporation) Hidden
Intel(R) Ready Mode Technology (HKLM\...\{91DC75C1-5D36-4AF0-913E-F45B0923CA43}) (Version: 1.1.70.525 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{35069AA3-F7B2-4759-96F0-9EE43AACB690}) (Version: 19.00.1621.3340 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Krita (x64) 3.1.4.0 (HKLM\...\Krita_x64) (Version: 3.1.4.0 - Krita Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
LibreOffice 7.0.4.2 (HKLM\...\{B3171B83-4945-43E0-A101-841638C05506}) (Version: 7.0.4.2 - The Document Foundation)
Malwarebytes version 4.5.10.200 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.10.200 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 102.0.1245.41 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.15225.20204 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.15225.20204 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\OneDriveSetup.exe) (Version: 22.111.0522.0002 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{D3531D7A-B6FA-44A5-A024-E2A14F325F90}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{985F7F32-5BE4-4CDA-9582-F7AEA40D1974}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.30.30704 (HKLM\...\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.30.30704 (HKLM\...\{662A0088-6FCD-45DD-9EA7-68674058AED5}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 101.0.1 (x64 de)) (Version: 101.0.1 - Mozilla)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.24.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.126 - NVIDIA Corporation)
NVIDIA Grafiktreiber 511.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.65 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20194 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.56.33908 - Electronic Arts, Inc.)
Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8237 - Realtek Semiconductor Corp.)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
RogueKiller Version 15.5.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.5.3.0 - Adlice Software)
Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.4.28 - HP Printing Korea Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.32 - Samsung Electronics Co., Ltd.) Hidden
Skype Version 8.77 (HKLM-x32\...\Skype_is1) (Version: 8.77 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 21.9.27.783 - StreamElements)
Streamlabs OBS 1.4.0 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.4.0 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.1 - TeamSpeak Systems GmbH)
Telegram Desktop version 3.7.3 (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.7.3 - Telegram FZ-LLC)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal)
Twitch Studio (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 128.0.10632 - Ubisoft)
Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.67 - Samsung Electronics CO., LTD.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\ZoomUMX) (Version: 5.6.6 (961) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-20] (Amazon.com)
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.220.200.0_x64__kgqvnymyfvs32 [2022-06-16] (king.com)
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.1.0_neutral__8xx8rvfyw5nnt [2021-09-28] (Facebook Inc)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6 [2017-04-20] (HP Inc.)
HP LOUNGE -> C:\Program Files\WindowsApps\UniversalMusicMobile.HPLOUNGE_2.1.1.0_x64__3ms5eyejfeart [2021-02-10] (Universal Music Mobile)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-04-27] (HP Inc.)
March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_6.4.0.0_x86__h6adky7gbf63m [2022-05-19] (Gameloft SE)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-08] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.19.5.0_x64__8wekyb3d8bbwe [2022-06-08] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-04-09] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-02-03] (NVIDIA Corp.)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-09-22] (Samsung Electronics Co. Ltd.)
Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_6.3.80.0_x64__kx24dqmazqk8j [2022-05-13] (Random Salad Games LLC)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-11] (Twitter Inc.)
WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2218.8.0_x64__cv1g1gvanyjgm [2022-06-01] (WhatsApp Inc.)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-06-03] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\nvshext.dll [2022-01-29] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [vidc.mjpg] => C:\windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2017-04-20 16:49 - 2017-04-20 16:50 - 012485120 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6\HPJumpStart.dll
2019-09-22 21:33 - 2016-07-20 12:15 - 002847744 ____C () [Datei ist nicht signiert] C:\WINDOWS\system32\DlgSearchEngine.dll
2017-11-08 08:35 - 2017-11-08 08:35 - 000123904 _____ (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
2018-05-18 10:57 - 2018-05-18 10:57 - 003696128 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\ScanFax2PC\CDAScan2PCMonitor64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\K21\Anwendungsdaten:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\K21\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1967584404-1960276878-1159121988-1001 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 ____C C:\WINDOWS\system32\drivers\etc\hosts
2019-07-10 12:45 - 2022-06-17 19:49 - 000000593 ____C C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.60 Galaxy-A52.mshome.net # 2022 6 5 24 16 41 55 328
924
192.168.137.124 Galaxy-A52.mshome.net # 2021 8 4 12 12 13 9 942
42
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Prompt)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [UDP Query User{2DDDF377-361C-493E-ADAC-012E031F8DDB}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> )
FirewallRules: [TCP Query User{793B3F73-6DEF-4F12-8A83-8A8808087D8F}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> )
FirewallRules: [{9A4B9103-ABAA-4997-9B68-0F101D716D5B}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert]
FirewallRules: [{112E5F28-60B5-4DC2-B0B2-624C79BCDD26}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert]
FirewallRules: [{66EF7E85-8A46-4F07-8B07-0660DD5B1927}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei
FirewallRules: [{2743F7A2-FCCC-4A0C-8330-DA0920D82B60}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei
FirewallRules: [{E56A520F-DA95-4CDA-83B9-CC3D91CFCC8C}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei
FirewallRules: [{92D7512D-71F8-49C2-A1E4-DF80AB71F877}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei
FirewallRules: [{8E31CD2F-60D9-4E53-BCF7-97726D699641}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei
FirewallRules: [{699B02D8-FCC2-4B15-A020-D9CDC7A9CA78}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei
FirewallRules: [{32340C4D-5A86-4095-B4FC-D174E94DF53E}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei
FirewallRules: [{1EEDF67A-A09F-4726-B236-A5574D331234}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei
FirewallRules: [UDP Query User{6B31903A-64B0-44DD-9633-34695CBA0340}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{10C5BE9A-97CB-49E6-A197-E298C973FBC9}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{182D9748-A6AD-4678-99A4-9B2D9FF21DD2}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei
FirewallRules: [{3E74C55F-74C2-4615-A2B2-41A3425A4E4D}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei
FirewallRules: [UDP Query User{174BB3B9-9DE5-4BBA-9A09-CFB1630D58C2}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [TCP Query User{7386F47F-54AD-46F2-B69D-E37FE2ED0430}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{862EC06A-C323-4DA2-9857-63388A3DBF64}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{1A48DEBC-C60D-4B20-8463-CB7CDEFFEEAE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei
FirewallRules: [{F0F37E3D-C541-4509-9CE3-43E0D38F11E8}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei
FirewallRules: [{5E679FBF-9484-4B3B-A8EA-5E25ECF9581E}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei
FirewallRules: [{D2B7FD36-4C50-4F53-8D3D-B7652A345409}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei
FirewallRules: [{A815FB4C-6D84-4F4B-912E-4DF6D7BFBF81}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3AB0EF62-2CB7-466F-A784-C8431CEC4156}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3A077B1C-31DF-4A4B-B6AA-2B8880C51408}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{1430457D-F984-42AA-930D-08DB71566001}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (HP Inc. -> )
FirewallRules: [{B4872368-E942-4810-A3E8-3062ED6C35AE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (HP Inc. -> HP Printing Korea Co., Ltd.)
FirewallRules: [{07BE60BF-439D-484C-B665-F432875BB0F2}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (HP Inc. -> HP Printing Korea Co., Ltd.)
FirewallRules: [{DF8E8124-FC68-4F90-BF8B-E4A2FB042047}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (HP Inc. -> )
FirewallRules: [{3A6D9B27-790C-480C-AC90-F6E152F51897}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{B56A3017-9B07-4426-9825-61A1AF1BC6BC}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{91084CF8-ED1B-413B-A005-BAA81EB04F95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0EAEFBB1-9EE4-4886-AEB9-8F82B3EED741}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DF3BF395-9013-41C8-8F46-B6C99CAF64C0}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{EA918A23-9B19-4393-B1CB-645E4BBCABFE}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{A042B6E0-F396-4C85-9A5C-F320851EBB54}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{5F2D4802-A8D3-430E-A3A5-CF8848437570}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{448F24CA-98E2-4A58-A62B-44351C19C053}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{C6B0BE44-D1FD-45BC-B4B6-40174929D328}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [{45C32BB5-7CDF-40DB-8C87-38C6D8BAB729}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{32DED9B5-2517-4B3E-A4DF-E27C25284D40}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{9484FF45-858C-4827-862C-804F6E554DA4}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{6338FA0F-BD3E-4DB2-8CBB-301C086EDD76}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{D6F309A4-51A8-42AE-A45B-F6DFFED4E691}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{CB7ED8B0-CDF2-45A9-B9D9-013CBEC7DFEF}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{83730AA0-54BA-4A4A-9DBA-2D5B20B0A09B}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{22B7DA9D-5BE7-4763-B58F-8EB91846FCF7}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{52B56086-059A-4CE7-93CD-B534DAD0418B}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{CC30C740-79B2-40F1-8BB8-F398AB4FE31C}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{C073FB44-D761-4800-B3D1-AA14E9410682}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{EF7E69BE-1F11-420D-93AD-5806325455B0}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{8A1671B8-3D54-4868-B369-0C43BA3F22E2}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{6BBA2C59-8330-4DB5-B0CC-4DB0336ED55D}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{B680590D-F680-4C4D-B2C3-9150D506B100}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{D912DB14-41B8-45C6-9645-5C7A33006346}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{3060DA83-4CA1-448E-90B6-19C5B776B2F9}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [{FE4293B5-16F4-48C9-9705-CB1EC80579BF}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{0CCD1D59-6CED-4B20-A135-AD3B6CA75C96}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{980FDE5C-2D78-469B-AA33-14A0BF3C89BD}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [{8BEB68A9-82A1-4409-94AF-8C899E4D5B1C}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [{BFF0DC43-95AC-4DE4-A4B8-4170B183A1FD}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [UDP Query User{F4CBE8DE-6C5B-463B-9F56-D42AD7EFC5D2}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [TCP Query User{99EDE91F-8BA2-4D9E-A9C9-558C6628D8FA}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [{51969C71-F3FE-4F57-A1D1-C3A7A359F15C}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [{D4E5756C-63E9-4AC3-B7AC-615645F35E0F}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [UDP Query User{3E25EF61-9EDB-47A1-9737-50C25A1DAC55}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [TCP Query User{08B9A1A3-1A08-49A4-B88A-E8AEADFC3B47}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [{1BBD3A94-6B54-4C48-B372-DCC20336D717}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [{EF49B8AC-B285-482F-BE9E-D3065F6913C7}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [UDP Query User{4E4F2D49-7F97-47DC-AA0F-8F61060CBF78}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [TCP Query User{09A68168-DDED-4E07-956E-E5CB958BA584}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [{7C5010F9-6C39-4A5A-A647-AC1633A8ED95}] => (Allow) LPort=1900
FirewallRules: [{DD840014-9503-432F-93A8-985C4AB205AD}] => (Allow) LPort=2869
FirewallRules: [{6CF7B920-A8A9-4970-98E5-B4AFD5DF6260}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F0256D43-7C44-46C9-A514-D32D93623CB5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5505D5CB-230C-40FD-98FA-BFC06590E8AE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5DBC6FBE-8969-4470-B060-EA2C1F46D187}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3B637BE3-5D8B-4C8D-ADC3-C27F648CA39D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{1F574894-9198-4ADA-8301-4924FDB8824F}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Downloader.exe => Keine Datei
FirewallRules: [{25ECC44B-09CF-44E6-AB4C-84F97859EB10}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Launcher.exe => Keine Datei
FirewallRules: [{100F0297-C846-4D87-B03F-7ED875E67519}] => (Allow) C:\Users\K21\Downloads\bin64\BlackDesert64.exe => Keine Datei
FirewallRules: [{541D4041-611F-436B-9D92-D7EF54A7AAE2}] => (Allow) C:\Users\K21\Downloads\bin\BlackDesert32.exe => Keine Datei
FirewallRules: [{66B58DF2-E010-4069-8398-6E940ADD203B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{937E67D8-D8D4-4CFC-B6A1-BD791F88A19E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{A835CBA9-9E1C-49ED-A95F-B5B688A306F2}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei
FirewallRules: [TCP Query User{731E2798-3646-4389-A81D-86F1D573BE8F}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei
FirewallRules: [UDP Query User{F5BF8D29-5357-4EBD-BC02-A0591B519930}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{8E552E3C-C36B-4D4B-983C-D99409DC89F8}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{738F4040-E865-4F64-A821-0295BEBAB677}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei
FirewallRules: [UDP Query User{722B429C-5634-4D89-AE08-06F9CB995E36}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei
FirewallRules: [TCP Query User{06F052ED-6B03-41D0-AD06-2730ED2D8BAE}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{248B7716-9EC3-479E-A9D8-97753081CD6B}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{F2C2C73F-A23C-418B-B2D0-69BB84E97B2B}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei
FirewallRules: [{B416FE38-CB35-4499-8DA2-319DB941C6C1}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei
FirewallRules: [{65E31776-FDA8-476F-B2E6-41E09B86D25F}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei
FirewallRules: [{E006A453-632F-40FF-B9E6-B2C8E10A9987}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei
FirewallRules: [TCP Query User{C00E63F2-406C-474E-93B3-2EFB1F42C843}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> )
FirewallRules: [UDP Query User{CD477984-0A16-484A-8240-947AEFCE3360}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> )
FirewallRules: [{6A9D9DEB-2B45-45D9-BD58-3F15A1CA103B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{17CE65AD-A9DE-4B44-BA6D-A288F914AA21}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{54AA717B-E30F-4ED3-B3A3-E87B925A5FB8}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{41260157-1F0F-48A6-9AA1-00ACA0A0D9DB}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{5631BB50-E38E-4B9C-BFE3-5B5F9A7D62C1}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei
FirewallRules: [{2CF01E47-E5E4-4BEE-8A2F-E4A0B7EF8555}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei
FirewallRules: [{050944A0-B637-4FE5-BF61-8F8E087BE229}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei
FirewallRules: [{E4BC2E89-4A7A-412C-8CD3-5E489E11CFBB}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei
FirewallRules: [{1A6078FB-0BDE-4B95-B664-D4F0EF946756}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei
FirewallRules: [{31A12DD4-3332-485C-B0A4-7A19E930CDA0}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei
FirewallRules: [{B29F22DA-3379-4B0B-BA59-99D4C46EA596}] => (Allow) D:\EasyAntiCheat\EasyAntiCheat_Setup.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{AA91E5CD-75C9-4BF0-98DF-BA24C71CD181}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{1E6D126E-DB51-4640-B4D2-0376297AB3E6}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{4F68D823-004A-49BA-849E-872EEB1E2AAC}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{9CFC75A0-51A5-4F53-8AB7-647D66C556AD}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{DAD5B8F1-EE56-451E-B6CF-974862F51846}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{D7AA6A2C-261F-457B-BEBC-1E97726FE3E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{6461B2B6-037B-47AC-92BA-9DBD2B0AF3CD}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [UDP Query User{69F54785-BDC5-4F5A-929A-8556DD9BABF2}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [{40C859E3-600D-4C03-93DF-787532BC75EA}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{04CA3854-B8F7-41E5-9609-56E63FFBE991}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{DC2E3732-2760-40BC-BDEA-46C8DA82087C}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{4C059F61-6C83-4CC8-BC1B-597C577B87D2}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{E2091C34-3DD1-42D7-851E-4D41E87E343A}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0C25909D-28D3-4E6A-9D97-E180A09814F1}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{A3844684-FFEF-4D27-80CF-9DAE8516E646}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei
FirewallRules: [{93B722E3-10F6-4E9E-8F40-CAAF26ED5DAE}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei
FirewallRules: [{625F88A7-5033-4EF9-8E9C-6A6A45DA9091}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei
FirewallRules: [{1BD0B5B8-5FB0-4963-A489-99723BEFFD44}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei
FirewallRules: [{B4D27174-957A-4ABA-AF74-5A243B3EEF05}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei
FirewallRules: [{570A5DF2-050D-499E-83DD-AB2FC4779603}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei
FirewallRules: [TCP Query User{5E1C7C27-0196-49DF-99CA-9018C1D7B9ED}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei
FirewallRules: [UDP Query User{777F24FA-5455-4674-8F21-2B21AC9F30F0}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei
FirewallRules: [{D8C98445-1F22-46A0-9A8C-2527563F8C41}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{4EDFD8BA-824C-4DB2-AEA7-754C754A83BB}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei
FirewallRules: [{353832A4-5835-4B22-B3EF-1BCD947D41CC}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei
FirewallRules: [{5692F478-AF58-4FEA-B5E2-44DC600B247E}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei
FirewallRules: [{39B8937F-C68A-47D2-BEB3-FC4FC851086C}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei
FirewallRules: [TCP Query User{6719ACE0-5226-4B68-97FF-A14F7C39D975}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )
FirewallRules: [UDP Query User{96260930-84A1-4D35-85F9-C30AC45F1FE1}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )
FirewallRules: [{964F0EDE-0AE6-42F3-80F3-CC6F5ED26B01}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{3DD7F452-4324-4FE4-8DFC-A8292CFDDD22}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{9C13C11E-BD28-4A29-B9D4-22B9C79F565F}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss)
FirewallRules: [{E0183729-2724-465F-8AF3-924C065979F7}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss)
FirewallRules: [{D185BB44-5A94-4F1F-841A-C68164F694E7}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{69DF0FDD-0321-4889-BC77-F22023C6CC4B}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{25ADA769-57D8-471A-81A4-C5B292983257}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [TCP Query User{A8C08DF9-8231-4280-BC70-BECBC9B34D02}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
FirewallRules: [UDP Query User{51DC50D8-8886-4B47-915F-680987A26A32}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
FirewallRules: [{5D871D23-FA8E-4689-A8B6-66654C68401A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{30B84162-07F5-4874-A2B5-9835899FE074}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{91254686-6FE5-4805-A8E2-99B1F1DB3123}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{52E9CD19-2ED5-4204-95DB-98ACC8E0CDF6}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{B0258ADD-DD72-4EAA-BBA4-0C0C6D7B3221}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{578D9C75-4D7F-402F-B2DF-609CE77F9450}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{BDA6D178-7084-49F3-A095-D2232AEDE414}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{CD9BB49D-9E16-4055-87AB-E8A1899AA8B6}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{C03F6AA5-DF3E-420F-B4CE-9910F790899A}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei
FirewallRules: [{1A59BD2D-C433-417E-A707-8E386E5776C8}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei
FirewallRules: [{5CFD6345-746C-4EC0-A9EC-C294886295F3}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei
FirewallRules: [{B393116E-0E53-4651-A963-47A63AED5B76}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei
FirewallRules: [TCP Query User{DAD1A651-898D-4620-9FCE-BAA7489121FF}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [UDP Query User{F1FAF6F3-789D-41E0-B761-742A29EB7C3F}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [{2BFF80FF-1F5B-47F9-86D8-AFA4D44B0332}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [{1B39A1F8-0B1C-4CB4-B98D-5A6854C982D2}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [TCP Query User{8504E094-CC94-47FC-9BE6-A46952218377}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei
FirewallRules: [UDP Query User{1141BFEA-68EC-4C29-8569-A71A85ABBD50}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei
FirewallRules: [{F2EEC378-37B4-4C52-B211-B5870AAA5EB6}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9239EB72-0D34-4E77-BAA5-14D099C83576}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{75880721-EFF8-4FD4-9729-76A36EE5B439}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A3F6B4AF-7620-4184-877E-71454D06F8C4}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [TCP Query User{E760469D-0432-447D-A4AE-8919D846ED75}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei
FirewallRules: [UDP Query User{3713C040-2E65-4471-9CCF-A035D8BF9AF6}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei
FirewallRules: [TCP Query User{8AA670A9-4015-48F2-A5E1-9C7C277D50E8}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{A02ACC89-ED39-4DB5-ACA9-F07373355130}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{299B2B11-EFA3-4F8C-9F29-6138A6ABF7F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6AA52E51-B3D6-4D07-B64E-716B9B4E70B6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{21C71292-D9F3-4B84-AD73-3D52DFC44252}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{F9248DBD-7445-4F69-BAB3-BB850575704C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{2C8E7648-C1C1-40D5-9F92-9098251E1DF1}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{3C226CB8-E281-47B5-8521-2F45AACB83B7}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{96EE4089-2516-4D30-B650-3DB38B9F9216}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{C1CB0876-1812-4CFF-9528-4112EA3D290C}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{4CBDB035-3DBA-405A-A358-73066990FF83}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{23D66D78-1296-4020-B132-1560D79FB540}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{AA019C34-5176-41D1-BA58-0058DEED04C7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:118.01 GB) (Free:23.05 GB) (20%)
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
|
|
17.06.2022, 22:26
| #2 |
| | Rogue Killer FundCode:
ATTFilter Applikationsfehler:
==================
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-EJFS8EO.local already in use; will try DESKTOP-EJFS8EO-2.local instead
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 DESKTOP-EJFS8EO.local. Addr 192.168.0.163
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.213:5353 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:31A3:9902:CC3B:C9CE
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:BC42:C4A9:B27E:65C4
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.213:5353 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:31A3:9902:CC3B:C9CE
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 4 DESKTOP-EJFS8EO.local. Addr 192.168.0.163
Error: (06/17/2022 07:58:04 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.213:5353 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:31A3:9902:CC3B:C9CE
Error: (06/17/2022 07:02:04 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: OriginWebHelperService.exe, Version: 10.5.56.33908, Zeitstempel: 0x5dd474e2
Name des fehlerhaften Moduls: OriginWebHelperService.exe, Version: 10.5.56.33908, Zeitstempel: 0x5dd474e2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00098210
ID des fehlerhaften Prozesses: 0x138c
Startzeit der fehlerhaften Anwendung: 0x01d8826bea2d8c55
Pfad der fehlerhaften Anwendung: D:\Origin\OriginWebHelperService.exe
Pfad des fehlerhaften Moduls: D:\Origin\OriginWebHelperService.exe
Berichtskennung: eb0e20cd-f639-4b8d-b7d2-3431f1b84d1e
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Systemfehler:
=============
Error: (06/17/2022 07:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/17/2022 04:52:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/17/2022 04:40:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/16/2022 11:23:21 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-EJFS8EO)
Description: Der Server "Windows.Media.Capture.Internal.AppCaptureShell" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (06/16/2022 10:10:45 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-EJFS8EO)
Description: Der Server "Windows.Media.Capture.Internal.AppCaptureShell" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (06/15/2022 11:34:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-EJFS8EO)
Description: Der Server "{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (06/15/2022 11:34:36 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-EJFS8EO)
Description: Der Server "Microsoft.AAD.BrokerPlugin_1000.19041.1023.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (06/13/2022 11:15:04 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-EJFS8EO)
Description: Der Server "Windows.Media.Capture.Internal.AppCaptureShell" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Windows Defender:
================
Date: 2022-06-17 13:02:01
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {20E871C9-A179-40AA-A0B0-E938F3DDE586}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-16 12:15:54
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {7C99E769-0005-4CCC-919E-0F481202D7F7}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-15 11:27:39
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {76851FAA-B6F8-49DC-9CB0-D8808E7DC3E4}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-14 08:32:10
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {047F59CB-A540-4AC0-BFFE-741614C3D7BA}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-13 10:26:05
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {A9CE8792-DD71-4EC8-9AB3-210F2B2EAA85}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]:
Date: 2022-06-17 17:04:56
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.367.1682.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.19200.6
Fehlercode: 0x80072ee2
Fehlerbeschreibung: Das Zeitlimit für den Vorgang wurde erreicht.
Date: 2022-06-17 16:51:41
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.367.1682.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.19200.6
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
CodeIntegrity:
===============
Date: 2022-06-11 08:33:47
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-03-15 08:37:22
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-01-09 18:33:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
Date: 2021-12-09 14:04:01
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume3\Program Files\NVIDIA Corporation\Ansel\Tools\NvCameraWhitelisting64.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
BIOS: AMI F.22 11/04/2016
Hauptplatine: HP 828A
Prozessor: Intel(R) Core(TM) i5-6400 CPU @ 2.70GHz
Prozentuale Nutzung des RAM: 56%
Installierter physikalischer RAM: 8141.54 MB
Verfügbarer physikalischer RAM: 3530.39 MB
Summe virtueller Speicher: 15821.54 MB
Verfügbarer virtueller Speicher: 9556.42 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:118.01 GB) (Free:23.05 GB) (Model: SAMSUNG MZ7LN128HCHP-000H1) NTFS
Drive d: (DATA) (Fixed) (Total:919.76 GB) (Free:250.69 GB) (Model: TOSHIBA DT01ACA100) NTFS
Drive e: (RECOVERY) (Fixed) (Total:11.75 GB) (Free:1.23 GB) (Model: TOSHIBA DT01ACA100) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
\\?\Volume{a6b73df8-e8fe-4716-a81e-041f99cb74ac}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.47 GB) NTFS
\\?\Volume{8e1affda-4d46-45b8-805f-324f9dc60da1}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: A80690AF)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: F1E6F7CD)
Partition: GPT.
==================== Ende von Addition.txt =======================
Code:
ATTFilter Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 16-06-2022
durchgeführt von K21 (17-06-2022 19:59:54)
Gestartet von C:\Users\K21\Downloads
Start-Modus: Normal
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink Power Media Player 14.lnk -> C:\Program Files (x86)\CyberLink\PowerDVD14\PDVDLP.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector.lnk -> C:\Program Files\CyberLink\PowerDirector14\PowerDirector_video_editing.exe (CyberLink Corp.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk -> D:\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Immersive Control Panel.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\MovieMaker.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk -> C:\Program Files\PCHealthCheck\PCHealthCheck.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk -> C:\Program Files (x86)\Windows Live\Photo Gallery\WLXPhotoGallery.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Streamlabs OBS.lnk -> C:\Program Files\Streamlabs OBS\Streamlabs OBS.exe (General Workings, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamSpeak 3 Client.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Samsung Drucker-Diagnose.lnk -> C:\Program Files (x86)\Samsung\Samsung Printer Diagnostics\SEInstall\SPD\ESM.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Samsung Printer Center.lnk -> C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics Co., Ltd.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller\RogueKiller.lnk -> C:\Program Files\RogueKiller\RogueKiller64.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office Language Preferences.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Base.lnk -> C:\Program Files\LibreOffice\program\sbase.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Calc.lnk -> C:\Program Files\LibreOffice\program\scalc.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Draw.lnk -> C:\Program Files\LibreOffice\program\sdraw.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Impress.lnk -> C:\Program Files\LibreOffice\program\simpress.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Math.lnk -> C:\Program Files\LibreOffice\program\smath.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice Writer.lnk -> C:\Program Files\LibreOffice\program\swriter.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice.lnk -> C:\Program Files\LibreOffice\program\soffice.exe (The Document Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\Uninstall League of Legends.lnk -> D:\Games2\League of Legends\Uninstall League of Legends.exe (Riot Games, Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krita\Krita (x64).lnk -> C:\Program Files\Krita (x64)\bin\krita.exe ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Krita\Tools\Uninstall Krita (x64).lnk -> C:\Program Files\Krita (x64)\uninstall.exe (Krita Foundation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel\Intel(R) Ready Mode Technology\Intel(R) Ready Mode Technology.lnk -> C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTModernUI.exe (Intel Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Manager.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2\Guild Wars 2.lnk -> D:\Guild Wars 2\Gw2-64.exe (ArenaNet)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph\Glyph wird deinstalliert.lnk -> C:\Program Files (x86)\Glyph\GlyphUninstall.exe (Trion Worlds Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glyph\Glyph.lnk -> C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc.)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genshin Impact\Genshin Impact.lnk -> D:\Games2\Genshin Impact\launcher.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genshin Impact\卸载Genshin Impact.lnk -> D:\Games2\Genshin Impact\uninst.exe (Keine Datei)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net\Battle.net.lnk -> D:\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Math Input Panel.lnk -> C:\Program Files\Common Files\Microsoft Shared\ink\mip.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Notepad.lnk -> C:\Windows\System32\notepad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Snipping Tool.lnk -> C:\Windows\System32\SnippingTool.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\XPS Viewer.lnk -> C:\Windows\System32\xpsrchvw.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)
Shortcut: C:\ProgramData\HP\Recovery\Links\RM.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\K21\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\defaultuser0\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Keine Datei)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\Links\Desktop.lnk -> C:\Users\K21\Desktop ()
Shortcut: C:\Users\K21\Links\Downloads.lnk -> C:\Users\K21\Downloads ()
Shortcut: C:\Users\K21\Desktop\Glyph.lnk -> C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc.)
Shortcut: C:\Users\K21\Desktop\Start Tor Browser.lnk -> C:\Users\K21\Desktop\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\K21\Desktop\StreamElements OBS.Live.lnk -> C:\Program Files (x86)\obs-studio\bin\64bit\BsSndRpt64.exe (BugSplat, LLC)
Shortcut: C:\Users\K21\Desktop\Telegram.lnk -> C:\Users\K21\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC)
Shortcut: C:\Users\K21\Desktop\Twitch Studio.lnk -> C:\Users\K21\AppData\Roaming\Twitch Studio\Bin\TwitchStudio.exe (Twitch Interactive, Inc.)
