| |
| |||||||
Log-Analyse und Auswertung: Windows 11 Virus über Usb installiert?Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
07.04.2024, 14:49
| #1 |
| |  Windows 11 Virus über Usb installiert? Grüßt euch! Vielen Dank im Voraus für die aufgebrachte Zeit! Am 17.11.2023 (geschätzt) habe ich meinen PC von einem Kollegen neu aufsetzen lassen, der sich ein wenig mit Programmieren usw. auskennt. Alles hat gut geklappt, der PC wurde neu aufgesetzt. Dann kam er mit einem USB-Stick an und sagte mir, er habe ein Programm für mich, das Baldur's Gate automatisch über Steam abstürzen lässt und es stattdessen über die Familienbibliothek öffnet. Stattdessen öffnete sich jedoch eine Cmd-Datei (dieses schwarze Fenster), und es ist nichts passiert. Seitdem habe ich ein mulmiges Gefühl im Bauch. Ich habe getestet, ob ein Virenprogramm etwas findet, habe Avast und Bitdefender ausprobiert, aber kein Virenprogramm hat etwas gefunden. Probleme, die auftreten, sind unbegründetes Hochfahren der Grafikkarte und Absürzen der Treiber (das ist vorher nie passiert). FRST Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 06.04.2024 01
durchgeführt von gehrk (Administrator) auf JUSTIN-PC (Hyrican Informationssysteme AG Hyrican PC) (07-04-2024 15:23:42)
Gestartet von D:\EXEN\FRST64.exe
Geladene Profile: gehrk
Plattform: Microsoft Windows 11 Pro Version 23H2 22631.3296 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
(C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.147\BraveCrashHandler.exe
(C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.147\BraveCrashHandler64.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(C:\Program Files\Bitdefender Agent\ProductAgentService.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\27.0.1.266\DiscoverySrv.exe
(C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe
(C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe ->) (S.C. BITDEFENDER S.R.L. -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\wsccommunicator.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.81\msedgewebview2.exe <7>
(Discord Inc. -> Discord Inc.) C:\Users\gehrk\AppData\Local\Discord\app-1.0.9039\Discord.exe <6>
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <21>
(explorer.exe ->) (Freda_Maui) [Datei ist nicht signiert] D:\WindowsApps\5957Turnipsoft.freda_5.2.0.0_x64__ypmq2qh89vmny\Freda_Maui.exe
(explorer.exe ->) (Peakstar Technologies Inc. -> AtlasVPN) C:\Program Files\AtlasVPN\Bin\AtlasVPN.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SystemSettingsAdminFlows.exe <2>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\ProductAgentService.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender Agent\redline\bdredline.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe <3>
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe
(services.exe ->) (Bitdefender SRL -> Bitdefender) C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_ed9d96ac28b0f507\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Peakstar Technologies Inc. -> AtlasVPN.Worker) C:\Program Files\AtlasVPN\Bin\AtlasVPN.Worker.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(svchost.exe ->) () [Datei ist nicht signiert] D:\WindowsApps\21676OptimiliaStudios.AquileReader_1.1.37.0_x64__k42naep6bwmrc\Aquile Reader.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.22.10861.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22402.1401.4.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_424.1301.450.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\OpenWith.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.22621.3294_none_e96368b442c95c86\TiWorker.exe
(SystemSettingsAdminFlows.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Dism\DismHost.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [808504 2018-09-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Bdagent] => C:\Program Files\Bitdefender\Bitdefender Security App\bdagent.exe [1067296 2024-02-29] (Bitdefender SRL -> Bitdefender)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SystemExplorerAutoStart] => "C:\Program Files (x86)\System Explorer\SystemExplorer.exe" /TRAY (Keine Datei)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [MicrosoftEdgeAutoLaunch_00B16D86002203141C6DBD71ADCA9AE0] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4063784 2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Discord] => C:\Users\gehrk\AppData\Local\Discord\Update.exe [1525016 2023-10-16] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2735208 2024-04-02] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Wargaming.net Game Center] => C:\ProgramData\Wargaming.net\GameCenter\wgc.exe [2189080 2024-01-18] (Wargaming Group Limited -> Wargaming.net)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [EpicGamesLauncher] => D:\XBOXGAMES\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37277648 2024-01-29] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [] => [X]
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45018016 2024-02-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Voicemod] => D:\Voicemod Desktop\VoicemodDesktop.exe [7559560 2023-11-30] (Voicemod Sociedad Limitada -> Voicemod)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Amazon Music Helper] => C:\Users\gehrk\AppData\Local\Amazon Music\Amazon Music Helper.exe [2107504 2023-09-26] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Run: [Amazon Music] => C:\Users\gehrk\AppData\Local\Amazon Music\Amazon Music.exe [22891632 2023-09-26] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\MountPoints2: {f5728855-7002-11ee-8241-806e6f6e6963} - "F:\Setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\123.1.64.116\Installer\chrmstp.exe [2024-04-04] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {FE7A8EC4-0CD1-4A6A-983A-F2E8DE63C617} - \Opera scheduled assistant Autoupdate 1698528890 -> Keine Datei <==== ACHTUNG
Task: {D2FA518F-E511-4787-9ECF-35596944B4D2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(1): schtasks.exe -> /Change /TN "\CCleaner Update" /ENABLE
Task: {D2FA518F-E511-4787-9ECF-35596944B4D2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(2): schtasks.exe -> /Change /TN "\CCleanerCrashReporting" /ENABLE
Task: {D2FA518F-E511-4787-9ECF-35596944B4D2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(3): schtasks.exe -> /Change /TN "\CCleanerSkipUAC - gehrk" /ENABLE
Task: {D2FA518F-E511-4787-9ECF-35596944B4D2} - System32\Tasks\AVAST Software\Gaming mode Task Scheduler recovery => Command(4): schtasks.exe -> /Change /TN "\AVAST Software\Gaming mode Task Scheduler recovery" /DISABLE
Task: {E0F70F7E-4753-45BF-921F-32195EC38113} - System32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864 => C:\Program Files\Bitdefender Agent\27.0.1.266\WatchDog.exe [1111184 2023-12-12] (Bitdefender SRL -> Bitdefender) -> C:\Program Files\Bitdefender Agent\27.0.1.266\repair
Task: {097B5910-BA4C-4D62-B48B-B2B99AB10458} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{43AD14EC-538F-4B55-B011-80F30BBCE1C4} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-21] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {1863BD27-B291-47BB-B3C9-1B8C22A2EBB5} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{648E7E68-A08F-4045-B9EF-7C6F6B07E16F} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-21] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {782AE29C-98F8-4D25-B645-33B2B88BDCDD} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-02-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {9A4BB1FA-E2B1-48F9-9745-51FE61570FBD} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2024-02-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "c25459bd-13fd-435f-9eb4-a506770ba164" --version "6.21.10918" --silent
