![]() |
|
Log-Analyse und Auswertung: Defender MeldungWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
![]() |
![]() | #1 |
![]() ![]() ![]() | ![]() Defender Meldung Hallo zusammen, siehe bitte folgend: https://drive.google.com/drive/folde...pi?usp=sharing Ich hatte das zuerst weggeglickt (Meldung 1), beim Öffnen des Defenders kam dann aber Meldung 2, die ich dann weggeschickt habe. Ist das was Schlimmes? Danke und LG Timo Vorsichtshalber: Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-08.2024 durchgeführt von timof (Administrator) auf DESKTOP-P3NKH8T (Micro-Star International Co., Ltd. MS-7C56) (14-08-2024 04:25:43) Gestartet von C:\Users\timof\Downloads\FRST64 (1).exe Geladene Profile: timof Plattform: Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Chrome Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzAppManager (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzBTLEManager (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaConnectServer (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzDeviceManager (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzDiagnostic (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzIoTDeviceManager (C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSmartlightingDeviceManager (C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe (C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe ->) (Razer USA Ltd. -> The CefSharp Authors) C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.BrowserSubprocess.exe <5> (C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\Razer Central.exe (C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe ->) (Razer USA Ltd. -> ) C:\Program Files (x86)\Razer\Synapse3\UserProcess\Razer Synapse Service Process.exe (C:\Program Files\LGHUB\lghub.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe (C:\Program Files\LGHUB\lghub.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3> (C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\127.0.2651.98\msedgewebview2.exe <7> (explorer.exe ->) (Atomi Systems, Inc.) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\ActivePresenter.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <11> (explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <3> (explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe (explorer.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe (explorer.exe ->) (Riot Games, Inc. -> Riot Games, Inc.) C:\Program Files\Riot Vanguard\vgtray.exe (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe <2> (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe (NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe (services.exe ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe (services.exe ->) (Even Balance, Inc. -> ) C:\Windows\System32\PnkBstrA.exe (services.exe ->) (geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe (services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe (services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe (services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3> (services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_866484083fc526af\Display.NvContainer\NVDisplay.Container.exe <2> (services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe (services.exe ->) (Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe (services.exe ->) (THX LTD. -> VisiSonics) C:\Windows\System32\VSSrv.exe (sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2405.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe (svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.53.62131.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileCoAuth.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe (VSSrv.exe ->) (THX LTD. -> VisiSonics) C:\Windows\System32\VSHelper.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH) HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [3071192 2022-08-17] (Riot Games, Inc. -> Riot Games, Inc.) HKLM-x32\...\Run: [RazerCortex] => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.) HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4919312 2024-08-08] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [MicrosoftEdgeAutoLaunch_CAB73CC8F7913F5E45BE26E54AD4E106] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3814968 2024-08-07] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [152025856 2023-02-03] (Logitech Inc -> Logitech, Inc.) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3595016 2024-06-27] (Razer USA Ltd. -> Razer Inc.) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4407656 2024-07-17] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\timof\AppData\Local\Microsoft\Teams\Update.exe [2593856 2024-05-23] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe [1832968 2024-07-23] (Overwolf Ltd -> Overwolf Ltd.) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2869864 2024-06-14] (Electronic Arts, Inc. -> Electronic Arts) HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32823248 2023-03-10] (Epic Games Inc. -> Epic Games, Inc.) HKU\S-1-5-18\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3595016 2024-06-27] (Razer USA Ltd. -> Razer Inc.) HKLM\...\Windows x64\Print Processors\Canon MG5700 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDCS.DLL [30208 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\...\Print\Monitors\Canon BJ Language Monitor MG5700 series: C:\Windows\system32\CNMLMCS.DLL [406528 2015-03-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.) HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\127.0.6533.101\Installer\chrmstp.exe [2024-08-14] (Google LLC -> Google LLC) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {CB0C1126-0404-4B4A-8CF3-65B959B623C7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1563080 2024-07-31] (Adobe Inc. -> Adobe Inc.) Task: {95889D11-8905-49D2-945C-B0C6FDE4F7C4} - System32\Tasks\G2MUpdateTask-S-1-5-21-3154798328-3649536837-3844507433-1001 => C:\Users\timof\AppData\Local\GoToMeeting\19992\g2mupdate.exe [34872 2024-04-03] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {591A2F6A-7DA3-45C8-A5D2-C5225641462D} - System32\Tasks\G2MUploadTask-S-1-5-21-3154798328-3649536837-3844507433-1001 => C:\Users\timof\AppData\Local\GoToMeeting\19992\g2mupload.exe [34872 2024-04-03] (LogMeIn, Inc. -> LogMeIn, Inc.) Task: {66829465-73B9-45FE-8E9E-0A1BF1B15263} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem128.0.6597.0{640CF22C-2F73-4FAB-B484-6A6B34292BAD} => C:\Program Files (x86)\Google\GoogleUpdater\128.0.6597.0\updater.exe [4889704 2024-07-15] (Google LLC -> Google LLC) Task: {F7BAF064-E906-450C-BF79-7F78520F6D69} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28584424 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {4CBD8337-820C-4988-9958-17C6DB68E7B6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28584424 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {7FD18F93-080D-4434-BA5D-20E5E42BCCBF} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312288 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {F22DB0A2-D6A4-4B09-9C37-A81ED4B72706} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312288 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {7E53925B-0A8E-41C5-826C-4B9AAA238525} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [182240 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Task: {63FB9436-4931-44D0-9F5E-5CE9CC7888A4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {80AC4FD8-7FB0-427F-9216-16AEF599CBD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {1A9D3730-DD1F-4935-B2EE-670BD0D297B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {3AAAFE4F-8B9D-49B8-A9FD-015116EC5066} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Update => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {86A83D62-6CEA-4508-8856-89932A0D0804} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpCmdRun.exe [1687320 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {1F0CB86D-2EE5-4486-B1FD-61612C12A0C6} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3154798328-3649536837-3844507433-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [676936 2024-08-07] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen). Task: {2AFB2A37-E4D6-4305-98CE-D24F3248B9FF} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34376 2024-08-07] (Mozilla Corporation -> Mozilla Foundation) Task: {75385292-7FCC-414C-AA78-9EA7B8E79DAD} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log Task: {F45A0E46-37A5-4C67-BAB7-1CB2D64BD2C5} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {01FBF329-EC5B-485B-9B08-B34E66EDB66E} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler Task: {85E55C68-97EE-4674-BD97-94F62C45CC64} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {F3B6B64A-77E7-4EC1-8ADE-339D32C7967C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {A0DD718D-D08C-455D-901E-D4C22870E9D0} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {B488CFB7-9AB8-4515-8C20-27EB34B47DA6} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {ECAC678F-D1FF-48E7-8969-48A6C065B7FD} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {7C76D566-DEA1-4D37-9B1B-22F18953DF92} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-02] (NVIDIA Corporation -> NVIDIA Corporation) Task: {3409A7CF-7029-4B0D-A344-F2973490614D} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209168 2024-08-08] (Microsoft Corporation -> Microsoft Corporation) Task: {97BBC320-3E09-482D-BC17-E0215BFCD047} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3154798328-3649536837-3844507433-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209168 2024-08-08] (Microsoft Corporation -> Microsoft Corporation) Task: {97CDAB14-21BC-4B5B-AD2F-46203010887E} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2370056 2024-07-23] (Overwolf Ltd -> Overwolf LTD) -> C:\Program Files (x86)\Overwolf\/RunningFrom Schedule Task: {53A1C184-F5D4-44D1-9D6B-531BB443A438} - System32\Tasks\RazerCortexScheduleClean => C:\Program Files (x86)\Razer\Razer Cortex\RazerCortex.exe [544248 2024-01-08] (Razer USA Ltd. -> Razer Inc.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\Windows\Tasks\G2MUpdateTask-S-1-5-21-3154798328-3649536837-3844507433-1001.job => C:\Users\timof\AppData\Local\GoToMeeting\19992\g2mupdate.exe Task: C:\Windows\Tasks\G2MUploadTask-S-1-5-21-3154798328-3649536837-3844507433-1001.job => C:\Users\timof\AppData\Local\GoToMeeting\19992\g2mupload.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 Tcpip\..\Interfaces\{dafd290e-065e-4a15-8113-f5b7dc9d5e7c}: [DhcpNameServer] 192.168.0.1 Edge: ======= Edge DefaultProfile: Default Edge Profile: C:\Users\timof\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-10] Edge Notifications: Default -> hxxps://meet.google.com Edge Extension: (Google Docs Offline) - C:\Users\timof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-11] Edge Extension: (Edge relevant text changes) - C:\Users\timof\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-05] FireFox: ======== FF DefaultProfile: e9kzebf2.default FF ProfilePath: C:\Users\timof\AppData\Roaming\Mozilla\Firefox\Profiles\e9kzebf2.default [2022-09-03] FF ProfilePath: C:\Users\timof\AppData\Roaming\Mozilla\Firefox\Profiles\br5qhy2s.default-release-1709576337024 [2024-08-11] FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-03-19] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-08-03] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Datei ist nicht signiert] FF Plugin-x32: @esn.me/esnsonar,version=0.70.4 -> C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll [2011-11-03] (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Datei ist nicht signiert] FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-03-19] (Microsoft Corporation -> Microsoft Corporation) Chrome: ======= CHR Profile: C:\Users\timof\AppData\Local\Google\Chrome\User Data\Default [2024-08-14] CHR Notifications: Default -> hxxps://meet.google.com CHR StartupUrls: Default -> "hxxps://www.spiegel.de/" CHR Extension: (AdGuard Werbeblocker) - C:\Users\timof\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2024-05-31] CHR Extension: (Google Docs Offline) - C:\Users\timof\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-06-10] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\timof\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-07-21] Opera: ======= OPR DefaultProfile: Default ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-07-31] (Adobe Inc. -> Adobe Inc.) S3 battlenet_helpersvc; C:\ProgramData\Battle.net_components\battlenet_helpersvc\AgentHelper.exe [2569352 2024-08-09] (Blizzard Entertainment, Inc. -> Blizzard Entertainment) R2 CIJSRegister; C:\Program Files (x86)\Canon\IJ Scan Utility\SETEVENT.exe [144464 2015-02-19] (Canon Inc. -> CANON INC.) R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13995624 2024-08-06] (Microsoft Corporation -> Microsoft Corporation) S3 CorsairDeviceListerService; C:\Program Files\Corsair\Corsair iCUE5 Software\CorsairDeviceListerService.exe [151080 2023-10-17] (Corsair Memory, Inc. -> Corsair Memory, Inc.) R2 CortexLauncherService; C:\Program Files (x86)\Razer\Razer Cortex\CortexLauncherService.exe [588712 2024-01-08] (Razer USA Ltd. -> Razer Inc.) S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [74178224 2024-05-16] (Electronic Arts, Inc. -> Electronic Arts) S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [16506984 2024-06-14] (Electronic Arts, Inc. -> Electronic Arts) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2022-11-19] (EasyAntiCheat Oy -> Epic Games, Inc) S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [954704 2024-04-18] (EasyAntiCheat Oy -> Epic Games, Inc.) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-02-10] (Epic Games Inc. -> Epic Games, Inc.) S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncHelper.exe [3523088 2024-08-08] (Microsoft Corporation -> Microsoft Corporation) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2023-09-26] (Underwriters Laboratories Inc. -> Futuremark) R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [446328 2023-09-13] (Canon Inc. -> ) R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10207488 2022-12-14] (Logitech Inc -> Logitech, Inc.) R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [497568 2021-10-25] (Logitech Inc -> Logitech) R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_866484083fc526af\Display.NvContainer\NVDisplay.Container.exe [1274992 2023-12-08] (NVIDIA Corporation -> NVIDIA Corporation) S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.146.0721.0003\OneDriveUpdaterService.exe [3863584 2024-08-08] (Microsoft Corporation -> Microsoft Corporation) S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2370056 2024-07-23] (Overwolf Ltd -> Overwolf LTD) R2 PDF24; C:\Program Files\PDF24\pdf24.exe [592608 2022-07-13] (geek software GmbH -> geek software GmbH) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2023-03-12] (Even Balance, Inc. -> ) R2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [1878448 2024-06-25] (Razer USA Ltd. -> Razer Inc.) R2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [231856 2024-06-25] (Razer USA Ltd. -> Razer Inc.) R2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1361360 2023-03-06] (Razer USA Ltd. -> Razer Inc.) R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256264 2023-02-10] (Razer USA Ltd. -> Razer Inc) R2 Razer Game Manager Service 3; C:\Program Files (x86)\Razer\Razer Services\GMS3\GameManagerService3.exe [362760 2023-06-14] (Razer USA Ltd. -> Razer Inc) R2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [298248 2024-06-26] (Razer USA Ltd. -> Razer Inc.) R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [538424 2024-05-15] (Razer USA Ltd. -> Razer Inc.) S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [340240 2022-09-20] (Twitch Interactive, Inc. -> ) S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10450928 2022-08-17] (Riot Games, Inc. -> Riot Games, Inc.) R2 VSSrv; C:\Windows\System32\VSSrv.exe [3359440 2023-11-23] (THX LTD. -> VisiSonics) R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-08] (Microsoft Windows Publisher -> Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2336008 2024-04-28] (Activision Publishing Inc -> Activision Blizzard, Inc.) S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2986792 2023-06-02] (Activision Publishing Inc -> Activision Blizzard, Inc.) S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [287232 2022-06-17] (Microsoft Corporation) [Datei ist nicht signiert] S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [147968 2022-04-13] (Microsoft Corporation) [Datei ist nicht signiert] S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63024 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) S3 cpuz157; C:\Windows\temp\cpuz157\cpuz157_x64.sys [43016 2023-10-13] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ACHTUNG R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-22] (Logitech Inc -> Logitech) R3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-22] (Logitech Inc -> Logitech) R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-22] (Logitech Inc -> Logitech) R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation) R3 RzCommon; C:\Windows\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc) R3 RzDev_0084; C:\Windows\System32\drivers\RzDev_0084.