Shortcut: C:\Users\K21\Desktop\Ubisoft Connect.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe (Ubisoft)
Shortcut: C:\Users\K21\Desktop\Tor Browser\Start Tor Browser.lnk -> C:\Users\K21\Desktop\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk -> C:\Users\K21\Desktop\ESETOnlineScanner_DEU.exe (Keine Datei)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Knuddels.lnk -> C:\Users\K21\Knuddels-Stapp\CommonFiles\Java\bin\javaw.exe (Keine Datei)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Users\K21\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Start Tor Browser.lnk -> C:\Users\K21\Desktop\Tor Browser\Browser\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch Studio.lnk -> C:\Users\K21\AppData\Roaming\Twitch Studio\Bin\TwitchStudio.exe (Twitch Interactive, Inc.)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Zoom.lnk -> C:\Users\K21\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Ubisoft Connect\Ubisoft Connect.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftConnect.exe (Ubisoft)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft\Ubisoft Connect\Uninstall.lnk -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\Uninstall.exe (Ubisoft)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop\Telegram entfernen.lnk -> C:\Users\K21\AppData\Roaming\Telegram Desktop\unins000.exe (Telegram FZ-LLC )
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop\Telegram.lnk -> C:\Users\K21\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\computer.lnk -> C:\Windows\explorer.exe,-30
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\Internet Explorer.lnk -> C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Guild Wars 2.lnk -> D:\Guild Wars 2\Gw2-64.exe (ArenaNet)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Paint.lnk -> C:\Windows\System32\mspaint.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Telegram.lnk -> C:\Users\K21\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\7111c0ce965b7246\Battle.net.lnk -> D:\Battle.net\Battle.net.exe (Blizzard Entertainment)
Shortcut: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\63a6d12456a6b27c\League of Legends.lnk -> D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc.)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\01a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\02a - Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)
Shortcut: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Bandicam.lnk -> D:\Bandicam\bdcam.exe (Bandicam Company)
Shortcut: C:\Users\Public\Desktop\Battle.net.lnk -> D:\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)
Shortcut: C:\Users\Public\Desktop\Epic Games Launcher.lnk -> D:\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)
Shortcut: C:\Users\Public\Desktop\Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation)
Shortcut: C:\Users\Public\Desktop\GeForce Experience.lnk -> C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)
Shortcut: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)
Shortcut: C:\Users\Public\Desktop\Krita.lnk -> C:\Program Files\Krita (x64)\bin\krita.exe ()
Shortcut: C:\Users\Public\Desktop\LibreOffice 7.0.lnk -> C:\Program Files\LibreOffice\program\soffice.exe (The Document Foundation)
Shortcut: C:\Users\Public\Desktop\Malwarebytes.lnk -> C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe (Malwarebytes)
Shortcut: C:\Users\Public\Desktop\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)
Shortcut: C:\Users\Public\Desktop\Origin.lnk -> D:\Origin\Origin.exe (Electronic Arts)
Shortcut: C:\Users\Public\Desktop\RogueKiller.lnk -> C:\Program Files\RogueKiller\RogueKiller64.exe ()
Shortcut: C:\Users\Public\Desktop\Samsung Drucker-Diagnose.lnk -> C:\Program Files (x86)\Samsung\Samsung Printer Diagnostics\SEInstall\SPD\ESM.exe ()
Shortcut: C:\Users\Public\Desktop\Skype.lnk -> C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)
Shortcut: C:\Users\Public\Desktop\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
Shortcut: C:\Users\Public\Desktop\Streamlabs OBS.lnk -> C:\Program Files\Streamlabs OBS\Streamlabs OBS.exe (General Workings, Inc.)
Shortcut: C:\Users\Public\Desktop\TeamSpeak 3 Client.lnk -> C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe (TeamSpeak Systems GmbH)
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk -> C:\Windows\Installer\{804E6C19-C29C-4C2A-AB7D-84F657F36A1A}\_HPEPrintIcon.exe (HP) -> /DASLaunch
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB.lnk -> C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe () -> manualstartmenu
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk -> C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Realtek Semiconductor) -> /LAUNCH_BY_STARTMENU
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Order Supplies.lnk -> C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe () -> /ordersupplies
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Samsung Easy Printer Manager.lnk -> C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe () -> /epm
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Samsung Easy Wireless Setup.lnk -> C:\Program Files (x86)\Samsung\Samsung Printer Diagnostics\SEInstall\SPD\ESM.exe () -> /Wireless
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Uninstall Samsung Printer Software.lnk -> C:\Program Files (x86)\Samsung\TotalUninstaller\TotalUninstaller.exe () -> /N"Samsung" /REMOVE_ALL
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\Update Software.lnk -> C:\Program Files (x86)\Samsung\Samsung Printer Diagnostics\SEInstall\SPD\ESM.exe () -> /J_Update /Target "PRINT_COMMON_SW"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Printers\View User's Guide.lnk -> C:\Program Files (x86)\Samsung\View User Guide\ViewUserGuide.exe () -> /N"Samsung" /VIEW
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2016 Tools\Office Upload Center.lnk -> C:\Program Files (x86)\Microsoft Office\root\client\AppVLP.exe (Microsoft Corporation) -> "C:\Program Files (x86)\Microsoft Office\Root\Office16\MSOUC.EXE"
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice 7.0\LibreOffice (abgesicherter Modus).lnk -> C:\Program Files\LibreOffice\program\soffice.exe (The Document Foundation) -> --safe-mode
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends\League of Legends.lnk -> D:\Games2\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product=league_of_legends --launch-patchline=live
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Documentation.lnk -> C:\Program Files\HP\Documentation\platform_guides\languages\index.html () -> /Arguments:Shortcut
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Help and Support\HP Recovery Manager\HP Recovery Media Creation.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \CRM
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\Apps.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \SWR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\BTR.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \BTR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\Driver.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \SWR
ShortcutWithArgument: C:\ProgramData\HP\Recovery\Links\RMC.lnk -> C:\Program Files (x86)\HP\HP Recovery Manager\rebecca.exe (HP Development Company, L.P.) -> \CRM
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\defaultuser0\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
ShortcutWithArgument: C:\Users\K21\Desktop\Discord.lnk -> C:\Users\K21\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\K21\Desktop\League of Legends.lnk -> D:\Games2\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product=league_of_legends --launch-patchline=live
ShortcutWithArgument: C:\Users\K21\Desktop\Riot Client.lnk -> D:\Games2\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product= --launch-patchline=
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\K21\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Riot Games\Riot Client.lnk -> D:\Games2\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product= --launch-patchline=
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Hammer & Chisel, Inc\Discord.lnk -> C:\Users\K21\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\K21\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Discord.lnk -> C:\Users\K21\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Dropbox 25 GB.lnk -> C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe () -> manualstartmenu
ShortcutWithArgument: C:\Users\K21\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation) -> --profile-directory=Default
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - Network Connections.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> ::{7007ACC7-3202-11D1-AAD2-00805FC1270E}
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\06 - System.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.System
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPagePCSystemInfo
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\08 - Power Options.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.PowerOptions
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group3\10 - Programs and Features.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.ProgramsAndFeatures
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0
ShortcutWithArgument: C:\Users\K21\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2\Guild Wars 2 Support Webseite.url -> URL: hxxp://support.guildwars2.com/
InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guild Wars 2\Guild Wars 2 Webseite.url -> URL: hxxp://www.guildwars2.com/
InternetURL: C:\Users\Default\Favorites\Links\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\Default\Favorites\Links\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=webslice
InternetURL: C:\Users\Default\Favorites\HP\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\Default\Favorites\HP\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=iefav
InternetURL: C:\Users\Default\Favorites\HP\HP Store.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=cndt&s=stemea_consumer_ie_dt&tp=iefavs
InternetURL: C:\Users\Default\Favorites\HP\WildTangent Games for HP.url -> URL: hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cndt&locale=de_de&bd=all&c=171
InternetURL: C:\Users\defaultuser0\Favorites\Links\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\defaultuser0\Favorites\Links\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=webslice
InternetURL: C:\Users\defaultuser0\Favorites\HP\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\defaultuser0\Favorites\HP\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=iefav
InternetURL: C:\Users\defaultuser0\Favorites\HP\HP Store.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=cndt&s=stemea_consumer_ie_dt&tp=iefavs
InternetURL: C:\Users\defaultuser0\Favorites\HP\WildTangent Games for HP.url -> URL: hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cndt&locale=de_de&bd=all&c=171
InternetURL: C:\Users\K21\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142
InternetURL: C:\Users\K21\Favorites\Links\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\K21\Favorites\Links\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=webslice
InternetURL: C:\Users\K21\Favorites\HP\Amazon.de – online einkaufen.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=all&s=amazon&tp=iefavs
InternetURL: C:\Users\K21\Favorites\HP\Booking.com.url -> URL: hxxp://secure.rezserver.com/sdk/v1/LinkFwd?refid=7684&destination=booking&refclickid=iefav
InternetURL: C:\Users\K21\Favorites\HP\HP Store.url -> URL: hxxp://js.redirect.hp.com/jumpstation?bd=all&c=none&locale=de_de&pf=cndt&s=stemea_consumer_ie_dt&tp=iefavs
InternetURL: C:\Users\K21\Favorites\HP\WildTangent Games for HP.url -> URL: hxxp://redirect.hp.com/svs/rdr?TYPE=4&tp=iefavs&s=myhpgames&pf=cndt&locale=de_de&bd=all&c=171
InternetURL: C:\Users\K21\Desktop\Dead by Daylight.url -> URL: steam://rungameid/381210
InternetURL: C:\Users\K21\Desktop\Never Alone (Kisima Ingitchuna).url -> URL: com.epicgames.launcher://apps/b13f6a1e5121469d8a825947b759339d%3A40c4367909484809909f6c1e82e2023f%3Af38de9fa4c6d43eabac080942cb394a1?action=launch&silent=true
InternetURL: C:\Users\K21\Desktop\SMITE.url -> URL: steam://rungameid/386360
InternetURL: C:\Users\K21\Desktop\Tom Clancy's Rainbow Six Siege - Vulkan.url -> URL: uplay://launch/635/1
InternetURL: C:\Users\K21\Desktop\Tom Clancy's Rainbow Six Siege.url -> URL: uplay://launch/635/0
InternetURL: C:\Users\K21\Desktop\VALORANT.url -> URL: com.epicgames.launcher://apps/cbd5b3d310a54b12bf3fe8c41994174f%3Ad1aec7fb384d4f98beb902d813bbae3c%3A602eb4abc8764c87b7f2607a1ef8c18e?action=launch&silent=true
InternetURL: C:\Users\K21\Desktop\Spiele\Age of Empires II Definitive Edition.url -> URL: steam://rungameid/813780
InternetURL: C:\Users\K21\Desktop\Spiele\Age of Empires II HD Edition.url -> URL: steam://rungameid/221380
InternetURL: C:\Users\K21\Desktop\Spiele\Black Desert Online.url -> URL: steam://rungameid/582660
InternetURL: C:\Users\K21\Desktop\Spiele\Dead by Daylight.url -> URL: steam://rungameid/381210
InternetURL: C:\Users\K21\Desktop\Spiele\FINAL FANTASY XIV Online.url -> URL: steam://rungameid/39210
InternetURL: C:\Users\K21\Desktop\Spiele\SMITE.url -> URL: steam://rungameid/386360
InternetURL: C:\Users\K21\Desktop\Spiele\Tales of Berseria.url -> URL: steam://rungameid/429660
InternetURL: C:\Users\K21\Desktop\Spiele\Tom Clancy's Rainbow Six® Siege - Vulkan.url -> URL: uplay://launch/4865/1
==================== Ende vom Shortcut.txt =============================
|
|
18.06.2022, 14:06
| #3 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™   | Rogue Killer Fund Und die Funde hast du dir auch mal angeschaut?
__________________Zitat:
Zitat:
__________________ |
|
18.06.2022, 16:46
| #4 | |
| | Rogue Killer FundZitat:
Gute Frage...das wundert mich allerdings umso mehr. Habe immer automatische Updates eingestellt. Update das jetzt nach. Das seltsame ist, ich habe erst vor ein paar Tagen nochmal ein Windows update gehabt. Woran kann es liegen, dass dieses Update ausgelassen wurde? |
|
19.06.2022, 10:58
| #5 |
| /// TB-Ausbilder | Rogue Killer Fund PUP bedeutet ja nur "Potentiell Unerwünschtes Programm". Bitte zur Kontrolle MBAM und AdwCleaner ausführen. Das mit den Funktionsupdates ist immer so eine Sache... schwer zu sagen, warum es bei dir nicht angzeigt wurde. Aber wenn du das nachgeholt hast, passt das ja dann.  Schritt 1 Führe Malwarebytes' AntiMalware (MBAM) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. Schritt 2 Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei. |
|
20.06.2022, 11:05
| #6 | |
| | Rogue Killer Fund Dann hatte ich also Glück und es war kein bösartiges Programm, wie bei Rogue Killer angegeben? Gut zu wissen das so ein Fund prinzipiell nichts gefährliches sein muss Gibt es eine Möglichkeit sowas nachzuprüfen, ob die Updates auch wirklich durchgeführt wurden, bzw bei welchem Programm man dies nachholen muss? Hätte Cosinus das nicht erwähnt hätte ich das nicht nachholen können. Zitat:
Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 20.06.22
Scan-Zeit: 11:45
Protokolldatei: c3ab357c-f07d-11ec-8393-dcfe07d64c96.json
-Softwaredaten-
Version: 4.5.10.200
Komponentenversion: 1.0.1702
Version des Aktualisierungspakets: 1.0.56313
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 10 (Build 19044.1766)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-EJFS8EO\K21
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 361353
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 7 Min., 9 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 0
(keine bösartigen Elemente erkannt)
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.3.2.0
# -------------------------------
# Build: 03-23-2022
# Database: 2022-03-15.3 (Local)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-20-2022
# Duration: 00:00:06
# OS: Windows 10 Home
# Scanned: 32040
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [1406 octets] - [17/06/2022 19:07:19]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S01].txt ##########
|
|
20.06.2022, 15:43
| #7 |
| /// TB-Ausbilder | Rogue Killer Fund Unter Systemsteuerung > System und Sicherheit > Sicherheit und Wartung > Wiederherstellung > Systemwiederherstellung konfigurieren kannst du das entsprechende Laufwerk auswählen und auf Konfigurieren klicken. Dort kannst du den Computerschutz aktivieren. Warum es deaktiviert war, kann ich dir nicht sagen. Bitte zur Kontrolle (nach allen Windows-Updates) nochmal FRST ausführen:
|
|
23.06.2022, 19:49
| #8 |
| /// TB-Ausbilder | Rogue Killer Fund Fehlende Rückmeldung Dieses Thema wurde aus unseren Abos gelöscht. Somit bekommen wir keine Benachrichtigung über neue Antworten. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und ein eigenes Thema erstellen! |
|
23.06.2022, 22:03
| #9 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Rogue Killer Fund Thema auf Wunsch wieder geöffnet.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
24.06.2022, 09:34
| #10 |
| | Rogue Killer Fund Danke für die Wiedereröffnung! Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-06-2022
durchgeführt von K21 (Administrator) auf DESKTOP-EJFS8EO (HP HP Pavilion Desktop 560-p0xx) (23-06-2022 20:26:50)
Gestartet von C:\Users\K21\Desktop
Geladene Profile: K21
Plattform: Microsoft Windows 10 Home Version 21H2 19044.1766 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <2>
(Discord Inc. -> Discord Inc.) C:\Users\K21\AppData\Local\Discord\app-1.0.9005\Discord.exe <6>
(explorer.exe ->) (Epic Games Inc. -> Epic Games, Inc.) D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe
(explorer.exe ->) (Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\K21\AppData\Roaming\Telegram Desktop\Telegram.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (HP Inc. -> ) C:\Windows\SysWOW64\spdsvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) RMT -> Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_d81f5e000855f542\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxAccounts.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3069768 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [Discord] => C:\Users\K21\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32656336 2022-06-22] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [Datei ist nicht signiert]
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [MicrosoftEdgeAutoLaunch_1D7C278743CD3EE84048DB042914F9A2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595168 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\MountPoints2: {eec8d1ee-4ded-11ec-9529-dcfe07d64c96} - "G:\setup_vmc_lite.exe" /checkApplicationPresence
HKLM\...\Windows x64\Print Processors\us005PC: C:\Windows\System32\spool\prtprocs\x64\us005pc.dll [43520 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\us005 Langmon: C:\windows\system32\us005lm.dll [22528 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-15] (Google LLC -> Google LLC)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {06A90E0C-72D3-4039-A5C6-F42946F62335} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {0990175C-E9DD-4EBE-8E06-307FE281783D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {171130F2-1227-46DE-AE57-9135F3194E00} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> )
Task: {198E6DD8-51C7-48AF-A30C-159250A85972} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342080 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {225EF79E-3FC9-4E4C-B406-FB7A15FEFAE5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Keine Datei)
Task: {2DC1D94C-2FA5-4E8D-B569-96E0680EB74A} - System32\Tasks\HPCeeScheduleForK21 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392 2016-05-12] (Hewlett-Packard Company -> HP Development Company, L.P.)
