Hat nichts gefunden

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    04-12-2023
# Duration: 00:00:04
# OS:       Windows 10 (Build 19045.2728)
# Scanned:  32100
# Detected: 0


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries found.

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.



########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
         

Hat nichts erkannt

Kontrollscans mit MBAM und RK

• Malwarebytes
• RogueKiller

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 13.04.23
Scan-Zeit: 03:26
Protokolldatei: 39efbd2e-d99a-11ed-81ad-fc349763ea9a.json

-Softwaredaten-
Version: 4.5.26.259
Komponentenversion: 1.0.1976
Version des Aktualisierungspakets: 1.0.67921
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.2728)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-FUQ27TF\hanne

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 312664
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 2 Min., 3 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

Program            : RogueKiller Anti-Malware
Version            : 15.8.2.0
x64                : Yes
Program Date       : Mar 21 2023
Location           : C:\Users\hanne\Desktop\RogueKiller_portable64.exe
Premium            : No
Company            : Adlice Software
Website            : https://www.adlice.com/
Contact            : https://adlice.com/contact/
Website            : https://adlice.com/download/roguekiller/
Operating System   : Windows 10 (10.0.19045) 64-bit
64-bit OS          : Yes
Startup            : 0
WindowsPE          : No
User               : hanne
User is Admin      : Yes
Date               : 2023/04/13 01:37:54
Type               : Scan
Aborted            : No
Scan Mode          : Standard
Duration           : 382
Found items        : 0
Total scanned      : 81942
Signatures Version : 20230411_080448
Truesight Driver   : Yes
Updates Count      : 4

************************* Warnings *************************

************************* Updates *************************
BlueStacks 5 (64-bit), version 5.7.100.1037
  [+] Available Version        : 5.11.1.1002
  [+] Size                     : 1,99 GB
  [+] Wow6432                  : No
  [+] Portable                 : No

LibreOffice 7.3.2.2 (64-bit), version 7.3.2.2
  [+] Available Version        : 7.5.2
  [+] Size                     : 788 MB
  [+] Wow6432                  : No
  [+] Portable                 : No
  [+] update_location          : C:\Program Files\LibreOffice\

KeePass Password Safe 2.52 (32-bit), version 2.52
  [+] Available Version        : 2.53.1
  [+] Size                     : 15,9 MB
  [+] Wow6432                  : Yes
  [+] Portable                 : No
  [+] update_location          : E:\KeePass Password Safe 2\

Discord (64-bit), version 1.0.9004
  [+] Available Version        : 1.0.9012
  [+] Size                     : 78,2 MB
  [+] Wow6432                  : No
  [+] Portable                 : No
  [+] update_location          : C:\Users\hanne\AppData\Local\Discord


************************* Processes *************************

************************* Modules *************************

************************* Services *************************

************************* Scheduled Tasks *************************

************************* Registry *************************

************************* WMI *************************

************************* Hosts File *************************
is_too_big      : No
hosts_file_path : C:\Windows\System32\drivers\etc\hosts


************************* Filesystem *************************

************************* Web Browsers *************************

************************* Antirootkit *************************
         

Tja wie du siehst ist ein deiner Rechner ein weißer Engel

Kannst du bitte nochmal einen Scan mit FRST machen?
Ich würde gerne noch eine Sache kontrollieren.


Schritt 1

• Starte FRST erneut und klicke auf Untersuchen.
• FRST erstellt nun zwei Logdateien (FRST.txt und Addition.txt).
• Poste mir beide Logdateien mit deiner nächsten Antwort.

Sicher

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 13-04-2023 01
durchgeführt von hanne (Administrator) auf DESKTOP-FUQ27TF (ASUS System Product Name) (13-04-2023 16:53:54)
Gestartet von C:\Users\hanne\Desktop\Neuer Ordner (3)\FRST64.exe
Geladene Profile: hanne
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowserEdge.exe
(C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowserEdge.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\112.0.1722.39\msedgewebview2.exe <6>
(C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe ->) (GOG  sp. z o.o -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe <2>
(C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe ->) (GOG  sp. z o.o -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe
(C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Razer\Razer Services\GMS\SteamCmd\steamcmd.exe
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5>
(C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe
(C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe
(C:\Program Files\LGHUB\lghub.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe
(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCopyAccelerator.exe
(C:\Users\hanne\AppData\Local\Programs\Opera GX\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\hanne\AppData\Local\Programs\Opera GX\97.0.4719.61\opera_crashreporter.exe
(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Discord Inc. -> Discord Inc.) C:\Users\hanne\AppData\Local\Discord\app-1.0.9012\Discord.exe <6>
(DriverStore\FileRepository\u0389188.inf_amd64_cd9701bcd4981eb7\B389045\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389188.inf_amd64_cd9701bcd4981eb7\B389045\atieclxx.exe
(explorer.exe ->) (GOG  sp. z o.o -> GOG.com) C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe
(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <3>
(explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe
(explorer.exe ->) (Skutta, Kristjan -> ) E:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe
(GOG  sp. z o.o -> GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Opera Norway AS -> Opera Software) C:\Users\hanne\AppData\Local\Programs\Opera GX\opera.exe <21>
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0389188.inf_amd64_cd9701bcd4981eb7\B389045\atiesrxx.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUS Inc.) C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.08\AsusFanControlService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.15\atkexComSvc.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe
(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe
(services.exe ->) (DTS, Inc. -> ) C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GamingServices_10.75.13001.0_x64__8wekyb3d8bbwe\gamingservices.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GamingServices_10.75.13001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\NisSrv.exe
(services.exe ->) (Parsec Cloud, Inc. -> Parsec) C:\Program Files\Parsec\pservice.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe
(services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe
(services.exe ->) (Razer USA Ltd. -> THX) C:\Windows\System32\THXV2HSAService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe
(svchost.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x64.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe <2>
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe <4>
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe
(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_4.2204.13303.0_x64__8wekyb3d8bbwe\Cortana.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1081648 2020-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3088752 2023-03-10] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [543736 2023-03-10] (Razer USA Ltd. -> Razer Inc.)
HKLM-x32\...\Run: [Genshin Impact_launcher__1_1] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Opera GX Stable] => C:\Users\hanne\AppData\Local\Programs\Opera GX\launcher.exe [2623904 2023-04-12] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Discord] => C:\Users\hanne\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Steam] => E:\Steam\steam.exe [4362600 2023-03-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3545104 2023-03-28] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Overwolf] => E:\Overwolf\OverwolfLauncher.exe [1784664 2023-03-14] (Overwolf Ltd -> Overwolf Ltd.)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [WallpaperEngine] => E:\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [3050080 2022-10-22] (Skutta, Kristjan -> )
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\hanne\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [152025856 2023-02-26] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [MicrosoftEdgeAutoLaunch_FE48D7D4ADB4C1AF2C6F0AAF0D143FCD] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4139936 2023-04-10] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Parsec.App.0] => C:\Program Files\Parsec\parsecd.exe [462472 2022-11-23] (Parsec Cloud, Inc. -> Parsec)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [Medal] => C:\Users\hanne\AppData\Local\Medal\update.exe [1974144 2023-01-15] (Ferox Games B.V. -> )
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [AMDNoiseSuppression] => C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe [155544 2022-08-12] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [GalaxyClient] => [X]
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13861856 2023-03-29] (GOG  sp. z o.o -> GOG.com)
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\MountPoints2: {824ec304-a254-11ed-8b08-fc349763ea9a} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\MountPoints2: {e893e2f8-d0bf-11ed-8b19-fc349763ea9a} - "D:\HiSuiteDownLoader.exe" 
HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3545104 2023-03-28] (Razer USA Ltd. -> Razer Inc.)
HKLM\...\Print\Monitors\pdfcmon: C:\Windows\system32\pdfcmon.dll [181248 2023-02-02] (pdfforge GmbH) [Datei ist nicht signiert]
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02DCB396-B495-4D8A-B0BA-1EDE7E8072DF} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1024440 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {1AD1289D-B046-4584-BF74-AAF578E46C4D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1CA30B6A-906D-4617-BEB8-DC2F92788238} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2638856 2023-03-14] (Overwolf Ltd -> Overwolf LTD)
Task: {1E273A3D-BD63-46A2-A5D4-A5529BB25FFF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1FFCCE0C-6FB2-459B-A59E-F653B98A855C} - System32\Tasks\RazerCortexScheduleClean => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [543736 2023-03-10] (Razer USA Ltd. -> Razer Inc.)
Task: {35649E14-673F-4D81-9BD5-71BE37B952B7} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1024440 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {4118F0D1-CC9A-409D-92F3-C3A68B2BDCCE} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [43797544 2022-09-01] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
Task: {41E4C9A1-1C2E-4625-8311-30B924A2CE6E} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Keine Datei)
Task: {84635559-3F1F-46DE-A82C-CDF791349FC7} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [1858920 2022-09-27] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {9BF2B886-1FA3-4A0D-84BE-8DF366ED1FB2} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1254760 2022-09-29] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {9BF6D5A9-437F-4A88-81BC-CF9117B6BA9E} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [183736 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {A6EC61AE-7E51-42F7-AEA4-1C0DCC3CF66E} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d8ef89b8ac8c33 => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-11-03] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
Task: {ADA3310C-8A83-4300-A1F9-B3F353C24237} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [309608 2022-09-27] (ASUSTeK COMPUTER INC. -> ASUS)
Task: {B66B676F-ED59-482F-B1EE-238C31BEEDD9} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [275136 2022-04-29] (Bluestack Systems, Inc -> BlueStack Systems, Inc.)
Task: {BABD6E8C-8EB9-455E-9A07-A150256CE0AF} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [56760 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {BC44B310-1AAC-43F2-A8E4-52D3102D1AD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C0B56ED5-4860-4FB0-9899-70C1681CAF12} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1024440 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {C3979376-6C85-4DBD-A06A-FA0759E7E8A0} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1649418616 => C:\Users\hanne\AppData\Local\Programs\Opera GX\launcher.exe [2623904 2023-04-12] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\hanne\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {C86C78B9-EB69-4136-85A6-995F24B672DB} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-04-12] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {DE3DD05F-F41D-4E37-8CD6-92AB39073E31} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-11-03] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
Task: {E03510F0-5659-4AE2-A998-FC4395F8901F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E1EFA177-B398-4E70-BFEB-3629A8534DEB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-04-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {EEA480C8-5CB4-43B1-85E6-71AD54844B86} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [291768 2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {F9C7E5DF-3EED-4D0F-B0AD-D1F44F47C5A0} - System32\Tasks\Opera GX scheduled Autoupdate 1648913156 => C:\Users\hanne\AppData\Local\Programs\Opera GX\launcher.exe [2623904 2023-04-12] (Opera Norway AS -> Opera Software)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.9
Tcpip\..\Interfaces\{578be24b-6556-435b-bd89-8525ee1fef0d}: [DhcpNameServer] 192.168.178.9

Edge: 
=======
Edge Profile: C:\Users\hanne\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-13]
Edge Extension: (Edge relevant text changes) - C:\Users\hanne\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-04-12]