Task: {953995DA-013C-4E02-843C-34BA6F3AF489} - System32\Tasks\CCleanerSkipUAC - gehrk => C:\Program Files\CCleaner\CCleaner.exe [38778272 2024-02-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {D9B373AE-C5FD-4631-8093-574E0E2F48A6} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {7FE335B4-837E-44DC-B2CC-2C699854BD5C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F7468300-8567-45AA-887B-4ACAD6AF5480} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {5BD63357-2877-459D-90B6-7EFEA4D0220A} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E82321B4-93EB-4D6F-B3EE-E08545E4F7CC} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CF714E69-92F7-4E19-BF46-BB6D799BB03A} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D88C4768-CA46-4E8E-8BB4-0CC90B5056EB} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C73E06E9-CAB8-400D-A336-AC2E97F59755} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2A2FB028-C1A1-45D2-AADC-D8A79BB322D4} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B028BD93-2873-40F2-93D2-7D2185A4C304} - System32\Tasks\Opera scheduled Autoupdate 1698528884 => C:\Users\gehrk\AppData\Local\Programs\Opera\launcher.exe --scheduledautoupdate $(Arg0) (Keine Datei)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{73a44145-c35e-44c0-a027-434213f895a3}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{b07575f2-ae11-4106-af0e-c44e34be3af2}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{b07575f2-ae11-4106-af0e-c44e34be3af2}: [DhcpDomain] fritz.box
Edge:
=======
Edge Profile: C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-07]
Edge Extension: (Avira Safe Shopping) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2023-11-03]
Edge Extension: (Avira Password Manager) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2023-11-04]
Edge Extension: (Google Docs Offline) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-05]
Edge Extension: (Bitcleaner Surfguard) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gidnhakgfijhghmilgiiffidakihnbnb [2023-11-03]
Edge Extension: (Online Security) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jcpgbnbdnakoblgfkbgggankeidkfcdl [2024-03-01]
Edge Extension: (Edge relevant text changes) - C:\Users\gehrk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [gidnhakgfijhghmilgiiffidakihnbnb]
Edge HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
Edge HKLM-x32\...\Edge\Extension: [jcpgbnbdnakoblgfkbgggankeidkfcdl]
FireFox:
========
FF HKLM\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
FF Extension: (Bitdefender Antispam Toolbar) - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext [2024-03-01] [] [ist nicht signiert]
FF HKLM-x32\...\Thunderbird\Extensions: [bdThunderbird@bitdefender.com] - C:\Program Files\Bitdefender\Bitdefender Security App\bdtbext
Chrome:
=======
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
Opera:
=======
OPR DefaultProfile: Default
Brave:
=======
BRA Profile: C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-04-07]
BRA Extension: (Avira Password Manager) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2024-02-14]
BRA Extension: (Avira Browserschutz) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2023-11-04]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-04-07]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-04-07]
BRA Extension: (Brave NTP background images) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-02-02]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-04-07]
BRA Extension: (Wallet Data Files Updater) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-22]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-04-07]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-03-13]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-10-21]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-04-07]
BRA Extension: (Brave Ads Resources) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2024-02-29]
BRA Extension: (Brave Ad Block Updater (EasyList Germany (plaintext))) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2024-04-07]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-01-30]
BRA Extension: (Brave NTP sponsored images) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2024-04-07]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\gehrk\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-10-28]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AtlasVPN.Worker; C:\Program Files\AtlasVPN\Bin\AtlasVPN.Worker.exe [153352 2024-03-20] (Peakstar Technologies Inc. -> AtlasVPN.Worker)
R2 BDAppSrv; C:\Program Files\Bitdefender\Bitdefender Security App\bdservicehost.exe [849328 2024-02-29] (Bitdefender SRL -> Bitdefender)
R2 BDAuxSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-29] (Bitdefender SRL -> Bitdefender)
R2 BDProtSrv; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-29] (Bitdefender SRL -> Bitdefender)
R2 bdredline; C:\Program Files\Common Files\Bitdefender\SetupInformation\Bitdefender RedLine\bdredline.exe [2963856 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 bdredline_agent; C:\Program Files\Bitdefender Agent\redline\bdredline.exe [2574864 2023-07-20] (Bitdefender SRL -> Bitdefender)
R2 BDSafepaySrv; C:\Program Files\Bitdefender\Bitdefender Security App\Safepay\bdservicehost.exe [849328 2024-02-29] (Bitdefender SRL -> Bitdefender)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-21] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\123.1.64.116\elevation_service.exe [2671128 2024-04-03] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-21] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [53217096 2024-02-14] (Electronic Arts, Inc. -> Electronic Arts)
R3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [12200040 2024-04-02] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [811496 2023-11-24] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [584680 2024-02-12] (EasyAntiCheat Oy -> Epic Games, Inc.)
S4 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-05-01] (Epic Games Inc. -> Epic Games, Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_ed9d96ac28b0f507\Display.NvContainer\NVDisplay.Container.exe [1274992 2023-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
R2 ProductAgentService; C:\Program Files\Bitdefender Agent\ProductAgentService.exe [686032 2023-12-12] (Bitdefender SRL -> Bitdefender)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [820960 2014-12-20] (Miroslav Topolar -> Mister Group)
R2 UPDATESRV; C:\Program Files\Bitdefender\Bitdefender Security\updatesrv.exe [282728 2024-02-29] (Bitdefender SRL -> Bitdefender)
R2 VSSERV; C:\Program Files\Bitdefender\Bitdefender Security\bdservicehost.exe [849328 2024-02-29] (Bitdefender SRL -> Bitdefender)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\NisSrv.exe [3191272 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24020.7-0\MsMpEng.exe [133688 2024-03-13] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 aswWintun; C:\Windows\System32\drivers\aswWintun.sys [40832 2024-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Avast Software)