Task: {3104C9C4-A0C0-48AE-BBB0-D9FD0B6BC1ED} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {31D605FF-F973-4B98-8511-90FEB2CD2B5E} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {36D17D92-EFB0-47BE-9132-98C7D9DAFFD2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB"
Task: {3D1FFA2F-207A-4289-8A51-53E97E2CD1CD} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {453E62D7-A589-4D31-99A0-E43150497773} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4A6E15DC-66CA-4151-A655-04FF7078191D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B8FEC7B-8814-4473-87CD-BDF204D2D16E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart (Keine Datei)
Task: {51D8B97E-B4CF-41AC-BE83-36D4898950F8} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [752200 2018-05-21] (HP Inc. -> )
Task: {55F9BAC6-55D0-4EEB-BAA5-7E3BD0289848} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u (Keine Datei)
Task: {58843A9E-3A72-4A8B-8D10-DBC370BD1D9B} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115624 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {5972597D-1C33-4B10-BB10-F9BD9553A49B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5DE4DA0D-E98D-42C5-AD9E-BAEED30D9456} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {5E3A059A-AB82-4D28-92CF-1BCDC7CC5FC4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {753C3DE7-CB59-4407-8902-FA7202FACEEA} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {77CCB421-A321-4E0B-8C56-C5CD4056556D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send (Keine Datei)
Task: {79C9B483-E71A-4049-A23E-0B71AF3C5797} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {7A0D3194-FC71-4CF5-A5ED-9911A674183D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Keine Datei)
Task: {7FB3884E-9EE7-4A0F-A2D4-1A693E291E09} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (Keine Datei)
Task: {8A6D0AF2-198C-49DD-98DC-0FC68D9FACC4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Keine Datei)
Task: {8D574FFC-F654-42D9-901F-120E2CF1F7DC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {A3BD8F21-DA34-4997-BFBB-65D0B5C31038} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {A4C35CB4-9881-4387-A774-E2BB560B5665} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {A61ADD4A-D024-4AC4-982D-B201A6C98E7D} - System32\Tasks\{00DF7A40-A7AF-4C08-A588-8F510D9B9302} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404
Task: {AA3A969A-698E-497E-98B4-56FEB0614BE3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport (Keine Datei)
Task: {B791805A-A5B0-4AC3-A99C-D2828D77C1D4} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1654272 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {BC033969-139E-44E0-8D6E-EE5656D1BD63} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C053A1EA-1846-4909-8017-C8B233399C9B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {D2A08AE9-7329-4608-B8FA-406063951769} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC)
Task: {D2F6A3B9-8664-466F-B6C7-628B38DCD1BE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-01] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {DE3A7B88-89B6-46F7-9A16-5DFBD559ACAD} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646344 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {DE931C05-E0E2-4DFE-A0AE-17EF7B2A4A46} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906752 2022-03-30] (Nvidia Corporation -> NVIDIA Corporation)
Task: {E2A97560-1BE7-40AA-BD05-9D66EF1C5C8F} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {E2BCAE47-1766-42CA-B916-8C349191D237} - System32\Tasks\{82D4A10B-C921-4EA3-9A00-096C5B65CBC2} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404
Task: {FBA54266-2197-43A8-B435-6766BAAC9745} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\HPCeeScheduleForK21.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{3d7bb8f0-5a7b-49e3-aaa9-bb84d6f6de99}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{993039e8-4401-499f-998f-f67faab817b8}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{ec4688d4-2527-4b79-8a3b-47c61a42dbc8}: [DhcpNameServer] 192.168.0.1
Edge:
=======
DownloadDir: C:\Users\K21\Downloads
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\K21\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-23]
Edge DownloadDir: Default -> C:\Users\K21\Downloads
FireFox:
========
FF DefaultProfile: lf587ff4.default-1633759003238
FF ProfilePath: C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238 [2022-06-23]
FF Extension: (HTTPS Everywhere) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\https-everywhere@eff.org.xpi [2021-10-09]
FF Extension: (Watch2Gether) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{6ea0a676-b3ef-48aa-b23d-24c8876945fb}.xpi [2022-05-11]
FF Extension: (NoScript) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2022-05-31]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-01]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [Keine Datei]
Chrome:
=======
CHR Profile: C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default [2022-06-17]
CHR Extension: (Präsentationen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-04]
CHR Extension: (Docs) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-04]
CHR Extension: (Google Drive) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-09]
CHR Extension: (YouTube) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-04]
CHR Extension: (Tabellen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-04]
CHR Extension: (Google Docs Offline) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-09-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-09]
CHR Extension: (Netflix Party is now Teleparty) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2022-06-17]
CHR Extension: (Google Mail) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-09]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8885112 2022-05-18] (BattlEye Innovations e.K. -> )
S3 brlapi; C:\WINDOWS\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988384 2022-06-18] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1134624 2022-06-08] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-06] (Epic Games Inc. -> Epic Games, Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
R2 IRMTService; C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe [181360 2016-06-21] (Intel(R) RMT -> Intel Corporation)
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert]
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8677120 2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
S3 NGS; C:\WINDOWS\NGService.exe [3097648 2019-07-17] (NEXON Korea Corporation. -> NEXON Korea Corporation)
S3 Origin Client Service; D:\Origin\OriginClientService.exe [2466608 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3344176 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. -> CyberLink)
S2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14592472 2022-06-13] (ADLICE -> )
R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\\spdsvc.exe [508488 2018-05-24] (HP Inc. -> )
R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2019-09-22] (Samsung Electronics CO., LTD. -> )
S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [337112 2021-10-05] (Twitch Interactive, Inc. -> )
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10595144 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_d81f5e000855f542\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_d81f5e000855f542\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2355952 2022-01-12] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 IntelReadyModeDriver; C:\WINDOWS\System32\drivers\IntelReadyModeDriver.sys [34952 2016-06-21] (Intel(R) RMT -> Intel Corporation)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-06-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl2f715863; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{E8C7168A-608E-409C-B2D1-D7042249A52A}\MpKslDrv.sys [141568 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8596912 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2021-02-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-06-23 20:26 - 2022-06-23 20:26 - 000000000 ___DC C:\Users\K21\Desktop\FRST-OlderVersion
2022-06-20 22:10 - 2022-06-20 22:10 - 000000000 ___DC C:\Users\K21\AppData\Local\VALORANT
2022-06-20 21:06 - 2022-06-20 21:06 - 000000000 ___DC C:\WINDOWS\LastGood.Tmp
2022-06-20 21:04 - 2022-06-07 19:13 - 000041992 ____C (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2022-06-20 21:01 - 2022-06-08 23:01 - 001905920 ____C C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2022-06-20 21:01 - 2022-06-08 23:01 - 001905920 ____C C:\WINDOWS\system32\vulkaninfo.exe
2022-06-20 21:01 - 2022-06-08 23:01 - 001478400 ____C C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2022-06-20 21:01 - 2022-06-08 23:01 - 001478400 ____C C:\WINDOWS\SysWOW64\vulkaninfo.exe
2022-06-20 21:01 - 2022-06-08 23:01 - 001432320 ____C C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2022-06-20 21:01 - 2022-06-08 23:01 - 001432320 ____C C:\WINDOWS\system32\vulkan-1.dll
2022-06-20 21:01 - 2022-06-08 23:01 - 001145600 ____C C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2022-06-20 21:01 - 2022-06-08 23:01 - 001145600 ____C C:\WINDOWS\SysWOW64\vulkan-1.dll
2022-06-20 21:01 - 2022-06-08 23:00 - 001471104 ____C (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2022-06-20 21:01 - 2022-06-08 23:00 - 001212544 ____C (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2022-06-20 21:01 - 2022-06-08 22:57 - 000865784 ____C C:\WINDOWS\system32\nvofapi64.dll
2022-06-20 21:01 - 2022-06-08 22:57 - 000770688 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2022-06-20 21:01 - 2022-06-08 22:57 - 000687608 ____C C:\WINDOWS\SysWOW64\nvofapi.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 043683808 ____C (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2022-06-20 21:01 - 2022-06-08 22:56 - 002126456 ____C (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 001607144 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 001535480 ____C (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 001182200 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 001058416 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 000844400 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2022-06-20 21:01 - 2022-06-08 22:56 - 000714728 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2022-06-20 21:01 - 2022-06-08 22:55 - 010268792 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2022-06-20 21:01 - 2022-06-08 22:55 - 008803304 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2022-06-20 21:01 - 2022-06-08 22:55 - 005732344 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2022-06-20 21:01 - 2022-06-08 22:55 - 005362680 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2022-06-20 21:01 - 2022-06-08 22:55 - 003065984 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2022-06-20 21:01 - 2022-06-08 22:55 - 000455288 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2022-06-20 21:01 - 2022-06-08 22:54 - 000852072 ____C (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2022-06-20 21:01 - 2022-06-08 22:53 - 006362304 ____C (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2022-06-20 21:01 - 2022-06-07 06:08 - 000093121 ____C C:\WINDOWS\system32\nvinfo.pb
2022-06-20 15:32 - 2022-06-20 20:23 - 000000000 ___DC C:\Users\K21\Desktop\Lol Support
2022-06-20 11:57 - 2022-06-20 11:57 - 000001467 ____C C:\Users\K21\Desktop\AdwCleaner[S01].txt
2022-06-20 11:53 - 2022-06-20 11:53 - 000001419 ____C C:\Users\K21\Desktop\Mbam.txt
2022-06-18 17:41 - 2022-06-18 17:41 - 000000000 __HDC C:\$WinREAgent
2022-06-17 20:04 - 2022-06-23 20:27 - 000030766 ____C C:\Users\K21\Desktop\FRST.txt
2022-06-17 20:04 - 2022-06-17 20:04 - 000075688 ____C C:\Users\K21\Desktop\Addition.txt
2022-06-17 20:04 - 2022-06-17 20:04 - 000052966 ____C C:\Users\K21\Desktop\Shortcut.txt
2022-06-17 19:59 - 2022-06-17 19:59 - 000052966 ____C C:\Users\K21\Downloads\Shortcut.txt
2022-06-17 19:58 - 2022-06-17 20:04 - 000075688 ____C C:\Users\K21\Downloads\Addition.txt
2022-06-17 19:56 - 2022-06-17 19:59 - 000041849 ____C C:\Users\K21\Downloads\FRST.txt
2022-06-17 19:55 - 2022-06-23 20:27 - 000000000 ___DC C:\FRST
2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(3).exe
2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(2).exe
2022-06-17 19:46 - 2022-06-17 19:46 - 000007276 ____C C:\Users\K21\Desktop\RogueKiller.txt
2022-06-17 19:19 - 2022-06-18 17:46 - 000000000 ___DC C:\ProgramData\RogueKiller
2022-06-17 19:19 - 2022-06-17 19:19 - 000000906 ____C C:\Users\Public\Desktop\RogueKiller.lnk
2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\Program Files\RogueKiller
2022-06-17 19:18 - 2022-06-17 19:18 - 043599792 ____C (Adlice Software ) C:\Users\K21\Downloads\RogueKiller_setup.exe
2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64.exe
2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(1).exe
2022-06-17 19:06 - 2022-06-17 19:07 - 000000000 ___DC C:\AdwCleaner
2022-06-17 19:06 - 2022-06-17 19:06 - 008551608 ____C (Malwarebytes) C:\Users\K21\Desktop\adwcleaner.exe
2022-06-17 19:03 - 2022-06-17 19:03 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup(1).exe
2022-06-17 17:31 - 2022-06-17 19:05 - 000002040 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-06-17 17:31 - 2022-06-17 19:05 - 000002028 ____C C:\Users\Public\Desktop\Malwarebytes.lnk
2022-06-17 17:31 - 2022-06-17 17:31 - 000239544 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-06-17 17:31 - 2022-06-17 17:31 - 000158640 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-06-17 17:31 - 2022-06-17 17:30 - 000021480 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-06-17 17:30 - 2022-06-17 19:04 - 000000000 ___DC C:\ProgramData\Malwarebytes
2022-06-17 17:25 - 2022-06-17 19:04 - 000000000 ___DC C:\Program Files\Malwarebytes
2022-06-17 17:24 - 2022-06-17 17:24 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup.exe
2022-06-16 22:51 - 2022-06-16 22:51 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-16 22:51 - 2022-06-16 22:51 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-16 22:50 - 2022-06-16 22:50 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-16 22:50 - 2022-06-16 22:50 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-16 22:50 - 2022-06-16 22:50 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-11 06:25 - 2022-06-21 11:35 - 000000001 ____C C:\WINDOWS\vgkbootstatus.dat
2022-06-10 14:41 - 2022-06-10 14:41 - 000000000 ___DC C:\Program Files\Riot Vanguard
2022-06-10 14:37 - 2022-06-10 14:37 - 000000323 ____C C:\Users\K21\Desktop\VALORANT.url
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2022-06-23 20:26 - 2020-04-19 23:47 - 002369024 ____C (Farbar) C:\Users\K21\Desktop\FRST64.exe
2022-06-23 20:26 - 2017-05-15 14:43 - 000000000 ___DC C:\Users\K21\AppData\LocalLow\Mozilla
2022-06-23 20:23 - 2017-06-17 15:43 - 000000000 ___DC C:\Users\K21\AppData\Roaming\discord
2022-06-23 20:23 - 2017-06-09 18:47 - 000000000 ___DC C:\Program Files (x86)\Steam
2022-06-23 20:21 - 2017-01-13 03:10 - 000000000 ___DC C:\ProgramData\NVIDIA
2022-06-23 20:17 - 2020-08-06 19:18 - 000000000 ___DC C:\WINDOWS\system32\SleepStudy
2022-06-23 20:17 - 2019-12-07 11:14 - 000000000 ___DC C:\ProgramData\regid.1991-06.com.microsoft
2022-06-23 20:00 - 2017-11-04 12:34 - 000000000 ___DC C:\Program Files (x86)\Google
2022-06-23 19:37 - 2021-01-13 14:24 - 000000000 ___DC C:\Users\K21\AppData\Roaming\Telegram Desktop
2022-06-23 19:37 - 2018-05-01 23:19 - 000000000 ___DC C:\Users\K21\AppData\Local\Discord
2022-06-23 15:46 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-23 15:46 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\AppReadiness
