![]() |
|
Log-Analyse und Auswertung: Rogue Killer FundWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
![]() | #1 |
![]() ![]() ![]() | ![]() Rogue Killer Fund Hallo Trojaner-Board Team, bei einem Durchlauf mit Rogue Killer wurden gleich drei Dateien gefunden und als "(PUP) potentiell bösartig" aufgelistet. Code:
ATTFilter Program : RogueKiller Anti-Malware Version : 15.5.3.0 x64 : Yes Program Date : Jun 13 2022 Location : C:\Program Files\RogueKiller\RogueKiller64.exe Premium : No Company : Adlice Software Website : https://www.adlice.com/ Contact : https://adlice.com/contact/ Website : https://adlice.com/download/roguekiller/ Operating System : Windows 10 (10.0.19043) 64-bit 64-bit OS : Yes Startup : 0 WindowsPE : No User : K21 User is Admin : Yes Date : 2022/06/17 17:44:22 Type : Removal Aborted : No Scan Mode : Standard Duration : 1335 Found items : 3 Total scanned : 83306 Signatures Version : 20220613_075625 Truesight Driver : Yes Updates Count : 3 Arguments : -minimize ************************* Warnings ************************* ************************* Removal ************************* [PUP.MailRU (Potenziell bösartig)] HKEY_USERS\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\GameCenter -- -> Gelöscht [+] scan_what : 2 [+] vendors : PUP.MailRU [+] Name : HKEY_USERS\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\GameCenter [+] Type : Registry [+] file_vtscore : 0 [+] file_vttotal : 0 [+] is_malicious : Yes [+] detection_level : 3 [+] id : 0 [+] status : 3 [+] status_str : Gelöscht [+] removed : Yes [+] status_choice : 2 [+] malpe_score : 0 [PUP.MailRU (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{C7CDE234-BBCF-42CC-A86F-BDD772EDBADB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe -- [%localappdata%\gamecenter\gamecenter.exe] -> Gelöscht [+] scan_what : 1 [+] vendors : PUP.MailRU [+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|TCP Query User{C7CDE234-BBCF-42CC-A86F-BDD772EDBADB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe [+] value : [%localappdata%\gamecenter\gamecenter.exe] [+] Type : Registry [+] file_vtscore : 0 [+] file_vttotal : 0 [+] is_malicious : Yes [+] detection_level : 3 [+] id : 1 [+] status : 3 [+] status_str : Gelöscht [+] removed : Yes [+] status_choice : 2 [+] malpe_score : 0 [PUP.MailRU (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{AAECA656-9560-427B-AF19-9A757F0EEBDB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe -- [%localappdata%\gamecenter\gamecenter.exe] -> Gelöscht [+] scan_what : 1 [+] vendors : PUP.MailRU [+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules|UDP Query User{AAECA656-9560-427B-AF19-9A757F0EEBDB}C:\users\k21\appdata\local\gamecenter\gamecenter.exe [+] value : [%localappdata%\gamecenter\gamecenter.exe] [+] Type : Registry [+] file_vtscore : 0 [+] file_vttotal : 0 [+] is_malicious : Yes [+] detection_level : 3 [+] id : 2 [+] status : 3 [+] status_str : Gelöscht [+] removed : Yes [+] status_choice : 2 [+] malpe_score : 0 Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-06-2022 durchgeführt von K21 (Administrator) auf DESKTOP-EJFS8EO (HP HP Pavilion Desktop 560-p0xx) (17-06-2022 19:56:59) Gestartet von C:\Users\K21\Downloads Geladene Profile: K21 Plattform: Microsoft Windows 10 Home Version 21H1 19043.1766 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: FF Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3> (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <2> (C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe (C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCopyAccelerator.exe (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7> (explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe (Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (CyberLink Corp. -> CyberLink) C:\Program Files\CyberLink\Shared files\RichVideo64.exe (services.exe ->) (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe (services.exe ->) (HP Inc. -> ) C:\Windows\SysWOW64\spdsvc.exe (services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe (services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe (services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe (services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe (services.exe ->) (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe (services.exe ->) (Intel(R) RMT -> Intel Corporation) C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe (services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3> (services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe (services.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Windows\SysWOW64\SecUPDUtilSvc.exe (svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxAccounts.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe (svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9235944 2017-08-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> ) HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3069768 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.) HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.) HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [Discord] => C:\Users\K21\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub) HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [EpicGamesLauncher] => D:\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32653776 2022-06-17] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [STUISpeedLauncher] => C:\Program Files\Samsung\Stylish UI Pack\TouchBasedUI.exe [411136 2015-02-09] () [Datei ist nicht signiert] HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Run: [MicrosoftEdgeAutoLaunch_1D7C278743CD3EE84048DB042914F9A2] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3595192 2022-06-13] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\MountPoints2: {eec8d1ee-4ded-11ec-9529-dcfe07d64c96} - "G:\setup_vmc_lite.exe" /checkApplicationPresence HKLM\...\Windows x64\Print Processors\us005PC: C:\Windows\System32\spool\prtprocs\x64\us005pc.dll [43520 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider) HKLM\...\Print\Monitors\us005 Langmon: C:\windows\system32\us005lm.dll [22528 2017-06-14] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-15] (Google LLC -> Google LLC) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {06A90E0C-72D3-4039-A5C6-F42946F62335} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate Task: {0990175C-E9DD-4EBE-8E06-307FE281783D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {0ADC7973-D8A3-4567-A1EA-F2FBDF5C9D56} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Task: {0CA44867-518A-484A-BF88-A0A2698BCC9E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {1177A607-47C2-4912-8889-BD508DCBEE19} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {171130F2-1227-46DE-AE57-9135F3194E00} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> ) Task: {21150167-BB7F-48D3-9DAF-61462F74B334} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {225EF79E-3FC9-4E4C-B406-FB7A15FEFAE5} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe -task -source HPSA (Keine Datei) Task: {2DC1D94C-2FA5-4E8D-B569-96E0680EB74A} - System32\Tasks\HPCeeScheduleForK21 => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [99392 2016-05-12] (Hewlett-Packard Company -> HP Development Company, L.P.) Task: {31D605FF-F973-4B98-8511-90FEB2CD2B5E} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs] Task: {343BB9F9-1EE1-4C4E-9AC7-D915FFFDC964} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {36D17D92-EFB0-47BE-9132-98C7D9DAFFD2} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe do-task "308046B0AF4A39CB" Task: {3D1FFA2F-207A-4289-8A51-53E97E2CD1CD} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1} Task: {3F3FA2C7-939A-476F-8AB5-F61A5353FF64} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {4B8FEC7B-8814-4473-87CD-BDF204D2D16E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /taskrestart (Keine Datei) Task: {51D8B97E-B4CF-41AC-BE83-36D4898950F8} - System32\Tasks\EPM Preload => C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2DotNetHandler.exe [752200 2018-05-21] (HP Inc. -> ) Task: {55F9BAC6-55D0-4EEB-BAA5-7E3BD0289848} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe /u (Keine