R1 atc; C:\Windows\System32\DRIVERS\atc.sys [6611008 2023-12-12] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [800168 2023-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S0 bdelam; C:\Windows\System32\drivers\bdelam.sys [24568 2023-05-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Bitdefender)
S3 bdprivmon; C:\Windows\system32\DRIVERS\bdprivmon.sys [49200 2023-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender SRL)
S3 bduefiscan; C:\Windows\system32\DRIVERS\bduefiscan.sys [42440 2024-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [544768 2023-10-20] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [188416 2023-10-20] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
R1 Gemma; C:\Windows\System32\DRIVERS\gemma.sys [1347496 2023-07-12] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
S3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2022-05-18] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)
S3 Ignisv2; C:\Windows\system32\DRIVERS\ignisv2.sys [165312 2023-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
R3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
R2 trufos; C:\Windows\System32\DRIVERS\trufos.sys [629184 2023-07-20] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 vlflt; C:\Windows\System32\DRIVERS\vlflt.sys [520144 2023-11-22] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R3 VOICEMOD_Driver; C:\Windows\system32\drivers\mvvad.sys [48144 2023-08-30] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [20928 2024-03-13] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [603416 2024-03-13] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105752 2024-03-13] (Microsoft Windows -> Microsoft Corporation)
S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2024-04-07 15:23 - 2024-04-07 15:24 - 000000000 ____D C:\FRST
2024-04-07 15:11 - 2024-04-07 15:12 - 000000000 ____D C:\Users\gehrk\Desktop\Bücher DOWN
2024-04-07 15:11 - 2024-04-07 15:11 - 025657033 _____ C:\Users\gehrk\Desktop\Meeting the Shadow_ The Hidden Power of the Dark Side of -- Edited by Connie Zweig, Jeremiah Abrams -- 1st, 1991 -- Tarcher -- 9780874776188 -- df16cf6865caaab9285f935ed4a6654e -- Anna’s Archive.pdf.crdownload
2024-04-06 22:01 - 2024-04-06 22:01 - 000736636 _____ C:\Windows\system32\perfh007.dat
2024-04-06 22:01 - 2024-04-06 22:01 - 000153558 _____ C:\Windows\system32\perfc007.dat
2024-04-06 20:40 - 2024-04-06 20:36 - 000428011 _____ C:\Users\gehrk\Desktop\The Four Agreements -- Ruiz, Don Miguel -- 2011 -- Amber-Allen Publishing -- 9781934408018 -- d7c2973e41dd3d56a7181a6009a38b54 -- Anna’s Archive.mobi
2024-04-06 15:57 - 2024-04-07 03:29 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\AtlasVPN
2024-04-06 15:57 - 2024-04-06 15:57 - 000000000 ____D C:\Users\gehrk\AppData\Local\AtlasVPN
2024-04-06 15:56 - 2024-04-06 15:56 - 000001068 _____ C:\Users\Public\Desktop\AtlasVPN.lnk
2024-04-06 15:56 - 2024-04-06 15:56 - 000001056 _____ C:\ProgramData\Microsoft\Windows\Start Menu\AtlasVPN.lnk
2024-04-06 15:56 - 2024-04-06 15:56 - 000000000 ____D C:\Program Files\AtlasVPN
2024-04-04 15:54 - 2024-04-04 15:54 - 000001642 _____ C:\Users\gehrk\Desktop\T18 Wired Gaming Mouse.lnk
2024-04-04 15:54 - 2024-04-04 15:54 - 000000000 ____D C:\Users\gehrk\AppData\Local\BY-COMBO2
2024-04-04 15:54 - 2024-04-04 15:54 - 000000000 ____D C:\Users\gehrk\AppData\Local\BY-COMBO
2024-04-04 15:54 - 2024-04-04 15:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\T18 Wired Gaming Mouse
2024-04-03 15:39 - 2024-04-03 15:39 - 000000000 ____D C:\Users\gehrk\AppData\Local\SwGame
2024-04-03 12:24 - 2024-04-03 12:24 - 000001171 _____ C:\Users\Public\Desktop\STAR WARS Jedi - Fallen Order™.lnk
2024-04-03 12:24 - 2024-04-03 12:24 - 000000000 ___HD C:\Program Files\Common Files\EAInstaller
2024-03-31 19:57 - 2024-03-31 19:57 - 000000027 _____ C:\Windows\system32\ctc.json
2024-03-31 19:56 - 2024-03-31 19:56 - 000000318 _____ C:\Windows\system32\httpproxy.json
2024-03-31 19:33 - 2024-03-31 19:33 - 000690740 _____ C:\ProgramData\cl.1711905940.bdinstall.v2.bin
2024-03-31 19:33 - 2024-03-31 19:33 - 000126580 _____ C:\ProgramData\cl.kit.1711905939.bdinstall.v2.bin
2024-03-31 19:30 - 2024-03-31 19:30 - 000000000 ____D C:\ProgramData\Gemma
2024-03-31 19:30 - 2024-03-31 19:30 - 000000000 ____D C:\ProgramData\Atc
2024-03-31 19:30 - 2024-03-31 19:30 - 000000000 ____D C:\ProgramData\48C4687D-9760-4F5B-BAB3-60351B0841E4
2024-03-31 19:29 - 2024-03-31 20:49 - 000000000 ____D C:\ProgramData\Bitdefender
2024-03-31 19:29 - 2024-03-31 19:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bitdefender Security
2024-03-31 19:29 - 2024-03-31 19:30 - 000000000 ____D C:\ProgramData\BDLogging
2024-03-31 19:29 - 2024-03-31 19:29 - 000002378 _____ C:\Users\Public\Desktop\Bitdefender.lnk
2024-03-31 19:29 - 2024-03-31 19:29 - 000000000 ____D C:\Windows\system32\elambkup
2024-03-31 19:29 - 2024-03-31 19:29 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\Bitdefender Security App
2024-03-31 19:29 - 2024-03-31 19:29 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\Bitdefender
2024-03-31 19:29 - 2024-03-31 19:29 - 000000000 ____D C:\Program Files\Bitdefender
2024-03-31 19:25 - 2024-03-31 19:29 - 000000000 ____D C:\Program Files\Common Files\Bitdefender
2024-03-31 19:15 - 2024-03-31 19:15 - 000003846 _____ C:\Windows\system32\Tasks\Bitdefender Agent WatchDog_65D6944A0EF74FDAB96E31112AD39864
2024-03-31 19:13 - 2024-03-31 19:13 - 000143044 _____ C:\ProgramData\agent.1711905203.bdinstall.v2.bin
2024-03-31 19:13 - 2024-03-31 19:13 - 000000000 ____D C:\Users\gehrk\AppData\Local\Bitdefender
2024-03-31 19:13 - 2024-03-31 19:13 - 000000000 ____D C:\ProgramData\Bitdefender Agent
2024-03-31 19:13 - 2024-03-31 19:13 - 000000000 ____D C:\Program Files\Bitdefender Agent
2024-03-31 19:00 - 2024-03-31 19:00 - 000007597 _____ C:\Users\gehrk\AppData\Local\Resmon.ResmonCfg
2024-03-31 17:11 - 2024-03-31 17:11 - 000000222 _____ C:\Users\gehrk\Desktop\Rust.url
2024-03-20 08:19 - 2024-03-20 08:19 - 000427272 _____ (WireGuard LLC) C:\Windows\system32\wintun.dll
2024-03-17 18:56 - 2024-03-17 18:57 - 000000000 ____D C:\Users\gehrk\AppData\Local\Oregon
2024-03-14 19:02 - 2024-03-14 19:02 - 000020023 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-03-14 19:01 - 2024-03-14 19:01 - 000020023 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-03-14 18:56 - 2024-03-14 18:58 - 000000000 ___HD C:\$WinREAgent
2024-03-11 21:49 - 2024-03-11 21:49 - 000027048 _____ (EasyAntiCheat Oy) C:\Windows\system32\eac_usermode_240094990750345.dll
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2024-04-07 15:23 - 2023-10-21 12:56 - 000000000 ____D C:\Program Files (x86)\Steam
2024-04-07 15:17 - 2023-10-21 12:30 - 000000000 ____D C:\Users\gehrk\AppData\Local\D3DSCache
2024-04-07 15:04 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2024-04-07 15:04 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-04-07 14:53 - 2023-10-21 14:00 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\discord
2024-04-07 14:53 - 2023-10-21 14:00 - 000000000 ____D C:\Users\gehrk\AppData\Local\Discord
2024-04-07 14:37 - 2023-10-21 13:51 - 000000000 ____D C:\ProgramData\NVIDIA
2024-04-07 14:37 - 2023-10-21 12:14 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-04-07 14:37 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2024-04-06 22:01 - 2023-10-21 12:22 - 001692090 _____ C:\Windows\system32\PerfStringBackup.INI
