Windows 10: Trojaner-Suche nach Mailbox-Hacking

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 30.05.2024
durchgeführt von peterpan (Administrator) auf DESKTOP-L9J7N4D (Micro-Star International Co., Ltd. MS-7B87) (31-05-2024 19:18:40)
Gestartet von C:\Users\peterpan\Downloads\FRST64.exe
Geladene Profile: peterpan
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.4412 (X64) Sprache: Englisch (Vereinigte Staaten) -> Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(A-Volute SAS -> A-Volute) C:\Users\peterpan\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.863.1\DropboxCrashHandler.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (Node.js Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(explorer.exe ->) (Focusrite Audio Engineering, Ltd.) [Datei ist nicht signiert] C:\Program Files\Focusriteusb\Focusrite Notifier.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <17>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Razer USA Ltd. -> Razer Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (A-Volute SAS -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Focusrite Audio Engineering Ltd.) [Datei ist nicht signiert] C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe <2>
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2403.6.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\Live Update\Live Update.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe [1618320 2022-11-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusriteusb\Focusrite Notifier.exe [5029376 2020-06-02] (Focusrite Audio Engineering, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [599056 2021-10-28] (Razer USA Ltd. -> Razer Inc.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11551624 2024-05-28] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2042424 2020-03-16] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Command Center] => C:\Program Files (x86)\MSI\Command Center\StartCommandCenter.exe [835760 2019-11-04] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1669368 2020-12-10] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [707256 2021-12-15] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Live Update] => C:\Program Files (x86)\MSI\Live Update\Live Update.exe [26327864 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4382056 2024-05-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [Spotify] => C:\Users\peterpan\AppData\Roaming\Spotify\Spotify.exe [34491720 2024-05-20] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [Freedom] => C:\Program Files (x86)\Freedom\FreedomBlocker.exe [7217384 2022-04-12] (Eighty Percent Solutions Corporation -> Freedom.to)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [648328 2020-04-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [PTOneClick] => C:\Users\peterpan\AppData\Local\WebEx\WebEx\Applications\ptoneclk.exe /AutoRunning="1" (Keine Datei)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31342880 2023-09-15] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [MicrosoftEdgeAutoLaunch_5B148DE90C207DD5EDAA5B34E614DD84] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4136912 2024-05-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (Keine Datei)
HKLM\...\Windows x64\Print Processors\Canon TS9500 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDER.DLL [482816 2018-07-17] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor iP90: C:\WINDOWS\system32\CNMLM71.DLL [234496 2006-09-13] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS9500 series: C:\WINDOWS\system32\CNMLMER.DLL [904192 2018-07-17] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\125.0.6422.113\Installer\chrmstp.exe [2024-05-30] (Google LLC -> Google LLC)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2B1A53D2-BCC3-4A83-9164-13596F89940A} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4096992 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {140A4AD1-88E6-4CE8-84C5-FB27447B7BD2} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4434400 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {24C37AE0-4ED8-4A76-B5EE-84B6A6B6E19A} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {A6132EDE-8718-415B-BAC7-67415CF93CEC} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {AA2DEBDA-3071-4BF7-9623-DC25E70BD8AE} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [31008 2023-09-15] (Garmin International, Inc. -> )
Task: {E88AA116-4189-4FB4-A3D2-3962EB79432A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem127.0.6490.0{FDAFD153-8BF3-454A-87AB-8E3876426EEA} => C:\Program Files (x86)\Google\GoogleUpdater\127.0.6490.0\updater.exe [4785440 2024-05-20] (Google LLC -> Google LLC)
Task: {BBEE2E23-5B37-4A05-ACD4-0670A4CC8EA9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {34353075-C433-4822-A1BD-5F02CA362F38} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28435936 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D1DD8DF-BE84-4364-9119-F3F375543DFA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {CB373B3D-E0DB-4B34-99C3-153962986C63} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309832 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {38A198FB-D974-4783-BAEB-48BCB5DA6C32} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [168928 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3DDB14A-71B7-42DE-BEAC-D077D263D30A} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\OLicenseHeartbeat.exe [517112 2024-05-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {68A3FCB6-6194-41D4-BCEF-C4E8A110A902} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {04514D1F-EF6C-4B32-ABFD-B95B80D5D9DA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6918263A-3AB8-40A8-87F4-952167DBF699} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3BCAFAC6-41B6-4BAD-86FA-561C8ABE3238} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {41E6C2FD-2FB0-499E-9697-5B9CCA1F3693} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpCmdRun.exe [1658408 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C6EA8734-0422-4744-8686-198DE756829A} - System32\Tasks\NahimicSvc32Run => C:\Windows\SysWOW64\NahimicSvc32.exe [833704 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {8769F6BF-9063-4CE3-B8E0-53782D48EF21} - System32\Tasks\NahimicSvc64Run => C:\Windows\System32\NahimicSvc64.exe [1094824 2021-10-08] (A-Volute SAS -> Nahimic)
Task: {17C65C9F-D49D-47D6-8F10-3DE3F38E370F} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60344 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
Task: {7B348630-7EFE-44D1-8E52-FA3F0124E94D} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [324024 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

ProxyServer: [S-1-5-21-661972141-3259906242-695969555-1001] => http=localhost:7769;https=localhost:7769
Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{55b32a7e-31f3-40f0-9935-8d5099859dfe}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a082ddc6-0245-4782-8e62-c12987ee55fe}: [NameServer] 1.1.1.1,8.8.8.8
Tcpip\..\Interfaces\{a082ddc6-0245-4782-8e62-c12987ee55fe}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{a082ddc6-0245-4782-8e62-c12987ee55fe}: [DhcpDomain] localdomain

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\peterpan\AppData\Local\Microsoft\Edge\User Data\Default [2024-05-31]
Edge HomePage: Default -> hxxp://www.duckduckgo.com/
Edge Extension: (Google Docs Offline) - C:\Users\peterpan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-04-05]
Edge Extension: (Stardust Cookie Cutter) - C:\Users\peterpan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jhoioiejafmmjpcegggmmnaefcogejdi [2022-01-08]
Edge Extension: (Edge relevant text changes) - C:\Users\peterpan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-27]
Edge Extension: (uBlock Origin) - C:\Users\peterpan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2024-04-08]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @java.com/DTPlugin,version=11.321.2 -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\dtplugin\npDeployJava1.dll [2022-03-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.321.2 -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\plugin2\npjp2.dll [2022-03-29] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2020-03-16] (Adobe Inc. -> Adobe Systems)