FireFox:
========
FF DefaultProfile: d6bwhkk5.default
FF ProfilePath: C:\Users\hanne\AppData\Roaming\Mozilla\Firefox\Profiles\d6bwhkk5.default [2022-04-10]
FF ProfilePath: C:\Users\hanne\AppData\Roaming\Mozilla\Firefox\Profiles\at39mge2.default-release-1681084627620 [2023-04-11]
FF Extension: (uBlock Origin) - C:\Users\hanne\AppData\Roaming\Mozilla\Firefox\Profiles\at39mge2.default-release-1681084627620\Extensions\uBlock0@raymondhill.net.xpi [2023-04-10]
FF Plugin: @java.com/DTPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\dtplugin\npDeployJava1.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.361.2 -> C:\Program Files\Java\jre1.8.0_361\bin\plugin2\npjp2.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)

Chrome: 
=======
CHR Profile: C:\Users\hanne\AppData\Local\Google\Chrome\User Data\Default [2023-04-12]
CHR Extension: (Google Docs Offline) - C:\Users\hanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-04-11]
CHR Extension: (Allow CORS: Access-Control-Allow-Origin) - C:\Users\hanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\lhobafahddgcelffkeicbaginigeejlf [2023-04-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\hanne\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-11]

Opera: 
=======
StartMenuInternet: (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001) Opera GXStable - "C:\Users\hanne\AppData\Local\Programs\Opera GX\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [399984 2023-04-12] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.15\atkexComSvc.exe [468504 2022-09-06] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-11-03] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [558104 2022-05-19] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.08\AsusFanControlService.exe [1438744 2022-09-06] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [153112 2022-11-03] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)
S2 AsusROGLSLService; C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe [678256 2022-11-03] (ASUSTeK COMPUTER INC. -> ASUS)
S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [838760 2023-04-11] (ASUSTeK Computer Inc. -> )
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [9880840 2023-01-21] (BattlEye Innovations e.K. -> )
R2 CortexLauncherService; C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe [588712 2023-03-10] (Razer USA Ltd. -> Razer Inc.)
R2 DTSAPO3Service; C:\Windows\System32\DTS\PC\APO3x\DTSAPO3Service.exe [222104 2020-08-22] (DTS, Inc. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2023-02-22] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [16029456 2022-06-21] (Epic Games Inc. -> Epic Games, Inc.)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2348512 2023-03-29] (GOG  sp. z o.o -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7178720 2023-03-29] (GOG  sp. z o.o -> GOG.com)
R2 GameSDK Service; C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe [397544 2022-05-31] (ASUSTeK COMPUTER INC. -> ASUS Inc.)
R2 GamingServices; C:\Program Files\WindowsApps\Microsoft.GamingServices_10.75.13001.0_x64__8wekyb3d8bbwe\GamingServices.exe [75216 2023-03-24] (Microsoft Corporation -> )
R2 GamingServicesNet; C:\Program Files\WindowsApps\Microsoft.GamingServices_10.75.13001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe [75216 2023-03-24] (Microsoft Corporation -> )
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10209536 2023-02-26] (Logitech Inc -> Logitech, Inc.)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [4210536 2023-02-10] (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9098608 2023-04-11] (Malwarebytes Inc. -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2579272 2022-08-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3497808 2022-08-09] (Electronic Arts, Inc. -> Electronic Arts)
S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2638856 2023-03-14] (Overwolf Ltd -> Overwolf LTD)
R2 Parsec; C:\Program Files\Parsec\pservice.exe [424584 2022-11-23] (Parsec Cloud, Inc. -> Parsec)
S3 ProtonVPN Service; C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [402024 2023-03-14] (Proton Technologies AG -> ProtonVPN)
S3 ProtonVPN WireGuard; C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.WireGuardService.exe [328808 2023-03-14] (Proton Technologies AG -> ProtonVPN)
R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc)
R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362760 2023-01-30] (Razer USA Ltd. -> Razer Inc)
R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [301576 2023-03-27] (Razer USA Ltd. -> Razer Inc.)
R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [1574512 2023-02-13] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [537912 2023-03-15] (Razer USA Ltd. -> Razer Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [226976 2023-03-16] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ss_conn_launcher_service; C:\Windows\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 THXV2HSAService; C:\Windows\System32\THXV2HSAService.exe [264664 2020-11-19] (Razer USA Ltd. -> THX)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [11060856 2023-03-10] (Riot Games, Inc. -> Riot Games, Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\NisSrv.exe [3228400 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe [133536 2023-04-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Rockstar Service; "E:\Games\RockstarService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\Windows\System32\drivers\amdfendrmgr.sys [36248 2022-10-14] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [27256 2022-01-27] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R2 AMDRyzenMasterDriverV20; C:\Windows\system32\AMDRyzenMasterDriver.sys [48328 2023-03-01] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_1a1a381a2c0e293c\amdsafd.sys [113056 2022-08-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\Windows\System32\DriverStore\FileRepository\u0389188.inf_amd64_cd9701bcd4981eb7\B389045\amdkmdag.sys [100038536 2023-03-08] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [59920 2022-05-31] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [34384 2022-02-10] (ASUSTeK Computer Inc. -> )
R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [49256 2022-08-16] (ASUSTeK COMPUTER INC. -> )
S3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [3348752 2023-03-05] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [321784 2022-04-29] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R3 cpuz154; C:\Windows\temp\cpuz154\cpuz154_x64.sys [40976 2023-04-12] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIAIO; C:\Windows\system32\drivers\CtiAIo64.sys [32320 2022-11-03] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [42000 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [35344 2022-09-21] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.)
R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-24] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-24] (Logitech Inc -> Logitech)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [21480 2023-04-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239544 2023-04-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [18496 2022-06-09] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 ProtonVPNCallout; C:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.CalloutDriver.sys [34176 2023-03-14] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [167544 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [43640 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 sTHXV2VAD; C:\Windows\System32\drivers\THXVAD2.sys [166048 2022-01-20] (Razer USA Ltd. -> Windows (R) Win 7 DDK provider)
R3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [49024 2023-03-14] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [22292248 2023-03-10] (Riot Games, Inc. -> Riot Games, Inc.)
R1 ViGEmBus; C:\Windows\System32\drivers\ViGEmBus.sys [165744 2022-03-14] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
S3 VOICEMOD_Driver; C:\Windows\system32\drivers\mvvad.sys [48144 2022-07-26] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49600 2023-04-05] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [497920 2023-04-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [99608 2023-04-05] (Microsoft Windows -> Microsoft Corporation)
R3 wintun; C:\Windows\system32\DRIVERS\wintun.sys [29680 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WireGuard; C:\Windows\System32\drivers\wireguard.sys [489368 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S1 epp; \??\E:\Games\bin64\epp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-04-13 05:53 - 2023-04-13 05:53 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Orekaria
2023-04-13 05:53 - 2023-04-13 05:53 - 000000000 ____D C:\Users\hanne\AppData\Local\Orekaria
2023-04-13 05:53 - 2023-04-13 05:53 - 000000000 ____D C:\Program Files\Orekaria
2023-04-13 05:22 - 2023-04-13 05:22 - 000001344 _____ C:\Users\Public\Desktop\Cyberpunk 2077.lnk
2023-04-13 05:22 - 2023-04-13 05:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cyberpunk 2077 [GOG.com]
2023-04-13 04:24 - 2023-04-13 04:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2023-04-13 04:24 - 2023-04-13 04:24 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy
2023-04-13 04:23 - 2023-04-13 05:22 - 000000000 ____D C:\ProgramData\GOG.com
2023-04-13 03:30 - 2023-04-13 03:31 - 000000000 ____D C:\ProgramData\RogueKiller
2023-04-13 03:25 - 2023-04-13 16:53 - 000000000 ____D C:\Users\hanne\Desktop\Neuer Ordner (3)
2023-04-12 23:03 - 2023-04-12 23:03 - 000000000 ____D C:\AdwCleaner
2023-04-12 15:15 - 2023-04-12 15:15 - 000000000 ___HD C:\$WinREAgent
2023-04-12 15:14 - 2023-04-12 16:57 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-04-12 05:41 - 2023-04-13 03:27 - 000000000 ____D C:\Users\hanne\Desktop\winexp
2023-04-11 20:31 - 2023-04-11 20:31 - 000000000 ____D C:\Program Files\Google
2023-04-11 19:09 - 2023-04-11 19:09 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Avast Software
2023-04-11 19:09 - 2023-04-11 19:09 - 000000000 ____D C:\Users\hanne\AppData\Local\Avast Software
2023-04-11 19:07 - 2023-04-11 19:07 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2023-04-11 19:07 - 2023-04-11 19:06 - 000313240 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2023-04-11 19:06 - 2023-04-11 19:42 - 000000000 ____D C:\ProgramData\Avast Software
2023-04-11 19:06 - 2023-04-11 19:06 - 000000000 ____D C:\Program Files\Avast Software
2023-04-11 17:58 - 2023-04-13 16:54 - 000000000 ____D C:\FRST
2023-04-11 06:45 - 2023-04-11 06:45 - 000012872 _____ (SurfRight B.V.) C:\Windows\system32\bootdelete.exe
2023-04-11 06:39 - 2023-04-11 06:45 - 000000000 ____D C:\ProgramData\HitmanPro
2023-04-11 06:35 - 2023-04-11 06:35 - 000000000 ____D C:\ProgramData\Emsisoft
2023-04-11 06:34 - 2023-04-11 06:34 - 000657224 _____ C:\TDSSKiller.3.1.0.28_11.04.2023_06.34.13_log.txt
2023-04-11 06:28 - 2023-04-11 06:28 - 000000000 ____D C:\Users\hanne\AppData\Local\mbam
2023-04-11 06:27 - 2023-04-13 05:45 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2023-04-11 06:26 - 2023-04-11 06:27 - 000000000 ____D C:\ProgramData\Malwarebytes