2022-06-23 07:59 - 2018-03-10 02:40 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-22 19:46 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\NDF
2022-06-22 19:32 - 2020-08-06 19:29 - 001882176 ____C C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-22 19:32 - 2019-12-07 16:50 - 000803488 ____C C:\WINDOWS\system32\perfh007.dat
2022-06-22 19:32 - 2019-12-07 16:50 - 000175462 ____C C:\WINDOWS\system32\perfc007.dat
2022-06-22 19:32 - 2019-12-07 11:13 - 000000000 ___DC C:\WINDOWS\INF
2022-06-22 19:29 - 2019-07-10 12:45 - 000000593 ____C C:\WINDOWS\system32\Drivers\etc\hosts.ics
2022-06-22 18:53 - 2021-01-19 23:03 - 000000000 ___DC C:\Users\K21\Downloads\Telegram Desktop
2022-06-22 08:38 - 2017-04-20 17:50 - 000000000 ___DC C:\Users\K21\AppData\Local\CrashDumps
2022-06-22 06:51 - 2021-11-12 10:54 - 000000000 ___DC C:\Users\K21\AppData\Roaming\slobs-client
2022-06-21 23:06 - 2020-08-06 19:26 - 000003240 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForK21
2022-06-21 23:06 - 2017-04-21 11:49 - 000000356 ____C C:\WINDOWS\Tasks\HPCeeScheduleForK21.job
2022-06-21 09:17 - 2019-08-16 22:34 - 000000000 ___DC C:\ProgramData\Riot Games
2022-06-21 09:00 - 2020-08-06 19:26 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT
2022-06-21 08:59 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2022-06-20 22:11 - 2020-08-06 19:21 - 000002065 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk
2022-06-20 22:11 - 2019-06-25 13:50 - 000012665 ____C C:\ProgramData\xeovjhnl.ufd
2022-06-20 22:11 - 2019-06-25 13:50 - 000000000 ____C C:\ProgramData\3738993435
2022-06-20 22:11 - 2019-02-21 13:40 - 000000000 ____C C:\ProgramData\2721770961
2022-06-20 22:11 - 2019-02-13 22:43 - 000012721 ____C C:\ProgramData\jujlkgnb.yvo
2022-06-20 22:11 - 2018-10-12 02:29 - 000000016 ____C C:\ProgramData\mntemp
2022-06-20 22:11 - 2018-04-06 02:14 - 000000791 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2022-06-20 22:11 - 2017-05-15 14:42 - 000001012 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2022-06-20 22:11 - 2017-01-13 03:16 - 000002198 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector.lnk
2022-06-20 22:11 - 2017-01-13 03:16 - 000002143 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB.lnk
2022-06-20 22:11 - 2017-01-13 02:26 - 000002462 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2022-06-20 22:11 - 2017-01-13 02:25 - 000002682 ____C C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk
2022-06-20 22:09 - 2019-11-07 21:24 - 000000000 ___DC C:\Users\K21\AppData\Local\Riot Games
2022-06-20 21:20 - 2021-10-09 10:01 - 000000795 ____C C:\Users\K21\Desktop\Riot Client.lnk
2022-06-20 21:07 - 2017-08-02 12:04 - 000000000 ___DC C:\ProgramData\NVIDIA Corporation
2022-06-20 21:07 - 2017-04-20 16:07 - 000000000 ___DC C:\Users\K21\AppData\Local\NVIDIA
2022-06-20 20:43 - 2020-08-06 19:26 - 000004308 ____C C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003976 ____C C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003940 ____C C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003894 ____C C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003858 ____C C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003858 ____C C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003858 ____C C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003858 ____C C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2020-08-06 19:26 - 000003654 ____C C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2022-06-20 20:43 - 2019-01-22 02:27 - 000001454 ____C C:\Users\Public\Desktop\GeForce Experience.lnk
2022-06-20 20:43 - 2017-08-02 12:04 - 000000000 ___DC C:\Program Files\NVIDIA Corporation
2022-06-20 20:43 - 2017-08-02 12:04 - 000000000 ___DC C:\Program Files (x86)\NVIDIA Corporation
2022-06-20 14:37 - 2018-04-06 02:14 - 000000000 ___DC C:\Users\K21\AppData\Local\EpicGamesLauncher
2022-06-18 22:05 - 2017-01-13 02:26 - 000000000 ___DC C:\Program Files (x86)\Microsoft Office
2022-06-18 17:47 - 2020-09-28 09:04 - 000002246 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-18 17:47 - 2020-09-28 09:04 - 000002205 ____C C:\Users\Public\Desktop\Google Chrome.lnk
2022-06-18 17:47 - 2020-06-14 12:57 - 000002443 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-18 17:47 - 2020-06-14 12:57 - 000002281 ____C C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-06-18 17:42 - 2019-12-07 11:03 - 000000000 ___DC C:\WINDOWS\CbsTemp
2022-06-17 19:20 - 2017-05-15 14:42 - 000000000 ___DC C:\Program Files\Mozilla Firefox
2022-06-17 18:55 - 2018-05-16 12:14 - 000000000 ___DC C:\Users\K21\AppData\Local\D3DSCache
2022-06-17 17:31 - 2019-12-07 11:14 - 000000000 __HDC C:\WINDOWS\ELAMBKUP
2022-06-17 16:39 - 2020-08-06 19:18 - 000577120 ____C C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 __RDC C:\WINDOWS\ImmersiveControlPanel
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lv-LV
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lt-LT
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\et-EE
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\es-MX
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\Dism
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\ShellExperiences
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\oobe
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lv-LV
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lt-LT
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\et-EE
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\es-MX
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\Dism
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\DDFs
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\bcastdvr
2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-17 16:38 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-16 22:50 - 2020-08-06 19:20 - 002877952 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-16 22:43 - 2017-04-22 02:05 - 000000000 ___DC C:\WINDOWS\system32\MRT
2022-06-16 22:41 - 2017-04-22 02:05 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-16 14:49 - 2022-01-22 22:41 - 000000000 ___DC C:\Users\K21\Desktop\Carola
2022-06-13 22:28 - 2021-12-11 10:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1967584404-1960276878-1159121988-1001
2022-06-13 22:28 - 2020-08-06 19:26 - 000003376 ____C C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1967584404-1960276878-1159121988-1001
2022-06-13 22:28 - 2020-08-06 19:19 - 000002400 ____C C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-11 07:24 - 2020-08-06 19:26 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-11 07:24 - 2020-08-06 19:26 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-06-11 06:26 - 2021-10-06 11:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2022-06-09 12:37 - 2018-05-01 23:19 - 000002228 ____C C:\Users\K21\Desktop\Discord.lnk
2022-06-08 22:53 - 2019-08-23 23:40 - 007478288 ____C (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2022-06-08 14:34 - 2019-11-14 21:58 - 000000000 ___DC C:\Users\K21\AppData\Local\WEB2Print
2022-06-07 19:13 - 2019-08-23 23:40 - 000129032 ____C (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2022-06-02 08:04 - 2018-07-10 00:30 - 000000000 ___DC C:\ProgramData\Packages
2022-06-01 11:04 - 2021-11-12 10:54 - 000000000 ___DC C:\Program Files\Streamlabs OBS
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2017-07-09 15:49 - 2017-07-09 15:49 - 000000063 ____C () C:\Users\K21\AppData\Local\emaildefaults
2017-07-09 23:41 - 2017-07-09 23:41 - 000000417 ____C () C:\Users\K21\AppData\Local\karboncalligraphyrc
2021-12-03 13:21 - 2021-12-03 13:21 - 000000039 ____C () C:\Users\K21\AppData\Local\kritadisplayrc
2017-07-09 15:49 - 2021-12-03 13:21 - 000022946 ____C () C:\Users\K21\AppData\Local\kritarc
2022-02-03 21:18 - 2022-02-03 21:18 - 000000000 ____C () C:\Users\K21\AppData\Local\{1456B631-EBD3-4E17-A59D-484928FA013C}
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
|
24.06.2022, 09:35
| #11 |
| | Rogue Killer FundCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-06-2022
durchgeführt von K21 (23-06-2022 20:28:22)
Gestartet von C:\Users\K21\Desktop
Microsoft Windows 10 Home Version 21H2 19044.1766 (X64) (2020-08-06 17:26:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1967584404-1960276878-1159121988-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1967584404-1960276878-1159121988-503 - Limited - Disabled)
defaultuser0 (S-1-5-21-1967584404-1960276878-1159121988-1000 - Limited - Disabled) => C:\Users\defaultuser0
Gast (S-1-5-21-1967584404-1960276878-1159121988-501 - Limited - Disabled)
K21 (S-1-5-21-1967584404-1960276878-1159121988-1001 - Administrator - Enabled) => C:\Users\K21
WDAGUtilityAccount (S-1-5-21-1967584404-1960276878-1159121988-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Bandicam (HKLM-x32\...\Bandicam) (Version: 4.1.4.1413 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.5.6909 - CyberLink Corp.)
CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2.3309 - CyberLink Corp.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Discord (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.583.1 - Dropbox, Inc.) Hidden
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Epic Games Launcher (HKLM-x32\...\{42D23AAF-7D6F-48C7-A62C-8E02D6234156}) (Version: 1.1.147.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Game Installer (HKLM-x32\...\Game Installer 1.0.0) (Version: 1.0.0 - Intrepid Studios, Inc.)
Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.115 - Google LLC)
Guild Wars 2 (HKLM\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.)
HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.)
HP Customer Experience Enhancements (HKLM-x32\...\{64228DFB-7450-49B7-935C-B97342CB6659}) (Version: 6.0.10.1 - HP Development Company, L.P.) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.2 - HP Inc.)
HP ePrint SW (HKLM\...\{1B1E721E-4843-465C-867F-E8651E5ABCD1}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{70FF7FA8-1775-4D18-855B-DDB5AE876486}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{804E6C19-C29C-4C2A-AB7D-84F657F36A1A}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM\...\{9E79DC8C-9CBD-4BFF-B1C6-DDE56471600E}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{2460D024-A262-43EE-B83B-D990D7188252}) (Version: 5.1.19895 - HP Inc.) Hidden
HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.)
HP ePrint SW (HKLM-x32\...\{E1FE22DE-22EF-4235-A56A-287CE38AA584}) (Version: 5.1.19895 - HP Inc.) Hidden
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Support Solutions Framework (HKLM-x32\...\{624DA112-9F71-492E-BAF9-0E5E4224626C}) (Version: 12.12.32.3 - HP Inc.)
HP System Event Utility (HKLM-x32\...\{025C1573-2F1D-46AF-BAB8-594EBF56A889}) (Version: 1.4.11 - HP Inc.)
Intel(R) Chipset Device Software (HKLM\...\{3AE6FD56-D431-4B53-94F0-95E844206ADF}) (Version: 10.1.1.32 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{7B3B60EB-197B-4B06-ADFF-D0B50E755D4F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{EC465D35-92DC-4DAE-9EA8-01215688F709}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{E5B5A486-C7F5-429C-9324-13835620F2FD}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{B66F70B4-34E5-429A-9F55-7129E0833A45}) (Version: 14.8.0.1042 - Intel Corporation) Hidden
Intel(R) Ready Mode Technology (HKLM\...\{91DC75C1-5D36-4AF0-913E-F45B0923CA43}) (Version: 1.1.70.525 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{35069AA3-F7B2-4759-96F0-9EE43AACB690}) (Version: 19.00.1621.3340 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation)
Krita (x64) 3.1.4.0 (HKLM\...\Krita_x64) (Version: 3.1.4.0 - Krita Foundation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
LibreOffice 7.0.4.2 (HKLM\...\{B3171B83-4945-43E0-A101-841638C05506}) (Version: 7.0.4.2 - The Document Foundation)
Malwarebytes version 4.5.10.200 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.10.200 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 102.0.1245.44 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.15225.20288 - Microsoft Corporation)
Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.15225.20288 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\OneDriveSetup.exe) (Version: 22.111.0522.0002 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{D3531D7A-B6FA-44A5-A024-E2A14F325F90}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{985F7F32-5BE4-4CDA-9582-F7AEA40D1974}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.30.30704 (HKLM\...\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.30.30704 (HKLM\...\{662A0088-6FCD-45DD-9EA7-68674058AED5}) (Version: 14.30.30704 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 101.0.1 (x64 de)) (Version: 101.0.1 - Mozilla)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
NVIDIA FrameView SDK 1.2.7521.31103277 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.7521.31103277 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.25.1.27 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.25.1.27 - NVIDIA Corporation)
NVIDIA Grafiktreiber 516.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 516.40 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20288 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
Origin (HKLM-x32\...\Origin) (Version: 10.5.56.33908 - Electronic Arts, Inc.)
Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8237 - Realtek Semiconductor Corp.)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
RogueKiller Version 15.5.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.5.3.0 - Adlice Software)
Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.4.28 - HP Printing Korea Co., Ltd.)
Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.32 - Samsung Electronics Co., Ltd.) Hidden
Skype Version 8.77 (HKLM-x32\...\Skype_is1) (Version: 8.77 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 21.9.27.783 - StreamElements)
Streamlabs OBS 1.4.0 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.4.0 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.1 - TeamSpeak Systems GmbH)
Telegram Desktop version 4.0 (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 4.0 - Telegram FZ-LLC)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal)
Twitch Studio (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 128.0.10632 - Ubisoft)
Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.67 - Samsung Electronics CO., LTD.)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zoom (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\ZoomUMX) (Version: 5.6.6 (961) - Zoom Video Communications, Inc.)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-20] (Amazon.com)
Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.220.200.0_x64__kgqvnymyfvs32 [2022-06-16] (king.com)
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.1.0_neutral__8xx8rvfyw5nnt [2021-09-28] (Facebook Inc)
HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6 [2017-04-20] (HP Inc.)
HP LOUNGE -> C:\Program Files\WindowsApps\UniversalMusicMobile.HPLOUNGE_2.1.1.0_x64__3ms5eyejfeart [2021-02-10] (Universal Music Mobile)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-04-27] (HP Inc.)
March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_6.4.0.0_x86__h6adky7gbf63m [2022-05-19] (Gameloft SE)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-08] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.19.202.0_x64__8wekyb3d8bbwe [2022-06-23] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-04-09] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-06-20] (NVIDIA Corp.)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-09-22] (Samsung Electronics Co. Ltd.)
Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_6.3.80.0_x64__kx24dqmazqk8j [2022-05-13] (Random Salad Games LLC)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-11] (Twitter Inc.)
WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2218.8.0_x64__cv1g1gvanyjgm [2022-06-01] (WhatsApp Inc.)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-06-03] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_d81f5e000855f542\nvshext.dll [2022-06-08] (Nvidia Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [vidc.mjpg] => C:\windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com)
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2018-08-29 10:31 - 2022-03-04 04:23 - 126965248 ____C () [Datei ist nicht signiert] C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libcef.dll
2018-08-29 10:31 - 2021-11-17 13:38 - 000384000 ____C () [Datei ist nicht signiert] C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libegl.dll
2018-08-29 10:31 - 2021-11-17 13:38 - 008006656 ____C () [Datei ist nicht signiert] C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\libglesv2.dll
2019-09-22 21:33 - 2016-07-20 12:15 - 002847744 ____C () [Datei ist nicht signiert] C:\WINDOWS\system32\DlgSearchEngine.dll
2017-11-08 08:35 - 2017-11-08 08:35 - 000123904 _____ (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll
2018-08-29 10:31 - 2022-03-04 04:23 - 000983552 ____C (The Chromium Authors) [Datei ist nicht signiert] C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\chrome_elf.dll
2018-05-18 10:57 - 2018-05-18 10:57 - 003696128 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\ScanFax2PC\CDAScan2PCMonitor64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\2721770961:13DB2E51FF [3314]
AlternateDataStreams: C:\ProgramData\3738993435:C292A9EB33 [3314]
AlternateDataStreams: C:\ProgramData\jujlkgnb.yvo:2B1EB952EC [3314]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3314]
AlternateDataStreams: C:\ProgramData\xeovjhnl.ufd:6160E67F4A [3314]
AlternateDataStreams: C:\ProgramData\xeovjhnl.ufd:A153BA8495 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk:A053CBE120 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector.lnk:AD8600DD61 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB.lnk:FA54E2D743 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk:0ADCEF6275 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [3314]
AlternateDataStreams: C:\Users\K21\Anwendungsdaten:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\K21\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE
HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKLM -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-1967584404-1960276878-1159121988-1001 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 ____C C:\WINDOWS\system32\drivers\etc\hosts
2019-07-10 12:45 - 2022-06-22 19:29 - 000000593 ____C C:\WINDOWS\system32\drivers\etc\hosts.ics
924
192.168.137.124 Galaxy-A52.mshome.net # 2021 8 4 12 12 13 9 942
42
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-1967584404-1960276878-1159121988-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Prompt)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [UDP Query User{2DDDF377-361C-493E-ADAC-012E031F8DDB}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> )
FirewallRules: [TCP Query User{793B3F73-6DEF-4F12-8A83-8A8808087D8F}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> )
FirewallRules: [{9A4B9103-ABAA-4997-9B68-0F101D716D5B}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert]
FirewallRules: [{112E5F28-60B5-4DC2-B0B2-624C79BCDD26}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert]
FirewallRules: [{66EF7E85-8A46-4F07-8B07-0660DD5B1927}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei
FirewallRules: [{2743F7A2-FCCC-4A0C-8330-DA0920D82B60}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei
FirewallRules: [{E56A520F-DA95-4CDA-83B9-CC3D91CFCC8C}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei
FirewallRules: [{92D7512D-71F8-49C2-A1E4-DF80AB71F877}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei
FirewallRules: [{8E31CD2F-60D9-4E53-BCF7-97726D699641}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei
FirewallRules: [{699B02D8-FCC2-4B15-A020-D9CDC7A9CA78}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei
FirewallRules: [{32340C4D-5A86-4095-B4FC-D174E94DF53E}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei
FirewallRules: [{1EEDF67A-A09F-4726-B236-A5574D331234}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei
FirewallRules: [UDP Query User{6B31903A-64B0-44DD-9633-34695CBA0340}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{10C5BE9A-97CB-49E6-A197-E298C973FBC9}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{182D9748-A6AD-4678-99A4-9B2D9FF21DD2}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei
FirewallRules: [{3E74C55F-74C2-4615-A2B2-41A3425A4E4D}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei
FirewallRules: [UDP Query User{174BB3B9-9DE5-4BBA-9A09-CFB1630D58C2}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [TCP Query User{7386F47F-54AD-46F2-B69D-E37FE2ED0430}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{862EC06A-C323-4DA2-9857-63388A3DBF64}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{1A48DEBC-C60D-4B20-8463-CB7CDEFFEEAE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei
FirewallRules: [{F0F37E3D-C541-4509-9CE3-43E0D38F11E8}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei
FirewallRules: [{5E679FBF-9484-4B3B-A8EA-5E25ECF9581E}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei
FirewallRules: [{D2B7FD36-4C50-4F53-8D3D-B7652A345409}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei
FirewallRules: [{A815FB4C-6D84-4F4B-912E-4DF6D7BFBF81}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3AB0EF62-2CB7-466F-A784-C8431CEC4156}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{3A077B1C-31DF-4A4B-B6AA-2B8880C51408}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{1430457D-F984-42AA-930D-08DB71566001}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (HP Inc. -> )
FirewallRules: [{B4872368-E942-4810-A3E8-3062ED6C35AE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (HP Inc. -> HP Printing Korea Co., Ltd.)
FirewallRules: [{07BE60BF-439D-484C-B665-F432875BB0F2}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (HP Inc. -> HP Printing Korea Co., Ltd.)
FirewallRules: [{DF8E8124-FC68-4F90-BF8B-E4A2FB042047}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (HP Inc. -> )
FirewallRules: [{3A6D9B27-790C-480C-AC90-F6E152F51897}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe (Samsung Electronics CO., LTD. -> )
FirewallRules: [{B56A3017-9B07-4426-9825-61A1AF1BC6BC}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
FirewallRules: [{91084CF8-ED1B-413B-A005-BAA81EB04F95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{0EAEFBB1-9EE4-4886-AEB9-8F82B3EED741}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{DF3BF395-9013-41C8-8F46-B6C99CAF64C0}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{EA918A23-9B19-4393-B1CB-645E4BBCABFE}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{A042B6E0-F396-4C85-9A5C-F320851EBB54}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [{5F2D4802-A8D3-430E-A3A5-CF8848437570}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{448F24CA-98E2-4A58-A62B-44351C19C053}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{C6B0BE44-D1FD-45BC-B4B6-40174929D328}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [{45C32BB5-7CDF-40DB-8C87-38C6D8BAB729}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{32DED9B5-2517-4B3E-A4DF-E27C25284D40}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{9484FF45-858C-4827-862C-804F6E554DA4}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{6338FA0F-BD3E-4DB2-8CBB-301C086EDD76}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert]
FirewallRules: [{D6F309A4-51A8-42AE-A45B-F6DFFED4E691}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{CB7ED8B0-CDF2-45A9-B9D9-013CBEC7DFEF}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{83730AA0-54BA-4A4A-9DBA-2D5B20B0A09B}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{22B7DA9D-5BE7-4763-B58F-8EB91846FCF7}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.)
FirewallRules: [{52B56086-059A-4CE7-93CD-B534DAD0418B}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{CC30C740-79B2-40F1-8BB8-F398AB4FE31C}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{C073FB44-D761-4800-B3D1-AA14E9410682}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{EF7E69BE-1F11-420D-93AD-5806325455B0}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{8A1671B8-3D54-4868-B369-0C43BA3F22E2}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{6BBA2C59-8330-4DB5-B0CC-4DB0336ED55D}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{B680590D-F680-4C4D-B2C3-9150D506B100}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{D912DB14-41B8-45C6-9645-5C7A33006346}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{3060DA83-4CA1-448E-90B6-19C5B776B2F9}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [{FE4293B5-16F4-48C9-9705-CB1EC80579BF}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{0CCD1D59-6CED-4B20-A135-AD3B6CA75C96}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{980FDE5C-2D78-469B-AA33-14A0BF3C89BD}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [{8BEB68A9-82A1-4409-94AF-8C899E4D5B1C}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [{BFF0DC43-95AC-4DE4-A4B8-4170B183A1FD}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [UDP Query User{F4CBE8DE-6C5B-463B-9F56-D42AD7EFC5D2}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [TCP Query User{99EDE91F-8BA2-4D9E-A9C9-558C6628D8FA}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei
FirewallRules: [{51969C71-F3FE-4F57-A1D1-C3A7A359F15C}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [{D4E5756C-63E9-4AC3-B7AC-615645F35E0F}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [UDP Query User{3E25EF61-9EDB-47A1-9737-50C25A1DAC55}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [TCP Query User{08B9A1A3-1A08-49A4-B88A-E8AEADFC3B47}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei
FirewallRules: [{1BBD3A94-6B54-4C48-B372-DCC20336D717}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [{EF49B8AC-B285-482F-BE9E-D3065F6913C7}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [UDP Query User{4E4F2D49-7F97-47DC-AA0F-8F61060CBF78}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [TCP Query User{09A68168-DDED-4E07-956E-E5CB958BA584}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei
FirewallRules: [{7C5010F9-6C39-4A5A-A647-AC1633A8ED95}] => (Allow) LPort=1900
FirewallRules: [{DD840014-9503-432F-93A8-985C4AB205AD}] => (Allow) LPort=2869
FirewallRules: [{6CF7B920-A8A9-4970-98E5-B4AFD5DF6260}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F0256D43-7C44-46C9-A514-D32D93623CB5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5505D5CB-230C-40FD-98FA-BFC06590E8AE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5DBC6FBE-8969-4470-B060-EA2C1F46D187}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3B637BE3-5D8B-4C8D-ADC3-C27F648CA39D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{1F574894-9198-4ADA-8301-4924FDB8824F}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Downloader.exe => Keine Datei
FirewallRules: [{25ECC44B-09CF-44E6-AB4C-84F97859EB10}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Launcher.exe => Keine Datei
FirewallRules: [{100F0297-C846-4D87-B03F-7ED875E67519}] => (Allow) C:\Users\K21\Downloads\bin64\BlackDesert64.exe => Keine Datei
FirewallRules: [{541D4041-611F-436B-9D92-D7EF54A7AAE2}] => (Allow) C:\Users\K21\Downloads\bin\BlackDesert32.exe => Keine Datei
FirewallRules: [{66B58DF2-E010-4069-8398-6E940ADD203B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{937E67D8-D8D4-4CFC-B6A1-BD791F88A19E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{A835CBA9-9E1C-49ED-A95F-B5B688A306F2}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei
FirewallRules: [TCP Query User{731E2798-3646-4389-A81D-86F1D573BE8F}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei
FirewallRules: [UDP Query User{F5BF8D29-5357-4EBD-BC02-A0591B519930}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{8E552E3C-C36B-4D4B-983C-D99409DC89F8}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei
FirewallRules: [TCP Query User{738F4040-E865-4F64-A821-0295BEBAB677}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei
FirewallRules: [UDP Query User{722B429C-5634-4D89-AE08-06F9CB995E36}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei
FirewallRules: [TCP Query User{06F052ED-6B03-41D0-AD06-2730ED2D8BAE}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{248B7716-9EC3-479E-A9D8-97753081CD6B}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{F2C2C73F-A23C-418B-B2D0-69BB84E97B2B}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei
FirewallRules: [{B416FE38-CB35-4499-8DA2-319DB941C6C1}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei
FirewallRules: [{65E31776-FDA8-476F-B2E6-41E09B86D25F}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei
FirewallRules: [{E006A453-632F-40FF-B9E6-B2C8E10A9987}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei
FirewallRules: [TCP Query User{C00E63F2-406C-474E-93B3-2EFB1F42C843}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> )
FirewallRules: [UDP Query User{CD477984-0A16-484A-8240-947AEFCE3360}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> )
FirewallRules: [{6A9D9DEB-2B45-45D9-BD58-3F15A1CA103B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{17CE65AD-A9DE-4B44-BA6D-A288F914AA21}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [TCP Query User{54AA717B-E30F-4ED3-B3A3-E87B925A5FB8}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{41260157-1F0F-48A6-9AA1-00ACA0A0D9DB}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{5631BB50-E38E-4B9C-BFE3-5B5F9A7D62C1}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei
FirewallRules: [{2CF01E47-E5E4-4BEE-8A2F-E4A0B7EF8555}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei
FirewallRules: [{050944A0-B637-4FE5-BF61-8F8E087BE229}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei
FirewallRules: [{E4BC2E89-4A7A-412C-8CD3-5E489E11CFBB}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei
FirewallRules: [{1A6078FB-0BDE-4B95-B664-D4F0EF946756}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei
FirewallRules: [{31A12DD4-3332-485C-B0A4-7A19E930CDA0}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei
FirewallRules: [{B29F22DA-3379-4B0B-BA59-99D4C46EA596}] => (Allow) D:\EasyAntiCheat\EasyAntiCheat_Setup.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{AA91E5CD-75C9-4BF0-98DF-BA24C71CD181}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{1E6D126E-DB51-4640-B4D2-0376297AB3E6}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{4F68D823-004A-49BA-849E-872EEB1E2AAC}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{9CFC75A0-51A5-4F53-8AB7-647D66C556AD}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.)