Datei) Task: {56FBFAE7-7437-4185-B62A-D905C23A230B} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649216 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {6C1F209C-7D2C-42F2-B27E-ED90E8FBF664} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {747084CC-7FA4-4467-9BF7-4313288D8E26} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Task: {753C3DE7-CB59-4407-8902-FA7202FACEEA} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-10-11] (Intel(R) Trust Services -> Intel(R) Corporation) Task: {77CCB421-A321-4E0B-8C56-C5CD4056556D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe /send (Keine Datei) Task: {7A0D3194-FC71-4CF5-A5ED-9911A674183D} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe /DeviceScanR6 (Keine Datei) Task: {7FB3884E-9EE7-4A0F-A2D4-1A693E291E09} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe (Keine Datei) Task: {8A6D0AF2-198C-49DD-98DC-0FC68D9FACC4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe /L Analysis (Keine Datei) Task: {98776444-F263-45F8-AAC2-7F0DFE0FACB1} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {9C314BEB-FCB9-467B-A763-259332F1A164} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {9F25C6EA-D9FF-4AE1-825C-EFBA2C36CB04} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [115584 2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Task: {A61ADD4A-D024-4AC4-982D-B201A6C98E7D} - System32\Tasks\{00DF7A40-A7AF-4C08-A588-8F510D9B9302} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404 Task: {AA3A969A-698E-497E-98B4-56FEB0614BE3} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe /noreport (Keine Datei) Task: {AA7668B9-CD37-4BCD-8AB3-573A93347877} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {AD5F93C0-476C-4773-B830-B1F0F8F0F7A7} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-12-08] (Nvidia Corporation -> NVIDIA Corporation) Task: {AF8BE882-D6BA-42C8-A6FA-34774F048902} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MpCmdRun.exe [993000 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {BC033969-139E-44E0-8D6E-EE5656D1BD63} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) Task: {C7B86C00-18CF-48EA-9EB5-71C1718CEB2B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3341312 2021-12-09] (Nvidia Corporation -> NVIDIA Corporation) Task: {D2A08AE9-7329-4608-B8FA-406063951769} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC) Task: {E2A97560-1BE7-40AA-BD05-9D66EF1C5C8F} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK Task: {E2BCAE47-1766-42CA-B916-8C349191D237} - System32\Tasks\{82D4A10B-C921-4EA3-9A00-096C5B65CBC2} => "c:\program files\mozilla firefox\firefox.exe" hxxps://www.skype.com/go/downloading?source=lightinstaller&ver=7.40.0.103&LastError=404 Task: {F49BAB21-627F-4F1B-AB18-93DD098A6DDD} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23244744 2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Task: {FBA54266-2197-43A8-B435-6766BAAC9745} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-28] (Google LLC -> Google LLC) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe Task: C:\WINDOWS\Tasks\HPCeeScheduleForK21.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{3d7bb8f0-5a7b-49e3-aaa9-bb84d6f6de99}: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{993039e8-4401-499f-998f-f67faab817b8}: [DhcpNameServer] 192.168.42.129 Tcpip\..\Interfaces\{ec4688d4-2527-4b79-8a3b-47c61a42dbc8}: [DhcpNameServer] 192.168.0.1 Edge: ======= DownloadDir: C:\Users\K21\Downloads Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden] Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden] Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden] Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden] Edge DefaultProfile: Default Edge Profile: C:\Users\K21\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-17] Edge DownloadDir: Default -> C:\Users\K21\Downloads FireFox: ======== FF DefaultProfile: lf587ff4.default-1633759003238 FF ProfilePath: C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238 [2022-06-17] FF Extension: (HTTPS Everywhere) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\https-everywhere@eff.org.xpi [2021-10-09] FF Extension: (Watch2Gether) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{6ea0a676-b3ef-48aa-b23d-24c8876945fb}.xpi [2022-05-11] FF Extension: (NoScript) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi [2022-05-31] FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\K21\AppData\Roaming\Mozilla\Firefox\Profiles\lf587ff4.default-1633759003238\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2022-06-01] FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-03-03] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [Keine Datei] Chrome: ======= CHR Profile: C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default [2022-06-17] CHR Extension: (Präsentationen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-04] CHR Extension: (Docs) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-04] CHR Extension: (Google Drive) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-10-09] CHR Extension: (YouTube) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-11-04] CHR Extension: (Tabellen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-04] CHR Extension: (Google Docs Offline) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-09-28] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-09] CHR Extension: (Netflix Party is now Teleparty) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2022-06-17] CHR Extension: (Google Mail) - C:\Users\K21\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-10-09] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8885112 2022-05-18] (BattlEye Innovations e.K. -> ) S3 brlapi; C:\WINDOWS\brltty\bin\brltty.exe [847886 2019-10-15] (Microsoft Windows -> ) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988424 2022-05-28] (Microsoft Corporation -> Microsoft Corporation) S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [812520 2022-02-26] (EasyAntiCheat Oy -> Epic Games, Inc) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029472 2021-10-06] (Epic Games Inc. -> Epic Games, Inc.) S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP) R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.) R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335360 2016-03-18] (Intel Corporation) [Datei ist nicht signiert] R2 IRMTService; C:\Program Files\Intel\Intel(R) Ready Mode Technology\IRMTService.exe [181360 2016-06-21] (Intel(R) RMT -> Intel Corporation) S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [8704 2016-03-18] (Intel Corporation) [Datei ist nicht signiert] S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8677120 2022-06-17] (Malwarebytes Inc. -> Malwarebytes) S3 NGS; C:\WINDOWS\NGService.exe [3097648 2019-07-17] (NEXON Korea Corporation. -> NEXON Korea Corporation) S3 Origin Client Service; D:\Origin\OriginClientService.exe [2466608 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts) S2 Origin Web Helper Service; D:\Origin\OriginWebHelperService.exe [3344176 2019-11-19] (Electronic Arts, Inc. -> Electronic Arts) R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [614664 2016-03-23] (CyberLink Corp. -> CyberLink) R2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [14592472 2022-06-13] (ADLICE -> ) R2 Samsung Printer Dianostics Service; C:\WINDOWS\SysWOW64\\spdsvc.exe [508488 2018-05-24] (HP Inc. -> ) R2 SamsungUPDUtilSvc; C:\WINDOWS\SysWOW64\SecUPDUtilSvc.exe [143664 2019-09-22] (Samsung Electronics CO., LTD. -> ) S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [337112 2021-10-05] (Twitch Interactive, Inc. -> ) S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10595144 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\NisSrv.exe [3116848 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2203.5-0\MsMpEng.exe [133544 2022-04-08] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2355952 2022-01-12] (Activision Publishing Inc -> Activision Blizzard, Inc.) S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert] S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert] S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) R3 IntelReadyModeDriver; C:\WINDOWS\System32\drivers\IntelReadyModeDriver.sys [34952 2016-06-21] (Intel(R) RMT -> Intel Corporation) S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-06-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes) S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-06-17] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes) R3 MpKsl7bb520e3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{3BBF853E-3CB4-4E1F-8FBF-8F11EBDBD49E}\MpKslDrv.sys [137464 2022-06-17] (Microsoft Windows -> Microsoft Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation) S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2022-06-17] (ADLICE (Julien ASCOET) -> ) R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8596912 2022-06-03] (Riot Games, Inc. -> Riot Games, Inc.) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49600 2022-04-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [443664 2022-04-08] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [90384 2022-04-08] (Microsoft Windows -> Microsoft Corporation) S3 xhunter1; C:\WINDOWS\xhunter1.sys [2719256 2021-02-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.) ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2022-06-17 19:56 - 2022-06-17 19:57 - 000030380 ____C C:\Users\K21\Downloads\FRST.txt 2022-06-17 19:55 - 2022-06-17 19:57 - 000000000 ___DC C:\FRST 2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(3).exe 2022-06-17 19:55 - 2022-06-17 19:55 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(2).exe 2022-06-17 19:46 - 2022-06-17 19:46 - 000007276 ____C C:\Users\K21\Desktop\RogueKiller.txt 2022-06-17 19:20 - 2022-06-17 19:20 - 000041920 ____C C:\WINDOWS\system32\Drivers\truesight.sys 2022-06-17 19:19 - 2022-06-17 19:43 - 000000000 ___DC C:\ProgramData\RogueKiller 2022-06-17 19:19 - 2022-06-17 19:19 - 000000906 ____C C:\Users\Public\Desktop\RogueKiller.lnk 2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller 2022-06-17 19:19 - 2022-06-17 19:19 - 000000000 ___DC C:\Program Files\RogueKiller 2022-06-17 19:18 - 2022-06-17 19:18 - 043599792 ____C (Adlice Software ) C:\Users\K21\Downloads\RogueKiller_setup.exe 2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64.exe 2022-06-17 19:12 - 2022-06-17 19:12 - 002368512 ____C (Farbar) C:\Users\K21\Downloads\FRST64(1).exe 2022-06-17 19:06 - 2022-06-17 19:07 - 000000000 ___DC C:\AdwCleaner 2022-06-17 19:06 - 2022-06-17 19:06 - 008551608 ____C (Malwarebytes) C:\Users\K21\Desktop\adwcleaner.exe 2022-06-17 19:03 - 2022-06-17 19:03 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup(1).exe 2022-06-17 17:31 - 2022-06-17 19:05 - 000002040 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk 2022-06-17 17:31 - 2022-06-17 19:05 - 000002028 ____C C:\Users\Public\Desktop\Malwarebytes.lnk 2022-06-17 17:31 - 2022-06-17 17:31 - 000239544 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys 2022-06-17 17:31 - 2022-06-17 17:31 - 000158640 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys 2022-06-17 17:31 - 2022-06-17 17:30 - 000021480 ____C (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys 2022-06-17 17:30 - 2022-06-17 19:04 - 000000000 ___DC C:\ProgramData\Malwarebytes 2022-06-17 17:25 - 2022-06-17 19:04 - 000000000 ___DC C:\Program Files\Malwarebytes 2022-06-17 17:24 - 2022-06-17 17:24 - 002549096 ____C (Malwarebytes) C:\Users\K21\Downloads\MBSetup.exe 2022-06-16 22:51 - 2022-06-16 22:51 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll 2022-06-16 22:51 - 2022-06-16 22:51 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim 2022-06-16 22:50 - 2022-06-16 22:50 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll 2022-06-16 22:50 - 2022-06-16 22:50 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll 2022-06-16 22:50 - 2022-06-16 22:50 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll 2022-06-16 22:44 - 2022-06-16 22:44 - 000000000 __HDC C:\$WinREAgent 2022-06-11 06:25 - 2022-06-17 19:04 - 000000001 ____C C:\WINDOWS\vgkbootstatus.dat 2022-06-10 14:41 - 2022-06-10 14:41 - 000000000 ___DC C:\Program Files\Riot Vanguard 2022-06-10 14:37 - 2022-06-10 14:37 - 000000323 ____C C:\Users\K21\Desktop\VALORANT.url ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2022-06-17 19:56 - 2017-05-15 14:43 - 000000000 ___DC C:\Users\K21\AppData\LocalLow\Mozilla 2022-06-17 19:53 - 2020-08-06 19:29 - 001882176 ____C C:\WINDOWS\system32\PerfStringBackup.INI 2022-06-17 19:53 - 2019-12-07 16:50 - 000803488 ____C C:\WINDOWS\system32\perfh007.dat 2022-06-17 19:53 - 2019-12-07 16:50 - 000175462 ____C C:\WINDOWS\system32\perfc007.dat 2022-06-17 19:53 - 2019-12-07 11:13 - 000000000 ___DC C:\WINDOWS\INF 2022-06-17 19:49 - 2019-07-10 12:45 - 000000593 ____C C:\WINDOWS\system32\Drivers\etc\hosts.ics 2022-06-17 19:43 - 2020-08-06 19:18 - 000000000 ___DC C:\WINDOWS\system32\SleepStudy 2022-06-17 19:43 - 2019-12-07 11:14 - 000000000 ___DC C:\ProgramData\regid.1991-06.com.microsoft 2022-06-17 19:31 - 2017-11-04 12:34 - 000000000 ___DC C:\Program Files (x86)\Google 2022-06-17 19:20 - 2017-05-15 14:42 - 000000000 ___DC C:\Program Files\Mozilla Firefox 2022-06-17 19:07 - 2017-06-17 15:43 - 000000000 ___DC C:\Users\K21\AppData\Roaming\discord 2022-06-17 19:02 - 2018-05-01 23:19 - 000000000 ___DC C:\Users\K21\AppData\Local\Discord 2022-06-17 19:01 - 2020-08-06 19:26 - 000000006 ___HC C:\WINDOWS\Tasks\SA.DAT 2022-06-17 19:01 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI 2022-06-17 19:01 - 2017-01-13 03:10 - 000000000 ___DC C:\ProgramData\NVIDIA 2022-06-17 18:55 - 2018-05-16 12:14 - 000000000 ___DC C:\Users\K21\AppData\Local\D3DSCache 2022-06-17 17:59 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\NDF 2022-06-17 17:49 - 2017-04-20 17:50 - 000000000 ___DC C:\Users\K21\AppData\Local\CrashDumps 2022-06-17 17:31 - 2019-12-07 11:14 - 000000000 __HDC C:\WINDOWS\ELAMBKUP 2022-06-17 17:21 - 2021-01-13 14:24 - 000000000 ___DC C:\Users\K21\AppData\Roaming\Telegram Desktop 2022-06-17 16:41 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\AppReadiness 2022-06-17 16:39 - 2020-08-06 19:18 - 000577120 ____C C:\WINDOWS\system32\FNTCACHE.DAT 2022-06-17 16:39 - 2017-04-21 11:49 - 000000356 ____C C:\WINDOWS\Tasks\HPCeeScheduleForK21.job 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 __RDC C:\WINDOWS\ImmersiveControlPanel 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lv-LV 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\lt-LT 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\et-EE 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\es-MX 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\SysWOW64\Dism 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\ShellExperiences 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\oobe 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lv-LV 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\lt-LT 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\et-EE 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\es-MX 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\Dism 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\system32\DDFs 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ___DC C:\WINDOWS\bcastdvr 2022-06-17 16:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2022-06-17 16:38 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing 2022-06-17 16:38 - 2017-06-09 18:47 - 000000000 ___DC C:\Program Files (x86)\Steam 2022-06-17 12:37 - 2019-08-16 22:34 - 000000000 ___DC C:\ProgramData\Riot Games 2022-06-16 22:53 - 2019-12-07 11:03 - 000000000 ___DC C:\WINDOWS\CbsTemp 2022-06-16 22:50 - 2020-08-06 19:20 - 002877952 ____C (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2022-06-16 22:43 - 2017-04-22 02:05 - 000000000 ___DC C:\WINDOWS\system32\MRT 2022-06-16 22:41 - 2017-04-22 02:05 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2022-06-16 14:49 - 2022-01-22 22:41 - 000000000 ___DC C:\Users\K21\Desktop\Carola 2022-06-16 12:17 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2022-06-16 12:02 - 2021-01-19 23:03 - 000000000 ___DC C:\Users\K21\Downloads\Telegram Desktop 2022-06-15 08:35 - 2020-06-14 12:57 - 000002443 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2022-06-15 08:35 - 2020-06-14 12:57 - 000002281 ____C C:\Users\Public\Desktop\Microsoft Edge.lnk 2022-06-15 00:09 - 2020-09-28 09:04 - 