2023-04-11 06:26 - 2023-04-11 06:27 - 000000000 ____D C:\Program Files\Malwarebytes
2023-04-11 06:21 - 2023-04-11 06:48 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2023-04-11 06:20 - 2023-04-11 07:00 - 000000000 ____D C:\Windows\pss
2023-04-11 05:08 - 2023-04-12 18:52 - 000000000 ____D C:\KVRT2020_Data
2023-04-10 03:25 - 2023-04-10 03:25 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Unknown Vendor
2023-04-10 02:48 - 2023-04-10 02:48 - 000037648 _____ C:\Users\hanne\Downloads\Ori_and_the_Will_of_the_Wisps_FitGirl_Repack.torrent
2023-04-10 02:37 - 2023-04-10 02:37 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Moon Studios
2023-04-10 02:07 - 2023-04-11 04:50 - 000000000 ____D C:\Users\hanne\AppData\Roaming\qBittorrent
2023-04-10 02:07 - 2023-04-10 02:07 - 000000000 ____D C:\Users\hanne\AppData\Local\qBittorrent
2023-04-10 02:07 - 2023-04-10 02:07 - 000000000 ____D C:\Program Files\qBittorrent
2023-04-10 02:05 - 2023-04-10 02:10 - 000000000 ____D C:\ProgramData\ProtonVPN
2023-04-10 02:04 - 2023-04-10 02:31 - 000000000 ____D C:\Users\hanne\AppData\Local\ProtonVPN
2023-04-10 02:04 - 2023-04-10 02:04 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Proton Technologies AG
2023-04-10 02:04 - 2023-04-10 02:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN
2023-04-10 02:04 - 2023-04-10 02:04 - 000000000 ____D C:\Program Files (x86)\Proton Technologies
2023-04-10 01:57 - 2023-04-13 05:46 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-04-10 01:57 - 2023-04-13 05:45 - 000002034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk
2023-04-10 01:57 - 2023-04-10 01:57 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2023-04-07 01:42 - 2023-04-07 01:42 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Sun
2023-04-07 01:42 - 2023-04-07 01:42 - 000000000 ____D C:\ProgramData\Oracle
2023-04-07 01:41 - 2023-04-07 01:41 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Sun
2023-04-07 01:41 - 2023-04-07 01:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2023-04-07 01:41 - 2023-04-07 01:41 - 000000000 ____D C:\Program Files\Java
2023-04-07 01:41 - 2023-01-09 09:10 - 000195232 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2023-04-05 03:29 - 2023-04-05 03:29 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Hovgaard Games
2023-04-04 13:59 - 2023-04-13 16:51 - 000003118 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2023-03-25 16:12 - 2023-03-25 16:12 - 000000000 ____D C:\Users\hanne\Documents\Rockstar Games
2023-03-25 16:12 - 2023-03-25 16:12 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2023-03-25 16:12 - 2023-03-25 16:12 - 000000000 ____D C:\Users\hanne\AppData\Local\Rockstar Games
2023-03-25 16:09 - 2023-03-25 16:09 - 000000000 ____D C:\ProgramData\Rockstar Games
2023-03-25 16:09 - 2023-03-25 16:09 - 000000000 ____D C:\Program Files\Rockstar Games
2023-03-25 16:09 - 2023-03-25 16:09 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2023-03-24 17:09 - 2023-03-24 17:09 - 000002622 _____ C:\Windows\system32\Tasks\AMDRyzenMasterSDKTask
2023-03-24 17:09 - 2023-03-24 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition
2023-03-24 17:09 - 2023-03-24 17:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool
2023-03-24 17:06 - 2023-03-08 22:49 - 002248024 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe
2023-03-24 17:06 - 2023-03-08 22:49 - 002248024 _____ C:\Windows\system32\vulkaninfo.exe
2023-03-24 17:06 - 2023-03-08 22:49 - 001654616 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-03-24 17:06 - 2023-03-08 22:49 - 001654616 _____ C:\Windows\SysWOW64\vulkaninfo.exe
2023-03-24 17:06 - 2023-03-08 22:49 - 001472944 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 001472944 _____ C:\Windows\system32\vulkan-1.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 001196320 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 001196320 _____ C:\Windows\SysWOW64\vulkan-1.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000801160 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\Rapidfire64.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000714632 _____ C:\Windows\system32\hiprt0200064.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000678232 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\Rapidfire.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000606088 _____ C:\Windows\system32\GameManager64.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000547720 _____ C:\Windows\system32\libsmi_guest.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000541016 _____ C:\Windows\system32\libsmi_host.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000502152 _____ C:\Windows\system32\EEURestart.exe
2023-03-24 17:06 - 2023-03-08 22:49 - 000459616 _____ C:\Windows\SysWOW64\GameManager32.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000206216 _____ C:\Windows\system32\mantle64.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000185736 _____ C:\Windows\system32\mantleaxl64.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000163208 _____ C:\Windows\SysWOW64\mantle32.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000147336 _____ C:\Windows\SysWOW64\mantleaxl32.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000051032 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\RapidFireServer64.dll
2023-03-24 17:06 - 2023-03-08 22:49 - 000047960 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\RapidFireServer.dll
2023-03-24 17:06 - 2023-03-08 22:48 - 000542040 _____ C:\Windows\system32\dgtrayicon.exe
2023-03-24 17:06 - 2023-03-08 22:48 - 000360792 _____ C:\Windows\system32\clinfo.exe
2023-03-24 17:06 - 2023-03-08 22:47 - 000948056 _____ (AMD) C:\Windows\system32\atieclxx.exe
2023-03-24 17:06 - 2023-03-08 22:47 - 000535432 _____ C:\Windows\system32\atieah64.exe
2023-03-24 17:06 - 2023-03-08 22:47 - 000266120 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atig6txx.dll
2023-03-24 17:06 - 2023-03-08 22:47 - 000226696 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atigktxx.dll
2023-03-24 17:06 - 2023-03-08 22:47 - 000195928 _____ (AMD) C:\Windows\system32\atimuixx.dll
2023-03-24 17:06 - 2023-03-08 22:47 - 000183688 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atisamu64.dll
2023-03-24 17:06 - 2023-03-08 22:47 - 000146872 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atisamu32.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 084666248 _____ C:\Windows\SysWOW64\amd_comgr32.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 001547656 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\atiadlxy.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000524128 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000472928 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\atidemgy.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000404360 _____ C:\Windows\SysWOW64\atieah32.exe
2023-03-24 17:06 - 2023-03-08 22:46 - 000389560 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000210056 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\aticfx64.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000172952 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\aticfx32.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000144264 _____ C:\Windows\system32\atidxx64.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000118104 _____ C:\Windows\SysWOW64\atidxx32.dll
2023-03-24 17:06 - 2023-03-08 22:46 - 000074584 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\ati2erec.dll
2023-03-24 17:06 - 2023-03-08 22:45 - 100654520 _____ C:\Windows\system32\amd_comgr.dll
2023-03-24 17:06 - 2023-03-08 22:44 - 000138120 _____ C:\Windows\system32\amdxc64.dll
2023-03-24 17:06 - 2023-03-08 22:44 - 000113496 _____ C:\Windows\SysWOW64\amdxc32.dll
2023-03-24 17:06 - 2023-03-08 22:42 - 007200216 _____ C:\Windows\system32\amdsmi.exe
2023-03-24 17:06 - 2023-03-08 22:42 - 002265992 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsasrv64.dll
2023-03-24 17:06 - 2023-03-08 22:42 - 001320328 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdsacli64.dll
2023-03-24 17:06 - 2023-03-08 22:42 - 001048968 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdsacli32.dll
2023-03-24 17:06 - 2023-03-08 22:41 - 000942984 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdlvr64.dll
2023-03-24 17:06 - 2023-03-08 22:41 - 000770952 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdlvr32.dll
2023-03-24 17:06 - 2023-03-08 22:41 - 000470920 _____ C:\Windows\system32\amdlogum.exe
2023-03-24 17:06 - 2023-03-08 22:41 - 000167008 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\atimpc64.dll
2023-03-24 17:06 - 2023-03-08 22:41 - 000136448 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\atimpc32.dll
2023-03-24 17:06 - 2023-03-08 22:40 - 001725512 _____ (AMD) C:\Windows\system32\amf-mft-mjpeg-decoder64.dll
2023-03-24 17:06 - 2023-03-08 22:40 - 001399928 _____ (AMD) C:\Windows\SysWOW64\amf-mft-mjpeg-decoder32.dll
2023-03-24 17:06 - 2023-03-08 22:39 - 016175544 _____ (Advanced Micro Devices Inc.) C:\Windows\system32\amdhip64.dll
2023-03-24 17:06 - 2023-03-08 22:39 - 000568248 _____ C:\Windows\system32\amdgfxinfo64.dll
2023-03-24 17:06 - 2023-03-08 22:39 - 000432056 _____ C:\Windows\SysWOW64\amdgfxinfo32.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 004359096 _____ (Advanced Micro Devices, Inc.) C:\Windows\system32\amdadlx64.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 004165512 _____ (Advanced Micro Devices, Inc.) C:\Windows\SysWOW64\amdadlx32.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 000567760 _____ C:\Windows\system32\amdmiracast.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 000176928 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdave64.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 000167048 _____ (Advanced Micro Devices, Inc. ) C:\Windows\system32\amdpcom64.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 000151072 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdave32.dll
2023-03-24 17:06 - 2023-03-08 22:38 - 000136496 _____ (Advanced Micro Devices, Inc. ) C:\Windows\SysWOW64\amdpcom32.dll
2023-03-24 17:06 - 2023-03-08 22:08 - 030284712 _____ C:\Windows\system32\hiprt02000_amd.hipfb
2023-03-24 17:06 - 2023-03-08 22:08 - 022879832 _____ C:\Windows\system32\hiprt02000_nv.fatbin
2023-03-24 17:06 - 2023-03-08 22:08 - 002170168 _____ C:\Windows\system32\oro_compiled_kernels.fatbin
2023-03-24 17:06 - 2023-03-08 22:08 - 001464232 _____ C:\Windows\system32\oro_compiled_kernels.hipfb
2023-03-24 17:06 - 2023-03-08 22:07 - 094816128 _____ C:\Windows\system32\amdxc64.so
2023-03-24 00:11 - 2023-03-24 00:11 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2023-03-24 00:11 - 2023-03-24 00:11 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput
2023-03-23 13:59 - 2023-04-13 16:51 - 000003110 _____ C:\Windows\system32\Tasks\AMDLinkUpdate
2023-03-15 17:39 - 2023-03-15 17:39 - 000000000 ____D C:\Users\hanne\Documents\Klei
2023-03-15 17:39 - 2023-03-15 17:39 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Klei
2023-03-15 17:39 - 2023-03-15 17:39 - 000000000 ____D C:\Users\hanne\AppData\Local\Klei