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc) R3 RzDev_0528; C:\Windows\System32\drivers\RzDev_0528.sys [54112 2021-03-22] (Razer USA Ltd. -> Razer Inc) R3 RzDev_0c02; C:\Windows\System32\drivers\RzDev_0c02.sys [54152 2020-08-24] (Razer USA Ltd. -> Razer Inc) R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [8746536 2022-08-17] (Riot Games, Inc. -> Riot Games, Inc.) S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-08-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation) R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602504 2024-08-08] (Microsoft Windows -> Microsoft Corporation) R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-08] (Microsoft Windows -> Microsoft Corporation) S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-08-14 04:25 - 2024-08-14 04:25 - 002397184 _____ (Farbar) C:\Users\timof\Downloads\FRST64 (1).exe 2024-08-13 20:05 - 2024-08-13 20:05 - 000166170 _____ C:\Users\timof\Downloads\WhatsApp Image 2024-08-13 at 05.44.08.jpeg 2024-08-13 19:54 - 2024-08-13 19:54 - 000314080 _____ C:\Users\timof\Downloads\Vertragszusammenfassung_Smart_M_2024-08-13.pdf 2024-08-13 19:54 - 2024-08-13 19:54 - 000000000 ___HD C:\$WinREAgent 2024-08-09 08:21 - 2024-08-09 08:21 - 000093599 _____ C:\Users\timof\Downloads\Police_100_DOM_124345.pdf 2024-08-09 08:20 - 2024-08-09 08:20 - 000225488 _____ C:\Users\timof\Downloads\doc04082720240731152631.pdf 2024-08-07 18:16 - 2024-08-07 18:16 - 197826699 _____ C:\Users\timof\Downloads\pwc-whitepaper-esport-in-deutschland.pdf 2024-08-07 04:10 - 2024-08-14 04:17 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-08-06 19:27 - 2024-08-06 19:27 - 000980690 _____ C:\Users\timof\Downloads\24_08_06_Cover_Esportspedia_7.pdf 2024-08-06 18:57 - 2024-08-06 18:57 - 000002518 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (Preview).lnk 2024-08-06 18:57 - 2024-08-06 18:57 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2024-08-06 04:21 - 2024-08-06 04:21 - 002497940 _____ C:\Users\timof\Downloads\PM Esportionary (1).pdf 2024-08-05 18:17 - 2024-08-05 18:17 - 000375890 _____ C:\Users\timof\Downloads\g312g432g32443232.pptx 2024-08-04 19:58 - 2024-08-04 19:58 - 002490035 _____ C:\Users\timof\Downloads\_Fortnite_-Entwickler muss Rekordstrafe zahlen _ NDR.de - Nachrichten - Schleswig-Holstein.pdf 2024-08-03 19:22 - 2024-08-03 19:22 - 000084462 _____ C:\Users\timof\Downloads\JustAnswer Mitgliedschaft.pdf 2024-08-01 19:56 - 2024-08-01 19:56 - 028233817 _____ C:\Users\timof\Downloads\SOCIAL MEDIA DESIGN (1).zip 2024-08-01 19:56 - 2024-08-01 19:56 - 002245324 _____ C:\Users\timof\Downloads\Design Files (1).zip 2024-08-01 19:55 - 2024-08-01 19:55 - 010446397 _____ C:\Users\timof\Downloads\logo files (1).zip 2024-08-01 19:55 - 2024-08-01 19:55 - 001035051 _____ C:\Users\timof\Downloads\LOGO ANIMATION.mp4 2024-07-28 06:22 - 2024-07-28 06:22 - 000096140 _____ C:\Users\timof\Downloads\Vertragszusammenfassung.pdf 2024-07-28 05:57 - 2024-07-28 05:57 - 010446397 _____ C:\Users\timof\Downloads\logo files.zip 2024-07-28 05:56 - 2024-07-28 05:56 - 028282267 _____ C:\Users\timof\Downloads\Package design (2).zip 2024-07-28 05:55 - 2024-07-28 05:55 - 032162305 _____ C:\Users\timof\Downloads\Package design (1).zip 2024-07-27 04:11 - 2024-07-27 04:11 - 000092585 _____ C:\Users\timof\Downloads\STE-25.07.2024-24-Die_zweite_groe_Chance-4453610507262647578-Beitrag.pdf 2024-07-26 19:53 - 2024-07-26 19:53 - 000548372 _____ C:\Users\timof\Downloads\vollstaendiges_vertragswerk2.pdf 2024-07-26 19:39 - 2024-07-26 19:39 - 002051340 _____ C:\Users\timof\Downloads\Stadtmann_Schoeber_Fortnite_VHB_new2-konvertiert.pptx 2024-07-26 19:26 - 2024-07-26 19:26 - 000420256 _____ C:\Users\timof\Downloads\AGG_ Schutz vor Diskriminierung.pdf 2024-07-26 19:26 - 2024-07-26 19:26 - 000420225 _____ C:\Users\timof\Downloads\Kartellrecht_ Compliance und Sanktionen.pdf 2024-07-26 19:20 - 2024-07-26 19:20 - 000420266 _____ C:\Users\timof\Downloads\Virtuelles Führen.pdf 2024-07-26 19:20 - 2024-07-26 19:20 - 000420249 _____ C:\Users\timof\Downloads\Entscheidungskompetenz.pdf 2024-07-26 19:20 - 2024-07-26 19:20 - 000420217 _____ C:\Users\timof\Downloads\Onboarding.pdf 2024-07-26 19:20 - 2024-07-26 19:20 - 000420207 _____ C:\Users\timof\Downloads\Finanzkennzahlen.pdf 2024-07-25 19:11 - 2024-07-25 19:11 - 000392536 _____ C:\Users\timof\Downloads\WhatsApp Image 2024-07-25 at 15.20.06.jpeg 2024-07-24 18:33 - 2024-07-24 18:33 - 000750593 _____ C:\Users\timof\Downloads\geschlechtsspezifische_verdienstunterschiede_2024_03.pdf 2024-07-23 18:04 - 2024-07-23 18:04 - 000401535 _____ C:\Users\timof\Downloads\WhatsApp Image 2024-07-23 at 14.20.03.jpeg 2024-07-21 19:08 - 2024-07-21 19:08 - 000249687 _____ C:\Users\timof\Downloads\385222046 (1).pdf 2024-07-21 05:01 - 2024-07-21 05:01 - 000244118 _____ C:\Users\timof\Downloads\384964598.pdf 2024-07-21 05:01 - 2024-07-21 05:01 - 000215661 _____ C:\Users\timof\Downloads\384964433.pdf 2024-07-21 05:00 - 2024-07-21 05:00 - 000249687 _____ C:\Users\timof\Downloads\385222046.pdf 2024-07-21 05:00 - 2024-07-21 05:00 - 000245152 _____ C:\Users\timof\Downloads\438097189.pdf 2024-07-19 19:35 - 2024-07-19 19:35 - 000325237 _____ C:\Users\timof\Downloads\WhatsApp Image 2024-07-19 at 06.25.36.jpeg 2024-07-19 19:22 - 2024-07-19 19:22 - 000780858 _____ C:\Users\timof\Downloads\Persönlichkeitsprofil_scan.advanced Leadership_Timo Schöber.pdf 2024-07-16 20:00 - 2024-07-16 20:00 - 000645202 _____ C:\Users\timof\Downloads\PM_Kiel.pdf 2024-07-16 18:34 - 2024-07-16 18:35 - 000061209 _____ C:\Users\timof\Downloads\lvlup!HR-2.jfif ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-08-14 04:26 - 2024-04-14 05:50 - 000031443 _____ C:\Users\timof\Downloads\FRST.txt 2024-08-14 04:26 - 2022-07-28 19:49 - 000000000 ____D C:\FRST 2024-08-14 04:25 - 2022-07-21 07:40 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-08-14 04:24 - 2022-07-21 19:16 - 000000000 ____D C:\Users\timof\Documents\ActivePresenter Templates 2024-08-14 04:20 - 2022-07-21 19:16 - 000000000 ____D C:\Users\timof\Documents\ActivePresenter 2024-08-14 04:18 - 2022-08-31 14:32 - 000004172 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{A31D6C58-ACFD-4F17-9FE4-E00EAC192C7B} 2024-08-14 04:17 - 2022-07-21 18:35 - 000000000 ____D C:\Users\timof\AppData\Local\D3DSCache 2024-08-14 04:15 - 2022-07-22 06:39 - 000000000 ____D C:\Users\timof\AppData\Roaming\Microsoft\Teams 2024-08-14 04:15 - 2022-07-21 20:09 - 000003976 _____ C:\Windows\system32\Tasks\RazerCortexScheduleClean 2024-08-14 04:15 - 2022-07-21 20:03 - 000000000 ____D C:\Users\timof\AppData\Roaming\LGHUB 2024-08-14 04:15 - 2022-07-21 20:03 - 000000000 ____D C:\Users\timof\AppData\Local\LGHUB 2024-08-14 04:15 - 2022-07-21 19:17 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2024-08-14 04:15 - 2022-07-21 18:34 - 000000000 ___RD C:\Users\timof\OneDrive 2024-08-14 04:15 - 2022-07-21 07:40 - 000000000 ___HD C:\Program Files\WindowsApps 2024-08-14 04:15 - 2022-07-21 07:40 - 000000000 ____D C:\Windows\SystemTemp 2024-08-14 04:15 - 2022-07-21 07:40 - 000000000 ____D C:\Windows\AppReadiness 2024-08-14 04:14 - 2022-07-21 17:43 - 000000000 ____D C:\ProgramData\NVIDIA 2024-08-13 20:07 - 2022-07-21 19:35 - 000000000 ____D C:\Users\timof\Documents\Büro 2024-08-13 19:56 - 2022-07-21 07:37 - 000000000 ____D C:\Windows\CbsTemp 2024-08-13 19:55 - 2022-07-23 05:46 - 000000000 ____D C:\Users\timof\AppData\Roaming\Microsoft\Excel 2024-08-12 19:14 - 2022-07-21 20:42 - 000000000 ____D C:\Users\timof\AppData\Roaming\Microsoft\Word 2024-08-11 19:34 - 2022-07-22 05:46 - 000000000 ____D C:\Program Files (x86)\Steam 2024-08-11 19:01 - 2022-07-22 07:31 - 000000000 ____D C:\Users\timof\AppData\Roaming\EasyAntiCheat 2024-08-11 19:01 - 2022-07-22 05:46 - 000000000 ____D C:\Users\timof\AppData\Local\Steam 2024-08-11 18:24 - 2022-07-22 07:22 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-08-11 18:07 - 2022-07-21 17:43 - 000000000 ____D C:\Windows\system32\SleepStudy 2024-08-11 17:30 - 2024-05-06 04:31 - 000009545 _____ C:\Users\timof\Documents\Abnehmen.xlsx 2024-08-11 17:20 - 2022-07-21 17:49 - 001590252 _____ C:\Windows\system32\PerfStringBackup.INI 2024-08-11 17:20 - 2022-07-21 07:41 - 000684798 _____ C:\Windows\system32\perfh007.dat 2024-08-11 17:20 - 2022-07-21 07:41 - 000141256 _____ C:\Windows\system32\perfc007.dat 2024-08-11 17:20 - 2022-07-21 07:39 - 000000000 ____D C:\Windows\INF 2024-08-11 17:16 - 2022-08-09 16:31 - 000000001 _____ C:\Windows\vgkbootstatus.dat 2024-08-11 17:13 - 2022-07-21 17:43 - 000008192 ___SH C:\DumpStack.log.tmp 2024-08-11 17:13 - 2022-07-21 17:43 - 000000006 ____H C:\Windows\Tasks\SA.DAT 2024-08-11 06:23 - 2022-07-21 07:37 - 000524288 _____ C:\Windows\system32\config\BBI 2024-08-11 06:22 - 2024-03-04 20:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-08-11 