Chrome: 
=======
CHR Profile: C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default [2024-05-31]
CHR Notifications: Default -> hxxps://agar.io; hxxps://book.lufthansa.com; hxxps://meet.google.com; hxxps://messenger.tu-braunschweig.de; hxxps://upload.disroot.org; hxxps://wallet.merit.me; hxxps://web.skype.com; hxxps://www.drummerforum.de; hxxps://www.euautoteile.de; hxxps://www.uopeople.edu
CHR HomePage: Default -> hxxp://www.duckduckgo.com/
CHR Extension: (Freedom - Website Blocker for Chrome) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\abdkjmofmjelgafcdffaimhgdgpagmop [2024-03-06]
CHR Extension: (uBlock Origin) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-05-23]
CHR Extension: (MyJDownloader Browser Erweiterung) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2022-10-26]
CHR Extension: (Google Docs Offline) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-25]
CHR Extension: (Ghostery Tracker- & Werbeblocker | AdBlocker) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2024-05-09]
CHR Extension: (MetaMask) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2024-05-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\peterpan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [820280 2020-03-16] (Adobe Inc. -> Adobe Inc.)
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4555744 2023-11-07] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [9712432 2022-12-05] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14248016 2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-05-28] (Dropbox, Inc -> Dropbox, Inc.)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [935344 2023-11-22] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-11-16] (Epic Games Inc. -> Epic Games, Inc.)
R2 Focusrite Control Server; C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe [1554432 2020-06-02] (Focusrite Audio Engineering Ltd.) [Datei ist nicht signiert]
S2 GoogleUpdaterInternalService127.0.6490.0; C:\Program Files (x86)\Google\GoogleUpdater\127.0.6490.0\updater.exe [4785440 2024-05-20] (Google LLC -> Google LLC)
S2 GoogleUpdaterService127.0.6490.0; C:\Program Files (x86)\Google\GoogleUpdater\127.0.6490.0\updater.exe [4785440 2024-05-20] (Google LLC -> Google LLC)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8887344 2024-05-30] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-05-30] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe [1489000 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 MSIClock_CC; C:\Program Files (x86)\MSI\Command Center\ClockGen\MSIClockService_x64.exe [2669240 2018-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICOMM_CC; C:\Program Files (x86)\MSI\Command Center\MSICommService.exe [2343600 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSICPU_CC; C:\Program Files (x86)\MSI\Command Center\CPU\MSICPUService_x64.exe [2725048 2017-12-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSICTL_CC; C:\Program Files (x86)\MSI\Command Center\MSIControlService.exe [2255544 2018-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSIDDR_CC; C:\Program Files (x86)\MSI\Command Center\DDR\MSIDDRService.exe [2507952 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISMB_CC; C:\Program Files (x86)\MSI\Command Center\SMBus\MSISMBService.exe [2136248 2018-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 MSISuperIO_CC; C:\Program Files (x86)\MSI\Command Center\SuperIO\MSISuperIOService.exe [2740912 2019-10-22] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_LiveUpdate_Service; C:\Program Files (x86)\MSI\Live Update\MSI_LiveUpdate_Service.exe [2210616 2021-08-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 NahimicService; C:\WINDOWS\system32\NahimicService.exe [1888424 2021-10-08] (A-Volute SAS -> Nahimic)
S4 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522200 2024-05-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\NisSrv.exe [3236840 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MsMpEng.exe [133704 2024-05-19] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [36736 2023-05-05] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [36928 2022-09-16] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [48328 2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66a9fa5d80327844\amdsafd.sys [113080 2022-06-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0397033.inf_amd64_bf2b1fc18ba7195d\B396953\amdkmdag.sys [106378272 2023-10-26] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [97480 2016-11-16] (Focusrite Audio Engineering Ltd. -> Focusrite Audio Engineering Ltd.)
R3 Focusriteusb; C:\WINDOWS\System32\drivers\Focusriteusb.sys [123456 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 FocusriteusbSwRoot; C:\WINDOWS\System32\drivers\FocusriteusbSwRoot.sys [92568 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 Focusriteusb_AUDIO; C:\WINDOWS\system32\drivers\FocusriteusbAudio.sys [87912 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S3 L6GX; C:\WINDOWS\System32\Drivers\L6GX64.sys [785080 2019-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Line 6)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223184 2024-05-31] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-05-30] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [85616 2021-08-13] (A-Volute -> Windows (R) Win 7 DDK provider)
R3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [51216 2016-05-12] (Razer USA Ltd. -> Razer Inc)
R2 SSGDIO; C:\Windows\SysWOW64\DRIVERS\ssgdio64.sys [14608 2019-08-12] (ATI Technologies, Inc -> ATI Technologies Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R2 UI5IFS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller FREE\IFS64.sys [40520 2018-11-19] (Ashampoo GmbH & Co. KG -> )
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74048 2020-12-10] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
R0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21056 2024-05-19] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [601496 2024-05-19] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105880 2024-05-19] (Microsoft Windows -> Microsoft Corporation)
S2 AMDRyzenMasterDriverV19; \??\C:\Program Files\AMD\CNext\CNext\AMDRyzenMasterDriver.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-05-31 18:34 - 2024-05-31 18:34 - 012796184 _____ (Ashampoo GmbH & Co. KG ) C:\Users\peterpan\Downloads\ashampoo_uninstaller_free_31187.exe
2024-05-31 18:34 - 2024-05-31 18:34 - 000000000 ____D C:\Users\peterpan\AppData\Local\Ashampoo
2024-05-31 18:34 - 2024-05-31 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ashampoo
2024-05-31 18:34 - 2024-05-31 18:34 - 000000000 ____D C:\ProgramData\Ashampoo
2024-05-31 18:34 - 2024-05-31 18:34 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2024-05-31 17:32 - 2024-05-31 18:44 - 134217728 _____ C:\WINDOWS\system32\config\SOFTWARE
2024-05-31 17:31 - 2024-05-31 17:32 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2024-05-31 17:11 - 2024-05-31 19:19 - 000031349 _____ C:\Users\peterpan\Downloads\FRST.txt
2024-05-31 17:10 - 2024-05-31 19:19 - 000000000 ____D C:\FRST
2024-05-31 17:09 - 2024-05-31 17:09 - 002395136 _____ (Farbar) C:\Users\peterpan\Downloads\FRST64.exe
2024-05-30 21:44 - 2024-05-31 19:15 - 000000000 ____D C:\Users\peterpan\AppData\Local\Malwarebytes
2024-05-30 21:44 - 2024-05-30 21:44 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-05-30 21:43 - 2024-05-30 21:43 - 000000000 ____D C:\Program Files\Malwarebytes
2024-05-30 21:42 - 2024-05-30 21:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-05-28 13:02 - 2024-05-28 13:02 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-05-14 22:05 - 2024-05-14 22:05 - 000000000 ___HD C:\$WinREAgent
2024-05-12 22:01 - 2024-05-12 22:01 - 000705718 _____ C:\Users\peterpan\Downloads\Sahara Snare.wav
2024-05-12 22:01 - 2024-05-12 22:01 - 000247038 _____ C:\Users\peterpan\Downloads\Sahara Bass Hoch.wav