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-04-13 16:53 - 2022-04-02 17:25 - 000004240 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1648913156
2023-04-13 16:53 - 2022-04-02 17:25 - 000001438 _____ C:\Users\hanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2023-04-13 16:52 - 2022-04-02 17:49 - 000000000 ____D C:\Users\hanne\AppData\Roaming\discord
2023-04-13 16:52 - 2022-04-02 17:49 - 000000000 ____D C:\Users\hanne\AppData\Local\Discord
2023-04-13 16:51 - 2022-07-10 03:11 - 000000000 ____D C:\Users\hanne\AppData\Roaming\LGHUB
2023-04-13 16:51 - 2022-07-10 03:11 - 000000000 ____D C:\Users\hanne\AppData\Local\LGHUB
2023-04-13 16:51 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-04-13 16:51 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2023-04-13 16:51 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2023-04-13 06:45 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-04-13 05:46 - 2022-05-20 23:30 - 000000001 _____ C:\Windows\vgkbootstatus.dat
2023-04-13 05:46 - 2022-04-02 18:34 - 000000909 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk
2023-04-13 05:46 - 2022-04-02 17:50 - 000000000 ____D C:\ProgramData\Riot Games
2023-04-13 05:46 - 2022-04-02 16:59 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-04-13 05:45 - 2022-04-27 15:41 - 000001146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2023-04-13 05:45 - 2022-04-02 20:51 - 000000016 _____ C:\ProgramData\mntemp
2023-04-13 05:45 - 2022-04-02 19:02 - 000000671 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk
2023-04-13 05:37 - 2022-04-02 19:51 - 000000000 ____D C:\Users\hanne\AppData\Local\CrashDumps
2023-04-13 05:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2023-04-13 05:22 - 2022-04-02 17:21 - 000000000 ____D C:\ProgramData\Package Cache
2023-04-13 04:29 - 2022-04-02 19:06 - 000000000 ____D C:\Users\hanne\AppData\Roaming\KeePass
2023-04-12 23:01 - 2023-02-05 16:55 - 000003978 _____ C:\Windows\system32\Tasks\RazerCortexScheduleClean
2023-04-12 23:01 - 2022-11-03 15:39 - 000000000 ____D C:\Program Files\ASUS
2023-04-12 23:01 - 2022-04-02 17:04 - 000000000 ____D C:\Users\hanne\AppData\Local\D3DSCache
2023-04-12 20:57 - 2023-02-02 23:56 - 000000000 ____D C:\Program Files (x86)\Google
2023-04-12 20:54 - 2022-11-03 15:37 - 000000000 ____D C:\Program Files (x86)\ASUS
2023-04-12 20:52 - 2022-11-03 15:41 - 000000000 ____D C:\Program Files (x86)\LightingService
2023-04-12 20:51 - 2022-04-02 16:59 - 000000000 ____D C:\ProgramData\ASUS
2023-04-12 16:57 - 2022-04-10 13:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-04-12 15:14 - 2022-04-10 13:35 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\Mozilla
2023-04-12 03:56 - 2022-05-14 20:26 - 000000000 ____D C:\Users\hanne\AppData\Local\Ubisoft Game Launcher
2023-04-12 00:31 - 2023-01-15 21:31 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Medal
2023-04-12 00:30 - 2023-01-15 21:31 - 000000000 ____D C:\Medal
2023-04-11 23:03 - 2023-01-15 21:31 - 000000000 ____D C:\Users\hanne\Documents\Medal
2023-04-11 20:31 - 2022-05-27 16:22 - 000000000 ____D C:\Users\hanne\AppData\Local\Google
2023-04-11 19:46 - 2022-04-02 17:07 - 001723308 _____ C:\Windows\system32\PerfStringBackup.INI
2023-04-11 19:46 - 2019-12-07 16:51 - 000743838 _____ C:\Windows\system32\perfh007.dat
2023-04-11 19:46 - 2019-12-07 16:51 - 000150260 _____ C:\Windows\system32\perfc007.dat
2023-04-11 19:40 - 2022-04-02 16:59 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-04-11 19:40 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2023-04-11 19:39 - 2022-04-02 16:59 - 000838760 _____ C:\Windows\system32\AsusUpdateCheck.exe
2023-04-11 19:39 - 2022-04-02 16:59 - 000008192 ___SH C:\DumpStack.log.tmp
2023-04-11 19:29 - 2022-04-02 16:59 - 000877320 _____ C:\Windows\system32\wpbbin.exe
2023-04-11 19:29 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI
2023-04-11 19:09 - 2023-01-15 21:32 - 000000000 ____D C:\Users\hanne\AppData\Local\log
2023-04-11 19:07 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2023-04-11 17:50 - 2022-04-02 16:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2023-04-11 16:44 - 2022-04-02 17:22 - 000000000 ____D C:\Users\hanne\AppData\Local\AMD_Common
2023-04-11 06:51 - 2022-04-02 17:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games
2023-04-11 05:22 - 2022-04-02 18:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer
2023-04-11 05:18 - 2019-12-07 11:03 - 000032768 _____ C:\Windows\system32\config\ELAM
2023-04-10 19:18 - 2022-04-02 18:14 - 000000000 ____D C:\Users\hanne\Desktop\Neuer Ordner (2)
2023-04-10 02:45 - 2022-04-10 13:35 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-04-08 05:01 - 2022-04-02 17:03 - 000000000 ____D C:\Users\hanne
2023-04-07 22:45 - 2022-04-02 18:23 - 000000000 ____D C:\Users\hanne\AppData\Local\Overwolf
2023-04-07 20:42 - 2022-04-02 17:06 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2387104140-2134503785-1021326842-1001
2023-04-07 20:42 - 2022-04-02 17:06 - 000003380 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2387104140-2134503785-1021326842-1001
2023-04-07 20:42 - 2022-04-02 17:03 - 000002399 _____ C:\Users\hanne\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-04-07 02:32 - 2022-04-27 21:44 - 000000000 ____D C:\Users\hanne\AppData\Roaming\.minecraft
2023-04-06 18:45 - 2023-01-15 21:32 - 000000000 ____D C:\Users\hanne\AppData\Local\Ferox_Games_B.V
2023-04-06 18:44 - 2023-01-15 21:31 - 000000000 ____D C:\Users\hanne\AppData\Local\Medal
2023-04-05 13:46 - 2022-04-02 16:59 - 000000000 ____D C:\Windows\system32\Drivers\wd
2023-04-04 00:32 - 2022-04-02 16:59 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-04-04 00:32 - 2022-04-02 16:59 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-04-04 00:11 - 2022-04-02 17:04 - 000000000 ____D C:\Users\hanne\AppData\Local\Packages
2023-03-28 21:37 - 2022-04-02 17:09 - 000000000 ____D C:\Users\hanne\AppData\Local\AMD
2023-03-24 17:18 - 2022-09-12 13:15 - 000000000 ____D C:\Users\hanne\AppData\LocalLow\AMD
2023-03-24 17:15 - 2022-04-02 17:19 - 000000000 ____D C:\AMD
2023-03-24 17:09 - 2023-03-06 19:14 - 000003484 _____ C:\Windows\system32\Tasks\ModifyLinkUpdate
2023-03-24 17:09 - 2022-08-12 17:51 - 000003152 _____ C:\Windows\system32\Tasks\StartCN
2023-03-24 17:09 - 2022-08-12 17:51 - 000003072 _____ C:\Windows\system32\Tasks\StartDVR
2023-03-24 17:09 - 2022-04-02 17:09 - 000000000 ____D C:\Program Files\AMD
2023-03-24 00:11 - 2022-10-22 15:31 - 000079352 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2023-03-24 00:11 - 2022-10-22 15:31 - 000062928 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2023-03-24 00:11 - 2022-04-27 20:16 - 002786768 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2023-03-24 00:11 - 2022-04-27 20:16 - 000476624 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2023-03-24 00:11 - 2022-04-27 20:16 - 000243200 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy.dll
2023-03-24 00:11 - 2022-04-27 20:16 - 000202192 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2023-03-24 00:11 - 2022-04-27 20:16 - 000165328 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2023-03-24 00:11 - 2022-04-27 20:16 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2023-03-22 20:28 - 2022-07-08 06:03 - 000000000 ____D C:\Users\hanne\AppData\Roaming\Dead By Daylight Icon Toolbox
2023-03-16 21:48 - 2022-04-02 18:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Razer Cortex
2023-03-16 21:48 - 2022-04-02 18:15 - 000000000 ____D C:\Users\hanne\AppData\Local\Razer
2023-03-16 21:47 - 2022-11-06 03:25 - 000013506 _____ C:\GetDeviceStatus.xml
2023-03-16 21:47 - 2022-11-06 03:25 - 000008410 _____ C:\GetDeviceCap.xml
2023-03-16 21:47 - 2022-11-06 03:25 - 000000903 _____ C:\QueryAllDevice.xml
2023-03-16 21:47 - 2022-11-06 03:25 - 000000228 _____ C:\SetMatrixLEDScript.xml
2023-03-16 19:43 - 2022-04-02 16:59 - 000459384 _____ C:\Windows\system32\FNTCACHE.DAT
2023-03-16 19:42 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-03-16 19:42 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2023-03-16 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2023-03-16 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2023-03-16 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2023-03-16 19:42 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2023-03-16 19:21 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2023-03-16 19:20 - 2022-04-02 17:01 - 003015680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2023-03-16 19:16 - 2022-04-03 14:25 - 000000000 ____D C:\Windows\system32\MRT
2023-03-16 19:15 - 2022-04-03 14:25 - 153620824 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2022-08-13 18:24 - 2022-11-09 18:06 - 000007659 _____ () C:\Users\hanne\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 13-04-2023 01
durchgeführt von hanne (13-04-2023 16:54:46)
Gestartet von C:\Users\hanne\Desktop\Neuer Ordner (3)
Microsoft Windows 10 Pro Version 22H2 19045.2728 (X64) (2022-04-02 15:00:46)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2387104140-2134503785-1021326842-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2387104140-2134503785-1021326842-503 - Limited - Disabled)
Gast (S-1-5-21-2387104140-2134503785-1021326842-501 - Limited - Disabled)
hanne (S-1-5-21-2387104140-2134503785-1021326842-1001 - Administrator - Enabled) => C:\Users\hanne
WDAGUtilityAccount (S-1-5-21-2387104140-2134503785-1021326842-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Disabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 4.06.10.651 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.89 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.19.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 7.0.4.10 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 23.3.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{c63a1907-428b-458b-935e-e61aad4aac6e}) (Version: 4.06.10.651 - Advanced Micro Devices, Inc.) Hidden
ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 5.4.10 - ASUS)
ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.1.50.0 - ASUSTek COMPUTER INC.) Hidden
ASUS AIOFan HAL (HKLM-x32\...\{6aabd550-b97f-4b87-8c12-fb271d7c8047}) (Version: 1.1.50.0 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.18 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Extension Card HAL (HKLM-x32\...\{4e2b05b0-eb08-41e5-9eb3-cdcc43d6bee0}) (Version: 1.1.0.18 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.3.7.0 - ASUSTeK COMPUTER INC.) Hidden
ASUS AURA Motherboard HAL (HKLM-x32\...\{98ff4518-0cc2-45ec-8152-eeba51c7881a}) (Version: 1.3.7.0 - ASUSTeK COMPUTER INC.) Hidden
ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.20 - ASUSTek COMPUTER INC.) Hidden
ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.3 - ASUSTek COMPUTER INC. ) Hidden
ASUS AURA VGA Component (HKLM-x32\...\{7a0d5159-cb5e-4f66-91f8-bab46f864f14}) (Version: 0.0.4.3 - ASUSTek COMPUTER INC. ) Hidden
ASUS Framework Service (HKLM-x32\...\{339A6383-7862-46DA-8A9D-E84180EF9424}) (Version: 3.1.1.0 - ASUSTeK Computer Inc.)
ASUS Motherboard (HKLM-x32\...\{93795eb8-bd86-4d4d-ab27-ff80f9467b37}) (Version: 3.02.11 - ASUSTek Computer Inc.)
ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.93 - ASUSTeK Computer Inc.) Hidden
AURA DRAM Component (HKLM\...\{6FB66775-BB93-4D0A-9871-4CC9B2E87BF3}) (Version: 1.1.23 - ASUS) Hidden
AURA DRAM Component (HKLM-x32\...\{179f415f-2ff3-4db1-bcc1-d5730f746db8}) (Version: 1.1.23 - ASUS) Hidden
AURA lighting effect add-on (HKLM-x32\...\{1E2EA04B-FCA7-457E-B6F4-F33E1858E859}) (Version: 0.0.28 - ASUS)
AURA lighting effect add-on x64 (HKLM\...\{C5A4A164-4428-4931-B728-96EEF0FA3C44}) (Version: 0.0.28 - ASUS)
AURA Service (HKLM-x32\...\{56EEEF7D-0AE3-401A-898B-581719D005AE}) (Version: 3.06.20 - ASUSTeK Computer Inc.) Hidden
AURA Service (HKLM-x32\...\{69f930f0-cd00-4a0c-b1b7-bfddf47f894d}) (Version: 3.06.20 - ASUSTeK Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BlueStacks 5 (HKLM\...\BlueStacks_nxt) (Version: 5.7.100.1037 - BlueStack Systems, Inc.)
Branding64 (HKLM\...\{0DB6E0DC-607A-42C1-A3CE-7567A9F85AF4}) (Version: 1.00.0008 - Advanced Micro Devices, Inc.) Hidden
Cult of the Lamb (HKLM-x32\...\Cult of the Lamb_is1) (Version:  - )
CurseForge (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.222.2.9650 - Overwolf app)
Cyberpunk 2077 (HKLM-x32\...\1423049311_is1) (Version: 1.62_PT_cn_fix - GOG.com)
Dead By Daylight Icon Toolbox 2.8.5 (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\c257e34b-92be-5c1b-b250-626dc48bcf9f) (Version: 2.8.5 - Nick Crast)
Discord (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Discord) (Version: 1.0.9004 - Discord Inc.)
ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.40.3 - Ene Tech.) Hidden
ENE RGB HAL (HKLM-x32\...\{7f329536-2468-4b20-88dc-5e2defcd5ff3}) (Version: 1.1.40.3 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.12 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{97f3a665-a91b-4def-91e2-97fec9f22bfa}) (Version: 1.0.9.12 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{5F15891E-8342-47CD-AFFF-89211CFC04D0}) (Version: 1.3.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{758842D2-1538-4008-A8E3-66F65A061C52}) (Version: 2.0.33.0 - Epic Games, Inc.)
Facecheck (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Overwolf_fiekjlgoffmlmgfmggnoeoljkmfkcapcdmcgcfgm) (Version: 1.0.173 - Overwolf app)
Gamers Window Relocator (HKLM\...\{0E1669A2-1B12-48C5-B5CE-41B425667045}) (Version: 3.5.64 - Orekaria)
GameSDK Service (HKLM-x32\...\{021d69c3-d686-4a94-8fb5-fd1ee782fb14}) (Version: 1.0.5.0 - ASUSTek COMPUTER INC.)
GameSDK Service (HKLM-x32\...\{7160DA8D-3F25-4F6E-ABC8-F693551D82FA}) (Version: 1.0.5.0 - ASUSTek COMPUTER INC.) Hidden
Genshin Impact (HKLM\...\Genshin Impact) (Version: 2.24.1.0 - COGNOSPHERE PTE. LTD.)
GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: 2.0.61.63 - GOG.com)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
Java 8 Update 361 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180361F0}) (Version: 8.0.3610.9 - Oracle Corporation)
KeePass Password Safe 2.52 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.52 - Dominik Reichl)
Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.16 - KINGSTON COMPONENTS INC.) Hidden
Kingston AURA DRAM Component (HKLM-x32\...\{39014df0-ccd5-4c61-8e9d-836af9ef56fd}) (Version: 1.1.16 - KINGSTON COMPONENTS INC.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Riot Game league_of_legends.live) (Version:  - Riot Games, Inc)
League of Legends PBE (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Riot Game league_of_legends.pbe) (Version:  - Riot Games, Inc)
LibreOffice 7.3.2.2 (HKLM\...\{001D6695-F9B8-4CBD-AA92-FE8A58638060}) (Version: 7.3.2.2 - The Document Foundation)
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2023.2.376231 - Logitech)
Malwarebytes version 4.5.26.259 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.26.259 - Malwarebytes)
Medal (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Medal) (Version: 4.1916.0 - Medal B.V.)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 112.0.1722.39 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 112.0.1722.39 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\OneDriveSetup.exe) (Version: 23.061.0319.0003 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.31.31103 (HKLM-x32\...\{41d7b770-418a-43b7-95a5-f925fff05789}) (Version: 14.31.31103.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.31.31103 (HKLM-x32\...\{5720EC03-F26F-40B7-980C-50B5D420B5DE}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.31.31103 (HKLM-x32\...\{799E3FFF-705C-461F-B400-6DE27398B3E5}) (Version: 14.31.31103 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 112.0 (x64 de)) (Version: 112.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 111.0.1 - Mozilla)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
Opera GX Stable 97.0.4719.79 (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Opera GX 97.0.4719.79) (Version: 97.0.4719.79 - Opera Software)
Origin (HKLM-x32\...\Origin) (Version: 10.5.115.51547 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.221.0.4 - Overwolf Ltd.)
Parsec (HKLM-x32\...\Parsec) (Version: 150-85c - Parsec Cloud Inc.)
Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.9.5 - Patriot Memory) Hidden
Patriot Viper DRAM RGB (HKLM-x32\...\{31850f16-ce9f-4dec-81ca-222c617a9115}) (Version: 1.0.9.5 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.2 - Patriot Memory) Hidden
Patriot Viper M2 SSD RGB (HKLM-x32\...\{959e5696-0edd-4896-b1d8-54aaa725f770}) (Version: 1.1.0.2 - Patriot Memory) Hidden
PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden
PHISON HAL (HKLM-x32\...\{549da357-1b81-456b-83f2-dcc47c41dfff}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.0.0 - Advanced Micro Devices, Inc.) Hidden
ProtonVPN (HKLM-x32\...\{47D5ABCD-76F6-412A-84BB-9022A287E6BC}) (Version: 2.4.1 - Proton Technologies AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 2.4.1) (Version: 2.4.1 - Proton Technologies AG)
ProtonVPNTap (HKLM-x32\...\{87BDF456-9882-44E6-8FFC-F73B83E42EAD}) (Version: 1.1.4 - Proton Technologies AG)
ProtonVPNTun (HKLM-x32\...\{B1EBF050-CC3E-45B0-9DE5-339C6241F3DA}) (Version: 0.13.1 - Proton Technologies AG)
qBittorrent (HKLM-x32\...\qBittorrent) (Version: 4.5.2 - The qBittorrent project)
Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 10.6.4.0 - Razer Inc.)
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.8.0330.032816 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8971.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.42.526.2020 - Realtek)
Resident Evil Village (HKLM-x32\...\Resident Evil Village_is1) (Version: 0.0.0 - DODI-Repacks)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version:  - Riot Games, Inc.)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.70.1389 - Rockstar Games)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.1.6.7 - Rockstar Games)
ROG Live Service (HKLM\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 2.0.6.0 - ASUSTek COMPUTER INC.)
RyzenMasterSDK (HKLM\...\{9AD089CB-3A6C-4F55-A210-7DF503DFF95A}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Uplay Install 635) (Version:  - Ubisoft Montreal)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 131.0.10667 - Ubisoft)
Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.4 - PD) Hidden
Universal Holtek RGB DRAM (HKLM-x32\...\{c8b4688a-f5d4-4236-aec4-df260a88ccc4}) (Version: 1.0.0.4 - PD) Hidden
UNO (HKLM-x32\...\Uplay Install 3352) (Version:  - Ubisoft)
VALORANT (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Riot Game valorant.live) (Version:  - Riot Games, Inc)
Valorant Tracker (HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\Overwolf_ipmlnnogholfmdmenfijjifldcpjoecappfccceh) (Version: 1.10.6 - Overwolf app)
WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
WD_BLACK AN1500 (HKLM-x32\...\{e42c5874-37b0-4977-9e8d-70bf006e1f76}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