06:22 - 2022-07-21 20:45 - 000000000 ____D C:\Program Files\Microsoft OneDrive 2024-08-10 17:58 - 2022-07-21 17:43 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk 2024-08-09 20:27 - 2022-07-21 20:13 - 000000000 ____D C:\ProgramData\CanonIJPLM 2024-08-09 12:30 - 2022-07-22 05:50 - 000000000 ____D C:\Users\timof\AppData\Local\Battle.net 2024-08-09 12:30 - 2022-07-22 05:50 - 000000000 ____D C:\Program Files (x86)\Battle.net 2024-08-08 18:51 - 2022-07-21 17:43 - 000000000 ____D C:\Windows\system32\Drivers\wd 2024-08-08 04:08 - 2022-07-21 20:22 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task 2024-08-08 04:08 - 2022-07-21 20:22 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-08-08 04:08 - 2022-07-21 18:34 - 000003596 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3154798328-3649536837-3844507433-1001 2024-08-07 19:35 - 2022-07-21 19:39 - 000000000 ____D C:\Users\timof\Documents\Selbstständigkeit 2024-08-07 18:13 - 2024-03-04 20:18 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2024-08-07 18:13 - 2024-03-04 20:18 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla 2024-08-06 19:04 - 2022-10-13 12:29 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk 2024-08-06 19:04 - 2022-07-22 17:34 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task 2024-08-06 18:57 - 2022-07-21 20:21 - 000000000 ____D C:\Program Files\Microsoft Office 2024-08-05 18:17 - 2022-07-30 09:35 - 000000000 ____D C:\Users\timof\AppData\Roaming\Microsoft\PowerPoint 2024-08-05 17:12 - 2022-07-21 18:32 - 000000000 ____D C:\Users\timof\AppData\Local\Packages 2024-08-04 07:54 - 2022-07-21 20:22 - 000000000 ____D C:\Users\timof\AppData\Roaming\Microsoft\Office 2024-08-02 18:17 - 2022-07-30 15:45 - 000000000 ____D C:\Users\timof\AppData\Local\CrashDumps 2024-08-01 19:55 - 2022-08-31 14:31 - 000000000 ____D C:\Users\timof\AppData\Roaming\vlc 2024-07-28 19:15 - 2022-07-21 17:43 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-07-28 19:15 - 2022-07-21 17:43 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2024-07-28 06:14 - 2022-07-21 19:16 - 000000000 ____D C:\Users\timof\AppData\Roaming\ActivePresenter 2024-07-27 18:39 - 2022-09-20 10:39 - 000000000 ____D C:\Program Files (x86)\Overwolf 2024-07-26 19:40 - 2022-07-21 19:38 - 000000000 ____D C:\Users\timof\Documents\E-Sport und HR 2024-07-21 05:51 - 2022-07-22 08:54 - 000000000 ____D C:\Windows\system32\MRT 2024-07-17 19:31 - 2022-07-22 06:33 - 000000000 ____D C:\Users\timof\AppData\Roaming\Zoom ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2023-07-23 13:07 - 2023-12-25 16:02 - 000000172 _____ () C:\Users\timof\AppData\Roaming\BattleBitConfig.ini ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ======================== |
![]() | #2 |
![]() ![]() ![]() | ![]() Defender MeldungCode:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-08.2024 durchgeführt von timof (14-08-2024 04:26:43) Gestartet von C:\Users\timof\Downloads Microsoft Windows 10 Home Version 22H2 19045.4651 (X64) (2022-07-21 15:45:05) Start-Modus: Normal ========================================================== ==================== Konten: ============================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) Administrator (S-1-5-21-3154798328-3649536837-3844507433-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3154798328-3649536837-3844507433-503 - Limited - Disabled) defaultuser0 (S-1-5-21-3154798328-3649536837-3844507433-1000 - Limited - Disabled) Gast (S-1-5-21-3154798328-3649536837-3844507433-501 - Limited - Disabled) timof (S-1-5-21-3154798328-3649536837-3844507433-1001 - Administrator - Enabled) => C:\Users\timof WDAGUtilityAccount (S-1-5-21-3154798328-3649536837-3844507433-504 - Limited - Disabled) ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) ActivePresenter (HKLM\...\{A2A40277-D807-4754-95A3-2F294C2C51D3}_is1) (Version: 8.5.7 - Atomi Systems, Inc.) Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 24.002.20991 - Adobe) Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601078}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden Amazon Kindle (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Amazon Kindle) (Version: 2.3.1.70682 - Amazon) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB) Burning Crusade Classic (HKLM-x32\...\Burning Crusade Classic) (Version: - Blizzard Entertainment) Call of Duty (HKLM-x32\...\Call of Duty) (Version: - Blizzard Entertainment) Canon Easy-WebPrint EX (HKLM-x32\...\Easy-WebPrint EX) (Version: 1.7.0.0 - Canon Inc.) Canon IJ Scan Utility (HKLM-x32\...\Canon_IJ_Scan_Utility) (Version: 1.1.20.13 - Canon Inc.) Canon Inkjet Printer/Scanner/Fax Extended Survey Program (HKLM-x32\...\CANONIJPLM100) (Version: 6.5.2 - Canon Inc.) Canon MG5700 series Benutzerregistrierung (HKLM-x32\...\Canon MG5700 series Benutzerregistrierung) (Version: - *Canon Inc.) Canon MG5700 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5700_series) (Version: 1.01 - Canon Inc.) Canon MG5700 series On-screen Manual (HKLM-x32\...\Canon MG5700 series On-screen Manual) (Version: 7.8.0 - Canon Inc.) Canon My Image Garden (HKLM-x32\...\Canon My Image Garden) (Version: 3.6.4 - Canon Inc.) Canon My Image Garden Design Files (HKLM-x32\...\Canon My Image Garden Design Files) (Version: 3.6.0 - Canon Inc.) Canon My Printer (HKLM-x32\...\CanonMyPrinter) (Version: 3.3.0 - Canon Inc.) Canon Quick Menu (HKLM-x32\...\CanonQuickMenu) (Version: 2.8.5 - Canon Inc.) CurseForge (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.207.2.6523 - Overwolf app) Diablo II Resurrected (HKLM-x32\...\Diablo II Resurrected) (Version: - Blizzard Entertainment) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Diablo IV (HKLM-x32\...\Diablo IV) (Version: - Blizzard Entertainment) Diablo IV Beta (HKLM-x32\...\Diablo IV Beta) (Version: - Blizzard Entertainment) Discord (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Discord) (Version: 1.0.9005 - Discord Inc.) EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 13.227.0.5740 - Electronic Arts) Hidden EA app (HKLM-x32\...\{e4638914-e6cf-4b4d-9b8c-717e30d5b8dd}) (Version: 13.227.0.5740 - Electronic Arts) Epic Games Launcher (HKLM-x32\...\{A7273EDD-4192-4A9C-9A96-8056EB2DFC76}) (Version: 1.3.67.0 - Epic Games, Inc.) Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Epic Online Services (HKLM-x32\...\{4757C19B-4CE3-418C-91D2-E15E938091FB}) (Version: 2.0.39.0 - Epic Games, Inc.) ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB) Futuremark SystemInfo (HKLM-x32\...\{D808F32F-09EA-4998-95F2-1C5C8A02C2D6}) (Version: 5.68.1202.0 - Futuremark) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 127.0.6533.101 - Google LLC) GoTo Opener (HKLM-x32\...\{7659273F-0EB6-4ECB-BC7D-5889F3FD3075}) (Version: 1.0.562 - LogMeIn, Inc.) GoToMeeting 10.20.0.19992 (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\GoToMeeting) (Version: 10.20.0.19992 - LogMeIn, Inc.) Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version: - Blizzard Entertainment) Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden Logitech Capture (HKLM\...\Capture) (Version: 2.08.11 - Logitech) Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2022.12.348746 - Logitech) Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17830.20138 - Microsoft Corporation) Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 127.0.2651.98 - Microsoft Corporation) Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 127.0.2651.98 - Microsoft Corporation) Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.146.0721.0003 - Microsoft Corporation) Microsoft Teams classic (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Teams) (Version: 1.7.00.13456 - Microsoft Corporation) Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.38.33135 (HKLM-x32\...\{c649ede4-f16a-4486-a117-dcc2f2a35165}) (Version: 14.38.33135.0 - Microsoft Corporation) Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.38.33135 (HKLM-x32\...\{46c3b171-c15c-4137-8e1d-67eeb2985b44}) (Version: 14.38.33135.0 - Microsoft Corporation) Microsoft Visual C++ 2022 X64 Additional Runtime - 14.38.33135 (HKLM\...\{19AFE054-CA83-45D5-A9DB-4108EF4BD391}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.38.33135 (HKLM\...\{AA0C8AB5-7297-4D46-A0D9-08096FE59E46}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Additional Runtime - 14.38.33135 (HKLM-x32\...\{9C19C103-7DB1-44D1-A039-2C076A633A38}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.38.33135 (HKLM-x32\...