2024-04-06 22:01 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2024-04-06 19:42 - 2023-10-21 12:27 - 000000000 ____D C:\Users\gehrk\AppData\Local\Packages
2024-04-06 19:42 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-04-06 18:37 - 2024-02-01 21:23 - 000000000 ____D C:\Users\gehrk\AppData\Local\Ubisoft Game Launcher
2024-04-06 16:23 - 2023-10-21 12:17 - 000000000 ____D C:\ProgramData\Packages
2024-04-06 15:51 - 2023-10-21 12:15 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-04-04 16:02 - 2023-10-21 12:14 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-04-04 16:02 - 2023-10-21 12:14 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-04-04 15:54 - 2023-10-28 20:58 - 000000000 ____D C:\Exen
2024-04-04 15:22 - 2023-10-21 14:04 - 000002356 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-04-04 15:22 - 2023-10-21 14:04 - 000002315 _____ C:\Users\Public\Desktop\Brave.lnk
2024-04-04 15:19 - 2023-10-22 15:59 - 000001607 _____ C:\Windows\system32\config\VSMIDK
2024-04-04 15:19 - 2023-10-21 12:14 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-04-03 16:28 - 2023-10-21 14:06 - 000000000 ____D C:\Users\gehrk\AppData\Local\Origin
2024-04-03 15:39 - 2023-10-21 16:56 - 000000000 ____D C:\Users\gehrk\AppData\Local\UnrealEngine
2024-04-02 20:20 - 2023-10-21 14:06 - 000000000 ____D C:\ProgramData\EA Desktop
2024-04-02 19:27 - 2023-10-21 14:00 - 000002231 _____ C:\Users\gehrk\Desktop\Discord.lnk
2024-04-02 18:14 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\LiveKernelReports
2024-03-31 20:04 - 2023-10-21 14:07 - 000000000 ____D C:\Users\gehrk\AppData\Local\CrashDumps
2024-03-31 19:49 - 2023-10-21 13:51 - 000003702 _____ C:\Windows\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2024-03-31 19:45 - 2023-10-21 12:52 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\Microsoft\MMC
2024-03-31 19:30 - 2022-05-07 07:17 - 000032768 _____ C:\Windows\system32\config\ELAM
2024-03-31 18:07 - 2023-10-21 12:29 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2487667140-2351503887-2796013851-1001
2024-03-31 18:07 - 2023-10-21 12:29 - 000003368 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2487667140-2351503887-2796013851-1001
2024-03-31 18:07 - 2023-10-21 12:29 - 000002399 _____ C:\Users\gehrk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-03-31 17:59 - 2023-12-27 00:58 - 000000000 ____D C:\ProgramData\Avast Software
2024-03-31 17:58 - 2022-05-07 07:17 - 000524288 _____ C:\Windows\system32\config\BBI
2024-03-31 17:57 - 2023-12-27 01:02 - 000000000 ____D C:\Windows\system32\Tasks\Avast Software
2024-03-31 17:11 - 2023-10-28 18:56 - 000000000 ____D C:\Users\gehrk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2024-03-28 19:18 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecurityHealth
2024-03-27 13:39 - 2023-10-21 12:24 - 000000000 ___SD C:\Users\gehrk\AppData\Roaming\Microsoft\Protect
2024-03-20 21:41 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-03-19 19:48 - 2023-10-21 13:58 - 000000000 ____D C:\Program Files\CCleaner
2024-03-17 02:15 - 2023-10-21 12:28 - 000000000 ____D C:\Users\gehrk\AppData\Local\PlaceholderTileLogoFolder
2024-03-15 18:24 - 2023-10-21 15:26 - 002709096 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll
2024-03-15 18:24 - 2023-10-21 15:26 - 000145000 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll
2024-03-15 18:24 - 2023-10-21 15:26 - 000108136 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe
2024-03-15 18:24 - 2023-10-21 15:26 - 000075368 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe
2024-03-15 18:23 - 2024-02-17 19:49 - 000263680 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy_4.dll
2024-03-15 18:23 - 2023-10-21 15:26 - 000706152 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll
2024-03-15 18:23 - 2023-10-21 15:26 - 000218728 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll
2024-03-15 18:23 - 2023-10-21 15:26 - 000206440 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll
2024-03-15 01:44 - 2023-10-21 12:14 - 000295504 _____ C:\Windows\system32\FNTCACHE.DAT
2024-03-15 01:43 - 2023-10-20 22:29 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2024-03-15 01:43 - 2022-05-07 12:39 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemResources
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\oobe
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellComponents
2024-03-15 01:43 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\bcastdvr
2024-03-15 01:43 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\servicing
2024-03-14 19:05 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\CbsTemp
2024-03-14 19:02 - 2023-10-21 12:16 - 003213824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-03-13 16:42 - 2023-10-24 14:07 - 000000000 ____D C:\Windows\system32\MRT
2024-03-13 16:41 - 2023-10-24 14:07 - 190470136 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-03-13 16:04 - 2023-10-21 12:14 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-03-13 03:02 - 2023-10-21 12:24 - 000000000 ____D C:\Users\gehrk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-12-06 23:16 - 2023-12-06 23:16 - 000003854 _____ () C:\Users\gehrk\AppData\Local\3301857876
2024-03-31 19:00 - 2024-03-31 19:00 - 000007597 _____ () C:\Users\gehrk\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 06.04.2024 01
durchgeführt von (07-04-2024 15:25:00)
Gestartet von D:\EXEN
Microsoft Windows 11 Pro Version 23H2 22631.3296 (X64) (2023-10-21 10:17:20)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-2487667140-2351503887-2796013851-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2487667140-2351503887-2796013851-503 - Limited - Disabled)
Gast (S-1-5-21-2487667140-2351503887-2796013851-501 - Limited - Disabled)
gehrk (S-1-5-21-2487667140-2351503887-2796013851-1001 - Administrator - Enabled) => C:\Users\gehrk
WDAGUtilityAccount (S-1-5-21-2487667140-2351503887-2796013851-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Bitdefender Virenschutz (Enabled - Up to date) {0F59B032-EA77-E3A8-2382-74A4346E5522}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Amazon Music (HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Amazon Amazon Music) (Version: 9.5.2.2478 - Amazon.com Services LLC)
AtlasVPN (HKLM\...\{012A2EF0-B232-41BF-AC91-17D4609960C4}) (Version: 2.6.2.0 - peakstar technologies Inc.)
Bitdefender Agent (HKLM\...\Bitdefender Agent) (Version: 27.0.1.266 - Bitdefender)
Bitdefender Antivirus Free (HKLM\...\Bitdefender) (Version: 27.0.30.140 - Bitdefender)
Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 123.1.64.116 - Die Brave-Autoren)
CCleaner (HKLM\...\CCleaner) (Version: 6.21 - Piriform)
Cheat Engine 7.5 (HKLM\...\Cheat Engine_is1) (Version: - Cheat Engine)
Discord (HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Discord) (Version: 1.0.9020 - Discord Inc.)
EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.166.0.5679 - Electronic Arts) Hidden
EA app (HKLM-x32\...\{c4a37457-ecc1-45d7-be16-53e8ce7a34ef}) (Version: 13.166.0.5679 - Electronic Arts)
Epic Games Launcher (HKLM-x32\...\{74229F03-A24F-408B-AA3B-C4B8ECF102BA}) (Version: 1.3.82.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{35905844-0610-427D-86A0-2103FABE3D4D}) (Version: 2.0.42.0 - Epic Games, Inc.)