Packages:
=========
AMD Link -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDLink_10.22.40028.0_x64__0a9344xs7nr4m [2023-03-11] (Advanced Micro Devices Inc.)
ARMOURY CRATE -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_5.4.10.0_x64__qmba6cd70vzyy [2023-03-01] (ASUSTeK COMPUTER INC.)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.49.3.0_x64__6rarf9sa4v8jt [2023-03-29] (Disney)
DTS Custom for Asus -> C:\Program Files\WindowsApps\DTSInc.DTSCustomforAsus_2.1.1.0_x64__t5j2fzbtdg37r [2022-04-02] (DTS, Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-05-29] (Microsoft Corporation)
Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.2.4.0_x64__8wekyb3d8bbwe [2023-03-22] (Microsoft Studios)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-08-28] (Netflix, Inc.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.12.219.0_x64__dt26b99r8h8gj [2022-04-02] (Realtek Semiconductor Corp)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-03-20] (Microsoft Studios) [MS Ad]
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0 [2023-04-01] (Spotify AB) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2387104140-2134503785-1021326842-1001_Classes\CLSID\{45df690c-d6b8-bf0e-7f91-523cfddeb1e1}\localserver32 -> "E:\Voicemod Desktop\VoicemodDesktop.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-2387104140-2134503785-1021326842-1001_Classes\CLSID\{d936918b-9c4b-555e-074a-c79314be04e1}\localserver32 -> C:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.exe (Proton Technologies AG -> ProtonVPN)
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [PDFCreator.ShellContextMenu] -> {d9cea52e-100d-4159-89ea-76e845bc13e1} => C:\Program Files\PDFCreator\PDFCreatorShell.DLL -> Keine Datei
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-11] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\hanne\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2023-03-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-11] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2023-03-02 08:55 - 2023-02-27 22:39 - 001393152 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.Core.Runtime.dll
2022-11-03 15:39 - 2022-09-01 10:47 - 000522240 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\ac_node_addon\prebuilds\win32-ia32\node.napi.node
2022-11-03 15:39 - 2022-09-01 10:47 - 000520192 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\ffi-napi\prebuilds\win32-ia32\node.napi.node
2022-11-03 15:39 - 2022-09-01 10:47 - 000483328 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\node-system-fonts\build\Release\system-fonts.node
2022-11-03 15:39 - 2022-09-01 10:47 - 000510464 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\ref-napi\prebuilds\win32-ia32\node.napi.node
2022-11-03 15:39 - 2022-09-01 10:47 - 000786432 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\usb-detection\prebuilds\win32-ia32\node.napi.node
2022-11-03 15:39 - 2022-06-08 11:33 - 000081920 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\WindowID\WindowID.dll
2023-02-27 16:48 - 2023-02-26 22:38 - 000164864 _____ () [Datei ist nicht signiert] C:\Program Files\LGHUB\resources\app.asar.unpacked\keytar.node
2022-11-03 15:39 - 2023-04-11 19:40 - 000046336 _____ (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AXSP\4.02.15\PEbiosinterface32.dll
2023-02-02 23:56 - 2023-02-02 23:56 - 000181248 _____ (pdfforge GmbH) [Datei ist nicht signiert] C:\Windows\System32\pdfcmon.dll
2022-04-03 14:02 - 2022-04-03 14:02 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll
2022-04-03 14:02 - 2022-04-03 14:02 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll
2022-04-03 14:02 - 2022-04-03 14:02 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2022-10-04 17:42 - 2022-04-03 14:02 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\mntemp:8EAD8B3507 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\desktop.ini:B1DA6C571C [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\desktop.ini:41964AA945 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk:BE32D07BC5 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk:83A68E50E4 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk:980850BA8A [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk:CF2917E869 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk:C5D586BE93 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk:E77773B271 [4298]
AlternateDataStreams: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk:F20EF51E1F [4298]
AlternateDataStreams: C:\Users\hanne\AppData\Local\Temp:$DATA​ [16]
AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [3388]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_361\bin\ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_361\bin\jp2ssv.dll [2023-01-09] (Oracle America, Inc. -> Oracle Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 11:14 - 2023-04-11 05:19 - 000000147 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 localhost