2024-05-12 22:01 - 2024-05-12 22:01 - 000214550 _____ C:\Users\peterpan\Downloads\Tambo+Holz.wav
2024-05-12 22:01 - 2024-05-12 22:01 - 000214550 _____ C:\Users\peterpan\Downloads\D-Tambo.wav
2024-05-12 22:00 - 2024-05-12 22:00 - 000738838 _____ C:\Users\peterpan\Downloads\Rassel.wav
2024-05-12 22:00 - 2024-05-12 22:00 - 000240626 _____ C:\Users\peterpan\Downloads\C-Bass-T.wav
2024-05-12 22:00 - 2024-05-12 22:00 - 000240626 _____ C:\Users\peterpan\Downloads\C-Bass-H.wav
2024-05-12 21:55 - 2024-05-12 21:55 - 000771326 _____ C:\Users\peterpan\Downloads\Sahara Bass Tief.wav
2024-05-12 21:23 - 2024-05-12 21:46 - 000000000 ____D C:\Users\peterpan\OneDrive\Desktop\Hydra
2024-05-12 21:23 - 2024-05-12 21:23 - 005075327 _____ C:\Users\peterpan\Downloads\wetransfer_dinero-rassel-wav_2024-05-12_1057.zip
2024-05-07 20:34 - 2024-05-07 20:34 - 000574217 _____ C:\Users\peterpan\Downloads\RE344774 .pdf
2024-05-07 20:33 - 2024-05-07 20:34 - 000008922 _____ C:\Users\peterpan\Downloads\Rechnung Roland SPD-SX.pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-05-31 19:18 - 2020-11-13 19:41 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-05-31 19:18 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-05-31 19:07 - 2020-11-13 21:45 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-05-31 19:07 - 2020-11-13 10:51 - 000741554 _____ C:\WINDOWS\system32\perfh007.dat
2024-05-31 19:07 - 2020-11-13 10:51 - 000149804 _____ C:\WINDOWS\system32\perfc007.dat
2024-05-31 19:07 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2024-05-31 18:46 - 2019-03-30 20:52 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Dropbox
2024-05-31 18:46 - 2019-03-30 20:48 - 000000000 ____D C:\Users\peterpan\AppData\Local\Dropbox
2024-05-31 18:45 - 2020-11-13 19:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-05-31 18:45 - 2020-11-13 19:41 - 000008192 ___SH C:\DumpStack.log.tmp
2024-05-31 18:44 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-05-31 18:44 - 2019-03-30 16:39 - 000000000 ____D C:\Program Files (x86)\Steam
2024-05-31 18:44 - 2019-03-30 16:13 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2024-05-31 18:36 - 2020-04-20 10:20 - 000000000 ____D C:\Program Files\Common Files\Adobe
2024-05-31 18:36 - 2020-04-20 10:19 - 000000000 ____D C:\Program Files\Adobe
2024-05-31 18:36 - 2019-03-30 16:09 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Adobe
2024-05-31 18:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-05-31 18:34 - 2019-03-30 16:09 - 000000000 ____D C:\Users\peterpan\AppData\Local\Packages
2024-05-31 18:33 - 2019-08-06 22:49 - 000000000 ____D C:\Users\peterpan\AppData\Local\JDownloader 2.0
2024-05-31 18:33 - 2019-05-02 15:54 - 000000000 ____D C:\Users\peterpan\OneDrive\Dokumente\Outlook-Dateien
2024-05-31 18:29 - 2019-03-31 01:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MSI
2024-05-31 18:29 - 2019-03-31 01:31 - 000000000 ____D C:\Program Files (x86)\MSI
2024-05-31 18:29 - 2019-03-31 01:31 - 000000000 ____D C:\MSI
2024-05-31 18:28 - 2022-11-15 15:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio
2024-05-31 18:26 - 2021-04-13 22:54 - 000000000 ____D C:\ProgramData\Air Music Technology
2024-05-31 18:26 - 2021-04-13 22:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIR Music Tech
2024-05-31 18:26 - 2021-04-13 22:52 - 000000000 ____D C:\Program Files (x86)\AIR Music Technology
2024-05-31 18:26 - 2021-04-13 22:51 - 000000000 ____D C:\Program Files\AIR Music Tech
2024-05-31 18:26 - 2019-03-30 16:14 - 000000000 ____D C:\ProgramData\Package Cache
2024-05-31 18:19 - 2021-06-30 15:06 - 000000000 ____D C:\Program Files\OpenVPN
2024-05-31 18:19 - 2021-02-28 23:56 - 000000000 ____D C:\ProgramData\Toontrack
2024-05-31 18:19 - 2021-01-26 18:23 - 000000000 ____D C:\Program Files\VstPlugIns
2024-05-31 18:19 - 2020-10-30 15:17 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Zoom
2024-05-31 18:18 - 2019-10-15 23:46 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-05-31 18:18 - 2019-03-30 16:11 - 000000000 ____D C:\Users\peterpan\AppData\Local\PlaceholderTileLogoFolder
2024-05-31 17:16 - 2019-03-30 16:45 - 000000000 ____D C:\Users\peterpan\AppData\Local\Steam
2024-05-31 07:32 - 2020-11-13 19:41 - 001580944 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-05-31 07:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-05-30 22:28 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-05-30 22:09 - 2019-04-02 09:35 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Microsoft\Word
2024-05-30 21:44 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-05-30 21:43 - 2021-02-04 14:22 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-05-30 21:43 - 2019-03-30 20:48 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-05-30 21:41 - 2021-12-16 13:55 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-05-30 21:41 - 2019-03-30 16:22 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-05-28 21:32 - 2023-12-10 00:51 - 000001216 _____ C:\Users\peterpan\AppData\Roaming\BattleBitMutedPlayers.ini
2024-05-28 21:05 - 2023-11-22 22:28 - 000000194 _____ C:\Users\peterpan\AppData\Roaming\BattleBitConfig.ini
2024-05-27 23:53 - 2021-04-04 17:12 - 000000000 ____D C:\Users\peterpan\AppData\Local\AMD_Common
2024-05-27 23:53 - 2020-07-04 13:13 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-05-27 23:50 - 2022-10-15 01:02 - 000002395 _____ C:\Users\peterpan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-05-27 23:50 - 2021-12-12 21:45 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-661972141-3259906242-695969555-1001
2024-05-27 23:50 - 2020-11-13 19:47 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-661972141-3259906242-695969555-1001
2024-05-27 23:47 - 2020-11-13 19:47 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-05-27 23:47 - 2020-11-13 19:47 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-05-23 20:55 - 2019-04-13 16:30 - 000000000 ____D C:\Users\peterpan\AppData\Local\Spotify
2024-05-23 20:46 - 2019-04-13 16:26 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Spotify
2024-05-23 20:05 - 2019-03-30 21:34 - 000000000 ____D C:\Program Files\Microsoft Office
2024-05-21 21:51 - 2021-07-02 09:10 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\Signal
2024-05-21 21:35 - 2019-03-30 16:26 - 000000000 ____D C:\ProgramData\Packages
2024-05-20 21:02 - 2019-03-31 15:43 - 000000000 ____D C:\Users\peterpan\Downloads\Telegram Desktop
2024-05-20 20:43 - 2020-11-13 11:13 - 000000000 ____D C:\Users\peterpan
2024-05-20 20:43 - 2019-11-04 12:02 - 000000095 _____ C:\Users\peterpan\psv.ini
2024-05-20 20:43 - 2019-05-10 14:16 - 000000000 ____D C:\ProgramData\Adobe
2024-05-19 22:04 - 2019-03-30 23:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Portable Devices
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Multimedia Platform
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices
2024-05-14 23:22 - 2019-12-07 11:54 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-05-14 23:22 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-05-14 23:22 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing
2024-05-14 22:16 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-05-14 22:12 - 2020-11-13 19:43 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-05-14 22:04 - 2019-03-30 20:09 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-05-14 22:02 - 2019-03-30 20:09 - 196465576 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-05-14 21:53 - 2022-11-20 20:45 - 000000000 ____D C:\Program Files\RUXIM
2024-05-12 22:25 - 2019-04-10 21:50 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\vlc
2024-05-07 20:37 - 2021-02-12 14:27 - 000000000 ____D C:\Users\peterpan\AppData\Local\CrashDumps
2024-05-07 20:32 - 2020-04-20 10:21 - 000000000 ____D C:\ProgramData\boost_interprocess
2024-05-01 00:24 - 2020-03-24 14:38 - 000000000 ____D C:\Users\peterpan\AppData\Roaming\discord