FirewallRules: [{DAD5B8F1-EE56-451E-B6CF-974862F51846}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{D7AA6A2C-261F-457B-BEBC-1E97726FE3E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{6461B2B6-037B-47AC-92BA-9DBD2B0AF3CD}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [UDP Query User{69F54785-BDC5-4F5A-929A-8556DD9BABF2}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [{40C859E3-600D-4C03-93DF-787532BC75EA}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{04CA3854-B8F7-41E5-9609-56E63FFBE991}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{DC2E3732-2760-40BC-BDEA-46C8DA82087C}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{4C059F61-6C83-4CC8-BC1B-597C577B87D2}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{E2091C34-3DD1-42D7-851E-4D41E87E343A}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0C25909D-28D3-4E6A-9D97-E180A09814F1}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{A3844684-FFEF-4D27-80CF-9DAE8516E646}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei
FirewallRules: [{93B722E3-10F6-4E9E-8F40-CAAF26ED5DAE}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei
FirewallRules: [{625F88A7-5033-4EF9-8E9C-6A6A45DA9091}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei
FirewallRules: [{1BD0B5B8-5FB0-4963-A489-99723BEFFD44}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei
FirewallRules: [{B4D27174-957A-4ABA-AF74-5A243B3EEF05}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei
FirewallRules: [{570A5DF2-050D-499E-83DD-AB2FC4779603}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei
FirewallRules: [TCP Query User{5E1C7C27-0196-49DF-99CA-9018C1D7B9ED}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei
FirewallRules: [UDP Query User{777F24FA-5455-4674-8F21-2B21AC9F30F0}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei
FirewallRules: [{D8C98445-1F22-46A0-9A8C-2527563F8C41}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{4EDFD8BA-824C-4DB2-AEA7-754C754A83BB}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei
FirewallRules: [{353832A4-5835-4B22-B3EF-1BCD947D41CC}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei
FirewallRules: [{5692F478-AF58-4FEA-B5E2-44DC600B247E}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei
FirewallRules: [{39B8937F-C68A-47D2-BEB3-FC4FC851086C}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei
FirewallRules: [TCP Query User{6719ACE0-5226-4B68-97FF-A14F7C39D975}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )
FirewallRules: [UDP Query User{96260930-84A1-4D35-85F9-C30AC45F1FE1}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> )
FirewallRules: [{964F0EDE-0AE6-42F3-80F3-CC6F5ED26B01}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{3DD7F452-4324-4FE4-8DFC-A8292CFDDD22}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{9C13C11E-BD28-4A29-B9D4-22B9C79F565F}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss)
FirewallRules: [{E0183729-2724-465F-8AF3-924C065979F7}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss)
FirewallRules: [{D185BB44-5A94-4F1F-841A-C68164F694E7}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{69DF0FDD-0321-4889-BC77-F22023C6CC4B}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{25ADA769-57D8-471A-81A4-C5B292983257}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [TCP Query User{A8C08DF9-8231-4280-BC70-BECBC9B34D02}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
FirewallRules: [UDP Query User{51DC50D8-8886-4B47-915F-680987A26A32}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
FirewallRules: [{5D871D23-FA8E-4689-A8B6-66654C68401A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{30B84162-07F5-4874-A2B5-9835899FE074}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{91254686-6FE5-4805-A8E2-99B1F1DB3123}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{52E9CD19-2ED5-4204-95DB-98ACC8E0CDF6}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{B0258ADD-DD72-4EAA-BBA4-0C0C6D7B3221}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{578D9C75-4D7F-402F-B2DF-609CE77F9450}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [TCP Query User{BDA6D178-7084-49F3-A095-D2232AEDE414}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{CD9BB49D-9E16-4055-87AB-E8A1899AA8B6}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [{C03F6AA5-DF3E-420F-B4CE-9910F790899A}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei
FirewallRules: [{1A59BD2D-C433-417E-A707-8E386E5776C8}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei
FirewallRules: [{5CFD6345-746C-4EC0-A9EC-C294886295F3}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei
FirewallRules: [{B393116E-0E53-4651-A963-47A63AED5B76}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei
FirewallRules: [TCP Query User{DAD1A651-898D-4620-9FCE-BAA7489121FF}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [UDP Query User{F1FAF6F3-789D-41E0-B761-742A29EB7C3F}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [{2BFF80FF-1F5B-47F9-86D8-AFA4D44B0332}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [{1B39A1F8-0B1C-4CB4-B98D-5A6854C982D2}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei
FirewallRules: [TCP Query User{8504E094-CC94-47FC-9BE6-A46952218377}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei
FirewallRules: [UDP Query User{1141BFEA-68EC-4C29-8569-A71A85ABBD50}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei
FirewallRules: [{F2EEC378-37B4-4C52-B211-B5870AAA5EB6}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{9239EB72-0D34-4E77-BAA5-14D099C83576}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{75880721-EFF8-4FD4-9729-76A36EE5B439}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{A3F6B4AF-7620-4184-877E-71454D06F8C4}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [TCP Query User{E760469D-0432-447D-A4AE-8919D846ED75}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei
FirewallRules: [UDP Query User{3713C040-2E65-4471-9CCF-A035D8BF9AF6}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei
FirewallRules: [TCP Query User{8AA670A9-4015-48F2-A5E1-9C7C277D50E8}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{A02ACC89-ED39-4DB5-ACA9-F07373355130}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{2C8E7648-C1C1-40D5-9F92-9098251E1DF1}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{3C226CB8-E281-47B5-8521-2F45AACB83B7}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{96EE4089-2516-4D30-B650-3DB38B9F9216}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{C1CB0876-1812-4CFF-9528-4112EA3D290C}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{4CBDB035-3DBA-405A-A358-73066990FF83}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{23D66D78-1296-4020-B132-1560D79FB540}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{AA019C34-5176-41D1-BA58-0058DEED04C7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{5727CEAF-7405-4031-A5CD-DDF2AA013CBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{AC3FE86D-05FB-4CAA-93AA-1221D59D12E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{ED0008E8-B37A-45D9-BBF5-36659ECBDB9B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [{CEE0FA1E-ABA9-43AF-B7A4-5FA743092157}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{C647819A-BAEE-4EFA-825A-E6199E96D86A}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Block) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{33C946DB-8057-431D-8E91-4C2B90A92BAE}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Block) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert]
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (06/22/2022 07:32:07 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm firefox.exe Version 101.0.1.8194 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
Prozess-ID: 53f4
Startzeit: 01d885f1ffd6db65
Beendigungszeit: 29
Anwendungspfad: C:\Program Files\Mozilla Firefox\firefox.exe
Bericht-ID: a9927575-e565-4ae2-b99e-4e043b460dfc
Vollständiger Name des fehlerhaften Pakets:
Relative Anwendungs-ID des fehlerhaften Pakets:
Absturztyp: Unknown
Error: (06/22/2022 08:38:29 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: vgtray.exe, Version: 1.11.4.82, Zeitstempel: 0x629a3c8c
Name des fehlerhaften Moduls: vgtray.exe, Version: 1.11.4.82, Zeitstempel: 0x629a3c8c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000721e4
ID des fehlerhaften Prozesses: 0x1690
Startzeit der fehlerhaften Anwendung: 0x01d885f1f81c4d02
Pfad der fehlerhaften Anwendung: C:\Program Files\Riot Vanguard\vgtray.exe
Pfad des fehlerhaften Moduls: C:\Program Files\Riot Vanguard\vgtray.exe
Berichtskennung: a6423c23-d724-4025-acdd-70bfae3436c2
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (06/21/2022 01:40:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname DESKTOP-EJFS8EO.local already in use; will try DESKTOP-EJFS8EO-2.local instead
Error: (06/21/2022 01:40:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 4 DESKTOP-EJFS8EO.local. Addr 192.168.0.163
Error: (06/21/2022 01:40:22 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.213:5353 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:31A3:9902:CC3B:C9CE
Error: (06/21/2022 01:40:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:BC42:C4A9:B27E:65C4
Error: (06/21/2022 01:40:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.213:5353 16 DESKTOP-EJFS8EO.local. AAAA FE80:0000:0000:0000:31A3:9902:CC3B:C9CE
Error: (06/21/2022 01:40:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Resetting to Probing: 4 DESKTOP-EJFS8EO.local. Addr 192.168.0.163
Systemfehler:
=============
Error: (06/21/2022 09:01:00 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/20/2022 09:20:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/20/2022 09:07:02 PM) (Source: nvlddmkm) (EventID: 14) (User: )
Description: Event-ID 14
Error: (06/20/2022 09:06:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 6000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/20/2022 09:06:58 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "NVIDIA LocalSystem Container" wurde mit folgendem Fehler beendet:
Für einen allgemeinen Befehl wurde ein Ergebnis zurückgegeben, das auf einen Fehler hinweist.
Error: (06/18/2022 05:48:17 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/17/2022 07:02:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/17/2022 04:52:42 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Web Helper Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Windows Defender:
================
Date: 2022-06-23 08:09:33
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8A9B0B73-743A-43FD-B685-D393CB04BD64}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-22 12:15:34
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2841D239-CBE7-430E-AE73-F769B1AD3E91}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-21 09:23:42
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6316890E-F0C5-40FC-9D83-E1E66541F01C}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-20 09:53:36
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {D90B8A0F-EA61-43BB-A800-79C60063C1DF}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2022-06-19 10:55:30
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {5EABD2E9-DE2F-4ED4-82F0-16CD925F2E74}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]:
Date: 2022-06-22 19:23:11
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.369.54.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.19300.2
Fehlercode: 0x80240438
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Date: 2022-06-17 17:04:56
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.367.1682.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.19200.6
Fehlercode: 0x80072ee2
Fehlerbeschreibung: Das Zeitlimit für den Vorgang wurde erreicht.
Date: 2022-06-17 16:51:41
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.367.1682.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.19200.6
Fehlercode: 0x8024001e
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
CodeIntegrity:
===============
Date: 2022-06-23 08:07:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-06-21 09:23:34
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-03-15 08:37:22
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2202.4-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2022-01-09 18:33:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: AMI F.22 11/04/2016
Hauptplatine: HP 828A
Prozessor: Intel(R) Core(TM) i5-6400 CPU @ 2.70GHz
Prozentuale Nutzung des RAM: 57%
Installierter physikalischer RAM: 8141.54 MB
Verfügbarer physikalischer RAM: 3424.03 MB
Summe virtueller Speicher: 15309.54 MB
Verfügbarer virtueller Speicher: 7557.41 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:118.01 GB) (Free:26.66 GB) (Model: SAMSUNG MZ7LN128HCHP-000H1) NTFS
Drive d: (DATA) (Fixed) (Total:919.76 GB) (Free:250.4 GB) (Model: TOSHIBA DT01ACA100) NTFS
Drive e: (RECOVERY) (Fixed) (Total:11.75 GB) (Free:1.23 GB) (Model: TOSHIBA DT01ACA100) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
\\?\Volume{a6b73df8-e8fe-4716-a81e-041f99cb74ac}\ (Windows RE tools) (Fixed) (Total:0.96 GB) (Free:0.47 GB) NTFS
\\?\Volume{8e1affda-4d46-45b8-805f-324f9dc60da1}\ () (Fixed) (Total:0.25 GB) (Free:0.18 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 119.2 GB) (Disk ID: A80690AF)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: F1E6F7CD)
Partition: GPT.
==================== Ende von Addition.txt =======================
|
|
24.06.2022, 10:45
| #12 |
| /// TB-Ausbilder | Rogue Killer Fund Wir entfernen ein paar verwaiste Einträge und kontrollieren die Windows-Systemdateien auf Fehler. Schritt 1 WARNUNG AN ALLE MITLESER !!! Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!
|
|
24.06.2022, 14:26
| #13 |
| | Rogue Killer FundCode:
ATTFilter Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 24-06-2022 01
durchgeführt von K21 (24-06-2022 15:15:44) Run:1
Gestartet von C:\Users\K21\Desktop
Geladene Profile: defaultuser0 & K21
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
SystemRestore: On
CreateRestorePoint:
CloseProcesses:
2022-06-20 22:11 - 2019-06-25 13:50 - 000012665 ____C C:\ProgramData\xeovjhnl.ufd
2022-06-20 22:11 - 2019-06-25 13:50 - 000000000 ____C C:\ProgramData\3738993435
2022-06-20 22:11 - 2019-02-21 13:40 - 000000000 ____C C:\ProgramData\2721770961
2022-06-20 22:11 - 2019-02-13 22:43 - 000012721 ____C C:\ProgramData\jujlkgnb.yvo
2022-06-20 22:11 - 2018-10-12 02:29 - 000000016 ____C C:\ProgramData\mntemp
2022-02-03 21:18 - 2022-02-03 21:18 - 000000000 ____C () C:\Users\K21\AppData\Local\{1456B631-EBD3-4E17-A59D-484928FA013C}
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
AlternateDataStreams: C:\ProgramData\2721770961:13DB2E51FF [3314]
AlternateDataStreams: C:\ProgramData\3738993435:C292A9EB33 [3314]
AlternateDataStreams: C:\ProgramData\jujlkgnb.yvo:2B1EB952EC [3314]
AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [3314]
AlternateDataStreams: C:\ProgramData\xeovjhnl.ufd:6160E67F4A [3314]
AlternateDataStreams: C:\ProgramData\xeovjhnl.ufd:A153BA8495 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk:A053CBE120 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector.lnk:AD8600DD61 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB.lnk:FA54E2D743 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk:0ADCEF6275 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk:B96E9B8455 [3314]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [3314]
AlternateDataStreams: C:\Users\K21\Anwendungsdaten:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\K21\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394]
AlternateDataStreams: C:\Users\Public\AppData:CSM [478]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480]
startpowershell:
Set-Service -Name "BITS" -StartupType Manual -Verbose
Set-Service -Name "Dhcp" -StartupType Automatic -Verbose
Set-Service -Name "EventLog" -StartupType Automatic -Verbose
Set-Service -Name "EventSystem" -StartupType Automatic -Verbose
Set-Service -Name "nsi" -StartupType Automatic -Verbose
Set-Service -Name "RasMan" -StartupType Manual -Verbose
Set-Service -Name "SDRSVC" -StartupType Manual -Verbose
Set-Service -Name "SstpSvc" -StartupType Manual -Verbose
Set-Service -Name "TrustedInstaller" -StartupType Manual -Verbose
Set-Service -Name "VSS" -StartupType Manual -Verbose
Set-Service -Name "Winmgmt" -StartupType Automatic -Verbose
Set-Service -Name "wuauserv" -StartupType Manual -Verbose
Set-MpPreference -DisableAutoExclusions $true -Force
set-mppreference -mapsreporting basic -Force
set-mppreference -DisableRealtimeMonitoring $false -Force
set-mppreference -DisablePrivacyMode $true -Force
set-mppreference -DisableIOAVProtection $false -Force
set-mppreference -CheckForSignaturesBeforeRunningScan $true -Force
set-mppreference -PUAProtection enabled -Force
Set-MpPreference -DisableBehaviorMonitoring $false -Force
Set-MpPreference -SignatureScheduleDay Everyday -force
set-mppreference -RealTimeProtectionEnabled $true -force
set-mppreference -OnAccessProtectionEnabled $true -force
Function Remove-all-windefend-excludes {
$Paths=(Get-MpPreference).ExclusionPath
$Extensions=(Get-MpPreference).ExclusionExtension
$Processes=(Get-MpPreference).ExclusionProcess
foreach ($Path in $Paths) { Remove-MpPreference -ExclusionPath $Path -force}
foreach ($Extension in $Extensions) { Remove-MpPreference -ExclusionExtension $Extension -force}
foreach ($Process in $Processes) { Remove-MpPreference -ExclusionProcess $Process -force}
}
Set-MpPreference -DisableAutoExclusions $true -Force
Remove-all-windefend-excludes
endpowershell:
CMD: ipconfig /flushdns
CMD: netsh winsock reset catalog
CMD: netsh advfirewall reset
CMD: netsh advfirewall set allprofiles state ON
CMD: netsh winhttp reset proxy
CMD: Bitsadmin /Reset /Allusers
CMD: Winmgmt /salvagerepository
CMD: Winmgmt /resetrepository
CMD: winmgmt /resyncperf
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: "%WINDIR%\SYSTEM32\lodctr.exe" /R
CMD: "%WINDIR%\SysWOW64\lodctr.exe" /R
CMD: sfc /scannow
Hosts:
RemoveProxy:
C:\WINDOWS\SysWOW64\*.tmp
C:\WINDOWS\System32\*.tmp
C:\Windows\SystemTemp\*.tmp
EmptyTemp:
*****************
SystemRestore: On => abgeschlossen
Wiederherstellungspunkt wurde erfolgreich erstellt.