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\hanne\Pictures\Wallpaper\zeri.png
DNS Servers: 192.168.178.9
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run: => "Riot Vanguard"
HKLM\...\StartupApproved\Run32: => "RazerCortex"
HKLM\...\StartupApproved\Run32: => "Genshin Impact_launcher__1_1"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Opera GX Stable"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Overwolf"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_FE48D7D4ADB4C1AF2C6F0AAF0D143FCD"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Parsec.App.0"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2387104140-2134503785-1021326842-1001\...\StartupApproved\Run: => "Medal"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{5728F438-4437-482C-808A-A4563B0FA471}C:\users\hanne\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\hanne\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{3B43F380-3813-4710-88E1-EC35B4633B82}C:\users\hanne\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\hanne\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{0F804010-C729-4DBF-A140-CE0EC5A7D7D4}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CD8A4AAF-5B92-41EB-9F94-ABB88B4B719E}] => (Allow) E:\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{AB6250ED-E72E-45F8-9E07-5E9B125D087B}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{623A3550-566A-499F-A64C-0770DE1CE271}] => (Allow) E:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{16592C1C-BBFC-4644-AE62-A1D99E8326CE}] => (Allow) E:\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [{905F5ACB-4080-4330-8FF1-35EB1B5710A9}] => (Allow) E:\Steam\steamapps\common\wallpaper_engine\launcher.exe (Skutta, Kristjan -> )
FirewallRules: [TCP Query User{AFD0C2BE-E4D8-4B57-82FA-8DB2C55E892F}E:\epic games\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) E:\epic games\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{9B74CF6D-3080-4020-9FC6-C2900D8717E7}E:\epic games\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) E:\epic games\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{A9817E57-04FC-4DA4-9EAF-C0D2DB8D8675}] => (Allow) E:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{474913B2-151C-4902-ADC5-BBC1D9AA9021}] => (Allow) E:\Steam\steamapps\common\SteamVR\bin\win32\vrstartup.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{74091C0E-DFF3-4FE3-9AB3-EACE7F622980}] => (Allow) E:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [{9683E7E3-C514-45A9-93EC-2B9A14F31E2A}] => (Allow) E:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtours.exe (Valve -> )
FirewallRules: [{B26BBBAF-B4AD-4039-918E-C3453E2362CC}] => (Allow) E:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe (Valve -> )
FirewallRules: [{BF508A35-481E-4F36-BC14-0E8EA6024A85}] => (Allow) E:\Steam\steamapps\common\SteamVR\tools\steamvr_environments\game\bin\win64\steamtourscfg.exe (Valve -> )
FirewallRules: [TCP Query User{A5B4A776-837E-415D-BC2A-96B290B5E43D}E:\steam\steamapps\common\lost ark\binaries\win64\lostark.exe] => (Allow) E:\steam\steamapps\common\lost ark\binaries\win64\lostark.exe => Keine Datei
FirewallRules: [UDP Query User{FBC47B78-4502-4DFA-A5BC-461E411AE54F}E:\steam\steamapps\common\lost ark\binaries\win64\lostark.exe] => (Allow) E:\steam\steamapps\common\lost ark\binaries\win64\lostark.exe => Keine Datei
FirewallRules: [TCP Query User{F1987760-C1FF-4CD3-A524-6C5FF5BEA7A5}E:\origin\pvz battle for neighborville\pvzbattleforneighborville.exe] => (Allow) E:\origin\pvz battle for neighborville\pvzbattleforneighborville.exe => Keine Datei
FirewallRules: [UDP Query User{6FE98D92-48DE-4512-A7AF-26F08EF45ED1}E:\origin\pvz battle for neighborville\pvzbattleforneighborville.exe] => (Allow) E:\origin\pvz battle for neighborville\pvzbattleforneighborville.exe => Keine Datei
FirewallRules: [{6AC92ED5-CE06-4CB9-B54A-6E717A959AC7}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{141DD519-B448-4961-8E25-D332E2CC750E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3C25D4E4-495A-4C99-AE9B-848D1C53A76F}] => (Allow) E:\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [Datei ist nicht signiert]
FirewallRules: [{0A1BAC19-AE11-4F0C-9315-07C505110CCC}] => (Allow) E:\Steam\steamapps\common\BloonsTD6\BloonsTD6.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{24B8C2A6-C122-4539-8E33-49EBB160B834}C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{5359EA06-78C1-4602-B380-99352183A0BF}C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [{8A7BD6B4-7BFC-4212-8234-0E20711F5DDE}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Keine Datei
FirewallRules: [{1DF5D545-C42A-4975-A90F-8204363B3515}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Keine Datei
FirewallRules: [{200D9AA8-BD7A-4F69-B98A-0B6BE77FD67D}] => (Allow) C:\Program Files\BlueStacks_nxt\HD-Player.exe (Bluestack Systems, Inc -> BlueStack Systems)
FirewallRules: [{5C4BA139-D982-43AE-8D94-BD316109D70F}] => (Allow) C:\Program Files (x86)\BlueStacks X\BlueStacksWeb.exe => Keine Datei
FirewallRules: [{20C6B14C-7582-46E1-A970-CEF9992CD81B}] => (Allow) C:\Program Files (x86)\BlueStacks X\Cloud Game.exe => Keine Datei
FirewallRules: [{59E8F374-F55C-4338-8512-BDEE342B0D94}] => (Allow) E:\ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{CC4F6437-B7B8-40A9-A589-B36FBFA8F6B7}] => (Allow) E:\ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{5E7128C1-5DFE-49FA-BC41-707CCFDE1136}] => (Allow) E:\ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{85BE5888-4441-4449-B088-1AAE76A98E12}] => (Allow) E:\ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Rainbow Six Siege\RainbowSix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [TCP Query User{98E0A82B-2878-4E1E-B94E-A6935ADDEBA3}E:\lol\riot games\riot client\riotclientservices.exe] => (Allow) E:\lol\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [UDP Query User{72C76FD6-38A9-491D-8B28-6BED6F30E601}E:\lol\riot games\riot client\riotclientservices.exe] => (Allow) E:\lol\riot games\riot client\riotclientservices.exe (Riot Games, Inc. -> Riot Games, Inc.)
FirewallRules: [TCP Query User{BC44A1E6-E880-4AE3-88A7-044DD32203D5}E:\games\borderlands3\oakgame\binaries\win64\borderlands3.exe] => (Allow) E:\games\borderlands3\oakgame\binaries\win64\borderlands3.exe => Keine Datei
FirewallRules: [UDP Query User{E9AB3811-C058-464B-A96F-DE9B4D54B0C6}E:\games\borderlands3\oakgame\binaries\win64\borderlands3.exe] => (Allow) E:\games\borderlands3\oakgame\binaries\win64\borderlands3.exe => Keine Datei
FirewallRules: [{BDF59092-B490-4A1D-A39E-CEB7C3D4D25B}] => (Allow) E:\Steam\steamapps\common\SUPERHOT VR\SHVR.exe (SUPERHOT Sp. z o.o. -> SUPERHOT Sp. z o.o.)
FirewallRules: [{F241FB26-1DCE-43BB-8898-CAE25A8AD6FE}] => (Allow) E:\Steam\steamapps\common\SUPERHOT VR\SHVR.exe (SUPERHOT Sp. z o.o. -> SUPERHOT Sp. z o.o.)
FirewallRules: [{962AEF2B-CA9F-4FC9-8E73-FC9028B98555}] => (Allow) E:\Steam\steamapps\common\SUPERHOT VR\SUPERHOTVR.exe () [Datei ist nicht signiert]
FirewallRules: [{C63CD4A6-2DF4-4AD9-8556-47FEA3E7D3D4}] => (Allow) E:\Steam\steamapps\common\SUPERHOT VR\SUPERHOTVR.exe () [Datei ist nicht signiert]
FirewallRules: [{70FFD3B0-C641-41CB-A499-45B65C1819A3}] => (Allow) E:\Steam\steamapps\common\Vacation Simulator\Vacation Simulator.exe () [Datei ist nicht signiert]
FirewallRules: [{3F8F1D0F-6EC5-4CA1-B682-1B256E4D828A}] => (Allow) E:\Steam\steamapps\common\Vacation Simulator\Vacation Simulator.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{76B7CE00-544B-4989-A07F-4993CAE507A1}E:\games\borderlands2\binaries\win32\borderlands2.exe] => (Allow) E:\games\borderlands2\binaries\win32\borderlands2.exe => Keine Datei
FirewallRules: [UDP Query User{A51CA234-25A9-4F7F-AEAC-D694591E4F16}E:\games\borderlands2\binaries\win32\borderlands2.exe] => (Allow) E:\games\borderlands2\binaries\win32\borderlands2.exe => Keine Datei
FirewallRules: [TCP Query User{1B6F4090-C518-45A6-8C3D-07D0F8587D04}C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [UDP Query User{DEBAC2AF-8656-4ADF-B482-1F5080909C21}C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Allow) C:\users\hanne\appdata\local\packages\microsoft.4297127d64ec6_8wekyb3d8bbwe\localcache\local\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe
FirewallRules: [TCP Query User{44A8CCC8-D767-4675-9D8F-181FC55664F4}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{1114A45C-C3B5-4656-A93D-9D1B29C78A0D}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{820CC965-C16A-4729-B16F-57709DFFE63B}E:\steam\steamapps\common\astroneer\astro\binaries\win64\astro-win64-shipping.exe] => (Allow) E:\steam\steamapps\common\astroneer\astro\binaries\win64\astro-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{0853D5CF-F4A0-4182-85C5-E659331ADB2F}E:\steam\steamapps\common\astroneer\astro\binaries\win64\astro-win64-shipping.exe] => (Allow) E:\steam\steamapps\common\astroneer\astro\binaries\win64\astro-win64-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{EDAF24E3-F9FA-42A2-978D-C2D2F1B96A94}E:\games\cult of the lamb\cult of the lamb.exe] => (Allow) E:\games\cult of the lamb\cult of the lamb.exe => Keine Datei
FirewallRules: [UDP Query User{D3B055FC-4EEA-4836-AC1F-C331F589C2DD}E:\games\cult of the lamb\cult of the lamb.exe] => (Allow) E:\games\cult of the lamb\cult of the lamb.exe => Keine Datei
FirewallRules: [{F11C225B-32F5-413F-BF75-A0D744B4775F}] => (Allow) E:\Steam\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{71159D14-F954-4945-8BF7-0AE478094103}] => (Allow) E:\Steam\steamapps\common\Sea of Thieves\Athena\Binaries\Win64\SoTGame.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{784074D0-FB62-4A00-B5CF-0141F1F5008E}E:\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) E:\steam\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [UDP Query User{ABC47E3A-6132-4315-A53A-D858C6B2F9D6}E:\steam\steamapps\common\destiny 2\destiny2.exe] => (Allow) E:\steam\steamapps\common\destiny 2\destiny2.exe (Bungie Inc. -> Bungie)
FirewallRules: [{7C31DAAB-C624-4405-8CA7-427EF1848029}] => (Allow) E:\Steam\steamapps\common\PapersPlease\PapersPlease.exe () [Datei ist nicht signiert]
FirewallRules: [{688D844B-1420-4BD2-8A49-CFCF8B90C0CC}] => (Allow) E:\Steam\steamapps\common\PapersPlease\PapersPlease.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{C3F386D7-659E-4E96-974C-9F7EB3E8B067}E:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) E:\steam\steamapps\common\terraria\terrariaserver.exe => Keine Datei
FirewallRules: [UDP Query User{C2FDA639-2930-4041-95D0-2C93DD850374}E:\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) E:\steam\steamapps\common\terraria\terrariaserver.exe => Keine Datei
FirewallRules: [TCP Query User{74902C11-3660-4C61-B76E-D1E8E37946D1}E:\games\overwatch\_retail_\overwatch.exe] => (Allow) E:\games\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{78A2CB3A-427F-43E9-941D-27905D3DCED2}E:\games\overwatch\_retail_\overwatch.exe] => (Allow) E:\games\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [{857CE9E7-9CE6-43DE-BFAB-5EB0F659A650}] => (Allow) E:\Steam\steamapps\common\Whos Your Daddy\Classic\WhosYourDaddy.exe => Keine Datei
FirewallRules: [{B4EBC7D9-B16F-4B8C-867F-6C0B0C3329EF}] => (Allow) E:\Steam\steamapps\common\Whos Your Daddy\Classic\WhosYourDaddy.exe => Keine Datei
FirewallRules: [{6EB61F7B-E51B-4E9F-B45F-B57C57610DC5}] => (Allow) E:\Steam\steamapps\common\Aim Lab\AimLab_tb.exe (Unity Technologies ApS) [Datei ist nicht signiert]
FirewallRules: [{8AEAB0B1-2A45-4BF6-963A-2833E95A2A75}] => (Allow) E:\Steam\steamapps\common\Aim Lab\AimLab_tb.exe (Unity Technologies ApS) [Datei ist nicht signiert]
FirewallRules: [{3790202F-A717-4488-AB7C-DD26132C13A0}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK COMPUTER INC. -> ASUSTek Computer Inc.)