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-11-22 22:28 - 2024-05-28 21:05 - 000000194 _____ () C:\Users\peterpan\AppData\Roaming\BattleBitConfig.ini
2023-12-10 00:51 - 2024-05-28 21:32 - 000001216 _____ () C:\Users\peterpan\AppData\Roaming\BattleBitMutedPlayers.ini
2021-01-26 18:25 - 2024-04-27 21:32 - 000000032 _____ () C:\Users\peterpan\AppData\Roaming\msregsvv.dll
2020-04-13 12:57 - 2020-04-13 12:57 - 000000410 _____ () C:\Users\peterpan\AppData\Local\oobelibMkey.log
2023-05-24 20:37 - 2023-05-24 20:37 - 000002150 _____ () C:\Users\peterpan\AppData\Local\recently-used.xbel
2020-04-14 10:59 - 2020-04-14 10:59 - 000007605 _____ () C:\Users\peterpan\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 30.05.2024
durchgeführt von peterpan (31-05-2024 19:20:16)
Gestartet von C:\Users\peterpan\Downloads
Microsoft Windows 10 Pro Version 22H2 19045.4412 (X64) (2020-11-13 17:47:20)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-661972141-3259906242-695969555-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-661972141-3259906242-695969555-503 - Limited - Disabled)
Guest (S-1-5-21-661972141-3259906242-695969555-501 - Limited - Disabled)
peterpan (S-1-5-21-661972141-3259906242-695969555-1001 - Administrator - Enabled) => C:\Users\peterpan
WDAGUtilityAccount (S-1-5-21-661972141-3259906242-695969555-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ableton Live 11 Suite (HKLM\...\{FB6EECE6-87D2-4538-A1CE-61CCCA7C3DCE}) (Version: 11.0.0.0 - Ableton) Hidden
Ableton Live 11 Suite (HKLM-x32\...\{92d4040b-4cb4-4710-802b-a742c194a235}) (Version: 11.0.0.0 - Ableton)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 5.1.0.407 - Adobe Systems Incorporated)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 8.4.0.63 - Adobe Inc.)
Akai F9 Instruments Beats Edition (HKLM-x32\...\Akai F9 Instruments Beats Edition_is1) (Version:  - )
Akai MPC Beats ADSR LoFi Producer Collection (HKLM-x32\...\Akai MPC Beats ADSR LoFi Producer Collection_is1) (Version:  - )
Akai MPC Beats LANIAKEA SOUNDS TrapSoul and LoFi Beats (HKLM-x32\...\Akai MPC Beats LANIAKEA SOUNDS TrapSoul and LoFi Beats_is1) (Version:  - )
Akai MPC Beats MSX Soulful Experience Expansion (HKLM-x32\...\Akai MPC Beats MSX Soulful Experience Expansion_is1) (Version:  - )
Akai MPC Beats Producer Kits (HKLM-x32\...\Akai MPC Beats Producer Kits_is1) (Version:  - )
Akai Professional MPK Mini MkII Editor (HKLM-x32\...\MPKminiMkIIEditor) (Version:  - )
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.130 - Advanced Micro Devices, Inc.) Hidden
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.24.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Balanced Driver (HKLM-x32\...\{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}) (Version: 8.0.0.13 - Advanced Micro Devices, Inc.) Hidden
AMD Ryzen Master SDK (HKLM\...\{DBD50508-5F75-416B-995D-C42433A00944}) (Version: 2.1.0.1236 - Advanced Micro Devices, Inc.)
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.38 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 23.11.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{94dc9043-935f-4e10-ac8b-5ce0ac055188}) (Version: 5.08.02.027 - Advanced Micro Devices, Inc.) Hidden
AmpliTube 5 version 5.0.1 (HKLM\...\{D831D61F-EBF5-4158-AEE1-F58A7B8C04C8}_is1) (Version: 5.0.1 - IK Multimedia)
ANT Drivers Installer x64 (HKLM\...\{383651F3-D57F-49C3-BA38-65F45106109B}) (Version: 2.3.4 - Garmin Ltd or its subsidiaries) Hidden
Ashampoo UnInstaller FREE (HKLM-x32\...\{4209F371-CB4A-DB54-FD54-9F662DEF845D}_is1) (Version: 9.00.00 - Ashampoo GmbH & Co. KG)
Aurora DSP Mammoth (HKLM\...\Mammoth_is1) (Version: 1.2.1 - Aurora DSP)
balenaEtcher 1.5.101 (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.5.101 - Balena Inc.)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.9.05042 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{EA407530-0BF1-47CA-B953-1C395BBDBB63}) (Version: 4.9.05042 - Cisco Systems, Inc.) Hidden
Citavi 6 (HKLM-x32\...\{6A331045-8FF4-4BC9-9C56-E593ACAE28C2}) (Version: 6.8.0.0 - Swiss Academic Software)
CPUID CPU-Z MSI 1.86 (HKLM\...\CPUID CPU-Z MSI_is1) (Version: 1.86 - CPUID, Inc.)
CPUID HWMonitor 1.40 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.40 - CPUID, Inc.)
Custom Shop 2.0.0 (HKLM\...\5b86c39c-6f2f-52a0-a1b0-9b9fc743254c) (Version: 2.0.0 - IK Multimedia)
Custom Shop version 1.7.0 (HKLM-x32\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 1.7.0 - IK Multimedia)
Custom Shop version 2.0.0 (64-bit) (HKLM\...\{21BAD046-50EC-49E2-BE7B-F9729704F2C3}_is1) (Version: 2.0.0 - IK Multimedia)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Discord (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)
Dropbox (HKLM-x32\...\Dropbox) (Version: 200.4.7134 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.863.1 - Dropbox, Inc.) Hidden
Elevated Installer (HKLM-x32\...\{5916C2A2-57D7-4EBF-A3EB-F5173485766B}) (Version: 7.18.4.0 - Garmin Ltd or its subsidiaries) Hidden
Epic Games Launcher (HKLM-x32\...\{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{A1EB595F-651D-4A04-99B0-A7065538B33C}) (Version: 2.0.38.0 - Epic Games, Inc.)
Focusrite Control 3.6.0.1822 (HKLM\...\Focusrite Control_is1) (Version: 3.6.0.1822 - Focusrite Audio Engineering Ltd.)
Focusrite Thunderbolt 4.25.0.335 (HKLM\...\Focusrite Thunderbolt_is1) (Version: 4.25.0.335 - Focusrite Audio Engineering Ltd.)
Focusrite Usb 4.65.5.658 (HKLM\...\Focusrite Usb_is1) (Version: 4.65.5.658 - Focusrite Audio Engineering, Ltd.)
Freedom (HKLM-x32\...\{2106D9E3-938F-4C71-8ED7-EEFF886FC73D}) (Version: 2.12 - Freedom.to) Hidden
Freedom (HKLM-x32\...\Freedom 2.12) (Version: 2.12 - Freedom.to)
Garmin Express (HKLM-x32\...\{984BB7E6-7576-47A1-9AAD-040F57FDFEBC}) (Version: 7.18.4.0 - Garmin Ltd or its subsidiaries) Hidden
Garmin Express (HKLM-x32\...\{b44f5f9a-f6d1-4dcd-bd66-3663de74da42}) (Version: 7.18.4.0 - Garmin Ltd or its subsidiaries)
GIMP 2.10.14 (HKLM\...\GIMP-2_is1) (Version: 2.10.14 - The GIMP Team)
Google Chrome (HKLM\...\{B2F94B3E-055E-3E7A-B2C3-3C63FC1B1C90}) (Version: 125.0.6422.113 - Google LLC)
Hybrid (HKLM-x32\...\{3dd93c56-a328-42fe-99a9-17d5eefff428}) (Version: 3.0.7 - AIR Music Tech GmbH)
Hybrid (HKLM-x32\...\{com.Hybrid.standalone}_is1) (Version: 1.0 - AIR Music Tech.)
Hybrid AAX32 (HKLM-x32\...\{63FA7BA2-C720-4506-9379-43BFA5BC3A98}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid AAX64 (HKLM\...\{C2CB3E60-B541-418D-A535-D3D73A644EC5}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid Content (HKLM-x32\...\{77129154-5C4A-45D0-AFEF-5D9C2D307246}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid VST32 (HKLM-x32\...\{592BA348-DA75-42DE-91C1-54FD5D62ABE8}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
Hybrid VST64 (HKLM\...\{EB4543A3-A9D8-4354-94BE-22400A619F7A}) (Version: 3.0.7.19000 - AIR Music Tech GmbH) Hidden
IK Multimedia Authorization Manager version 1.0.18 (HKLM\...\{85BC0DCB-69E5-4279-AA25-F108EF896588}_is1) (Version: 1.0.18 - IK Multimedia)
Java 8 Update 321 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180321F0}) (Version: 8.0.3210.7 - Oracle Corporation)
Java(TM) SE Development Kit 11.0.7 (64-bit) (HKLM\...\{127910B5-3B3A-5776-A432-2B4443C2CF8E}) (Version: 11.0.7.0 - Oracle Corporation)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Malwarebytes version 5.1.4.112 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.4.112 - Malwarebytes)
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.17531.20152 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 125.0.2535.67 - Microsoft Corporation)
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 125.0.2535.67 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\OneDriveSetup.exe) (Version: 24.091.0505.0003 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40660 (HKLM\...\{5740BD44-B58D-321A-AFC0-6D3D4556DD6C}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40660 (HKLM\...\{CB0836EC-B072-368D-82B2-D3470BF95707}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40660 (HKLM-x32\...\{7DAD0258-515C-3DD4-8964-BD714199E0F7}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40660 (HKLM-x32\...\{E30D8B21-D82D-3211-82CC-0F0A5D1495E8}) (Version: 12.0.40660 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Mini Grand (HKLM-x32\...\{35bdb24a-1a7e-4b33-93f9-2a5ad59c278c}) (Version: 1.2.7.19000 - AIR Music Tech GmbH)
Mini Grand Content (HKLM-x32\...\{E3B2B5F9-EEF3-4EE7-9060-55B0DA1D2F94}) (Version: 1.2.7.19000 - AIR Music Tech GmbH) Hidden
Mini Grand Factory Content (HKLM-x32\...\{3B3FC1D7-FFB6-49DF-A55D-533CAFDEF464}) (Version: 1.2.7.19000 - AIR Music Tech GmbH) Hidden
Mini Grand VST32 (HKLM-x32\...\{40C900D9-182E-44F5-ADAF-E6DACBB7D6B3}) (Version: 1.2.7.19000 - AIR Music Tech GmbH) Hidden
Mini Grand VST64 (HKLM\...\{433E9D46-8C8E-4712-B7A4-D0B5F3768BDF}) (Version: 1.2.7.19000 - AIR Music Tech GmbH) Hidden
MiniGrand (HKLM-x32\...\{com.MiniGrand.standalone}_is1) (Version: 1.0 - AIR Music Tech.)
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
MPK mini Software Manager 1.0.3-6 (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\6aab7f6b-66f5-5a26-9d4e-00bd314e47c8) (Version: 1.0.3-6 - inMusic Brands)
MSI Command Center (HKLM-x32\...\{85A2564E-9ED9-448A-91E4-B9211EE58A08}_is1) (Version: 3.0.1.02 - MSI)
MSI Live Update 6 (HKLM-x32\...\{4F46CF54-47D2-41F4-B230-B0954C544420}}_is1) (Version: 6.2.0.76 - MSI)
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
Neural DSP Darkglass Ultra (HKLM\...\Darkglass Ultra_is1) (Version: 3.0.0 - Neural DSP)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17531.20152 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17425.20146 - Microsoft Corporation) Hidden
PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.0.0 - Advanced Micro Devices, Inc.) Hidden
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.21.24.41 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8945.1 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.38.1118.2019 - Realtek)
Signal 1.30.1 (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\{7d96caee-06e6-597c-9f2f-c7bb2e0948b4}) (Version: 1.30.1 - Open Whisper Systems)
Signal 7.1.1 (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 7.1.1 - Signal Messenger, LLC)
SPD-SX Wave Manager (HKLM-x32\...\{3F966873-BD1C-414A-A50F-AD9F2AD89949}) (Version: 1.0.1.0 - Roland Corporation)
SPD-SX-Editor 2.1.16 (HKLM-x32\...\{382EA993-65EC-4DAB-AB50-4301CCCB0CD7}_is1) (Version: 2.1.16 - spd-sx-editor.com)
Spotify (HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\Spotify) (Version: 1.2.37.701.ge66eb7bc - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.2.0.34161 - Microsoft Corporation)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.2.3 - TeamSpeak Systems GmbH)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
TuxGuitar (HKLM-x32\...\TuxGuitar 1.5.4) (Version: 1.5.4 - TuxGuitar)
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Windows Driver Package - Dynastream Innovations, Inc. ANT LibUSB Drivers (04/11/2012 1.2.40.201) (HKLM\...\F9D2A789F9CFF8CEC36B544F53877C80F1F73C46) (Version: 04/11/2012 1.2.40.201 - Dynastream Innovations, Inc.)
Windows Driver Package - Garmin (grmnusb) GARMIN Devices  (04/19/2012 2.3.1.0) (HKLM\...\98157A226B40B173301B0F53C8E98C47805D5152) (Version: 04/19/2012 2.3.1.0 - Garmin)
Windows Driver Package - Silicon Labs Software (DSI_SiUSBXp_3_1) USB  (02/06/2007 3.1) (HKLM\...\D1506E0025B5A3F9EB8270FE81C1EEDD9388B8A2) (Version: 02/06/2007 3.1 - Silicon Labs Software)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{4254C1AD-B9B0-4020-A4B1-D8B61D12142A}) (Version: 3.7.2204.15001 - Microsoft Corporation)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)