Geeks3D FurMark 1.37.2.0 (HKLM-x32\...\{2397CAD4-2263-4CD0-96BE-E43A980B9C9A}_is1) (Version: 1.37.2.0 - Geeks3D)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Microsoft .NET Host - 6.0.23 (x64) (HKLM\...\{1870DD0E-1583-44FF-8265-A9D1692CD89C}) (Version: 48.92.2594 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.23 (x64) (HKLM\...\{995CC82C-E3E8-4BB5-9AB8-2B95C611D59D}) (Version: 48.92.2594 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.23 (x64) (HKLM\...\{7C0437DA-6703-47F1-A116-CD138B0768AD}) (Version: 48.92.2594 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 123.0.2420.81 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 123.0.2420.81 - Microsoft Corporation)
Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\OneDriveSetup.exe) (Version: 24.050.0310.0001 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.23 (x64) (HKLM\...\{AA393199-374C-4AD1-9245-6CBB254D8146}) (Version: 48.92.2594 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.23 (x64) (HKLM-x32\...\{fbe8ac13-7063-40e6-81dd-7ddcc3781ecd}) (Version: 6.0.23.32930 - Microsoft Corporation)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA Grafiktreiber 546.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.33 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
STAR WARS Jedi - Fallen Order™ (HKLM-x32\...\{D00A89F1-2D8C-4589-B1D1-73A6544E3B1F}) (Version: 1.0.10.0 - Electronic Arts, Inc.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
System Explorer 7.0.0 (HKLM-x32\...\{40F485F7-6478-4896-B0D5-F94BE677EB78}_is1) (Version: - Mister Group)
T18 Wired Gaming Mouse (HKLM-x32\...\{26DB0402-CFF9-4928-97DD-6E419C8625D6}_is1) (Version: 1.0.4 - )
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 149.2.11028 - Ubisoft)
Voicemod (HKLM\...\{8435A407-F778-4647-9CDB-46E5EC50BAD0}_is1) (Version: 2.47.0.0 - Voicemod S.L.)
Wargaming.net Game Center (HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\Wargaming.net Game Center) (Version: 23.7.0.4683 - Wargaming.net)
WinRAR 6.24 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
Packages:
=========
Aquile Reader -> C:\Program Files\WindowsApps\21676OptimiliaStudios.AquileReader_1.1.37.0_x64__k42naep6bwmrc [2024-04-06] (Optimilia Studios)
Control Expansion Pack 1 The Foundation -> C:\Program Files\WindowsApps\505GAMESS.P.A.4100916DF3B82_1.0.0.0_x64__tefn33qh9azfc [2024-03-23] (505 GAMES S.P.A.)
Control Expansion Pack 2 AWE -> C:\Program Files\WindowsApps\505GAMESS.P.A.2054521701B83_1.0.0.0_x64__tefn33qh9azfc [2024-03-22] (505 GAMES S.P.A.)
Control PCGP -> C:\Program Files\WindowsApps\505GAMESS.P.A.ControlPCGP_1.0.6.0_x64__tefn33qh9azfc [2024-03-22] (505 GAMES S.P.A.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.1200.442.0_x64__8wekyb3d8bbwe [2024-03-22] (Microsoft Corporation)
Doom Eternal - PC -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternal-PC_1.0.19.0_x64__3275kfvn8vcwc [2024-03-17] (Bethesda Softworks)
DOOM Eternal: Campaign -> C:\Program Files\WindowsApps\BethesdaSoftworks.DOOMEternalCampaignPC_1.0.1.0_x64__3275kfvn8vcwc [2024-03-17] (Bethesda Softworks)
Forza Horizon 5 -> C:\Program Files\WindowsApps\Microsoft.624F8B84B80_3.640.62.0_x64__8wekyb3d8bbwe [2024-04-02] (Microsoft Studios)
freda epub ebook reader -> C:\Program Files\WindowsApps\5957Turnipsoft.freda_5.2.0.0_x64__ypmq2qh89vmny [2024-04-06] (Turnipsoft)
Hell Let Loose -> C:\Program Files\WindowsApps\Team17DigitalLimited.HellLetLoose_1.0.398.0_x64__j5x4vj4y67jhc [2024-03-21] (Team17 Digital Limited)
Humankind™ -> C:\Program Files\WindowsApps\AmplitudeSTUDIOS.Humankind_1.26.4449.0_x64__sm4da3szdwjfr [2024-03-28] (AMPLITUDE Studios)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-10-24] (Microsoft Corp.)
Microsoft.WindowsAppRuntime.CBS -> C:\Windows\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2024-03-15] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.965.0_x64__56jybvy8sckqj [2024-03-25] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2024-01-22] (Realtek Semiconductor Corp)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0 [2024-04-04] (Spotify AB) [Startup Task]
TikTok -> C:\Program Files\WindowsApps\BytedancePte.Ltd.TikTok_1.0.5.0_neutral__6yccndn6064se [2024-03-19] (Bytedance Pte. Ltd.)
Wartales -> C:\Program Files\WindowsApps\7286ShiroGamesSAS.Wartales_1.0.29779.0_x64__esjzrp5ntrs52 [2024-03-22] (Shiro Games SAS)
WinAppRuntime.Main.1.3 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.3_3000.934.1904.0_x64__8wekyb3d8bbwe [2024-04-06] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_3000.934.1904.0_x64__8wekyb3d8bbwe [2024-04-06] (Microsoft Corp.)
Windows Feature Experience Pack -> C:\Windows\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2024-03-15] (Microsoft Corporation)
WinRAR -> C:\Program Files\WinRAR [2023-10-30] (win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-2487667140-2351503887-2796013851-1001_Classes\CLSID\{3e5dba08-7ec3-cc88-1f18-0cf79ce7ade4}\localserver32 -> C:\Program Files\AtlasVPN\Bin\AtlasVPN.exe (Peakstar Technologies Inc. -> AtlasVPN)
CustomCLSID: HKU\S-1-5-21-2487667140-2351503887-2796013851-1001_Classes\CLSID\{66d7c868-b22d-c2f9-ef63-90654392c6da}\localserver32 -> D:\Voicemod Desktop\VoicemodDesktop.exe (Voicemod Sociedad Limitada -> Voicemod)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_ed9d96ac28b0f507\nvshext.dll [2023-12-08] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2024-04-02 20:20 - 2024-04-02 20:20 - 002849280 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll
2024-04-02 20:20 - 2024-04-02 20:20 - 000685056 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll
2024-04-02 20:19 - 2024-04-02 20:19 - 000046592 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll
2024-04-02 20:20 - 2024-04-02 20:20 - 006270976 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll
2024-04-02 20:20 - 2024-04-02 20:20 - 001389568 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll
2024-04-02 20:20 - 2024-04-02 20:20 - 000157184 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\localhost -> localhost
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2022-05-07 07:24 - 2022-05-07 07:22 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\gehrk\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\128993.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
MSCONFIG\Services: EpicOnlineServices => 3
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "SystemExplorerAutoStart"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_00B16D86002203141C6DBD71ADCA9AE0"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Wargaming.net Game Center"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Opera Browser Assistant"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Voicemod"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Amazon Music Helper"
HKU\S-1-5-21-2487667140-2351503887-2796013851-1001\...\StartupApproved\Run: => "Amazon Music"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{F36EFE76-FAF4-4EAF-92C9-A54ECBE64DAE}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{4266B821-9E99-41D2-8B50-8191484A384A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8503C605-01F3-42C4-803B-719331DEE656}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{46B6D131-72DF-41B8-A7A1-92DE78BF3D80}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{F8B2B51E-0D0A-4ECF-BA24-7184A0BB87F5}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{058E339B-23EB-4118-9B32-CEF86A525269}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{D034E039-EDD7-4082-858F-313CE3FECDD9}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{B6864DE4-E383-4140-A3C1-67B788CDE887}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe (Larian Studios Games Ltd. -> )