000002246 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2022-06-15 00:09 - 2020-09-28 09:04 - 000002205 ____C C:\Users\Public\Desktop\Google Chrome.lnk 2022-06-13 23:06 - 2020-08-06 19:26 - 000003240 _____ C:\WINDOWS\system32\Tasks\HPCeeScheduleForK21 2022-06-13 22:28 - 2021-12-11 10:41 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1967584404-1960276878-1159121988-1001 2022-06-13 22:28 - 2020-08-06 19:26 - 000003376 ____C C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1967584404-1960276878-1159121988-1001 2022-06-13 22:28 - 2020-08-06 19:19 - 000002400 ____C C:\Users\K21\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2022-06-11 07:24 - 2020-08-06 19:26 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2022-06-11 07:24 - 2020-08-06 19:26 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2022-06-11 06:26 - 2021-10-06 11:08 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2022-06-11 06:26 - 2017-05-15 14:42 - 000001012 ____C C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2022-06-10 20:37 - 2021-10-09 10:01 - 000000795 ____C C:\Users\K21\Desktop\Riot Client.lnk 2022-06-10 14:38 - 2019-11-07 21:24 - 000000000 ___DC C:\Users\K21\AppData\Local\Riot Games 2022-06-10 11:26 - 2021-11-12 10:54 - 000000000 ___DC C:\Users\K21\AppData\Roaming\slobs-client 2022-06-09 12:37 - 2018-05-01 23:19 - 000002228 ____C C:\Users\K21\Desktop\Discord.lnk 2022-06-08 14:34 - 2019-11-14 21:58 - 000000000 ___DC C:\Users\K21\AppData\Local\WEB2Print 2022-06-02 08:04 - 2018-07-10 00:30 - 000000000 ___DC C:\ProgramData\Packages 2022-06-01 11:04 - 2021-11-12 10:54 - 000000000 ___DC C:\Program Files\Streamlabs OBS 2022-05-28 17:22 - 2017-01-13 02:26 - 000000000 ___DC C:\Program Files (x86)\Microsoft Office 2022-05-19 20:01 - 2018-04-12 02:55 - 000000000 ___DC C:\Users\K21\AppData\Local\ElevatedDiagnostics ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2017-07-09 15:49 - 2017-07-09 15:49 - 000000063 ____C () C:\Users\K21\AppData\Local\emaildefaults 2017-07-09 23:41 - 2017-07-09 23:41 - 000000417 ____C () C:\Users\K21\AppData\Local\karboncalligraphyrc 2021-12-03 13:21 - 2021-12-03 13:21 - 000000039 ____C () C:\Users\K21\AppData\Local\kritadisplayrc 2017-07-09 15:49 - 2021-12-03 13:21 - 000022946 ____C () C:\Users\K21\AppData\Local\kritarc 2022-02-03 21:18 - 2022-02-03 21:18 - 000000000 ____C () C:\Users\K21\AppData\Local\{1456B631-EBD3-4E17-A59D-484928FA013C} ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-06-2022 durchgeführt von K21 (17-06-2022 19:58:16) Gestartet von C:\Users\K21\Downloads Microsoft Windows 10 Home Version 21H1 19043.1766 (X64) (2020-08-06 17:26:26) Start-Modus: Normal ========================================================== ==================== Konten: ============================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) Administrator (S-1-5-21-1967584404-1960276878-1159121988-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-1967584404-1960276878-1159121988-503 - Limited - Disabled) defaultuser0 (S-1-5-21-1967584404-1960276878-1159121988-1000 - Limited - Disabled) => C:\Users\defaultuser0 Gast (S-1-5-21-1967584404-1960276878-1159121988-501 - Limited - Disabled) K21 (S-1-5-21-1967584404-1960276878-1159121988-1001 - Administrator - Enabled) => C:\Users\K21 WDAGUtilityAccount (S-1-5-21-1967584404-1960276878-1159121988-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AV: Malwarebytes (Disabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) Bandicam (HKLM-x32\...\Bandicam) (Version: 4.1.4.1413 - Bandicam.com) Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version: - Bandicam.com) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.) Common Desktop Agent (HKLM\...\{031A0E14-0413-4C97-9772-2639B782F46F}) (Version: 1.62.0 - OEM) Hidden CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.5.6909 - CyberLink Corp.) CyberLink PowerDirector 14 (HKLM-x32\...\{6BADCD73-E925-46F7-A295-FF2448632728}) (Version: 14.0.2.3309 - CyberLink Corp.) D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden Discord (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\Discord) (Version: 0.0.309 - Discord Inc.) Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.) Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.583.1 - Dropbox, Inc.) Hidden Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.) Epic Games Launcher (HKLM-x32\...\{42D23AAF-7D6F-48C7-A62C-8E02D6234156}) (Version: 1.1.147.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.) Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Game Installer (HKLM-x32\...\Game Installer 1.0.0) (Version: 1.0.0 - Intrepid Studios, Inc.) Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 102.0.5005.115 - Google LLC) Guild Wars 2 (HKLM\...\Guild Wars 2) (Version: - NCsoft Corporation, Ltd.) HP Audio Switch (HKLM-x32\...\{3A5141D4-47DB-4302-9B1C-272BE585BC8A}) (Version: 1.0.179.0 - HP Inc.) HP Customer Experience Enhancements (HKLM-x32\...\{64228DFB-7450-49B7-935C-B97342CB6659}) (Version: 6.0.10.1 - HP Development Company, L.P.) Hidden HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.2 - HP Inc.) HP ePrint SW (HKLM\...\{1B1E721E-4843-465C-867F-E8651E5ABCD1}) (Version: 5.1.19895 - HP Inc.) Hidden HP ePrint SW (HKLM\...\{70FF7FA8-1775-4D18-855B-DDB5AE876486}) (Version: 5.1.19895 - HP Inc.) Hidden HP ePrint SW (HKLM\...\{804E6C19-C29C-4C2A-AB7D-84F657F36A1A}) (Version: 5.1.19895 - HP Inc.) Hidden HP ePrint SW (HKLM\...\{9E79DC8C-9CBD-4BFF-B1C6-DDE56471600E}) (Version: 5.1.19895 - HP Inc.) Hidden HP ePrint SW (HKLM-x32\...\{2460D024-A262-43EE-B83B-D990D7188252}) (Version: 5.1.19895 - HP Inc.) Hidden HP ePrint SW (HKLM-x32\...\{b0ebf7ff-6b1a-4a92-9c85-6915be1962b9}) (Version: 5.1.19895 - HP Inc.) HP ePrint SW (HKLM-x32\...\{E1FE22DE-22EF-4235-A56A-287CE38AA584}) (Version: 5.1.19895 - HP Inc.) Hidden HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden HP Support Solutions Framework (HKLM-x32\...\{624DA112-9F71-492E-BAF9-0E5E4224626C}) (Version: 12.12.32.3 - HP Inc.) HP System Event Utility (HKLM-x32\...\{025C1573-2F1D-46AF-BAB8-594EBF56A889}) (Version: 1.4.11 - HP Inc.) Intel(R) Chipset Device Software (HKLM\...\{3AE6FD56-D431-4B53-94F0-95E844206ADF}) (Version: 10.1.1.32 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1054 - Intel Corporation) Intel(R) Management Engine Components (HKLM\...\{7B3B60EB-197B-4B06-ADFF-D0B50E755D4F}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Components (HKLM\...\{EC465D35-92DC-4DAE-9EA8-01215688F709}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) Management Engine Driver (HKLM\...\{E5B5A486-C7F5-429C-9324-13835620F2FD}) (Version: 1.0.0.0 - Intel Corporation) Hidden Intel(R) ME UninstallLegacy (HKLM\...\{E9B9A1A5-6398-4C99-8FDE-10794F6505C5}) (Version: 1.0.1.0 - Intel Corporation) Hidden Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.0.1042 - Intel Corporation) Intel(R) Rapid Storage Technology (HKLM\...\{B66F70B4-34E5-429A-9F55-7129E0833A45}) (Version: 14.8.0.1042 - Intel Corporation) Hidden Intel(R) Ready Mode Technology (HKLM\...\{91DC75C1-5D36-4AF0-913E-F45B0923CA43}) (Version: 1.1.70.525 - Intel Corporation) Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Trusted Connect Services Client (HKLM-x32\...\{246c6cc0-9810-4728-9a29-28474de2eec5}) (Version: 1.47.866.0 - Intel Corporation) Hidden Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{35069AA3-F7B2-4759-96F0-9EE43AACB690}) (Version: 19.00.1621.3340 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{aaa7f0fb-02dc-4576-beef-7d24842c5fbe}) (Version: 10.1.1.32 - Intel(R) Corporation) Hidden Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation) Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden Intel® Security Assist (HKLM-x32\...\{B294CE94-FE0F-4427-910C-180AF9FCFED1}) (Version: 1.0.1.620 - Intel Corporation) Krita (x64) 3.1.4.0 (HKLM\...\Krita_x64) (Version: 3.1.4.0 - Krita Foundation) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc) LibreOffice 7.0.4.2 (HKLM\...\{B3171B83-4945-43E0-A101-841638C05506}) (Version: 7.0.4.2 - The Document Foundation) Malwarebytes version 4.5.10.200 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.10.200 - Malwarebytes) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 102.0.1245.41 - Microsoft Corporation) Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden Microsoft Office Home and Student 2016 - de-de (HKLM\...