Packages:
=========

Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_1.0.1.22_x86__enpm4xejd91yc [2020-04-20] (Adobe Systems Incorporated)
Canon Inkjet Print Utility -> C:\Program Files\WindowsApps\34791E63.CanonInkjetPrintUtility_3.1.0.0_neutral__6e5tt8cgb93ep [2023-03-29] (Canon Inc.)
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2024-05-30] (Dropbox Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-09] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-03-30] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-03-30] (Microsoft Corporation) [MS Ad]
Microsoft Teams (work or school) -> C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe [2023-12-12] (Microsoft) [Startup Task]
MPEG-2-Videoerweiterung -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2023-08-23] (Microsoft Corporation)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.38.277.0_x64__dt26b99r8h8gj [2023-03-28] (Realtek Semiconductor Corp)
Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_5.0.1.0_x64__t4vj0pshhgkwm [2024-05-09] (Telegram Messenger LLP) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-661972141-3259906242-695969555-1001_Classes\CLSID\{0E270DAA-1BE6-48F2-AC49-078F05AF3608} -> [Creative Cloud Files] => C:\Users\peterpan\Creative Cloud Files [2020-04-20 10:35]
CustomCLSID: HKU\S-1-5-21-661972141-3259906242-695969555-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\peterpan\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (A-Volute SAS -> A-Volute)
CustomCLSID: HKU\S-1-5-21-661972141-3259906242-695969555-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => E:\Dropbox\Dropbox [2023-02-11 21:21]
CustomCLSID: HKU\S-1-5-21-661972141-3259906242-695969555-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  PowerFolderIgnored] -> {0800cf35-8302-4030-8add-40ac1e3f8834} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [  PowerFolderLocked] -> {0800cf35-8302-4030-8add-40ac1e3f8835} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [  PowerFolderOK] -> {0800cf35-8302-4030-8add-40ac1e3f8831} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [  PowerFolderSyncing] -> {0800cf35-8302-4030-8add-40ac1e3f8832} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [  PowerFolderWarning] -> {0800cf35-8302-4030-8add-40ac1e3f8833} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll -> Keine Datei
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-05-30] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2023-10-17] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.72.0.dll [2024-05-02] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2020-01-07] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-05-30] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\peterpan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2020\TeX Live command-line.lnk -> C:\texlive\2020\tlpkg\installer\tl-cmd.bat ()
Shortcut: C:\Users\peterpan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2020\Uninstall TeX Live.lnk -> C:\texlive\2020\tlpkg\installer\uninst.bat ()
Shortcut: C:\Users\peterpan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2018\TeX Live command-line.lnk -> C:\texlive\2018\tlpkg\installer\tl-cmd.bat ()
Shortcut: C:\Users\peterpan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TeX Live 2018\Uninstall TeX Live.lnk -> C:\texlive\2018\tlpkg\installer\uninst.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2022-12-18 11:07 - 2005-07-18 14:43 - 000160256 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Live Update\unrar.dll
2023-02-02 20:42 - 2006-09-13 06:00 - 000234496 _____ (CANON INC.) [Datei ist nicht signiert] C:\WINDOWS\System32\CNMLM71.DLL
2021-10-28 17:18 - 2021-10-28 17:18 - 000083984 _____ (Razer USA Ltd. -> Razer Inc.) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Razer\Synapse\RzStorageIO.dll
2021-10-28 17:18 - 2021-10-28 17:18 - 000095776 _____ (Razer USA Ltd. -> Razer) [Datei ist nicht signiert] C:\Program Files (x86)\Razer\Synapse\RazerProtocolDLL.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\ssv.dll [2022-03-29] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_321\bin\jp2ssv.dll [2022-03-29] (Oracle America, Inc. -> Oracle Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-05-09] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2018-09-15 09:31 - 2018-09-15 09:31 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\Windows Live\Shared;C:\Users\peterpan\anaconda3\Scripts\;C:\Users\peterpan\AppData\Local\Microsoft\WindowsApps;
HKU\S-1-5-21-661972141-3259906242-695969555-1001\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 1.1.1.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: BEService => 3
MSCONFIG\Services: EasyAntiCheat => 3
MSCONFIG\Services: Futuremark SystemInfo Service => 3
MSCONFIG\Services: MapsBroker => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: Origin Web Helper Service => 2
MSCONFIG\Services: PDF24 => 2
MSCONFIG\Services: PhoneSvc => 3
MSCONFIG\Services: SessionEnv => 3
MSCONFIG\Services: Steam Client Service => 3
MSCONFIG\Services: TabletInputService => 3
MSCONFIG\Services: TapiSrv => 3
MSCONFIG\Services: UmRdpService => 3
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxGipSvc => 3
MSCONFIG\Services: XboxNetApiSvc => 3
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "Super Charger"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\StartupFolder: => "Twitch.lnk"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\StartupFolder: => "PowerFolder.lnk"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "Wargaming.net Game Center"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "Freedom"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "GarminExpress"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "OPENVPN-GUI"
HKU\S-1-5-21-661972141-3259906242-695969555-1001\...\StartupApproved\Run: => "vidnotifier.exe"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{B307BB6B-38E7-4285-8411-6DE1F488E366}] => (Allow) C:\Users\peterpan\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei
FirewallRules: [{490D1581-78E1-4BA6-93FC-44F7C9D4B33F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{07689C13-1705-4F70-8A2B-D42F2B40E114}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0EA8E2E7-0570-4186-AD74-0DB3B49ABC89}] => (Allow) D:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe => Keine Datei
FirewallRules: [{A07B5732-E222-4452-B5FC-111315FB6959}] => (Allow) D:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe => Keine Datei
FirewallRules: [TCP Query User{46F4296D-9A0F-427A-942E-17611C8D1A41}C:\users\peterpan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\peterpan\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{682BDB38-1F9D-4DC6-ACDD-3B8FC1AD98DE}C:\users\peterpan\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\peterpan\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{37DDE726-111C-4569-9DB5-A8EBD21545CC}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E45A5B31-7F7F-4D66-89C9-3299F134F03F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{1F4914DC-7900-4064-81F2-61866BF6BE81}] => (Allow) D:\SteamLibrary\steamapps\common\The Witcher 3\bin\x64\witcher3.exe => Keine Datei
FirewallRules: [{5B6C427C-628F-4C02-A6E5-50355766A2EA}] => (Allow) D:\SteamLibrary\steamapps\common\The Witcher 3\bin\x64\witcher3.exe => Keine Datei
FirewallRules: [{E39200A3-5324-4060-A12C-EA0A997B969B}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EE3C15D8-B8F4-4D96-86BB-1EA0B9398DD7}] => (Allow) LPort=2869
FirewallRules: [{5B38CB8E-2F01-467D-BC8E-8F3735DFEEA1}] => (Allow) LPort=1900
FirewallRules: [{83FA397E-6CC1-46D5-9448-E9268579E2FC}] => (Allow) C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe (Focusrite Audio Engineering Ltd.) [Datei ist nicht signiert]