FirewallRules: [{8E34F11B-C0B8-4DE8-8CDD-5A0AD586A0B7}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{A1839413-76F9-4319-96F1-0E76F342FDBD}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK COMPUTER INC. -> ASUS)
FirewallRules: [{227C327D-595B-4DBF-9671-A68555CB7365}] => (Allow) C:\Users\hanne\AppData\Local\Packages\B9ECED6F.ArmouryCrate_qmba6cd70vzyy\LocalState\GridUpdateFile\ASUSGCDriverUpdateClient.exe (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
FirewallRules: [{6C492842-DAC4-4F20-AE20-78AE46109CDA}] => (Allow) E:\Voicemod Desktop\VoicemodDesktop.exe => Keine Datei
FirewallRules: [TCP Query User{7D586F71-D41E-4AB2-BA4F-4FD1D7295310}C:\users\hanne\appdata\local\discord\app-1.0.9007\discord.exe] => (Allow) C:\users\hanne\appdata\local\discord\app-1.0.9007\discord.exe => Keine Datei
FirewallRules: [UDP Query User{EBAC88EB-75E7-476B-8218-91BA43A8CB2C}C:\users\hanne\appdata\local\discord\app-1.0.9007\discord.exe] => (Allow) C:\users\hanne\appdata\local\discord\app-1.0.9007\discord.exe => Keine Datei
FirewallRules: [{B68BEB1E-D6B8-4108-B109-4BEB956E94E5}] => (Allow) C:\Program Files\Parsec\parsecd.exe (Parsec Cloud, Inc. -> Parsec)
FirewallRules: [TCP Query User{A2A82DE1-F8AF-4394-BB89-9B7BA5AF8FA9}C:\users\hanne\appdata\local\plutonium\bin\plutonium-bootstrapper-win32.exe] => (Allow) C:\users\hanne\appdata\local\plutonium\bin\plutonium-bootstrapper-win32.exe (Plutonium Project -> Plutonium Project) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{A27FD7A2-48D6-45B3-9A70-89097EE3BB7F}C:\users\hanne\appdata\local\plutonium\bin\plutonium-bootstrapper-win32.exe] => (Allow) C:\users\hanne\appdata\local\plutonium\bin\plutonium-bootstrapper-win32.exe (Plutonium Project -> Plutonium Project) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{89943D51-ADF6-4F45-AE8C-19D8490E90B6}E:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{EEC8C3CC-E931-42C2-913B-D8842D58EA96}E:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe] => (Allow) E:\games\fortnite\fortnitegame\binaries\win64\fortniteclient-win64-shipping.exe => Keine Datei
FirewallRules: [{80333A17-1B83-4ADF-870A-46F260605FAC}] => (Allow) E:\Steam\steamapps\common\Whos Your Daddy\Remake\WhosYourDaddy.exe => Keine Datei
FirewallRules: [{0F7C1646-FF82-4F32-882F-F6334C6C9D46}] => (Allow) E:\Steam\steamapps\common\Whos Your Daddy\Remake\WhosYourDaddy.exe => Keine Datei
FirewallRules: [{FF019727-2573-4827-994F-4AD1B828548A}] => (Allow) E:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [{A635CB80-FD88-4BC0-8360-E7E20A50BDBF}] => (Allow) E:\Steam\steamapps\common\The Binding of Isaac Rebirth\isaac-ng.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{872EF40B-E384-4FFE-9708-173B7378D24D}C:\users\hanne\appdata\local\medal\app-4.1916.0\medal.exe] => (Allow) C:\users\hanne\appdata\local\medal\app-4.1916.0\medal.exe (Ferox Games B.V. -> Medal B.V.)
FirewallRules: [UDP Query User{AF5A494C-8CAD-4A25-BAD2-A20D7D07590C}C:\users\hanne\appdata\local\medal\app-4.1916.0\medal.exe] => (Allow) C:\users\hanne\appdata\local\medal\app-4.1916.0\medal.exe (Ferox Games B.V. -> Medal B.V.)
FirewallRules: [TCP Query User{BCA2DF15-3C79-4B1D-9861-7620DD553F9C}C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.1.0.1pc_c7338571_d1552061_s49546_49840095\1733652395\rainbowsix.exe] => (Allow) C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.1.0.1pc_c7338571_d1552061_s49546_49840095\1733652395\rainbowsix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [UDP Query User{5EBFAFA3-9101-4F82-A858-2D1192B463AF}C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.1.0.1pc_c7338571_d1552061_s49546_49840095\1733652395\rainbowsix.exe] => (Allow) C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.1.0.1pc_c7338571_d1552061_s49546_49840095\1733652395\rainbowsix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{07943B3B-26DD-4DF9-90E1-E9254AC39B71}] => (Allow) E:\Steam\steamapps\common\HITMAN 3\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{2AFED7A2-A712-4873-94BD-784D7FCDD221}] => (Allow) E:\Steam\steamapps\common\HITMAN 3\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{13FFB86E-C771-4BF9-B0C8-A465FC9EDC78}] => (Allow) E:\Steam\steamapps\common\PlateUp\PlateUp\PlateUp.exe () [Datei ist nicht signiert]
FirewallRules: [{B48FDF7D-42FB-47A4-8DB4-47549EE14075}] => (Allow) E:\Steam\steamapps\common\PlateUp\PlateUp\PlateUp.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{7416A62B-FEB6-4E9E-8D31-7AED4ECC73DD}C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.2.0.1pc_c7361317_d1569606_s50031_50497889\2056762328\rainbowsix.exe] => (Allow) C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.2.0.1pc_c7361317_d1569606_s50031_50497889\2056762328\rainbowsix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [UDP Query User{40655BD7-98DC-43B5-9235-1734D1271620}C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.2.0.1pc_c7361317_d1569606_s50031_50497889\2056762328\rainbowsix.exe] => (Allow) C:\users\hanne\appdata\local\ubisoft\r6siege\y7s4.2.0.1pc_c7361317_d1569606_s50031_50497889\2056762328\rainbowsix.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{C76D8B7B-CD0E-452A-9051-13EC3672A481}] => (Allow) E:\Steam\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{7FE383FB-71A0-444E-849F-AB11466A1056}] => (Allow) E:\Steam\steamapps\common\Apex Legends\EasyAntiCheat_launcher.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
FirewallRules: [{6E4B16A3-4F4A-4A9D-8627-09DB116EB6E6}] => (Allow) E:\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{55D76D3F-D924-4A60-A44D-30FCAE2053CB}] => (Allow) E:\Steam\steamapps\common\Sons Of The Forest\SonsOfTheForest.exe () [Datei ist nicht signiert]
FirewallRules: [{A3980D99-9B19-4F45-A91B-772E34807A86}] => (Allow) E:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{DAB80A34-DC21-451E-8EA7-C626269484F5}] => (Allow) E:\Steam\steamapps\common\DARK SOULS III\Game\DarkSoulsIII.exe (FromSoftware,Inc. -> BANDAI NAMCO Entertainment Inc.)
FirewallRules: [{97B763EB-0D12-4D18-9858-7DC884637682}] => (Allow) E:\Steam\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{1AE983F5-2EA1-4CED-A6B0-8EE66B464288}] => (Allow) E:\Steam\steamapps\common\Destiny 2\destiny2launcher.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [TCP Query User{42B19338-7D67-427B-B56A-37420C018218}E:\lol\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe] => (Allow) E:\lol\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe (Riot Games, Inc. -> Riot Games)
FirewallRules: [UDP Query User{EA5EB516-04FB-4AD5-B5E7-880F2A0C020D}E:\lol\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe] => (Allow) E:\lol\riot games\valorant\live\shootergame\binaries\win64\valorant-win64-shipping.exe (Riot Games, Inc. -> Riot Games)
FirewallRules: [{A32979D5-D6F1-4213-BFBB-8C08E0DD8272}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
FirewallRules: [{BD92AC03-0346-4581-92D2-B5E55F39FC7C}] => (Allow) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)
FirewallRules: [TCP Query User{4F84A7C4-14A7-4A0D-9A3A-E49B55B7C7C2}E:\games\mods\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) E:\games\mods\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [UDP Query User{BAE35616-2EB9-47D9-9DC4-615D12487BBA}E:\games\mods\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe] => (Allow) E:\games\mods\install\runtime\jre-legacy\windows-x64\jre-legacy\bin\javaw.exe
FirewallRules: [TCP Query User{FE9E33E2-97BE-4210-BAB4-0CF059D11D07}E:\games\spelunky 2\spel2.exe] => (Block) E:\games\spelunky 2\spel2.exe => Keine Datei
FirewallRules: [UDP Query User{B88811DF-86EF-4A85-B267-84C54DEABFAA}E:\games\spelunky 2\spel2.exe] => (Block) E:\games\spelunky 2\spel2.exe => Keine Datei
FirewallRules: [{C760DB58-906C-4BE9-BF4B-72F5DAE809E0}] => (Allow) E:\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{FA6B92DB-A49D-42A1-9C6A-7885F2E4ABC1}] => (Allow) E:\Steam\steamapps\common\wallpaper_engine\bin\diagnostics32.exe (Skutta, Kristjan -> )
FirewallRules: [{5E23B4C9-D8E9-46AF-B9B7-2C892F673E41}] => (Allow) E:\Steam\steamapps\common\Spelunky 2\Spel2.exe () [Datei ist nicht signiert]
FirewallRules: [{B7026877-CE6D-4851-8721-51286B57F2EE}] => (Allow) E:\Steam\steamapps\common\Spelunky 2\Spel2.exe () [Datei ist nicht signiert]
FirewallRules: [{EE388AE5-2510-4662-A299-482BC0A27E33}] => (Allow) E:\Overwolf\0.220.0.1\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{345FE008-73E1-4F40-990F-5D7064E85FEA}] => (Allow) E:\Overwolf\0.220.0.1\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{85098854-19D5-405A-A637-B7CFFDBDF639}] => (Block) E:\Overwolf\0.220.0.1\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{93F0635D-EEB3-4E3B-A471-60571974F6FC}] => (Block) E:\Overwolf\0.220.0.1\OverwolfBrowser.exe => Keine Datei
FirewallRules: [{BACED84C-EE64-4997-9E68-75A525392520}] => (Allow) E:\Overwolf\0.221.0.4\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [{00303D3A-2CCB-40AB-8DBA-14CCD6232829}] => (Allow) E:\Overwolf\0.221.0.4\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD)
FirewallRules: [TCP Query User{F3EDB7ED-3A05-4EE8-B8FB-970EE8815978}E:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) E:\steam\steamapps\common\grand theft auto v\gta5.exe => Keine Datei
FirewallRules: [UDP Query User{2BB546EE-9E50-4A82-B2E9-E4EF207A4559}E:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) E:\steam\steamapps\common\grand theft auto v\gta5.exe => Keine Datei
FirewallRules: [{70E8BA49-E0FD-4B65-A015-3C9B04DD2FD9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{1D301C01-9E0A-43A0-8137-5E58C01D94DD}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{85C4AF73-F784-49C9-855A-4283C0398B80}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{4BC36C0B-D390-4B97-8A60-DBF29F15A2EB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.96.3207.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
FirewallRules: [{7BBF2230-BF1A-4AF5-87CE-3E21F3E48151}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{0A08BFDB-955A-433B-BB41-F66053D80079}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{1200ED48-5ACE-4CC8-A7B9-02FCE1D5A85B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{557753C5-A29A-4284-BD1B-096F645F0E16}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{CD52C8C0-D755-49C4-93BB-EDFB49B38FCA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{66791E48-67AF-48C9-ACF3-A7CB5EE9E0D0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{2EED6E36-1B9F-418E-8033-821B0E5BF2C7}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{33E566DA-8856-46F5-9393-314E6CA08986}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{C0E577F2-89B7-4D18-9F27-9EF3D0A374AB}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{60881C82-094F-4CAD-883B-47537D8A60EA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.208.923.0_x86__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> )
FirewallRules: [{6DCB4597-150B-4F91-9600-B1A177AA386D}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Datei ist nicht signiert]
FirewallRules: [{D6217A11-AF6A-4DC8-A77C-261AD70FC895}] => (Allow) C:\Program Files\qBittorrent\qbittorrent.exe (The qBittorrent Project) [Datei ist nicht signiert]
FirewallRules: [{25B7ADBB-8FB3-4D9C-BD31-5F7EFC8440E8}] => (Allow) E:\Games\UNO\uno.exe (Chengdu Ubisoft Software Co., Ltd. -> )
FirewallRules: [{E39E6128-AEF6-4147-9046-6A50D21A371F}] => (Allow) E:\Games\UNO\uno.exe (Chengdu Ubisoft Software Co., Ltd. -> )
FirewallRules: [{4202F902-09F9-48A1-AD07-232815C0D38D}] => (Allow) E:\Steam\steamapps\common\CastleCrashers\castle.exe () [Datei ist nicht signiert]
FirewallRules: [{0600500B-FE20-446C-BAA9-003C8250F2D9}] => (Allow) E:\Steam\steamapps\common\CastleCrashers\castle.exe () [Datei ist nicht signiert]
FirewallRules: [{C8C41301-4EBA-41DE-858C-1F122959677C}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\112.0.1722.39\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