\{286DC39B-5FB7-4AFF-9DD4-22DB47664CD7}) (Version: 14.38.33135 - Microsoft Corporation) Hidden Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 129.0 (x64 de)) (Version: 129.0 - Mozilla) Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 123.0 - Mozilla) NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation) NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation) NVIDIA Grafiktreiber 546.33 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.33 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation) Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17830.20138 - Microsoft Corporation) Hidden Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17830.20138 - Microsoft Corporation) Hidden Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment) Overwolf (HKLM-x32\...\Overwolf) (Version: 0.256.0.2 - Overwolf Ltd.) PDF24 Creator 11.3.0 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.3.0 - PDF24.org) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.) Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 10.11.5.0 - Razer Inc.) Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.9.0630.062714 - Razer Inc.) Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.) StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) THX Spatial Audio USB 1532-0528 (HKLM\...\{28BA966E-2B76-4B90-B9EF-A000E6518EBB}) (Version: 3.0.30.0 - THX) Hidden THX Spatial Audio USB 1532-0528 (HKLM\...\{CEB585C4-3215-4A32-9A6A-25ED597F42B6}) (Version: 3.0.36.0 - THX) Hidden THX Spatial Audio USB 1532-0528 (HKLM\...\{EE453AD6-BBA2-42FE-B4E7-202105CF03AB}) (Version: 3.0.36.0 - THX) THX Spatial Audio USB 1532-0528 (HKLM-x32\...\{56cf1deb-74cc-4221-a1ff-5fb64b50f9e5}) (Version: 3.0.30.0 - THX) THX V3 APO Presets (HKLM\...\{502A568D-4A4A-4B8F-8B1A-5D0342D767AE}) (Version: 3.0.18 - THX) Hidden THX V3 APO Presets (HKLM\...\{79D9121B-B9D9-47B7-AB23-9127DB0CB242}) (Version: 3.0.36.1 - THX) Hidden THX V3 APO Presets (HKLM-x32\...\{655eda3c-5df1-4468-a44f-ad0e68cf4cb3}) (Version: 3.0.18 - THX) Hidden THX V3 APO Presets (HKLM-x32\...\{7058ec95-5f6b-4542-998d-e0c5bd701f43}) (Version: 3.0.36.1 - THX) Hidden Twitch (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.) Twitch Studio (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF372B0}) (Version: 8.0.0 - Twitch Interactive, Inc.) Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{85C69797-7336-4E83-8D97-32A7C8465A3B}) (Version: 8.94.0.0 - Microsoft Corporation) VALORANT (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc) VLC media player (HKLM\...\VLC media player) (Version: 3.0.17.4 - VideoLAN) Warcraft III (HKLM-x32\...\Warcraft III) (Version: - Blizzard Entertainment) Wargaming.net Game Center for Steam (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\Wargaming.net Game Center for Steam) (Version: 24.2.0.5793 - Wargaming.net) Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) World of Warcraft Classic Era (HKLM-x32\...\World of Warcraft Classic Era) (Version: - Blizzard Entertainment) Wrath of the Lich King Classic (HKLM-x32\...\Wrath of the Lich King Classic) (Version: - Blizzard Entertainment) Zoom (HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\ZoomUMX) (Version: 5.17.11 (34827) - Zoom Video Communications, Inc.) Packages: ========= Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC [2024-06-16] () AV1 Video Extension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.1293.0_x64__8wekyb3d8bbwe [2024-06-08] (Microsoft Corporation) CORSAIR iCUE Game Bar Widgets -> C:\Program Files\WindowsApps\CorsairInc.CorsairiCUEGameBarWidgets_1.0.13.0_x64__gtpc02cnf9yg0 [2022-07-21] (Corsair Memory, Inc.) Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-03-26] (Disney) Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2407.18001.0_x64__8wekyb3d8bbwe [2024-08-09] (Microsoft Corporation) [Startup Task] Microsoft Teams -> C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe [2024-08-14] (Microsoft) [Startup Task] NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-04-23] (NVIDIA Corp.) Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0 [2024-08-03] (Spotify AB) [Startup Task] Websuche von Microsoft Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-07-23] (Microsoft Corporation) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) CustomCLSID: HKU\S-1-5-21-3154798328-3649536837-3844507433-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3154798328-3649536837-3844507433-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\timof\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.24130.8\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-3154798328-3649536837-3844507433-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe) CustomCLSID: HKU\S-1-5-21-3154798328-3649536837-3844507433-1001_Classes\CLSID\{84B5A313-CD5D-4904-8BA2-AFDC81C1B309}\InprocServer32 -> C:\Users\timof\AppData\Local\GoToMeeting\19950\G2MOutlookAddin64.dll => Keine Datei CustomCLSID: HKU\S-1-5-21-3154798328-3649536837-3844507433-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\timof\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.146.0721.0003\FileSyncShell64.dll [2024-08-08] (Microsoft Corporation -> Microsoft Corporation) ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_866484083fc526af\nvshext.dll [2023-12-08] (NVIDIA Corporation -> NVIDIA Corporation) ==================== Codecs (Nicht auf der Ausnahmeliste) ==================== ==================== Verknüpfungen & WMI ======================== ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============= 2023-03-02 08:55 - 2023-02-27 22:39 - 001393152 _____ () [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\Razer\Razer Services\Razer Central\CefSharp.Core.Runtime.dll 2022-07-21 19:15 - 2021-11-04 08:58 - 006702080 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\cpprest140_2_10.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000707072 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\harfbuzz.dll 2022-07-21 19:15 - 2022-05-12 10:04 - 013940224 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\ooxml.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000114688 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\portaudio.dll 2022-07-21 19:15 - 2022-05-16 14:48 - 001098752 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\rltext2speech.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000088064 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\sfnt2woff-zopfli.dll 2022-07-21 19:15 - 2022-05-12 10:03 - 002900480 _____ () [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\svg.dll 2022-12-15 07:16 - 2022-12-14 21:29 - 000156160 _____ () [Datei ist nicht signiert] C:\Program Files\LGHUB\resources\app.asar.unpacked\keytar.node 2022-07-21 19:15 - 2021-03-23 14:17 - 016961024 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\avcodec-57.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000139264 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\avdevice-57.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 002005504 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\avfilter-6.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 002299904 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\avformat-57.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000539136 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\avutil-55.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000127488 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\swresample-2.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000528384 _____ (FFmpeg Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\swscale-4.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000483328 _____ (hxxp://hunspell.github.io/) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\libhunspell.dll 2022-07-21 19:15 - 2021-03-23 14:17 - 000774144 _____ (The FreeType Project) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\freetype.dll 2022-07-21 19:15 - 2021-04-27 16:44 - 002456064 _____ (wxPdfDocument Development Team) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\wxpdfdoc.dll 2022-07-21 19:15 - 2021-04-27 16:37 - 015449088 _____ (wxWidgets development team) [Datei ist nicht signiert] C:\Program Files\ATOMI\ActivePresenter\wxmsw313u.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ======== ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ================== ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ================= ==================== Internet Explorer (Nicht auf der Ausnahmeliste) ========== BHO: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.) BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-03-19] (Microsoft Corporation -> Microsoft Corporation) BHO-x32: Canon Easy-WebPrint EX BHO -> {3785D0AD-BFFF-47F6-BF5B-A587C162FED9} -> C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexbho.dll [2016-02-23] (Canon Inc. -> CANON INC.) Toolbar: HKLM - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.) Toolbar: HKLM-x32 - Canon Easy-WebPrint EX - {759D9886-0C6F-4498-BAB6-4A5F47C6C72F} - C:\Program Files (x86)\Canon\Easy-WebPrint EX\ewpexhlp.dll [2016-02-23] (Canon Inc. -> CANON INC.) Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-06] (Microsoft Corporation -> Microsoft Corporation) ==================== Hosts Inhalt: ========================= (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2022-07-21 07:40 - 2022-09-03 07:06 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts 127.0.0.1 localhost ==================== Andere Bereiche =========================== (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\timof\Downloads\12cffabe511f22f9d03966275f81997034f87094.jpg DNS Servers: 192.168.0.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) ist aktiviert. Network Binding: ============= Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) HKLM\...\StartupApproved\Run: => "PDF24" HKLM\...\StartupApproved\Run32: => "CanonQuickMenu" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_CAB73CC8F7913F5E45BE26E54AD4E106" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "Steam" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "Overwolf" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "EADM" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "EpicGamesLauncher" HKU\S-1-5-21-3154798328-3649536837-3844507433-1001\...\StartupApproved\Run: => "Opera Stable" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================ (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [TCP Query User{1BEFD8B2-3190-4A60-9C95-713279CC5130}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [UDP Query User{F2D0DD88-8DD1-45E4-B8D0-C461D1281EA3}C:\program files\google\chrome\application\chrome.exe] => (Allow) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC) FirewallRules: [TCP Query User{6D72BB5B-3805-4E37-8572-3CC4F358F301}C:\users\timof\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\timof\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [UDP Query User{02046D55-FD59-483A-9FB8-D63373942367}C:\users\timof\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\timof\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B8594B0D-97FE-46AD-B847-24AB85C30D03}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{0C466623-A790-41FD-B3A6-E41249D401B7}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{842B0681-DB89-4C0A-9C4E-B0EA608871E5}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [{7EA4E79A-0E7A-4175-8437-94A8FE20BBA4}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation) FirewallRules: [TCP Query User{D29E0552-6D08-49CE-88E2-952155A44853}D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe => Keine Datei FirewallRules: [UDP Query User{7A7B1574-D465-4E04-B551-07EDA4137589}D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) D:\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe => Keine Datei FirewallRules: [TCP Query User{3CE74872-FD4E-43E7-B3A8-3D2A24077C5A}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{024EBFA5-B33F-44F9-936C-A921722E6A1E}D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\smite.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [{9D2BCFB0-645F-4E07-B2D2-F37B6E33571E}] => (Allow) D:\SteamLibrary\steamapps\common\Halo Infinite\HaloInfinite.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{8D642912-F3A8-4F9A-8EC6-C448E6A5914D}] => (Allow) D:\SteamLibrary\steamapps\common\Halo Infinite\HaloInfinite.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{4D4F46F9-0AA2-4EA3-86AC-6200AD880535}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{2BC5C5A1-A27F-425F-9594-E560CE4ED1C4}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win64\SmiteEAC.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{F3512678-C369-441C-ABB3-24487763A403}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{7DC98F3A-D8BE-413F-A87C-4E252207DA04}] => (Allow) D:\SteamLibrary\steamapps\common\SMITE\Binaries\Win32\SmiteEAC.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{9FF2166F-D104-4C30-A922-BD25BC8CEE25}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FirewallRules: [{27D76993-2E1A-41AE-BEB2-137120BE9ABC}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe (Electronic Sports Network i Sverige AB -> ESN Social Software AB) FirewallRules: [TCP Query User{ED4FD3FA-C883-42FE-87AC-2FACF8FDE258}D:\steamlibrary\steamapps\common\battlefield 4\bf4.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield 4\bf4.exe (Electronic Arts -> EA Digital Illusions CE AB) FirewallRules: [UDP Query User{B09B3B2E-9D50-4AC6-8977-AB8A12FC0DE0}D:\steamlibrary\steamapps\common\battlefield 4\bf4.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield 4\bf4.exe (Electronic Arts -> EA Digital Illusions CE AB) FirewallRules: [{F66C8DEC-D10E-40AC-9B04-90EDC94EFDEC}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\3DMarkLauncher.exe => Keine Datei FirewallRules: [{EDD5E5A1-4283-43A8-972A-925215C5AC5E}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\3DMarkLauncher.exe => Keine Datei FirewallRules: [TCP Query User{A8E75BFE-8605-4B40-AADA-478C9B83D724}C:\users\timof\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\timof\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> ) FirewallRules: [UDP Query User{F02CDC56-73BB-4426-B259-CC1637E63E0B}C:\users\timof\appdata\roaming\twitch studio\bin\twitchstudioagent.exe] => (Allow) C:\users\timof\appdata\roaming\twitch studio\bin\twitchstudioagent.exe (Twitch Interactive, Inc. -> ) FirewallRules: [{70B6C9CB-40B8-4D20-851B-316550B437A6}] => (Allow) D:\SteamLibrary\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [{A60E3FD4-43DE-499A-81C6-61279C626590}] => (Allow) D:\SteamLibrary\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft) FirewallRules: [TCP Query User{C1203BA2-1F4C-413B-86E7-40CC838A96C0}D:\blizzard\overwatch\_retail_\overwatch.exe] => (Allow) D:\blizzard\overwatch\_retail_\overwatch.exe => Keine Datei FirewallRules: [UDP Query User{B7064C77-1BDB-46CF-BAD6-282A68FBFD27}D:\blizzard\overwatch\_retail_\overwatch.exe] => (Allow) D:\blizzard\overwatch\_retail_\overwatch.exe => Keine Datei FirewallRules: [{50BF47EA-414E-4065-A193-F5BCBAC0E4FF}] => (Allow) D:\SteamLibrary\steamapps\common\CnCRemastered\ClientLauncherG.exe (Electronic Arts, Inc. -> Petroglyph Games Inc.) FirewallRules: [{74054A7A-0BB5-4E4F-81DD-91BC84863EEC}] => (Allow) D:\SteamLibrary\steamapps\common\CnCRemastered\ClientLauncherG.exe (Electronic Arts, Inc. -> Petroglyph Games Inc.) FirewallRules: [{B52CBC67-7B63-4EBC-B4C9-2497CB385AF1}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\cossacks.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{4204F0BE-80EF-4711-8079-ACCC95B0EFB9}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\cossacks.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{986A6C5D-06F1-4EAC-890D-934CED68FABE}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\config.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{D951A709-3E18-48B3-9015-EEE2342611DD}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\config.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{AF076BB2-6972-4768-A36F-550E6EAB27F0}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\editor.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{04D7D248-27FC-4FAE-A020-393F166E0DB0}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\editor.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{169A38D2-39E6-4985-8913-E81A30124682}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\modman.