\HomeStudentRetail - de-de) (Version: 16.0.15225.20204 - Microsoft Corporation) Microsoft Office Home and Student 2016 - en-us (HKLM\...\HomeStudentRetail - en-us) (Version: 16.0.15225.20204 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\OneDriveSetup.exe) (Version: 22.111.0522.0002 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{7B1FCD52-8F6B-4F12-A143-361EA39F5E7C}) (Version: 3.67.0.0 - Microsoft Corporation) Microsoft VC++ redistributables repacked. (HKLM\...\{D3531D7A-B6FA-44A5-A024-E2A14F325F90}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft VC++ redistributables repacked. (HKLM-x32\...\{985F7F32-5BE4-4CDA-9582-F7AEA40D1974}) (Version: 12.0.0.0 - Intel Corporation) Hidden Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.30.30704 (HKLM-x32\...\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}) (Version: 14.30.30704.0 - Microsoft Corporation) Microsoft Visual C++ 2019 X86 Additional Runtime - 14.28.29334 (HKLM-x32\...\{14C49FC8-3E9B-4F29-8526-26629B5CF30B}) (Version: 14.28.29334 - Microsoft Corporation) Hidden Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.28.29334 (HKLM-x32\...\{0D01A812-82A1-481F-8546-8E28E976F8DF}) (Version: 14.28.29334 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Additional Runtime - 14.30.30704 (HKLM\...\{6DB765A8-05AF-49A1-A71D-6F645EE3CE41}) (Version: 14.30.30704 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.30.30704 (HKLM\...\{662A0088-6FCD-45DD-9EA7-68674058AED5}) (Version: 14.30.30704 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 101.0.1 (x64 de)) (Version: 101.0.1 - Mozilla) MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation) NVIDIA GeForce Experience 3.24.0.126 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.126 - NVIDIA Corporation) NVIDIA Grafiktreiber 511.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 511.65 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.39.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.39.3 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.15225.20150 - Microsoft Corporation) Hidden Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.15225.20194 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.15128.20178 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden Origin (HKLM-x32\...\Origin) (Version: 10.5.56.33908 - Electronic Arts, Inc.) Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31225 - Realtek Semiconductor Corp.) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8237 - Realtek Semiconductor Corp.) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) RogueKiller Version 15.5.3.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.5.3.0 - Adlice Software) Samsung Drucker-Diagnose (HKLM-x32\...\Samsung Printer Diagnostics) (Version: 1.0.4.28 - HP Printing Korea Co., Ltd.) Samsung Scan Process Machine (HKLM-x32\...\Samsung Scan Process Machine) (Version: 1.03.05.32 - Samsung Electronics Co., Ltd.) Hidden Skype Version 8.77 (HKLM-x32\...\Skype_is1) (Version: 8.77 - Skype Technologies S.A.) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 21.9.27.783 - StreamElements) Streamlabs OBS 1.4.0 (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 1.4.0 - General Workings, Inc.) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.1 - TeamSpeak Systems GmbH) Telegram Desktop version 3.7.3 (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 3.7.3 - Telegram FZ-LLC) Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version: - Ubisoft Montreal) Twitch Studio (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.) Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 128.0.10632 - Ubisoft) Uninstall Samsung Printer Software (HKLM-x32\...\TotalUninstaller) (Version: 4.0.0.67 - Samsung Electronics CO., LTD.) Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{F14FB68A-9188-4036-AD0D-D054BC9C9291}) (Version: 2.59.0.0 - Microsoft Corporation) Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation) Zoom (HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\...\ZoomUMX) (Version: 5.6.6 (961) - Zoom Video Communications, Inc.) Packages: ========= Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2020-02-20] (Amazon.com) Candy Crush Soda Saga -> C:\Program Files\WindowsApps\king.com.CandyCrushSodaSaga_1.220.200.0_x64__kgqvnymyfvs32 [2022-06-16] (king.com) Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2021.927.1.0_neutral__8xx8rvfyw5nnt [2021-09-28] (Facebook Inc) HP JumpStart -> C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6 [2017-04-20] (HP Inc.) HP LOUNGE -> C:\Program Files\WindowsApps\UniversalMusicMobile.HPLOUNGE_2.1.1.0_x64__3ms5eyejfeart [2021-02-10] (Universal Music Mobile) HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_136.1.269.0_x64__v10z8vjag6ke6 [2022-04-27] (HP Inc.) March of Empires: War of Lords -> C:\Program Files\WindowsApps\A278AB0D.MarchofEmpires_6.4.0.0_x86__h6adky7gbf63m [2022-05-19] (Gameloft SE) Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad] Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad] Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe [2022-06-08] (Microsoft Studios) [MS Ad] Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.19.5.0_x64__8wekyb3d8bbwe [2022-06-08] (Microsoft Studios) Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-04-09] (Netflix, Inc.) NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.962.0_x64__56jybvy8sckqj [2022-02-03] (NVIDIA Corp.) Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-09-22] (Samsung Electronics Co. Ltd.) Simple Mahjong -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleMahjong_6.3.80.0_x64__kx24dqmazqk8j [2022-05-13] (Random Salad Games LLC) Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-11] (Twitter Inc.) WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2218.8.0_x64__cv1g1gvanyjgm [2022-06-01] (WhatsApp Inc.) XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-06-03] (New Work SE) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvhdci.inf_amd64_f6ce41c41f173600\nvshext.dll [2022-01-29] (Nvidia Corporation -> NVIDIA Corporation) ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2022-06-17] (Malwarebytes Inc. -> Malwarebytes) ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Drivers32: [vidc.mjpg] => C:\windows\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mpeg] => C:\windows\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [msacm.bdmpeg] => C:\windows\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> ) HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com) HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2015-04-14] (Electronic Arts -> On2.com) ==================== Verknüpfungen & WMI ======================== ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2017-04-20 16:49 - 2017-04-20 16:50 - 012485120 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\AD2F1837.HPJumpStart_1.2.228.0_x64__v10z8vjag6ke6\HPJumpStart.dll 2019-09-22 21:33 - 2016-07-20 12:15 - 002847744 ____C () [Datei ist nicht signiert] C:\WINDOWS\system32\DlgSearchEngine.dll 2017-11-08 08:35 - 2017-11-08 08:35 - 000123904 _____ (Samsung Electronics Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\SmartScreenPrint\CDAKEYMonitor64.dll 2018-05-18 10:57 - 2018-05-18 10:57 - 003696128 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Easy Printer Manager\ScanFax2PC\CDAScan2PCMonitor64.