Prozesse erfolgreich geschlossen.
C:\ProgramData\xeovjhnl.ufd => erfolgreich verschoben
C:\ProgramData\3738993435 => erfolgreich verschoben
C:\ProgramData\2721770961 => erfolgreich verschoben
C:\ProgramData\jujlkgnb.yvo => erfolgreich verschoben
C:\ProgramData\mntemp => erfolgreich verschoben
C:\Users\K21\AppData\Local\{1456B631-EBD3-4E17-A59D-484928FA013C} => erfolgreich verschoben
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => erfolgreich entfernt
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\BookReader_B171F20233094AC88D05A8EF7B9763E8 => erfolgreich entfernt
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => erfolgreich entfernt
HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\ExtensionsStore\datastore\Config\PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => erfolgreich entfernt
"C:\ProgramData\2721770961" => ":13DB2E51FF" ADS nicht gefunden.
"C:\ProgramData\3738993435" => ":C292A9EB33" ADS nicht gefunden.
"C:\ProgramData\jujlkgnb.yvo" => ":2B1EB952EC" ADS nicht gefunden.
"C:\ProgramData\mntemp" => ":8EAD8B3507" ADS nicht gefunden.
"C:\ProgramData\xeovjhnl.ufd" => ":6160E67F4A" ADS nicht gefunden.
"C:\ProgramData\xeovjhnl.ufd" => ":A153BA8495" ADS nicht gefunden.
C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini => ":B1DA6C571C" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\HP ePrint SW.lnk => ":A053CBE120" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDirector.lnk => ":AD8600DD61" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini => ":41964AA945" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox 25 GB.lnk => ":FA54E2D743" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DTS Audio Control.lnk => ":0ADCEF6275" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk => ":BE32D07BC5" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk => ":B96E9B8455" ADS erfolgreich entfernt
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk => ":980850BA8A" ADS erfolgreich entfernt
C:\Users\K21\Anwendungsdaten => ":6699d3ee8dd9cf775caae782c8f44f03" ADS erfolgreich entfernt
"C:\Users\K21\AppData\Roaming" => ":6699d3ee8dd9cf775caae782c8f44f03" ADS nicht gefunden.
C:\Users\Public\AppData => ":CSM" ADS erfolgreich entfernt
C:\Users\Public\Shared Files => ":VersionCache" ADS erfolgreich entfernt
========= Powershell: =========
Set-MpPreference : Es wurde kein Parameter gefunden, der dem Parameternamen "RealTimeProtectionEnabled" entspricht.
In C:\FRST\tmp000.ps1:22 Zeichen:18
+ set-mppreference -RealTimeProtectionEnabled $true -force
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Set-MpPreference], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Set-MpPreference
Set-MpPreference : Es wurde kein Parameter gefunden, der dem Parameternamen "OnAccessProtectionEnabled" entspricht.
In C:\FRST\tmp000.ps1:23 Zeichen:18
+ set-mppreference -OnAccessProtectionEnabled $true -force
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Set-MpPreference], ParameterBindingException
+ FullyQualifiedErrorId : NamedParameterNotFound,Set-MpPreference
========= Ende von Powershell: =========
========= ipconfig /flushdns =========
Windows-IP-Konfiguration
Der DNS-Aufl”sungscache wurde geleert.
========= Ende von CMD: =========
========= netsh winsock reset catalog =========
Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.
========= Ende von CMD: =========
========= netsh advfirewall reset =========
OK.
========= Ende von CMD: =========
========= netsh advfirewall set allprofiles state ON =========
OK.
========= Ende von CMD: =========
========= netsh winhttp reset proxy =========
Aktuelle WinHTTP-Proxyeinstellungen:
DirectAccess (kein Proxyserver).
========= Ende von CMD: =========
========= Bitsadmin /Reset /Allusers =========
BITSADMIN version 3.0
BITS administration utility.
(C) Copyright Microsoft Corp.
0 out of 0 jobs canceled.
========= Ende von CMD: =========
========= Winmgmt /salvagerepository =========
Das WMI-Repository ist konsistent.
========= Ende von CMD: =========
========= Winmgmt /resetrepository =========
Das WMI-Repository wurde zurckgesetzt.
========= Ende von CMD: =========
========= winmgmt /resyncperf =========
========= Ende von CMD: =========
========= "%WINDIR%\SYSTEM32\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SysWOW64\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SYSTEM32\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= "%WINDIR%\SysWOW64\lodctr.exe" /R =========
Info: Die Leistungsindikatoreinstellung konnte erfolgreich aus dem Systemsicherungsspeicher neu erstellt werden.
========= Ende von CMD: =========
========= sfc /scannow =========
Systemsuche wird gestartet. Dieser Vorgang kann einige Zeit dauern.
Überprüfungsphase der Systemsuche wird gestartet.
Überprüfung 0 % abgeschlossen.
Überprüfung 1 % abgeschlossen.
Überprüfung 1 % abgeschlossen.
Überprüfung 2 % abgeschlossen.
Überprüfung 3 % abgeschlossen.
Überprüfung 3 % abgeschlossen.
Überprüfung 4 % abgeschlossen.
Überprüfung 5 % abgeschlossen.
Überprüfung 5 % abgeschlossen.
Überprüfung 6 % abgeschlossen.
Überprüfung 6 % abgeschlossen.
Überprüfung 7 % abgeschlossen.
Überprüfung 8 % abgeschlossen.
Überprüfung 8 % abgeschlossen.
Überprüfung 9 % abgeschlossen.
Überprüfung 10 % abgeschlossen.
Überprüfung 10 % abgeschlossen.
Überprüfung 11 % abgeschlossen.
Überprüfung 11 % abgeschlossen.
Überprüfung 12 % abgeschlossen.
Überprüfung 13 % abgeschlossen.
Überprüfung 13 % abgeschlossen.
Überprüfung 14 % abgeschlossen.
Überprüfung 15 % abgeschlossen.
Überprüfung 15 % abgeschlossen.
Überprüfung 16 % abgeschlossen.
Überprüfung 17 % abgeschlossen.
Überprüfung 17 % abgeschlossen.
Überprüfung 18 % abgeschlossen.
Überprüfung 18 % abgeschlossen.
Überprüfung 19 % abgeschlossen.
Überprüfung 20 % abgeschlossen.
Überprüfung 20 % abgeschlossen.
Überprüfung 21 % abgeschlossen.
Überprüfung 22 % abgeschlossen.
Überprüfung 22 % abgeschlossen.
Überprüfung 23 % abgeschlossen.
Überprüfung 23 % abgeschlossen.
Überprüfung 24 % abgeschlossen.
Überprüfung 25 % abgeschlossen.
Überprüfung 25 % abgeschlossen.
Überprüfung 26 % abgeschlossen.
Überprüfung 27 % abgeschlossen.
Überprüfung 27 % abgeschlossen.
Überprüfung 28 % abgeschlossen.
Überprüfung 29 % abgeschlossen.
Überprüfung 29 % abgeschlossen.
Überprüfung 30 % abgeschlossen.
Überprüfung 30 % abgeschlossen.
Überprüfung 31 % abgeschlossen.
Überprüfung 32 % abgeschlossen.
Überprüfung 32 % abgeschlossen.
Überprüfung 33 % abgeschlossen.
Überprüfung 34 % abgeschlossen.
Überprüfung 34 % abgeschlossen.
Überprüfung 35 % abgeschlossen.
Überprüfung 35 % abgeschlossen.
Überprüfung 36 % abgeschlossen.
Überprüfung 37 % abgeschlossen.
Überprüfung 37 % abgeschlossen.
Überprüfung 38 % abgeschlossen.
Überprüfung 39 % abgeschlossen.
Überprüfung 39 % abgeschlossen.
Überprüfung 40 % abgeschlossen.
Überprüfung 41 % abgeschlossen.
Überprüfung 41 % abgeschlossen.
Überprüfung 42 % abgeschlossen.
Überprüfung 42 % abgeschlossen.
Überprüfung 43 % abgeschlossen.
Überprüfung 44 % abgeschlossen.
Überprüfung 44 % abgeschlossen.
Überprüfung 45 % abgeschlossen.
Überprüfung 46 % abgeschlossen.
Überprüfung 46 % abgeschlossen.
Überprüfung 47 % abgeschlossen.
Überprüfung 47 % abgeschlossen.
Überprüfung 48 % abgeschlossen.
Überprüfung 49 % abgeschlossen.
Überprüfung 49 % abgeschlossen.
Überprüfung 50 % abgeschlossen.
Überprüfung 51 % abgeschlossen.
Überprüfung 51 % abgeschlossen.
Überprüfung 52 % abgeschlossen.
Überprüfung 52 % abgeschlossen.
Überprüfung 53 % abgeschlossen.
Überprüfung 54 % abgeschlossen.
Überprüfung 54 % abgeschlossen.
Überprüfung 55 % abgeschlossen.
Überprüfung 56 % abgeschlossen.
Überprüfung 56 % abgeschlossen.
Überprüfung 57 % abgeschlossen.
Überprüfung 58 % abgeschlossen.
Überprüfung 58 % abgeschlossen.
Überprüfung 59 % abgeschlossen.
Überprüfung 59 % abgeschlossen.
Überprüfung 60 % abgeschlossen.
Überprüfung 61 % abgeschlossen.
Überprüfung 61 % abgeschlossen.
Überprüfung 62 % abgeschlossen.
Überprüfung 63 % abgeschlossen.
Überprüfung 63 % abgeschlossen.
Überprüfung 64 % abgeschlossen.
Überprüfung 64 % abgeschlossen.
Überprüfung 65 % abgeschlossen.
Überprüfung 66 % abgeschlossen.
Überprüfung 66 % abgeschlossen.
Überprüfung 67 % abgeschlossen.
Überprüfung 68 % abgeschlossen.
Überprüfung 68 % abgeschlossen.
Überprüfung 69 % abgeschlossen.
Überprüfung 70 % abgeschlossen.
Überprüfung 70 % abgeschlossen.
Überprüfung 71 % abgeschlossen.
Überprüfung 71 % abgeschlossen.
Überprüfung 72 % abgeschlossen.
Überprüfung 73 % abgeschlossen.
Überprüfung 73 % abgeschlossen.
Überprüfung 74 % abgeschlossen.
Überprüfung 75 % abgeschlossen.
Überprüfung 75 % abgeschlossen.
Überprüfung 76 % abgeschlossen.
Überprüfung 76 % abgeschlossen.
Überprüfung 77 % abgeschlossen.
Überprüfung 78 % abgeschlossen.
Überprüfung 78 % abgeschlossen.
Überprüfung 79 % abgeschlossen.
Überprüfung 80 % abgeschlossen.
Überprüfung 80 % abgeschlossen.
Überprüfung 81 % abgeschlossen.
Überprüfung 82 % abgeschlossen.
Überprüfung 82 % abgeschlossen.
Überprüfung 83 % abgeschlossen.
Überprüfung 83 % abgeschlossen.
Überprüfung 84 % abgeschlossen.
Überprüfung 85 % abgeschlossen.
Überprüfung 85 % abgeschlossen.
Überprüfung 86 % abgeschlossen.
Überprüfung 87 % abgeschlossen.
Überprüfung 87 % abgeschlossen.
Überprüfung 88 % abgeschlossen.
Überprüfung 88 % abgeschlossen.
Überprüfung 89 % abgeschlossen.
Überprüfung 90 % abgeschlossen.
Überprüfung 90 % abgeschlossen.
Überprüfung 91 % abgeschlossen.
Überprüfung 92 % abgeschlossen.
Überprüfung 92 % abgeschlossen.
Überprüfung 93 % abgeschlossen.
Überprüfung 93 % abgeschlossen.
Überprüfung 94 % abgeschlossen.
Überprüfung 95 % abgeschlossen.
Überprüfung 95 % abgeschlossen.
Überprüfung 96 % abgeschlossen.
Überprüfung 97 % abgeschlossen.
Überprüfung 97 % abgeschlossen.
Überprüfung 98 % abgeschlossen.
Überprüfung 99 % abgeschlossen.
Überprüfung 99 % abgeschlossen.
Überprüfung 100 % abgeschlossen.
Der Windows-Ressourcenschutz hat beschädigte Dateien gefunden und erfolgreich repariert.
Bei Onlinereparaturen finden Sie Details in der CBS-Protokolldatei unter
windir\Logs\CBS\CBS.log. Beispiel C:\Windows\Logs\CBS\CBS.log. Bei Offlinereparaturen
finden Sie Details in der durch das /OFFLOGFILE-Kennzeichen angegebenen Protokolldatei.
========= Ende von CMD: =========
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
========= RemoveProxy: =========
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => erfolgreich entfernt
"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-1967584404-1960276878-1159121988-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-1967584404-1960276878-1159121988-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
========= Ende von RemoveProxy: =========
=========== "C:\WINDOWS\SysWOW64\*.tmp" ==========
nicht gefunden
========= Ende -> "C:\WINDOWS\SysWOW64\*.tmp" ========
=========== "C:\WINDOWS\System32\*.tmp" ==========
nicht gefunden
========= Ende -> "C:\WINDOWS\System32\*.tmp" ========
=========== "C:\Windows\SystemTemp\*.tmp" ==========
nicht gefunden
========= Ende -> "C:\Windows\SystemTemp\*.tmp" ========
=========== EmptyTemp: ==========
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 881623930 B
Java, Discord, Steam htmlcache => 1030587543 B
Windows/system/drivers => 26509173 B
Edge => 7478387 B
Chrome => 17668692 B
Firefox => 32425384 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 68720 B
NetworkService => 1803086 B
defaultuser0 => 1803086 B
K21 => 127663344 B
RecycleBin => 6825127 B
EmptyTemp: => 2 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 15:20:45 ====
|
|
24.06.2022, 16:42
| #14 |
| /// TB-Ausbilder | Rogue Killer Fund Dann wären wir durch! Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.  Wenn Du möchtest, kannst Du hier sagen, ob du mit mir und meiner Hilfe zufrieden warst...  Vielleicht möchtest du das Forum mit einer kleinen Spende  unterstützen.  Schritt 1
Zum Schluss bitte unbedingt die Sicherheitsmaßnahmen lesen und umsetzen: Hinweis: Bitte gib mir eine kurze Rückmeldung, sobald du die oben verlinkten Informationen gelesen hast, alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann. |
|
25.06.2022, 18:22
| #15 |
| | Rogue Killer Fund Hallo Super, vielen vielen Dank für deine Hilfe! Sollte ich noch Frage haben melde ich mich definitiv nochmal wenns recht ist? Gehe gerade die ganzen Maßnahmen zur Absicherung des Rechners durch. |
|
| Themen zu Rogue Killer Fund |
| administrator, bonjour, defender, dll, error, firefox, geforce, google, home, installation, internet, internet explorer, microsoft, mozilla, nvcontainer, nvcontainer.exe, nvidia, ordner, programme, prozesse, realtek, rundll, security, services.exe, svchost.exe, system, windows |
Lesestoff:
Linear-Darstellung