FirewallRules: [TCP Query User{2D1F0AD9-F680-41C1-BF19-D226F01D121C}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{86D48799-E123-42D8-AECD-614569E16CB9}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3_dx11.exe (Larian Studios Games Ltd. -> )
FirewallRules: [TCP Query User{C584F3C8-C956-4134-813E-79997400D894}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [UDP Query User{4AC705AC-DDD5-49AE-92A7-EC468FC56CE9}C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\baldurs gate 3\bin\bg3.exe (Larian Studios Games Ltd. -> )
FirewallRules: [{844D11A1-3F3A-46BF-9DDE-2F4630EA0DBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{07624B09-4E87-4D4C-910F-939C3DB5DACB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7730B524-2D9E-4D8B-B3D0-DF0C59F791F7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{003F07E1-8EF2-4BC4-BCF7-93B739A5A2AC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{EC5F77B1-822E-4BEE-B92C-1564B1AADE26}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Block) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [UDP Query User{DDA126B2-8CCC-4646-8511-D358DBB92C8F}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Block) C:\programdata\wargaming.net\gamecenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [TCP Query User{B40608AD-D3BE-47C6-A099-177907CE8656}D:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) D:\xboxgames\forza horizon 5\content\forzahorizon5.exe (Zugriff verweigert) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{173188ED-C62C-44EE-B1AF-C5EAB4B75B51}D:\xboxgames\forza horizon 5\content\forzahorizon5.exe] => (Allow) D:\xboxgames\forza horizon 5\content\forzahorizon5.exe (Zugriff verweigert) [Datei ist nicht signiert]
FirewallRules: [{A6B0D66D-1EFA-48FB-8D54-3D7374B91B7D}] => (Allow) D:\SteamLibrary\steamapps\common\Hell Let Loose\Launch_HLL.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [{E90768A7-1971-4BDD-81FF-B7FC2F34CDA9}] => (Allow) D:\SteamLibrary\steamapps\common\Hell Let Loose\Launch_HLL.exe (EasyAntiCheat Oy -> Epic Games, Inc)
FirewallRules: [TCP Query User{82AD3ED6-CEB3-493B-AEFE-59819B09F15A}D:\xboxgames\back 4 blood\content\gobi\binaries\wingdk\back4blood.exe] => (Allow) D:\xboxgames\back 4 blood\content\gobi\binaries\wingdk\back4blood.exe => Keine Datei
FirewallRules: [UDP Query User{2E33F530-18FA-43FF-B5AC-6643A789A32B}D:\xboxgames\back 4 blood\content\gobi\binaries\wingdk\back4blood.exe] => (Allow) D:\xboxgames\back 4 blood\content\gobi\binaries\wingdk\back4blood.exe => Keine Datei
FirewallRules: [{6D625BDD-1CC8-4FC2-A48E-33189D3B6695}] => (Allow) C:\Users\gehrk\AppData\Local\Programs\Opera\105.0.4970.48\opera.exe => Keine Datei
FirewallRules: [TCP Query User{3DEC7796-EB4E-4E99-838D-5EC8D3F5D958}D:\steamlibrary\steamapps\common\hell let loose\hll\binaries\win64\hll-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\hell let loose\hll\binaries\win64\hll-win64-shipping.exe (BLACK MATTER PTY. LTD.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{C260E9FF-5339-4333-924F-6087B3AE3620}D:\steamlibrary\steamapps\common\hell let loose\hll\binaries\win64\hll-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\hell let loose\hll\binaries\win64\hll-win64-shipping.exe (BLACK MATTER PTY. LTD.) [Datei ist nicht signiert]
FirewallRules: [{93DC739D-6B8B-4161-83D4-7B1E9F4CA3A2}] => (Allow) D:\SteamLibrary\steamapps\common\Enderal Special Edition\Enderal Launcher.exe (SureAI) [Datei ist nicht signiert]
FirewallRules: [{06162D21-56FC-47E3-87BE-11943E3040BB}] => (Allow) D:\SteamLibrary\steamapps\common\Enderal Special Edition\Enderal Launcher.exe (SureAI) [Datei ist nicht signiert]
FirewallRules: [{8FBCF30D-CA36-4A4D-BC28-5F31E14E8A41}] => (Allow) C:\Users\gehrk\AppData\Local\Programs\Opera\105.0.4970.60\opera.exe => Keine Datei
FirewallRules: [TCP Query User{1F6B83E6-1EB2-4D38-B588-BC25627B40AE}C:\users\gehrk\appdata\local\programs\opera\opera.exe] => (Block) C:\users\gehrk\appdata\local\programs\opera\opera.exe => Keine Datei
FirewallRules: [UDP Query User{31633115-B733-46A3-8719-42082D8AAFF8}C:\users\gehrk\appdata\local\programs\opera\opera.exe] => (Block) C:\users\gehrk\appdata\local\programs\opera\opera.exe => Keine Datei
FirewallRules: [TCP Query User{82FD02FE-054F-4591-8CD7-C6EA4D3D8EA1}D:\xboxgames\world war z\content\wwzretail.exe] => (Block) D:\xboxgames\world war z\content\wwzretail.exe => Keine Datei
FirewallRules: [UDP Query User{18D69BE6-05CC-4564-BA95-684F089DA247}D:\xboxgames\world war z\content\wwzretail.exe] => (Block) D:\xboxgames\world war z\content\wwzretail.exe => Keine Datei
FirewallRules: [TCP Query User{A5F8FE97-282A-46B9-A345-5739949C0C2B}D:\xboxgames\hell let loose\content\hll\binaries\win64\hll-win64-shipping.exe] => (Allow) D:\xboxgames\hell let loose\content\hll\binaries\win64\hll-win64-shipping.exe (Zugriff verweigert) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{E36B6756-E578-4FE4-AEA6-B0C41FFAC965}D:\xboxgames\hell let loose\content\hll\binaries\win64\hll-win64-shipping.exe] => (Allow) D:\xboxgames\hell let loose\content\hll\binaries\win64\hll-win64-shipping.exe (Zugriff verweigert) [Datei ist nicht signiert]
FirewallRules: [{41FA650D-42F0-47F9-8388-5993516D71F6}] => (Allow) D:\Voicemod Desktop\VoicemodDesktop.exe (Voicemod Sociedad Limitada -> Voicemod)
FirewallRules: [{C6763020-AEB8-4C62-BA99-24DA0CEB63C5}] => (Allow) D:\Voicemod Desktop\VoicemodDesktop.exe (Voicemod Sociedad Limitada -> Voicemod)
FirewallRules: [{BCD1D675-E956-469A-AE5B-11C9FBA088F5}] => (Allow) D:\SteamLibrary\steamapps\common\Squad\squad_launcher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{21979F73-D7F4-4E22-932F-F2D9440CD6C3}] => (Allow) D:\SteamLibrary\steamapps\common\Squad\squad_launcher.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{5A178D66-9AC1-429E-8D13-304D1036128B}] => (Allow) D:\SteamLibrary\steamapps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe (Eleon Game Studios) [Datei ist nicht signiert]
FirewallRules: [{3BF95330-8B2A-4410-AC41-1BB387AFCFAA}] => (Allow) D:\SteamLibrary\steamapps\common\Empyrion - Galactic Survival\EmpyrionLauncher.exe (Eleon Game Studios) [Datei ist nicht signiert]
FirewallRules: [{338FDE1B-D295-4291-B4A5-272709EF7683}] => (Allow) C:\Program Files\Bitdefender\Bitdefender Security\bdntwrk.exe (Bitdefender SRL -> Bitdefender)
FirewallRules: [{1484A26F-C608-4AA1-8F42-2DDF956B15D1}] => (Allow) D:\Program Files\Jedi Fallen Order\SwGame\Binaries\Win64\starwarsjedifallenorder.exe (Respawn Entertainment) [Datei ist nicht signiert]
FirewallRules: [{ADBF5DE7-35FE-481B-A614-3CF55CF7A2C7}] => (Allow) D:\Program Files\Jedi Fallen Order\SwGame\Binaries\Win64\starwarsjedifallenorder.exe (Respawn Entertainment) [Datei ist nicht signiert]