FirewallRules: [{70BFFB22-061D-49B2-97BA-FA904183F074}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{AE967C84-B681-4231-96C5-0C822DE41C32}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{462F948B-E922-4812-AF6E-02979A9185E7}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{5FE0EB71-34A1-42CB-964B-6C3EA19BD069}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{55935325-1E59-4693-B6B9-1F219839E4F0}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{65C34B5D-1F52-4F5A-9BD8-4FBA5164E626}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{F9EAED67-8E81-4BEF-9566-9722EAB862DB}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{2150F10B-3F88-4572-9FAC-0D8477B15153}C:\program files\videolan\vlc\vlc.exe] => (Allow) C:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{9C63C436-AC75-4DD1-BF86-081D4A78D77A}E:\iso\spiele\quake iii arena\quake3.exe] => (Allow) E:\iso\spiele\quake iii arena\quake3.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{C6AC2636-9F99-47A9-8FD5-A4D0D2E5D3D1}E:\iso\spiele\quake iii arena\quake3.exe] => (Allow) E:\iso\spiele\quake iii arena\quake3.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{D7052289-19E4-4EDB-9A35-533EE15E3519}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{EA4D2F27-AABA-414E-A71F-CCFD9FB49F0B}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [TCP Query User{588214DF-109A-4CBB-8CC1-3E4ADB8AE8F5}E:\steamlibrary\steamapps\common\hellbound\hellbound\binaries\win64\hellbound-win64-shipping.exe] => (Allow) E:\steamlibrary\steamapps\common\hellbound\hellbound\binaries\win64\hellbound-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{7E231D80-3565-4831-9658-203A6D327B45}E:\steamlibrary\steamapps\common\hellbound\hellbound\binaries\win64\hellbound-win64-shipping.exe] => (Allow) E:\steamlibrary\steamapps\common\hellbound\hellbound\binaries\win64\hellbound-win64-shipping.exe => Keine Datei
FirewallRules: [{934ED13F-C480-459D-BF8A-A39BF782716C}] => (Allow) E:\SteamLibrary\steamapps\common\Deep Rock Galactic\Legacy\FSD.exe => Keine Datei
FirewallRules: [{BDE7E6CE-B1D0-4FA0-AD87-3D1D1C4B1429}] => (Allow) E:\SteamLibrary\steamapps\common\Deep Rock Galactic\Legacy\FSD.exe => Keine Datei
FirewallRules: [{9AC6F801-53ED-47BB-9488-0C81A7101E20}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7584D444-A7F3-4FDC-8186-566EF2D2516C}] => (Allow) C:\Users\peterpan\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{82CEFF16-2B55-48D1-B934-DECC32BC23F7}] => (Allow) C:\Users\peterpan\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [UDP Query User{ABB63819-3E72-4D38-8A07-EF552DF2FAA4}E:\epic games\gtav\gta5.exe] => (Allow) E:\epic games\gtav\gta5.exe => Keine Datei
FirewallRules: [TCP Query User{4FB12577-366F-4F38-89BC-F1EC8AFE6043}E:\epic games\gtav\gta5.exe] => (Allow) E:\epic games\gtav\gta5.exe => Keine Datei
FirewallRules: [UDP Query User{BFD12744-BA90-4AA4-92B0-10530A951BE7}C:\program files (x86)\pokerth-1.1.2\pokerth.exe] => (Allow) C:\program files (x86)\pokerth-1.1.2\pokerth.exe => Keine Datei
FirewallRules: [TCP Query User{CA8EED7A-1596-4AD9-83FE-59D5DC20A08D}C:\program files (x86)\pokerth-1.1.2\pokerth.exe] => (Allow) C:\program files (x86)\pokerth-1.1.2\pokerth.exe => Keine Datei
FirewallRules: [{07F4E6D1-54BC-438B-9470-FD94C64FFAAA}] => (Block) E:\spiele\rage 2\rage2.exe => Keine Datei
FirewallRules: [{E98147DD-6F7E-454A-9DC2-3DDA8A78378C}] => (Block) E:\spiele\rage 2\rage2.exe => Keine Datei
FirewallRules: [UDP Query User{2FCD755E-A9A7-420C-90CF-07DCFD334FED}E:\spiele\rage 2\rage2.exe] => (Allow) E:\spiele\rage 2\rage2.exe => Keine Datei
FirewallRules: [TCP Query User{78403CE4-C6CE-41A4-8273-AF753C3914B2}E:\spiele\rage 2\rage2.exe] => (Allow) E:\spiele\rage 2\rage2.exe => Keine Datei
FirewallRules: [UDP Query User{1A3F267F-DCFC-4C10-97BA-E84A3622B2B5}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => Keine Datei
FirewallRules: [TCP Query User{8892848F-4BC9-4EAD-AF03-9706DA2AC173}C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe] => (Block) C:\programdata\wargaming.net\gamecenter\dlls\wgc_renderer.exe => Keine Datei
FirewallRules: [UDP Query User{C57A0DE6-0887-4820-ABFF-0B108CC01805}C:\program files\windowsapps\telegrammessengerllp.telegramdesktop_1.9.7.0_x64__t4vj0pshhgkwm\telegram.exe] => (Allow) C:\program files\windowsapps\telegrammessengerllp.telegramdesktop_1.9.7.0_x64__t4vj0pshhgkwm\telegram.exe => Keine Datei
FirewallRules: [TCP Query User{7B12790D-18E6-4C2F-818F-2009F4CA4F71}C:\program files\windowsapps\telegrammessengerllp.telegramdesktop_1.9.7.0_x64__t4vj0pshhgkwm\telegram.exe] => (Allow) C:\program files\windowsapps\telegrammessengerllp.telegramdesktop_1.9.7.0_x64__t4vj0pshhgkwm\telegram.exe => Keine Datei
FirewallRules: [TCP Query User{968D2B63-994B-4480-BEF2-070AC31D5BBD}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => Keine Datei
FirewallRules: [UDP Query User{506F0B44-7E98-4362-9B71-CB7142B22085}C:\programdata\wargaming.net\gamecenter\wgc.exe] => (Allow) C:\programdata\wargaming.net\gamecenter\wgc.exe => Keine Datei
FirewallRules: [TCP Query User{CABE2181-FA01-47A6-A66C-58A8A4A15072}C:\games\world_of_tanks_eu\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\worldoftanks.exe => Keine Datei
FirewallRules: [UDP Query User{8CBB6611-134C-4DAC-8449-220AAC1A2AC1}C:\games\world_of_tanks_eu\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\worldoftanks.exe => Keine Datei
FirewallRules: [{EC2F5C93-EE51-4E58-9A64-5AFA364E0B1A}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [{8A0BF225-433F-4C5B-9E69-BE4646BBFA60}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe => Keine Datei
FirewallRules: [TCP Query User{BD394237-9613-4A70-8F37-B0BE5E491C64}C:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) C:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [UDP Query User{AAA23E59-C4DA-4499-82DF-5E40190D2504}C:\program files (x86)\origin games\apex\r5apex.exe] => (Allow) C:\program files (x86)\origin games\apex\r5apex.exe => Keine Datei
FirewallRules: [TCP Query User{5473E9A4-AE7B-4D96-AC3E-17555C3E4E9C}C:\users\peterpan\appdata\roaming\sky\sky go\sky go.exe] => (Allow) C:\users\peterpan\appdata\roaming\sky\sky go\sky go.exe => Keine Datei
FirewallRules: [UDP Query User{B4E5954D-99F0-4027-A2F8-75B8FF5E7F4A}C:\users\peterpan\appdata\roaming\sky\sky go\sky go.exe] => (Allow) C:\users\peterpan\appdata\roaming\sky\sky go\sky go.exe => Keine Datei
FirewallRules: [{3B227DED-8904-47AC-980F-96C45F956993}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => Keine Datei
FirewallRules: [{766F29F5-E931-48A7-A6F8-4F1C1DE019CE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x86\3DMark.exe => Keine Datei
FirewallRules: [{AE391B76-1CEB-4201-8D7B-06CC681EE627}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe => Keine Datei
FirewallRules: [{C0BDAC37-7D7C-4D86-B374-0713B54F1BE1}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\3DMark\bin\x64\3DMark.exe => Keine Datei
FirewallRules: [{061A60EA-D96A-43EA-8A66-67756EDE1CC7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe => Keine Datei
FirewallRules: [{ED91CBBB-7346-4F8B-8E68-333ED996AB01}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe => Keine Datei
FirewallRules: [{19103782-A427-45E2-98D8-2878401E42CD}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe => Keine Datei
FirewallRules: [{B9EA6004-D462-4447-A77B-76C5D8760499}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe => Keine Datei
FirewallRules: [{36141863-95C9-477E-B2AD-725D941AD06F}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe => Keine Datei
FirewallRules: [{60B67EBB-E003-4715-B0D2-020B7407BBB7}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe => Keine Datei
FirewallRules: [{FB2152D7-BDD3-4DAB-A9C8-B57D79EB0531}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei
FirewallRules: [{A8C52CF4-FA6F-42D9-9B21-AD1269A1EA7C}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\OxygenPanelDaemon.exe => Keine Datei