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{07AC122E-0344-4A67-9378-BD92B2E03B34}] => (Allow) D:\SteamLibrary\steamapps\common\Cossacks 3\modman.exe (GSC Game World) [Datei ist nicht signiert] FirewallRules: [{FADC6F2F-DF83-4105-856F-8BF5E7CF92DE}] => (Allow) D:\SteamLibrary\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd) FirewallRules: [{039344F3-833D-4C3F-9A84-CE7E095F83A8}] => (Allow) D:\SteamLibrary\steamapps\common\Total War WARHAMMER II\launcher\launcher.exe (The Creative Assembly Ltd -> Creative Assembly Ltd) FirewallRules: [{09445D8F-4F7E-4907-B64E-608EAE80889D}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2019\F1_2019_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert] FirewallRules: [{15E80C8C-2DD1-4F70-BB80-F2B68E44F310}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2019\F1_2019_dx12.exe (Codemasters Software Company Limited) [Datei ist nicht signiert] FirewallRules: [{E2EEEBDD-2850-48FC-81B6-BA6A4FFAB898}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2019\F1_2019.exe (Codemasters Software Company Limited) [Datei ist nicht signiert] FirewallRules: [{7856B57F-6A3A-443D-8BE8-592F9144BFDC}] => (Allow) D:\SteamLibrary\steamapps\common\F1 2019\F1_2019.exe (Codemasters Software Company Limited) [Datei ist nicht signiert] FirewallRules: [{B9866884-7A95-4453-8AF6-155766B34E92}] => (Allow) D:\SteamLibrary\steamapps\common\Act of War Direct Action\ActOfWar.exe () [Datei ist nicht signiert] FirewallRules: [{47C9E14D-A346-401F-A8CA-94E584A2D5CE}] => (Allow) D:\SteamLibrary\steamapps\common\Act of War Direct Action\ActOfWar.exe () [Datei ist nicht signiert] FirewallRules: [{042CE942-A749-446A-B190-764B771894AF}] => (Allow) D:\SteamLibrary\steamapps\common\AoE3DE\AoE3DE_s.exe (Tantalus Media Pty Ltd -> Microsoft Corporation) FirewallRules: [{3B9AD9D9-913E-4C5D-BB0E-7E3B0BC8B70A}] => (Allow) D:\SteamLibrary\steamapps\common\AoE3DE\AoE3DE_s.exe (Tantalus Media Pty Ltd -> Microsoft Corporation) FirewallRules: [{34B4E4C7-C615-44FE-BD5B-DA3E3CE2E7F2}] => (Allow) D:\SteamLibrary\steamapps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{3E90470A-80D1-45B7-91F4-1FD2669F1F95}] => (Allow) D:\SteamLibrary\steamapps\common\Age2HD\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{2F69655B-BAA1-49A6-B648-609837611661}] => (Allow) D:\SteamLibrary\steamapps\common\Age of Mythology\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{04BA9340-BAD6-4F27-AC06-9F42469CBCB0}] => (Allow) D:\SteamLibrary\steamapps\common\Age of Mythology\Launcher.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{0B640130-42A7-4D9D-9088-9017540F3493}] => (Allow) D:\SteamLibrary\steamapps\common\Age of Mythology\AoMX.exe (Microsoft Corp) [Datei ist nicht signiert] FirewallRules: [{63A218CE-9BA7-4385-99BD-51C3C45637D3}] => (Allow) D:\SteamLibrary\steamapps\common\Age of Mythology\AoMX.exe (Microsoft Corp) [Datei ist nicht signiert] FirewallRules: [{9E53638F-F63E-422D-BD85-DC9E238A57FE}] => (Allow) D:\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve) FirewallRules: [{C0E91627-670E-4F73-9DC0-BC09D5385B5A}] => (Allow) D:\SteamLibrary\steamapps\common\Half-Life\hl.exe (Valve Corp. -> Valve) FirewallRules: [TCP Query User{B062EF20-5AF5-4D2E-B4E7-5A89F419B824}D:\steamlibrary\steamapps\common\need for speed heat\needforspeedheat.exe] => (Allow) D:\steamlibrary\steamapps\common\need for speed heat\needforspeedheat.exe (Electronic Arts) [Datei ist nicht signiert] FirewallRules: [UDP Query User{B4BAF185-5919-4E71-9728-CC7081AA5DC3}D:\steamlibrary\steamapps\common\need for speed heat\needforspeedheat.exe] => (Allow) D:\steamlibrary\steamapps\common\need for speed heat\needforspeedheat.exe (Electronic Arts) [Datei ist nicht signiert] FirewallRules: [{413BDBF3-C46D-476A-994B-16FDD0A08058}] => (Allow) D:\SteamLibrary\steamapps\common\Dawn of War Gold\W40k.exe (Relic Entertainment, Inc. -> Sega Corporation) FirewallRules: [{F844E319-ED71-46AF-9E80-2BFCEBF8E21E}] => (Allow) D:\SteamLibrary\steamapps\common\Dawn of War Gold\W40k.exe (Relic Entertainment, Inc. -> Sega Corporation) FirewallRules: [{1B24256F-14FC-4B2D-A566-7DDC58489A05}] => (Allow) D:\SteamLibrary\steamapps\common\StreetFighterV\StreetFighterV.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{B5A94793-1ED3-4B70-89DE-68B4C8309A2F}] => (Allow) D:\SteamLibrary\steamapps\common\StreetFighterV\StreetFighterV.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{FE209279-A90E-436A-B3CE-062AABBDD04A}] => (Allow) D:\SteamLibrary\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc) FirewallRules: [{9C846D22-20F9-49F9-8881-2FD0E98D8AFC}] => (Allow) D:\SteamLibrary\steamapps\common\STAR WARS Squadrons\starwarssquadrons_launcher.exe (Electronic Arts, Inc. -> Epic Games, Inc) FirewallRules: [{E2F7E41C-9B1C-4116-B8CA-E54176A8176B}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer.exe (NeoCore Games) [Datei ist nicht signiert] FirewallRules: [{57DEE680-E3F5-459B-A218-4BA3BB3445EC}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer 40,000 Inquisitor - Martyr\Warhammer.exe (NeoCore Games) [Datei ist nicht signiert] FirewallRules: [{AE0230BD-0B3B-4D58-9D45-E86367834534}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe (Valve Corp. -> Sega Corporation) FirewallRules: [{F2262745-64C5-452C-9089-02809E996DB4}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer 40,000 Space Marine\SpaceMarine.exe (Valve Corp. -> Sega Corporation) FirewallRules: [{66D5819A-85C4-402A-9421-3BFC800DFBD4}] => (Allow) D:\SteamLibrary\steamapps\common\Worms Rumble\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc) FirewallRules: [{A4D603F0-B7D6-44C7-9EE7-E17977FE49C7}] => (Allow) D:\SteamLibrary\steamapps\common\Worms Rumble\Launch_Game.exe (EasyAntiCheat Oy -> Epic Games, Inc) FirewallRules: [{4197DFDF-7B50-4484-815B-B7DA43822125}] => (Allow) C:\Users\timof\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{E10C7425-92DB-456E-BF22-872A777FB798}] => (Allow) C:\Users\timof\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{B92C34A6-DB83-4339-8520-8E5DF3A5E23A}] => (Allow) C:\Users\timof\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) FirewallRules: [{D14F892D-45A9-479C-8D04-A19AE13B64CF}] => (Allow) D:\SteamLibrary\steamapps\common\Warzone 2100\bin\warzone2100.exe (Warzone 2100 Project) [Datei ist nicht signiert] FirewallRules: [{DBC98A57-950F-40CD-BF79-B5730EBC571F}] => (Allow) D:\SteamLibrary\steamapps\common\Warzone 2100\bin\warzone2100.exe (Warzone 2100 Project) [Datei ist nicht signiert] FirewallRules: [TCP Query User{75F03249-B58F-4CBB-8B30-64A2A17C6576}D:\steamlibrary\steamapps\common\battlefield v\bfv.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [UDP Query User{8F4B7574-63D6-4B40-91ED-331D1B8A46F8}D:\steamlibrary\steamapps\common\battlefield v\bfv.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield v\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [TCP Query User{55D35480-4823-4588-8B6C-FC668DD2B747}D:\steamlibrary\steamapps\common\battlefield 2042\bf2042.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield 2042\bf2042.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [UDP Query User{01A9134A-5CA6-4E6A-988A-F5EA857E794B}D:\steamlibrary\steamapps\common\battlefield 2042\bf2042.exe] => (Allow) D:\steamlibrary\steamapps\common\battlefield 2042\bf2042.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB) FirewallRules: [TCP Query User{EA1313B0-E712-47C7-82D3-B34AA6525B44}D:\blizzard\call of duty\_retail_\cod.exe] => (Allow) D:\blizzard\call of duty\_retail_\cod.exe => Keine Datei FirewallRules: [UDP Query User{E9676302-B1BB-4E13-809D-CEDA3B987F6A}D:\blizzard\call of duty\_retail_\cod.exe] => (Allow) D:\blizzard\call of duty\_retail_\cod.exe => Keine Datei FirewallRules: [{2A031602-83D5-497B-AB2F-ED11D49ECC2E}] => (Allow) D:\SteamLibrary\steamapps\common\Predecessor\PredecessorLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{9A20625A-1D2D-417A-940D-6B771F51F2CC}] => (Allow) D:\SteamLibrary\steamapps\common\Predecessor\PredecessorLauncher.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [TCP Query User{4F768349-D1FD-4226-AF06-87213AD87DF7}D:\steamlibrary\steamapps\common\predecessor\predecessor\binaries\win64\predecessorclient-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\predecessor\predecessor\binaries\win64\predecessorclient-win64-shipping.exe (Omeda Studios Limited) [Datei ist nicht signiert] FirewallRules: [UDP Query User{A3D43171-255D-47D6-B4DE-80E00468DD70}D:\steamlibrary\steamapps\common\predecessor\predecessor\binaries\win64\predecessorclient-win64-shipping.exe] => (Allow) D:\steamlibrary\steamapps\common\predecessor\predecessor\binaries\win64\predecessorclient-win64-shipping.exe (Omeda Studios Limited) [Datei ist nicht signiert] FirewallRules: [TCP Query User{3A81BBFC-B8AA-4E5E-A888-5672623BE1B6}C:\users\timof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\timof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [UDP Query User{C593D418-2D43-4821-B466-C7A89A26AAC0}C:\users\timof\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\timof\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{E79A7F74-8FC5-4C09-B49F-F24E9492CD5C}] => (Allow) D:\SteamLibrary\steamapps\common\Command and Conquer 3 Tiberium Wars\CNC3.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) FirewallRules: [{CD9584FE-89C7-4DBF-8E3A-A58476FA00E1}] => (Allow) D:\SteamLibrary\steamapps\common\Command and Conquer 3 Tiberium Wars\CNC3.