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) AlternateDataStreams: C:\Users\K21\Anwendungsdaten:6699d3ee8dd9cf775caae782c8f44f03 [394] AlternateDataStreams: C:\Users\K21\AppData\Roaming:6699d3ee8dd9cf775caae782c8f44f03 [394] AlternateDataStreams: C:\Users\Public\AppData:CSM [478] AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [480] ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://hp17win10.msn.com/?pc=HCTE HKU\S-1-5-21-1967584404-1960276878-1159121988-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE SearchScopes: HKLM -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKLM-x32 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} SearchScopes: HKU\S-1-5-21-1967584404-1960276878-1159121988-1001 -> {FABA87FC-4F2D-425C-93C7-05A3ECD974D7} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms} BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2022-04-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2022-05-28] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2016-07-16 13:47 - 2016-07-16 13:45 - 000000824 ____C C:\WINDOWS\system32\drivers\etc\hosts 2019-07-10 12:45 - 2022-06-17 19:49 - 000000593 ____C C:\WINDOWS\system32\drivers\etc\hosts.ics 192.168.137.60 Galaxy-A52.mshome.net # 2022 6 5 24 16 41 55 328 924 192.168.137.124 Galaxy-A52.mshome.net # 2021 8 4 12 12 13 9 942 42 ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\ DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Prompt) ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [UDP Query User{2DDDF377-361C-493E-ADAC-012E031F8DDB}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> ) FirewallRules: [TCP Query User{793B3F73-6DEF-4F12-8A83-8A8808087D8F}C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe] => (Block) C:\program files (x86)\samsung\easy printer manager\easyprintermanagerv2.exe (HP Inc. -> ) FirewallRules: [{9A4B9103-ABAA-4997-9B68-0F101D716D5B}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert] FirewallRules: [{112E5F28-60B5-4DC2-B0B2-624C79BCDD26}] => (Allow) D:\Games2\steamapps\common\Tales of Berseria\Tales of Berseria.exe () [Datei ist nicht signiert] FirewallRules: [{66EF7E85-8A46-4F07-8B07-0660DD5B1927}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei FirewallRules: [{2743F7A2-FCCC-4A0C-8330-DA0920D82B60}] => (Allow) D:\Games2\steamapps\common\Temtem\Temtem.exe => Keine Datei FirewallRules: [{E56A520F-DA95-4CDA-83B9-CC3D91CFCC8C}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei FirewallRules: [{92D7512D-71F8-49C2-A1E4-DF80AB71F877}] => (Allow) D:\Games2\steamapps\common\AoE2DE\BattleServer\BattleServer.exe => Keine Datei FirewallRules: [{8E31CD2F-60D9-4E53-BCF7-97726D699641}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei FirewallRules: [{699B02D8-FCC2-4B15-A020-D9CDC7A9CA78}] => (Allow) D:\Games2\steamapps\common\AoE2DE\AoE2DE_s.exe => Keine Datei FirewallRules: [{32340C4D-5A86-4095-B4FC-D174E94DF53E}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei FirewallRules: [{1EEDF67A-A09F-4726-B236-A5574D331234}] => (Allow) D:\Games2\steamapps\common\Special Edition\DevilMayCry4SpecialEdition.exe => Keine Datei FirewallRules: [UDP Query User{6B31903A-64B0-44DD-9633-34695CBA0340}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [TCP Query User{10C5BE9A-97CB-49E6-A197-E298C973FBC9}D:\games2\league of legends\game\league of legends.exe] => (Block) D:\games2\league of legends\game\league of legends.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{182D9748-A6AD-4678-99A4-9B2D9FF21DD2}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei FirewallRules: [{3E74C55F-74C2-4615-A2B2-41A3425A4E4D}] => (Allow) D:\Games2\steamapps\common\Devil May Cry HD Collection\dmcLauncher.exe => Keine Datei FirewallRules: [UDP Query User{174BB3B9-9DE5-4BBA-9A09-CFB1630D58C2}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [TCP Query User{7386F47F-54AD-46F2-B69D-E37FE2ED0430}C:\program files (x86)\common files\scan process machine\imageeng.exe] => (Block) C:\program files (x86)\common files\scan process machine\imageeng.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{862EC06A-C323-4DA2-9857-63388A3DBF64}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{1A48DEBC-C60D-4B20-8463-CB7CDEFFEEAE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei FirewallRules: [{F0F37E3D-C541-4509-9CE3-43E0D38F11E8}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDC.exe => Keine Datei FirewallRules: [{5E679FBF-9484-4B3B-A8EA-5E25ECF9581E}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei FirewallRules: [{D2B7FD36-4C50-4F53-8D3D-B7652A345409}] => (Allow) C:\Program Files (x86)\Samsung\Easy Document Creator\EDCApp.exe => Keine Datei FirewallRules: [{A815FB4C-6D84-4F4B-912E-4DF6D7BFBF81}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{3AB0EF62-2CB7-466F-A784-C8431CEC4156}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{3A077B1C-31DF-4A4B-B6AA-2B8880C51408}] => (Allow) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{1430457D-F984-42AA-930D-08DB71566001}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2Migrator.exe (HP Inc. -> ) FirewallRules: [{B4872368-E942-4810-A3E8-3062ED6C35AE}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EPM2AlertList.exe (HP Inc. -> HP Printing Korea Co., Ltd.) FirewallRules: [{07BE60BF-439D-484C-B665-F432875BB0F2}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\OrderSupplies.exe (HP Inc. -> HP Printing Korea Co., Ltd.) FirewallRules: [{DF8E8124-FC68-4F90-BF8B-E4A2FB042047}] => (Allow) C:\Program Files (x86)\Samsung\Easy Printer Manager\EasyPrinterManagerV2.exe (HP Inc. -> ) FirewallRules: [{3A6D9B27-790C-480C-AC90-F6E152F51897}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ScanCDLM.exe (Samsung Electronics CO., LTD. -> ) FirewallRules: [{B56A3017-9B07-4426-9825-61A1AF1BC6BC}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Printer Center\SamsungPrinterCenter.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) FirewallRules: [{91084CF8-ED1B-413B-A005-BAA81EB04F95}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{0EAEFBB1-9EE4-4886-AEB9-8F82B3EED741}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{DF3BF395-9013-41C8-8F46-B6C99CAF64C0}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{EA918A23-9B19-4393-B1CB-645E4BBCABFE}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{A042B6E0-F396-4C85-9A5C-F320851EBB54}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{5F2D4802-A8D3-430E-A3A5-CF8848437570}] => (Allow) D:\Games2\League of Legends\LeagueClient.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [UDP Query User{448F24CA-98E2-4A58-A62B-44351C19C053}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei FirewallRules: [TCP Query User{C6B0BE44-D1FD-45BC-B4B6-40174929D328}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei FirewallRules: [{45C32BB5-7CDF-40DB-8C87-38C6D8BAB729}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert] FirewallRules: [{32DED9B5-2517-4B3E-A4DF-E27C25284D40}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert] FirewallRules: [{9484FF45-858C-4827-862C-804F6E554DA4}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert] FirewallRules: [{6338FA0F-BD3E-4DB2-8CBB-301C086EDD76}] => (Allow) C:\Program Files (x86)\Glyph\GlyphDownloader.exe (Trion Worlds Inc.) [Datei ist nicht signiert] FirewallRules: [{D6F309A4-51A8-42AE-A45B-F6DFFED4E691}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.) FirewallRules: [{CB7ED8B0-CDF2-45A9-B9D9-013CBEC7DFEF}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.) FirewallRules: [{83730AA0-54BA-4A4A-9DBA-2D5B20B0A09B}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.) FirewallRules: [{22B7DA9D-5BE7-4763-B58F-8EB91846FCF7}] => (Allow) C:\Program Files (x86)\Glyph\GlyphClient.exe (Trion Worlds Inc. -> Trion Worlds Inc.) FirewallRules: [{52B56086-059A-4CE7-93CD-B534DAD0418B}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{CC30C740-79B2-40F1-8BB8-F398AB4FE31C}] => (Block) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{C073FB44-D761-4800-B3D1-AA14E9410682}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{EF7E69BE-1F11-420D-93AD-5806325455B0}D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{8A1671B8-3D54-4868-B369-0C43BA3F22E2}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{6BBA2C59-8330-4DB5-B0CC-4DB0336ED55D}] => (Block) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{B680590D-F680-4C4D-B2C3-9150D506B100}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [TCP Query User{D912DB14-41B8-45C6-9645-5C7A33006346}D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) D:\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{3060DA83-4CA1-448E-90B6-19C5B776B2F9}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei FirewallRules: [{FE4293B5-16F4-48C9-9705-CB1EC80579BF}] => (Block) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei FirewallRules: [UDP Query User{0CCD1D59-6CED-4B20-A135-AD3B6CA75C96}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei FirewallRules: [TCP Query