FirewallRules: [{0459693E-10E4-4355-985A-85DB0FDEAFEF}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DPDecoder.exe => Keine Datei
FirewallRules: [{E49D5F28-4021-4A0A-AC31-A99768EA94A0}] => (Allow) C:\ProgramData\Blackmagic Design\DaVinci Resolve\Support\QtDecoder\QTDecoder.exe => Keine Datei
FirewallRules: [TCP Query User{0F221883-8316-473C-9439-02529C4448F7}C:\program files\blackmagic design\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\dpdecoder.exe => Keine Datei
FirewallRules: [UDP Query User{80445B32-E7CB-404B-A9DB-20E39364CE13}C:\program files\blackmagic design\davinci resolve\dpdecoder.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\dpdecoder.exe => Keine Datei
FirewallRules: [TCP Query User{E74C07F3-8CD5-4E17-BCEA-A1A190612459}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe => Keine Datei
FirewallRules: [UDP Query User{3BC68549-6259-4EBF-91A3-56DE43E33738}C:\program files\blackmagic design\davinci resolve\resolve.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\resolve.exe => Keine Datei
FirewallRules: [TCP Query User{D7211686-4734-41AA-9659-59D4FB15584F}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe => Keine Datei
FirewallRules: [UDP Query User{78EF6649-3125-415A-836C-5B88ACFBE796}C:\program files\blackmagic design\davinci resolve\fuscript.exe] => (Allow) C:\program files\blackmagic design\davinci resolve\fuscript.exe => Keine Datei
FirewallRules: [TCP Query User{14BE58DB-8835-4F37-9289-BBB994E44D13}C:\games\world_of_tanks_eu\win32\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win32\worldoftanks.exe => Keine Datei
FirewallRules: [UDP Query User{3687058B-A734-4E00-AE46-75F4300D6062}C:\games\world_of_tanks_eu\win32\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win32\worldoftanks.exe => Keine Datei
FirewallRules: [TCP Query User{515745D0-7ED4-4C7D-9AB9-F601F59AAD3B}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => Keine Datei
FirewallRules: [UDP Query User{B6775D27-3EF2-438D-8C98-E26D1B816F71}C:\games\world_of_tanks_eu\win64\worldoftanks.exe] => (Allow) C:\games\world_of_tanks_eu\win64\worldoftanks.exe => Keine Datei
FirewallRules: [TCP Query User{A93B7976-D18E-4183-873C-71DB9CCB0D7B}C:\program files (x86)\steam\steamapps\common\kards\kards\binaries\win64\kards-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kards\kards\binaries\win64\kards-win64-shipping.exe => Keine Datei
FirewallRules: [UDP Query User{14AE1B58-A227-4CB1-86B3-4F0DF416A334}C:\program files (x86)\steam\steamapps\common\kards\kards\binaries\win64\kards-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\kards\kards\binaries\win64\kards-win64-shipping.exe => Keine Datei
FirewallRules: [TCP Query User{694E850F-87BD-4218-817E-92A086403609}C:\users\peterpan\appdata\local\programs\bandlab-assistant\bandlab assistant.exe] => (Allow) C:\users\peterpan\appdata\local\programs\bandlab-assistant\bandlab assistant.exe => Keine Datei
FirewallRules: [UDP Query User{55C9302B-C687-4370-B7A4-A62A8A32B66C}C:\users\peterpan\appdata\local\programs\bandlab-assistant\bandlab assistant.exe] => (Allow) C:\users\peterpan\appdata\local\programs\bandlab-assistant\bandlab assistant.exe => Keine Datei
FirewallRules: [TCP Query User{28927C79-8F1B-4901-AAB9-921AA45E4887}E:\epic games\borderlands3\oakgame\binaries\win64\borderlands3.exe] => (Allow) E:\epic games\borderlands3\oakgame\binaries\win64\borderlands3.exe => Keine Datei
FirewallRules: [UDP Query User{CA219D84-2432-41DA-BF3E-79D3C5F9536D}E:\epic games\borderlands3\oakgame\binaries\win64\borderlands3.exe] => (Allow) E:\epic games\borderlands3\oakgame\binaries\win64\borderlands3.exe => Keine Datei
FirewallRules: [TCP Query User{1A666DAB-7DDB-4D50-B299-3461FF15EBA2}E:\epic games\defensegrid\defensegrid.exe] => (Block) E:\epic games\defensegrid\defensegrid.exe => Keine Datei
FirewallRules: [UDP Query User{4C581BA1-89F3-478B-8688-8823A3110C05}E:\epic games\defensegrid\defensegrid.exe] => (Block) E:\epic games\defensegrid\defensegrid.exe => Keine Datei
FirewallRules: [TCP Query User{8B596867-BF9A-4860-9C7A-3DFF703F0AF0}E:\epic games\back4bloodbeta\gobi\binaries\win64\back4blood.exe] => (Allow) E:\epic games\back4bloodbeta\gobi\binaries\win64\back4blood.exe => Keine Datei
FirewallRules: [UDP Query User{66A31623-8D4B-4B22-9915-3A45A5D92B77}E:\epic games\back4bloodbeta\gobi\binaries\win64\back4blood.exe] => (Allow) E:\epic games\back4bloodbeta\gobi\binaries\win64\back4blood.exe => Keine Datei
FirewallRules: [{14214516-68C9-49C6-A440-C607456EB273}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBitEAC.exe () [Datei ist nicht signiert]
FirewallRules: [{EE8251BC-48D4-488A-A7C7-D1F5DB37C644}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBitEAC.exe () [Datei ist nicht signiert]
FirewallRules: [{F3A66FE5-BEEB-493B-B58D-99A7D8B3F402}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{3BFE7DF1-2D48-4C8E-A91B-A3C0F5D4D274}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{8C99101B-F983-4CEA-88C3-F80ED004D929}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBit.exe () [Datei ist nicht signiert]
FirewallRules: [{F7E92120-5606-4812-B860-5B5E5F57F5CD}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBit.exe () [Datei ist nicht signiert]
FirewallRules: [{26F3175C-3745-49AA-B1CB-D9DB61F73196}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{0B58BEA3-4678-4FAB-B65D-6993461C8401}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{E9E8FC43-3379-4E49-9008-FD6F66BC6730}] => (Allow) E:\SteamLibrary\steamapps\common\Dusk\Dusk.exe () [Datei ist nicht signiert]
FirewallRules: [{A031887F-8F97-451D-BC82-53B05D3524F6}] => (Allow) E:\SteamLibrary\steamapps\common\Dusk\Dusk.exe () [Datei ist nicht signiert]
FirewallRules: [{6BFB127A-0854-42E1-8608-1BD96E5E8689}] => (Allow) E:\SteamLibrary\steamapps\common\Dusk\Duskworld.exe () [Datei ist nicht signiert]
FirewallRules: [{F209042C-8E4B-473D-90E6-00EDDF2B3FAE}] => (Allow) E:\SteamLibrary\steamapps\common\Dusk\Duskworld.exe () [Datei ist nicht signiert]
FirewallRules: [{BC330BE0-2035-4435-AF29-56FFC222E6CB}] => (Allow) E:\SteamLibrary\steamapps\common\Quake 2\rerelease\quake2ex_steam.exe => Keine Datei
FirewallRules: [{CD97E007-1DC7-43EE-AE22-4C47EF594FF5}] => (Allow) E:\SteamLibrary\steamapps\common\Quake 2\rerelease\quake2ex_steam.exe => Keine Datei
FirewallRules: [{A384FE9E-F293-4C42-9B0A-3399FD416050}] => (Allow) E:\SteamLibrary\steamapps\common\Quake\rerelease\Quake_x64_steam.exe => Keine Datei
FirewallRules: [{974F092E-9F4D-46BF-B812-3B1954F50EE1}] => (Allow) E:\SteamLibrary\steamapps\common\Quake\rerelease\Quake_x64_steam.exe => Keine Datei
FirewallRules: [{981503B2-2350-4BAF-9EF1-77D69A930DE0}] => (Allow) C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{687341DD-9227-4359-A6F0-3F943A897AFF}] => (Allow) C:\Program Files\WindowsApps\MSTeams_23306.3315.2560.6525_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{29444503-6BFA-42C5-B1F5-A426B6EF0B38}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D54C2972-1D07-4BAE-8E2E-9DE22DB8F876}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{335631D6-066B-4CD1-B667-ABFB240BCBCA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{15ECE4A9-D06A-4E5D-9F97-F5E1FA4123AA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{82B37532-0C5F-4298-9B95-EC569B95D1B8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{51639209-29B8-465C-BDD3-9BA83D11298D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.119.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3F2F9E05-DD77-4306-945E-B11BDD54A341}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\125.0.2535.67\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12FE4B40-B193-42D0-967D-01DF0C4A849B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{2904FC8B-3DB8-4BE0-8043-A41EA1DC27B8}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{3642EB2E-D655-46D4-8CA5-4E4A801DB4C6}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