02-04-2023 18:07:51 Geplanter Prüfpunkt
10-04-2023 02:04:49 Installed ProtonVPN
12-04-2023 03:51:04 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
12-04-2023 03:51:14 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
13-04-2023 05:22:20 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
13-04-2023 05:22:28 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610
13-04-2023 05:53:43 Gamers Window Relocator wird installiert

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddWin32ServiceFiles: Unable to back up image of service Avast Tools since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddWin32ServiceFiles: Unable to back up image of service Avast Antivirus since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddWin32ServiceFiles: Unable to back up image of service aswbIDSAgent since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswVmm.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSP.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswSnx.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswRvrt.

System Error:
Das System kann die angegebene Datei nicht finden.
.

Error: (04/13/2023 05:53:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary aswRdr.

System Error:
Das System kann die angegebene Datei nicht finden.
.


Systemfehler:
=============
Error: (04/13/2023 06:45:35 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-FUQ27TF)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (04/11/2023 07:00:22 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "ShellHWDetection" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (04/11/2023 07:00:11 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "ShellHWDetection" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (04/11/2023 07:00:06 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "ShellHWDetection" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (04/11/2023 07:00:03 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (04/11/2023 07:00:00 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "ShellHWDetection" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{DD522ACC-F821-461A-A407-50B198B896DC}

Error: (04/11/2023 07:00:00 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{9E175B6D-F52A-11D8-B9A5-505054503030}

Error: (04/11/2023 06:59:55 AM) (Source: DCOM) (EventID: 10005) (User: DESKTOP-FUQ27TF)
Description: Fehler "1084" in DCOM, als der Dienst "WSearch" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{9E175B6D-F52A-11D8-B9A5-505054503030}


Windows Defender:
================
Date: 2023-04-12 23:02:15
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {68A3163F-7E7A-4F18-884B-7B5044A0D4F7}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2023-04-11 04:58:16
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=HackTool:Win32/Crack&threatid=2147734096&enterprise=0
Name: HackTool:Win32/Crack
Schweregrad: Hoch
Kategorie: Tool
Pfad: file:_E:\Games\Resident Evil Village\steam_api64.dll
Erkennungsursprung: Lokaler Computer
Erkennungstype: FastPath
Erkennungsquelle: Echtzeitschutz
Benutzer: DESKTOP-FUQ27TF\hanne
Prozessname: E:\Games\Resident Evil Village\re8.exe
Sicherheitsversion: AV: 1.387.569.0, AS: 1.387.569.0, NIS: 1.387.569.0
Modulversion: AM: 1.1.20200.4, NIS: 1.1.20200.4

Date: 2023-04-10 18:49:51
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {D06BAD8E-252D-4820-A08C-61B1AC90A714}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2023-04-09 20:31:23
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {110C235E-87BB-4900-9797-CD2386E071E5}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2023-04-08 18:19:19
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {9EC0DE8C-8536-4CD6-9E0D-A4E83232A0C8}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]:

Date: 2023-04-11 06:31:45
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.387.639.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.20200.4
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 

Date: 2023-04-11 06:21:43
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoft-Sicherheitsfunktion wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

CodeIntegrity:
===============
Date: 2023-04-11 19:41:13
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Windows Defender\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Microsoft signing level requirements.

Date: 2023-04-11 19:40:32
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\Avast Software\Avast\aswAMSI.dll that did not meet the Windows signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1804 02/02/2021
Hauptplatine: ASUSTeK COMPUTER INC. TUF GAMING B550M-PLUS
Prozessor: AMD Ryzen 5 3600 6-Core Processor 
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 49039.6 MB
Verfügbarer physikalischer RAM: 39006.79 MB
Summe virtueller Speicher: 56207.6 MB
Verfügbarer virtueller Speicher: 41358.73 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:222.94 GB) (Free:54.8 GB) (Model: Force MP510) NTFS
Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:156.76 GB) (Model: CT1000P1SSD8) NTFS

\\?\Volume{98c3453c-069d-49f7-a4d3-98697e01db1b}\ () (Fixed) (Total:0.51 GB) (Free:0.08 GB) NTFS
\\?\Volume{60e8794a-9b00-918f-c9b3-e53fdd507489}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS
\\?\Volume{8ad689d3-d6c6-434f-9da2-0a1a9a8f43ed}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 06F5E24A)

Partition: GPT.
Attempted reading MBR returned 0 bytes.
 Could not read MBR for disk 2.

==================== Ende von Addition.txt =======================
         

Ok, ich schaus mir kurz an.

Alles gut, passt so.







Entfernung der verwendeten Tools
Führe KpRm gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.





Dann wären wir durch!
Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Wenn Du möchtest, kannst Du hier sagen, ob du mit mir und meiner Hilfe zufrieden warst...
Vielleicht möchtest du das Forum mit einer kleinen Spende unterstützen.





Zum Schluss bitte unbedingt die Sicherheitsmaßnahmen lesen und umsetzen:

Lesestoff:
Anleitung: Maßnahmen zur Absicherung des Rechners

Hinweis:
Bitte gib mir eine kurze Rückmeldung, sobald du die oben verlinkten Informationen gelesen hast, alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Ich habe sonst keine Beschwerden. Vielen Dank für eure Hilfe!
Hier noch die letzte log Datei :

# Run at 13.04.2023 17:44:35
# KpRm (Kernel-panik) version 2.12.0
# Website https://kernel-panik.me/tool/kprm/
# Run by hanne from C:\Users\hanne\Desktop
# Computer Name: DESKTOP-FUQ27TF
# OS: Windows 10 X64 (19045) (10.0.19045.0) 
# Number of passes: 1

- Checked options -

    ~ Delete Tools
    ~ Delete Quarantines

- Delete Tools -


  ## AdwCleaner
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\adwcleaner.exe deleted
     [OK] C:\AdwCleaner deleted

  ## FRST
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\Addition.txt deleted
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\FRST-OlderVersion deleted
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\FRST.txt deleted
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\FRST64.exe deleted
     [OK] C:\FRST deleted

  ## Kaspersky Virus Removal Tool
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\KVRT.exe deleted

  ## Malwarebytes (log)
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\MBAM.txt deleted

  ## RogueKiller
     [OK] C:\Users\hanne\Desktop\Neuer Ordner (3)\RogueKiller_portable64.exe deleted

  ## TDSSKiller
     [OK] C:\TDSSKiller.3.1.0.28_11.04.2023_06.34.13_log.txt deleted

-- KPRM finished in 2.98s --
         

Wir sind froh, dass wir helfen konnten

Dieses Thema scheint erledigt und wird aus unseren Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema.

Jeder andere bitte hier klicken und ein eigenes Thema erstellen.