FirewallRules: [{EC57C181-941C-4BB7-885B-570459F80F89}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F47F8ED7-86FF-4D8D-A2DD-3F734F95D93D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24060.3102.2733.5911_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FD47AFDB-E69A-4894-9E16-2E5C01287016}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{10511BAF-C6D6-4F73-92D1-7D4E7356A904}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D2CF5652-D13D-470F-B7CC-5A29B09A6C1D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DBBAD280-49C4-4447-A805-E031179CDC60}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{56BB0B51-51DD-441A-B3AA-AB2ACD5B277F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{0CD8EA2C-34D8-4336-977A-80CB6B3845CC}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{914ABD3C-B2BE-4538-85FF-416156924FFD}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{C9366D91-F759-445F-824A-81BC9B4532E8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{A13B18F4-F73D-4899-AD0E-1C31D9F1C0DA}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{6577322D-DC59-4E43-9E4C-7E74238266B9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{77A7E92B-7BC5-40F7-8ACC-E448453A6EAF}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.234.783.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{8786D20E-3BBA-433A-9614-D22BDACDE0CC}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{EE08F608-B380-409F-B6F0-16E5CAA4138F}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{46062B30-4F0C-4924-849B-F3D46DBB1A4C}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{5DCCBF51-60E6-474D-8317-3C3F5845FE88}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{AA411581-47D3-4B06-956B-071EEA82CE5A}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{83375988-9246-4CD0-AFE7-A899B1FC59AD}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{9536B5ED-CC91-4360-9464-150CB47610A8}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{3223FA01-1032-4042-9E12-AA6316AB08B1}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{BEAFBCDD-ECC6-440A-856A-EA2BDD90F95E}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{9A541AF7-E6B8-4AA9-BBF7-C676EE1E80DF}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{A4D77C31-A197-4C84-A91E-A0338073B5B5}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts)
FirewallRules: [{5A8BF022-79CA-417B-ABBE-94DB2A45FB1A}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\123.0.2420.81\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
06-04-2024 15:56:23 Installed AtlasVPN
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: Realtek 8812AE Wireless LAN 802.11ac PCI-E NIC
Description: Realtek 8812AE Wireless LAN 802.11ac PCI-E NIC
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Realtek Semiconductor Corp.
Service: RTWlanE01
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (04/07/2024 03:06:42 PM) (Source: .NET Runtime) (EventID: 1000) (User: )
Description: Category: AtlasVPN.Http.Services.AtlasHttpMessageHandler
EventId: 0
AtlasVpn/v2/set domain failed to send request.
Exception:
System.Net.Http.HttpRequestException: An error occurred while sending the request.
---> System.IO.IOException: Unable to read data from the transport connection: Eine vorhandene Verbindung wurde vom Remotehost geschlossen..
---> System.Net.Sockets.SocketException (10054): Eine vorhandene Verbindung wurde vom Remotehost geschlossen.
--- End of inner exception stack trace ---
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.ThrowException(SocketError error, CancellationToken cancellationToken)
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource<System.Int32>.GetResult(Int16 token)
at System.Net.Security.SslStream.EnsureFullTlsFrameAsync[TIOAdapter](CancellationToken cancellationToken, Int32 estimatedSize)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Security.SslStream.ReadAsyncInternal[TIOAdapter](Memory`1 buffer, CancellationToken cancellationToken)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Http.HttpConnection.<EnsureReadAheadTaskHasStarted>g__ReadAheadWithZeroByteReadAsync|40_0()
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
at AtlasVPN.Http.Services.AtlasHttpMessageHandler.SendAsync(AtlasHttpRequest request, String domainName, CancellationToken cancellationToken)
Error: (04/07/2024 03:06:33 PM) (Source: .NET Runtime) (EventID: 1000) (User: )
Description: Category: AtlasVPN.Http.Services.AtlasHttpMessageHandler
EventId: 0
AtlasVpn/v1/event domain failed to send request.
Exception:
System.Net.Http.HttpRequestException: An error occurred while sending the request.
---> System.IO.IOException: Unable to read data from the transport connection: Eine vorhandene Verbindung wurde vom Remotehost geschlossen..
---> System.Net.Sockets.SocketException (10054): Eine vorhandene Verbindung wurde vom Remotehost geschlossen.
--- End of inner exception stack trace ---
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.ThrowException(SocketError error, CancellationToken cancellationToken)
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource<System.Int32>.GetResult(Int16 token)
at System.Net.Security.SslStream.EnsureFullTlsFrameAsync[TIOAdapter](CancellationToken cancellationToken, Int32 estimatedSize)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Security.SslStream.ReadAsyncInternal[TIOAdapter](Memory`1 buffer, CancellationToken cancellationToken)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
at AtlasVPN.Http.Services.AtlasHttpMessageHandler.SendAsync(AtlasHttpRequest request, String domainName, CancellationToken cancellationToken)
Error: (04/07/2024 03:06:29 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/07/2024 02:37:38 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/07/2024 02:37:35 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (04/07/2024 02:37:33 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0xC004F074
Befehlszeilenargumente:
RuleId=502ff3ba-669a-4674-bbb1-601f34a3b968;Action=AutoActivateSilent;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=2de67392-b7a7-462a-b1ca-108dd189f588;NotificationInterval=1440;Trigger=UserLogon;SessionId=4
Error: (04/06/2024 08:34:40 PM) (Source: .NET Runtime) (EventID: 1000) (User: )
Description: Category: AtlasVPN.Http.Services.AtlasHttpMessageHandler
EventId: 0
AtlasVpn/v2/set domain failed to send request.
Exception:
System.Net.Http.HttpRequestException: An error occurred while sending the request.
---> System.IO.IOException: Unable to read data from the transport connection: Eine vorhandene Verbindung wurde vom Remotehost geschlossen..
---> System.Net.Sockets.SocketException (10054): Eine vorhandene Verbindung wurde vom Remotehost geschlossen.
--- End of inner exception stack trace ---
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.ThrowException(SocketError error, CancellationToken cancellationToken)
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource<System.Int32>.GetResult(Int16 token)
at System.Net.Security.SslStream.EnsureFullTlsFrameAsync[TIOAdapter](CancellationToken cancellationToken, Int32 estimatedSize)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Security.SslStream.ReadAsyncInternal[TIOAdapter](Memory`1 buffer, CancellationToken cancellationToken)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
at AtlasVPN.Http.Services.AtlasHttpMessageHandler.SendAsync(AtlasHttpRequest request, String domainName, CancellationToken cancellationToken)
Error: (04/06/2024 08:34:30 PM) (Source: .NET Runtime) (EventID: 1000) (User: )
Description: Category: AtlasVPN.Http.Services.AtlasHttpMessageHandler
EventId: 0
AtlasVpn/v1/event domain failed to send request.