20-05-2024 20:39:36 Removed Adobe Acrobat DC.
20-05-2024 20:40:58 Removed Adobe Acrobat DC.
20-05-2024 20:41:52 Removed Adobe Acrobat DC.
30-05-2024 23:22:19 Scheduled Checkpoint
31-05-2024 18:19:02 Removed paint.net
31-05-2024 18:29:06 Removed Mu Editor 1.1.0b5
31-05-2024 18:38:29 MAXQDA 2018 wird entfernt

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/31/2024 06:46:04 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 06:46:04 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 06:46:04 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 06:46:04 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 06:46:01 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 04:59:33 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 04:59:33 PM) (Source: DbxSvc) (EventID: 281) (User: )
Description: CertFindCertificateInStore failed with: (-2146885628) Cannot find object or property.

Error: (05/31/2024 04:59:33 PM) (Source: DbxSvc) (EventID: 322) (User: )
Description: Failed to get driver message: (-2147024890) The handle is invalid.


Systemfehler:
=============
Error: (05/31/2024 06:45:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AMDRyzenMasterDriverV19" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (05/31/2024 07:32:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "AMDRyzenMasterDriverV19" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (05/28/2024 09:04:43 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-L9J7N4D)
Description: Der Server "Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/28/2024 09:03:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (05/28/2024 09:03:59 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.

Error: (05/23/2024 09:52:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-L9J7N4D)
Description: Der Server "Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/23/2024 08:56:57 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-L9J7N4D)
Description: Der Server "Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/23/2024 08:55:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.


Windows Defender:
================
Date: 2024-05-31 18:46:07
Description: 
C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\Videos zu ändern.
Erkennungszeit: 2024-05-31T16:46:07.926Z
Benutzer: DESKTOP-L9J7N4D\peterpan
Pfad: %userprofile%\Videos
Prozessname: C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
Sicherheitsversion: 1.413.16.0
Modulversion: 1.1.24050.5
Produktversion: 4.18.24040.4

Date: 2024-05-31 18:34:58
Description: 
C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller FREE\UIFREE.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\Documents\Ashampoo zu ändern.
Erkennungszeit: 2024-05-31T16:34:58.487Z
Benutzer: DESKTOP-L9J7N4D\peterpan
Pfad: %userprofile%\Documents\Ashampoo
Prozessname: C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller FREE\UIFREE.exe
Sicherheitsversion: 1.413.16.0
Modulversion: 1.1.24050.5
Produktversion: 4.18.24040.4

Date: 2024-05-31 16:59:36
Description: 
C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\Videos zu ändern.
Erkennungszeit: 2024-05-31T14:59:36.837Z
Benutzer: DESKTOP-L9J7N4D\peterpan
Pfad: %userprofile%\Videos
Prozessname: C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
Sicherheitsversion: 1.413.16.0
Modulversion: 1.1.24050.5
Produktversion: 4.18.24040.4

Date: 2024-05-30 23:07:10
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {3E1C0790-C63E-4FCF-99A7-43460D49F86F}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Quick Scan
Benutzer: NT AUTHORITY\SYSTEM

Date: 2024-05-23 22:49:31
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {E34D67AA-5E59-4052-8861-8E7024AB071A}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Quick Scan
Benutzer: NT AUTHORITY\SYSTEM
Event[0]:

Date: 2023-09-26 22:06:46
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.397.1595.0
Update Source: Microsoft Update Server
Sicherheitstyp: AntiVirus
Updatetyp: Full
Benutzer: NT AUTHORITY\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23080.2005
Fehlercode: 0x80240438
Fehlerbeschreibung: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 

Date: 2023-05-28 14:03:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.389.2374.0
Update Source: Microsoft Update Server
Sicherheitstyp: AntiVirus
Updatetyp: Full
Benutzer: NT AUTHORITY\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.20300.3
Fehlercode: 0x80240009
Fehlerbeschreibung: An unexpected problem occurred while checking for updates. For information on installing or troubleshooting updates, see Help and Support. 

Date: 2023-03-05 14:37:12
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.383.963.0
Update Source: Microsoft Malware Protection Center
Sicherheitstyp: AntiVirus
Updatetyp: Full
Benutzer: NT AUTHORITY\NETWORK SERVICE
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.20000.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: The server name or address could not be resolved 

Date: 2023-03-05 14:37:12
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.383.963.0
Update Source: Microsoft Malware Protection Center
Sicherheitstyp: AntiSpyware
Updatetyp: Full
Benutzer: NT AUTHORITY\NETWORK SERVICE
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.20000.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: The server name or address could not be resolved 

Date: 2023-03-05 14:37:12
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.383.963.0
Update Source: Microsoft Malware Protection Center
Sicherheitstyp: AntiVirus
Updatetyp: Full
Benutzer: NT AUTHORITY\NETWORK SERVICE
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.20000.2
Fehlercode: 0x80072ee7
Fehlerbeschreibung: The server name or address could not be resolved 

CodeIntegrity:
===============
Date: 2024-05-31 19:18:59
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Windows signing level requirements.

Date: 2024-05-31 19:15:46
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.24040.4-0\MpDefenderCoreService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2024-05-31 19:11:06
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Microsoft signing level requirements.

Date: 2024-05-31 19:01:33
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1.B0 11/08/2019
Hauptplatine: Micro-Star International Co., Ltd. B450M GAMING PLUS (MS-7B87)
Prozessor: AMD Ryzen 5 2600 Six-Core Processor 
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 16335.23 MB
Verfügbarer physikalischer RAM: 10477.25 MB
Summe virtueller Speicher: 24015.23 MB
Verfügbarer virtueller Speicher: 16210.12 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:237.42 GB) (Free:83.83 GB) (Model: Crucial_CT256MX100SSD1) NTFS
Drive e: (Daten) (Fixed) (Total:1863 GB) (Free:1033.41 GB) (Model: ST2000DM008-2FR102) NTFS

\\?\Volume{2eafc88b-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.54 GB) (Free:0.12 GB) NTFS
\\?\Volume{2eafc88b-0000-0000-0000-207d3b000000}\ () (Fixed) (Total:0.52 GB) (Free:0.08 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 2EAFC88B)
Partition 1: (Active) - (Size=549 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=237.4 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=530 MB) - (Type=27)

==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================