User{980FDE5C-2D78-469B-AA33-14A0BF3C89BD}C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) C:\program files\epic games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei FirewallRules: [{8BEB68A9-82A1-4409-94AF-8C899E4D5B1C}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei FirewallRules: [{BFF0DC43-95AC-4DE4-A4B8-4170B183A1FD}] => (Block) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei FirewallRules: [UDP Query User{F4CBE8DE-6C5B-463B-9F56-D42AD7EFC5D2}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei FirewallRules: [TCP Query User{99EDE91F-8BA2-4D9E-A9C9-558C6628D8FA}C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe => Keine Datei FirewallRules: [{51969C71-F3FE-4F57-A1D1-C3A7A359F15C}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei FirewallRules: [{D4E5756C-63E9-4AC3-B7AC-615645F35E0F}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei FirewallRules: [UDP Query User{3E25EF61-9EDB-47A1-9737-50C25A1DAC55}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei FirewallRules: [TCP Query User{08B9A1A3-1A08-49A4-B88A-E8AEADFC3B47}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe => Keine Datei FirewallRules: [{1BBD3A94-6B54-4C48-B372-DCC20336D717}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei FirewallRules: [{EF49B8AC-B285-482F-BE9E-D3065F6913C7}] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei FirewallRules: [UDP Query User{4E4F2D49-7F97-47DC-AA0F-8F61060CBF78}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei FirewallRules: [TCP Query User{09A68168-DDED-4E07-956E-E5CB958BA584}C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe] => (Allow) C:\program files (x86)\epic games\launcher\portal\binaries\win32\epicgameslauncher.exe => Keine Datei FirewallRules: [{7C5010F9-6C39-4A5A-A647-AC1633A8ED95}] => (Allow) LPort=1900 FirewallRules: [{DD840014-9503-432F-93A8-985C4AB205AD}] => (Allow) LPort=2869 FirewallRules: [{6CF7B920-A8A9-4970-98E5-B4AFD5DF6260}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F0256D43-7C44-46C9-A514-D32D93623CB5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{5505D5CB-230C-40FD-98FA-BFC06590E8AE}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{5DBC6FBE-8969-4470-B060-EA2C1F46D187}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{3B637BE3-5D8B-4C8D-ADC3-C27F648CA39D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{1F574894-9198-4ADA-8301-4924FDB8824F}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Downloader.exe => Keine Datei FirewallRules: [{25ECC44B-09CF-44E6-AB4C-84F97859EB10}] => (Allow) C:\Users\K21\Downloads\BlackDesert_Launcher.exe => Keine Datei FirewallRules: [{100F0297-C846-4D87-B03F-7ED875E67519}] => (Allow) C:\Users\K21\Downloads\bin64\BlackDesert64.exe => Keine Datei FirewallRules: [{541D4041-611F-436B-9D92-D7EF54A7AAE2}] => (Allow) C:\Users\K21\Downloads\bin\BlackDesert32.exe => Keine Datei FirewallRules: [{66B58DF2-E010-4069-8398-6E940ADD203B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{937E67D8-D8D4-4CFC-B6A1-BD791F88A19E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [UDP Query User{A835CBA9-9E1C-49ED-A95F-B5B688A306F2}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei FirewallRules: [TCP Query User{731E2798-3646-4389-A81D-86F1D573BE8F}D:\mygames\revelation online\game\tianyu.exe] => (Block) D:\mygames\revelation online\game\tianyu.exe => Keine Datei FirewallRules: [UDP Query User{F5BF8D29-5357-4EBD-BC02-A0591B519930}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei FirewallRules: [TCP Query User{8E552E3C-C36B-4D4B-983C-D99409DC89F8}C:\users\k21\appdata\local\mycomgames\mycomgames.exe] => (Block) C:\users\k21\appdata\local\mycomgames\mycomgames.exe => Keine Datei FirewallRules: [TCP Query User{738F4040-E865-4F64-A821-0295BEBAB677}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei FirewallRules: [UDP Query User{722B429C-5634-4D89-AE08-06F9CB995E36}C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\black desert online\bin64\blackdesert64.exe => Keine Datei FirewallRules: [TCP Query User{06F052ED-6B03-41D0-AD06-2730ED2D8BAE}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{248B7716-9EC3-479E-A9D8-97753081CD6B}D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) D:\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{F2C2C73F-A23C-418B-B2D0-69BB84E97B2B}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei FirewallRules: [{B416FE38-CB35-4499-8DA2-319DB941C6C1}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\Black Desert Online Steam Launcher.exe => Keine Datei FirewallRules: [{65E31776-FDA8-476F-B2E6-41E09B86D25F}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei FirewallRules: [{E006A453-632F-40FF-B9E6-B2C8E10A9987}] => (Allow) D:\Games2\steamapps\common\Skyrim\SkyrimLauncher.exe => Keine Datei FirewallRules: [TCP Query User{C00E63F2-406C-474E-93B3-2EFB1F42C843}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> ) FirewallRules: [UDP Query User{CD477984-0A16-484A-8240-947AEFCE3360}D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe] => (Allow) D:\games2\steamapps\common\black desert online\bin64\blackdesert64.exe (Pearl abyss Corp -> ) FirewallRules: [{6A9D9DEB-2B45-45D9-BD58-3F15A1CA103B}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{17CE65AD-A9DE-4B44-BA6D-A288F914AA21}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{54AA717B-E30F-4ED3-B3A3-E87B925A5FB8}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{41260157-1F0F-48A6-9AA1-00ACA0A0D9DB}D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe] => (Allow) D:\games2\steamapps\common\dead by daylight\deadbydaylight\binaries\win64\deadbydaylight-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{5631BB50-E38E-4B9C-BFE3-5B5F9A7D62C1}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei FirewallRules: [{2CF01E47-E5E4-4BEE-8A2F-E4A0B7EF8555}] => (Allow) D:\Games2\steamapps\common\Golf With Your Friends\Golf With Your Friends.exe => Keine Datei FirewallRules: [{050944A0-B637-4FE5-BF61-8F8E087BE229}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei FirewallRules: [{E4BC2E89-4A7A-412C-8CD3-5E489E11CFBB}] => (Allow) D:\Games2\steamapps\common\Age2HD\Launcher.exe => Keine Datei FirewallRules: [{1A6078FB-0BDE-4B95-B664-D4F0EF946756}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei FirewallRules: [{31A12DD4-3332-485C-B0A4-7A19E930CDA0}] => (Allow) D:\Games2\steamapps\common\Monster Hunter World\MonsterHunterWorld.exe => Keine Datei FirewallRules: [{B29F22DA-3379-4B0B-BA59-99D4C46EA596}] => (Allow) D:\EasyAntiCheat\EasyAntiCheat_Setup.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [TCP Query User{AA91E5CD-75C9-4BF0-98DF-BA24C71CD181}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{1E6D126E-DB51-4640-B4D2-0376297AB3E6}D:\apoc\binaries\win64\apoc-win64-shipping.exe] => (Allow) D:\apoc\binaries\win64\apoc-win64-shipping.exe (Intrepid Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [{4F68D823-004A-49BA-849E-872EEB1E2AAC}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.) FirewallRules: [{9CFC75A0-51A5-4F53-8AB7-647D66C556AD}] => (Allow) D:\Games2\steamapps\common\FINAL FANTASY XIV Online\boot\ffxivboot.exe (SQUARE ENIX CO., LTD. -> SQUARE ENIX CO., LTD.) FirewallRules: [{DAD5B8F1-EE56-451E-B6CF-974862F51846}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{D7AA6A2C-261F-457B-BEBC-1E97726FE3E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [TCP Query User{6461B2B6-037B-47AC-92BA-9DBD2B0AF3CD}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei FirewallRules: [UDP Query User{69F54785-BDC5-4F5A-929A-8556DD9BABF2}D:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) D:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei FirewallRules: [{40C859E3-600D-4C03-93DF-787532BC75EA}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{04CA3854-B8F7-41E5-9609-56E63FFBE991}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{DC2E3732-2760-40BC-BDEA-46C8DA82087C}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{4C059F61-6C83-4CC8-BC1B-597C577B87D2}] => (Allow) D:\Games2\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [TCP Query