Exception:
System.Net.Http.HttpRequestException: An error occurred while sending the request.
---> System.IO.IOException: Unable to read data from the transport connection: Eine vorhandene Verbindung wurde vom Remotehost geschlossen..
---> System.Net.Sockets.SocketException (10054): Eine vorhandene Verbindung wurde vom Remotehost geschlossen.
--- End of inner exception stack trace ---
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.ThrowException(SocketError error, CancellationToken cancellationToken)
at System.Net.Sockets.Socket.AwaitableSocketAsyncEventArgs.System.Threading.Tasks.Sources.IValueTaskSource<System.Int32>.GetResult(Int16 token)
at System.Net.Security.SslStream.EnsureFullTlsFrameAsync[TIOAdapter](CancellationToken cancellationToken, Int32 estimatedSize)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Security.SslStream.ReadAsyncInternal[TIOAdapter](Memory`1 buffer, CancellationToken cancellationToken)
at System.Runtime.CompilerServices.PoolingAsyncValueTaskMethodBuilder`1.StateMachineBox`1.System.Threading.Tasks.Sources.IValueTaskSource<TResult>.GetResult(Int16 token)
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
--- End of inner exception stack trace ---
at System.Net.Http.HttpConnection.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpConnectionPool.SendWithVersionDetectionAndRetryAsync(HttpRequestMessage request, Boolean async, Boolean doRequestAuth, CancellationToken cancellationToken)
at System.Net.Http.RedirectHandler.SendAsync(HttpRequestMessage request, Boolean async, CancellationToken cancellationToken)
at System.Net.Http.HttpClient.<SendAsync>g__Core|83_0(HttpRequestMessage request, HttpCompletionOption completionOption, CancellationTokenSource cts, Boolean disposeCts, CancellationTokenSource pendingRequestsCts, CancellationToken originalCancellationToken)
at AtlasVPN.Http.Services.AtlasHttpMessageHandler.SendAsync(AtlasHttpRequest request, String domainName, CancellationToken cancellationToken)
Systemfehler:
=============
Error: (04/07/2024 03:30:04 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN-PC)
Description: Der Server "{2DE3095A-B49E-418F-B5C1-69D2CCF62A8F}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/07/2024 03:30:00 AM) (Source: DCOM) (EventID: 10005) (User: JUSTIN-PC)
Description: Fehler "1053" in DCOM, als der Dienst "BcastDVRUserService_5b3f752" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
Windows.Media.Capture.Internal.AppCaptureShell
Error: (04/07/2024 03:30:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Benutzerdienst für GameDVR und Übertragungen_5b3f752" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
Error: (04/07/2024 03:30:00 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (60000 ms) wurde beim Verbindungsversuch mit dem Dienst Benutzerdienst für GameDVR und Übertragungen_5b3f752 erreicht.
Error: (04/07/2024 03:30:00 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN-PC)
Description: Der Server "{F63B89DB-D3AE-4908-A6CB-435B2B648F74}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/06/2024 03:50:34 PM) (Source: DCOM) (EventID: 10010) (User: JUSTIN-PC)
Description: Der Server "{2DE3095A-B49E-418F-B5C1-69D2CCF62A8F}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/06/2024 03:40:37 AM) (Source: DCOM) (EventID: 10010) (User: JUSTIN-PC)
Description: Der Server "{F63B89DB-D3AE-4908-A6CB-435B2B648F74}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (04/06/2024 03:40:37 AM) (Source: DCOM) (EventID: 10005) (User: JUSTIN-PC)
Description: Fehler "1053" in DCOM, als der Dienst "BcastDVRUserService_329b191" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
Windows.Media.Capture.Internal.AppCaptureShell
Windows Defender:
================
Date: 2024-03-31 19:13:22
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {D8907123-20AF-48F6-AF2E-254D0224BECB}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Vollständige Überprüfung
Benutzer: Justin-PC\gehrk
Date: 2024-03-31 16:48:24
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {BC8D2B24-37BE-4263-8A18-6730BFD12EDB}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2024-03-30 18:07:40
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {490CA943-6439-4CB2-A5D7-83418CE05F66}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2024-03-29 17:15:46
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {A8063E6F-7B5D-4BC9-8C56-A17427BDA526}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Date: 2024-03-28 18:58:02
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {665B27B4-A1AF-48DC-B8E5-810DB774BB02}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]
Date: 2023-11-15 14:12:21
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.401.648.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.23100.2009
Fehlercode: 0x80240016
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".
Date: 2023-10-21 14:45:18
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.321.69.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.17300.4
Fehlercode: 0x80070643
Fehlerbeschreibung: Schwerwiegender Fehler bei der Installation.
Date: 2023-10-21 14:45:16
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 1.399.1055.0
%Vorherige Version der Sicherheitsinformationen: 1.321.69.0
Update Source: Benutzer
Sicherheitstyp: AntiSpyware
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 1.1.17300.4
%Vorherige Modulversion: 1.1.17300.4
Fehlercode: 0x8050a004
Fehlerbeschreibung: Dieses Paket enthält keine aktuellen Definitionsdateien für das Programm. Weitere Informationen finden Sie in "Hilfe und Support".
Date: 2023-10-21 14:45:16
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 1.399.1055.0
%Vorherige Version der Sicherheitsinformationen: 1.321.69.0
Update Source: Benutzer
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 1.1.17300.4
%Vorherige Modulversion: 1.1.17300.4
Fehlercode: 0x8050a004
Fehlerbeschreibung: Dieses Paket enthält keine aktuellen Definitionsdateien für das Programm. Weitere Informationen finden Sie in "Hilfe und Support".
CodeIntegrity:
===============
Date: 2024-03-31 19:39:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bitdefender\Bitdefender Security\bdamsi\dlls_267059357120000000\antimalware_provider64.dll that did not meet the Windows signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. 1.44 06/12/2018
Hauptplatine: Micro-Star International Co., Ltd. H310M PRO-D (MS-7B33)
Prozessor: Intel(R) Core(TM) i7-8700 CPU @ 3.20GHz
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 16305.78 MB
Verfügbarer physikalischer RAM: 7444.41 MB
Summe virtueller Speicher: 26545.78 MB
Verfügbarer virtueller Speicher: 14680.14 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:222.71 GB) (Free:12.8 GB) (Model: WDC WDS240G2G0A-00JH30) NTFS
Drive d: (Deine Mutter) (Fixed) (Total:931.51 GB) (Free:98.33 GB) (Model: TOSHIBA DT01ACA100) NTFS
Drive f: (T18) (CDROM) (Total:0 GB) (Free:0 GB) CDFS
\\?\Volume{9b452722-2446-4986-be15-f191ff7f2d9f}\ () (Fixed) (Total:0.75 GB) (Free:0.06 GB) NTFS
\\?\Volume{2ccaf646-ed4e-4541-9b00-bd28ecaeefbc}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 223.6 GB) (Disk ID: F9F0BC9E)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 85551BE3)
Partition: GPT.
==================== Ende von Addition.txt =======================
|
| Themen zu Windows 11 Virus über Usb installiert? |
| .com, abstürzen, avira, cpu, desktop, exe, failed, festplatte, firefox, google, home, internet, internet explorer, mozilla, prozesse, prozessor, realtek, registry, scan, security, software, svchost.exe, udp, usb, virus, windows, zugriff verweigert |
Baum-Darstellung