User{E2091C34-3DD1-42D7-851E-4D41E87E343A}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{0C25909D-28D3-4E6A-9D97-E180A09814F1}D:\games2\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\games2\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [{A3844684-FFEF-4D27-80CF-9DAE8516E646}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei FirewallRules: [{93B722E3-10F6-4E9E-8F40-CAAF26ED5DAE}] => (Allow) D:\Games2\steamapps\common\Human Fall Flat\Human.exe => Keine Datei FirewallRules: [{625F88A7-5033-4EF9-8E9C-6A6A45DA9091}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei FirewallRules: [{1BD0B5B8-5FB0-4963-A489-99723BEFFD44}] => (Allow) D:\Games2\steamapps\common\DISSIDIA FINAL FANTASY NT Free Edition\dffnt.exe => Keine Datei FirewallRules: [{B4D27174-957A-4ABA-AF74-5A243B3EEF05}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei FirewallRules: [{570A5DF2-050D-499E-83DD-AB2FC4779603}] => (Allow) D:\Games2\steamapps\common\WormsWMD\Worms W.M.D.exe => Keine Datei FirewallRules: [TCP Query User{5E1C7C27-0196-49DF-99CA-9018C1D7B9ED}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei FirewallRules: [UDP Query User{777F24FA-5455-4674-8F21-2B21AC9F30F0}C:\users\k21\desktop\harbor\harbor.exe] => (Allow) C:\users\k21\desktop\harbor\harbor.exe => Keine Datei FirewallRules: [{D8C98445-1F22-46A0-9A8C-2527563F8C41}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> ) FirewallRules: [{4EDFD8BA-824C-4DB2-AEA7-754C754A83BB}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei FirewallRules: [{353832A4-5835-4B22-B3EF-1BCD947D41CC}] => (Allow) D:\Games2\steamapps\common\Uno\UNO.exe => Keine Datei FirewallRules: [{5692F478-AF58-4FEA-B5E2-44DC600B247E}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei FirewallRules: [{39B8937F-C68A-47D2-BEB3-FC4FC851086C}] => (Block) C:\users\k21\appdata\local\gamecenter\gamecenter.exe => Keine Datei FirewallRules: [TCP Query User{6719ACE0-5226-4B68-97FF-A14F7C39D975}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> ) FirewallRules: [UDP Query User{96260930-84A1-4D35-85F9-C30AC45F1FE1}C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\k21\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> ) FirewallRules: [{964F0EDE-0AE6-42F3-80F3-CC6F5ED26B01}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{3DD7F452-4324-4FE4-8DFC-A8292CFDDD22}] => (Allow) D:\Games2\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{9C13C11E-BD28-4A29-B9D4-22B9C79F565F}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss) FirewallRules: [{E0183729-2724-465F-8AF3-924C065979F7}] => (Allow) D:\Games2\steamapps\common\Black Desert Online\BlackDesertLauncher.exe (Pearl abyss Corp -> Pearlabyss) FirewallRules: [{D185BB44-5A94-4F1F-841A-C68164F694E7}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{69DF0FDD-0321-4889-BC77-F22023C6CC4B}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei FirewallRules: [{25ADA769-57D8-471A-81A4-C5B292983257}] => (Allow) C:\Users\K21\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei FirewallRules: [TCP Query User{A8C08DF9-8231-4280-BC70-BECBC9B34D02}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC) FirewallRules: [UDP Query User{51DC50D8-8886-4B47-915F-680987A26A32}C:\users\k21\appdata\roaming\telegram desktop\telegram.exe] => (Block) C:\users\k21\appdata\roaming\telegram desktop\telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC) FirewallRules: [{5D871D23-FA8E-4689-A8B6-66654C68401A}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{30B84162-07F5-4874-A2B5-9835899FE074}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{91254686-6FE5-4805-A8E2-99B1F1DB3123}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{52E9CD19-2ED5-4204-95DB-98ACC8E0CDF6}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{B0258ADD-DD72-4EAA-BBA4-0C0C6D7B3221}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{578D9C75-4D7F-402F-B2DF-609CE77F9450}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [TCP Query User{BDA6D178-7084-49F3-A095-D2232AEDE414}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{CD9BB49D-9E16-4055-87AB-E8A1899AA8B6}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [{C03F6AA5-DF3E-420F-B4CE-9910F790899A}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei FirewallRules: [{1A59BD2D-C433-417E-A707-8E386E5776C8}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\rainbowsix_be.exe => Keine Datei FirewallRules: [{5CFD6345-746C-4EC0-A9EC-C294886295F3}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei FirewallRules: [{B393116E-0E53-4651-A963-47A63AED5B76}] => (Allow) D:\Tom Clancy's Rainbow Six Siege TS\RainbowSix.exe => Keine Datei FirewallRules: [TCP Query User{DAD1A651-898D-4620-9FCE-BAA7489121FF}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei FirewallRules: [UDP Query User{F1FAF6F3-789D-41E0-B761-742A29EB7C3F}D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe] => (Allow) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei FirewallRules: [{2BFF80FF-1F5B-47F9-86D8-AFA4D44B0332}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei FirewallRules: [{1B39A1F8-0B1C-4CB4-B98D-5A6854C982D2}] => (Block) D:\tom clancy's rainbow six siege ts\rainbowsix_vulkan.exe => Keine Datei FirewallRules: [TCP Query User{8504E094-CC94-47FC-9BE6-A46952218377}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei FirewallRules: [UDP Query User{1141BFEA-68EC-4C29-8569-A71A85ABBD50}D:\games2\genshin impact\genshin impact game\genshinimpact.exe] => (Allow) D:\games2\genshin impact\genshin impact game\genshinimpact.exe => Keine Datei FirewallRules: [{F2EEC378-37B4-4C52-B211-B5870AAA5EB6}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations) FirewallRules: [{9239EB72-0D34-4E77-BAA5-14D099C83576}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\rainbowsix_be.exe (BattlEye Innovations e.K. -> BattlEye Innovations) FirewallRules: [{75880721-EFF8-4FD4-9729-76A36EE5B439}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [{A3F6B4AF-7620-4184-877E-71454D06F8C4}] => (Allow) D:\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [TCP Query User{E760469D-0432-447D-A4AE-8919D846ED75}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei FirewallRules: [UDP Query User{3713C040-2E65-4471-9CCF-A035D8BF9AF6}D:\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\call of duty modern warfare\modernwarfare.exe => Keine Datei FirewallRules: [TCP Query User{8AA670A9-4015-48F2-A5E1-9C7C277D50E8}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [UDP Query User{A02ACC89-ED39-4DB5-ACA9-F07373355130}D:\games2\riot games\riot client\riotclientservices.exe] => (Block) D:\games2\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.) FirewallRules: [{299B2B11-EFA3-4F8C-9F29-6138A6ABF7F4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{6AA52E51-B3D6-4D07-B64E-716B9B4E70B6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{21C71292-D9F3-4B84-AD73-3D52DFC44252}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) FirewallRules: [{F9248DBD-7445-4F69-BAB3-BB850575704C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation) FirewallRules: [TCP Query User{2C8E7648-C1C1-40D5-9F92-9098251E1DF1}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{3C226CB8-E281-47B5-8521-2F45AACB83B7}D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{96EE4089-2516-4D30-B650-3DB38B9F9216}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{C1CB0876-1812-4CFF-9528-4112EA3D290C}] => (Block) D:\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{4CBDB035-3DBA-405A-A358-73066990FF83}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc) FirewallRules: [{23D66D78-1296-4020-B132-1560D79FB540}] => (Allow) D:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc) FirewallRules: [{AA019C34-5176-41D1-BA58-0058DEED04C7}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Wiederherstellungspunkte ========================= ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:118.01 GB) (Free:23.05 GB) (20%) ==================== Fehlerhafte Geräte im Gerätemanager ============ ==================== Fehlereinträge in der Ereignisanzeige: ======================== |
Themen zu Rogue Killer Fund |
administrator, bonjour, defender, dll, error, firefox, geforce, google, home, installation, internet, internet explorer, microsoft, mozilla, nvcontainer, nvcontainer.exe, nvidia, ordner, programme, prozesse, realtek, rundll, security, services.exe, svchost.exe, system, windows |