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) FirewallRules: [{BAB10BF5-DE2F-4CF3-99D0-A409C738B3D1}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe => Keine Datei FirewallRules: [{82B83A5F-45A9-4FD8-A6B5-D068300008C8}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x86\3DMark.exe => Keine Datei FirewallRules: [{4FD185F0-322D-4A5A-BAC8-CE00C645BE73}] => (Allow) D:\SteamLibrary\steamapps\common\Hogwarts Legacy\HogwartsLegacy.exe (Warner Bros. Interactive) [Datei ist nicht signiert] FirewallRules: [{6909DE43-7B51-4011-9DA5-3AEB6AB6E3C9}] => (Allow) D:\SteamLibrary\steamapps\common\Hogwarts Legacy\HogwartsLegacy.exe (Warner Bros. Interactive) [Datei ist nicht signiert] FirewallRules: [{CD967787-BC42-417E-B261-56AA59EB59DC}] => (Allow) D:\SteamLibrary\steamapps\common\A.V.A\Binaries\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{4895D4E3-03C4-44A0-93EC-F446ADA25263}] => (Allow) D:\SteamLibrary\steamapps\common\A.V.A\Binaries\start_protected_game.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{91738508-9EE1-408A-BA9A-0C3CE4BE97CC}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> ) FirewallRules: [{409FEF4D-10AB-43CF-8168-9C2BD4A10E88}] => (Allow) D:\SteamLibrary\steamapps\common\3DMark\bin\x64\3DMark.exe (Underwriters Laboratories Inc. -> ) FirewallRules: [TCP Query User{CDADE287-671B-4916-BFE7-076ADD1ECF58}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [UDP Query User{51BD0E95-B723-4B72-9FDF-7C6B0B8946CB}C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe] => (Allow) C:\program files (x86)\epic games\launcher\engine\binaries\win64\epicwebhelper.exe (Epic Games Inc. -> Epic Games, Inc.) FirewallRules: [{6676A6B9-8704-41AD-9C53-DB13B4776142}] => (Allow) D:\SteamLibrary\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG sp. z o.o -> GOG.com) FirewallRules: [{3A43C254-F86F-4A00-A39C-319DD1F54301}] => (Allow) D:\SteamLibrary\steamapps\common\Cyberpunk 2077\REDprelauncher.exe (GOG sp. z o.o -> GOG.com) FirewallRules: [{714B4E86-5F56-4E12-9FDC-82C72B10C68E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{AEBF349B-7993-4CCD-8B47-C12ADF8200F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> ) FirewallRules: [{F2433879-CF64-4273-B37E-9AC821D9BAAC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [{6ED57457-0817-419B-B5F1-4DB5C8A69EE6}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> ) FirewallRules: [TCP Query User{C51A5ACF-AEBD-4CCB-B67D-134B4E995403}C:\users\timof\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\timof\appdata\local\programs\opera\opera.exe => Keine Datei FirewallRules: [UDP Query User{FB4417BC-DBD9-4EE7-971C-50762C565655}C:\users\timof\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\timof\appdata\local\programs\opera\opera.exe => Keine Datei FirewallRules: [TCP Query User{96B4D771-4764-4223-9D49-B330063D857E}D:\blizzard\diablo iv - beta\diablo iv.exe] => (Allow) D:\blizzard\diablo iv - beta\diablo iv.exe => Keine Datei FirewallRules: [UDP Query User{BD3D867B-C47C-4924-A18A-DDD85BB19662}D:\blizzard\diablo iv - beta\diablo iv.exe] => (Allow) D:\blizzard\diablo iv - beta\diablo iv.exe => Keine Datei FirewallRules: [{9EB9CB30-CC0C-49A4-AB8A-EC6E07F5EF0E}] => (Allow) D:\SteamLibrary\steamapps\common\Battlezone 98 Redux\Launcher\BZLauncher.exe () [Datei ist nicht signiert] FirewallRules: [{37771572-883E-475E-B4C6-1CDE3C974209}] => (Allow) D:\SteamLibrary\steamapps\common\Battlezone 98 Redux\Launcher\BZLauncher.exe () [Datei ist nicht signiert] FirewallRules: [{0294303A-F7A2-44EE-9320-C552A6265D87}] => (Allow) D:\SteamLibrary\steamapps\common\Forsaken Remastered\selkis_x64.exe () [Datei ist nicht signiert] FirewallRules: [{15CB0CB7-6FBC-4407-BA16-93B8101D8729}] => (Allow) D:\SteamLibrary\steamapps\common\Forsaken Remastered\selkis_x64.exe () [Datei ist nicht signiert] FirewallRules: [{9360F218-53C2-4FB1-B593-9C75593CE395}] => (Allow) D:\SteamLibrary\steamapps\common\BZ2R\battlezone2.exe (Rebellion, Ltd.) [Datei ist nicht signiert] FirewallRules: [{D1B856F7-E6E6-41C7-B79D-2E61549DD013}] => (Allow) D:\SteamLibrary\steamapps\common\BZ2R\battlezone2.exe (Rebellion, Ltd.) [Datei ist nicht signiert] FirewallRules: [{3EFE72CB-E068-428C-80E0-85836011C7D2}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{886A9651-9802-4957-B2D6-DD6A3E0D0C37}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{4F734D08-B222-4CA2-BFEA-CCD4AA1DD372}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer Chaosbane\Exe\Chaosbane.exe () [Datei ist nicht signiert] FirewallRules: [{ED2AC196-2096-4828-84FE-BD9DB1AB2712}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer Chaosbane\Exe\Chaosbane.exe () [Datei ist nicht signiert] FirewallRules: [{6B5C5029-E502-4B22-98C9-EFDEEB7196BC}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer Chaosbane\Exe\ResolutionsOptions.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{85BDF426-951E-4515-A01A-A5E17C23E14F}] => (Allow) D:\SteamLibrary\steamapps\common\Warhammer Chaosbane\Exe\ResolutionsOptions.exe (TODO: <Company name>) [Datei ist nicht signiert] FirewallRules: [{9CD15D14-17C8-46D0-A96C-89824D2FDC13}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe (Related Designs Software -> Related Designs) FirewallRules: [{0FC3F3F0-8EC6-4784-B1EA-261B1D15B705}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe (Related Designs Software -> Related Designs) FirewallRules: [TCP Query User{F42ABF38-9437-4194-BE7A-25C9008E6C11}E:\diablo iv\diablo iv.exe] => (Allow) E:\diablo iv\diablo iv.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [UDP Query User{D38FDE1F-61D7-4982-8AD0-A55E2C50C848}E:\diablo iv\diablo iv.exe] => (Allow) E:\diablo iv\diablo iv.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [{D5E2C53A-AC00-42BD-A2C4-E07002624464}] => (Allow) E:\SteamLibrary\steamapps\common\Street Fighter 30th Anniversary Collection\SF30thAnniversaryCollection.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{41E9AFD8-826F-4173-AF25-D68B4980B6DA}] => (Allow) E:\SteamLibrary\steamapps\common\Street Fighter 30th Anniversary Collection\SF30thAnniversaryCollection.exe (CAPCOM CO., LTD. -> ) FirewallRules: [{4C43050D-3791-42C8-BB24-951CF49E523E}] => (Allow) E:\SteamLibrary\steamapps\common\Paladins\Binaries\Win64\PaladinsEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{93A62043-34A3-4AC4-A73C-C1ED1FD23321}] => (Allow) E:\SteamLibrary\steamapps\common\Paladins\Binaries\Win64\PaladinsEAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd) FirewallRules: [{C52BC2B6-6478-4D49-87E0-4CD7C2402583}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBitEAC.exe () [Datei ist nicht signiert] FirewallRules: [{B242638B-AAF9-49AB-ADA5-1A9BCC1A999A}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBitEAC.exe () [Datei ist nicht signiert] FirewallRules: [{7D99F96D-B11C-4BAF-97C8-CDEEAF99CFEF}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{E589C7E5-8A26-4D16-B6E5-1FB6E8FE18CC}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat\EasyAntiCheat_EOS_Setup.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{1F871B3A-AFB9-48CA-B378-D79394067801}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBit.exe () [Datei ist nicht signiert] FirewallRules: [{C41915F4-D3C8-457B-8FBD-124C8070617C}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\BattleBit.exe () [Datei ist nicht signiert] FirewallRules: [{CBB31381-5919-4785-A71D-9E7F2E6A162A}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{4370EC01-89F9-4C8A-A4B4-D5668DCB99C8}] => (Allow) E:\SteamLibrary\steamapps\common\BattleBit Remastered\EasyAntiCheat.exe (EasyAntiCheat Oy -> Epic Games, Inc.) FirewallRules: [{474B0AA2-D7D0-48D5-B893-1CD529234FC3}] => (Allow) E:\SteamLibrary\steamapps\common\Assassins Creed Origins\ACOrigins.exe (UBISOFT ENTERTAINMENT INC. -> ) FirewallRules: [{000EB0AA-005F-4ECF-914F-AAD2F813BD68}] => (Allow) E:\SteamLibrary\steamapps\common\Assassins Creed Origins\ACOrigins.exe (UBISOFT ENTERTAINMENT INC. -> ) FirewallRules: [TCP Query User{2CFCCBF5-DE7C-486E-AE17-5EF0223F2325}D:\blizz\overwatch\_retail_\overwatch.exe] => (Allow) D:\blizz\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [UDP Query User{2E56F60C-D6F6-4DB8-B97C-610E748CA1F4}D:\blizz\overwatch\_retail_\overwatch.exe] => (Allow) D:\blizz\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment) FirewallRules: [TCP Query User{9D413D34-CE6C-4257-9D37-049EE89CF59E}D:\blizz\starcraft ii\versions\base90870\sc2_x64.exe] => (Allow) D:\blizz\starcraft ii\versions\base90870\sc2_x64.exe => Keine Datei FirewallRules: [UDP Query User{B385ED4A-6C2C-4979-B5EE-77C3085FD5B1}D:\blizz\starcraft ii\versions\base90870\sc2_x64.exe] => (Allow) D:\blizz\starcraft ii\versions\base90870\sc2_x64.exe => Keine Datei FirewallRules: [{E806C70D-807F-4AB3-8955-9DA5F8B64777}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{A010F029-7548-4728-8C97-C8302B6A5635}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{F53F8D9F-DC1F-487F-8554-1D6308E02D49}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{396AFB3C-C797-456F-B006-13F8BEB1436A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation) FirewallRules: [{7AB437F8-C045-4E59-85F4-4EFF959A746B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{168CB79E-8463-4CBA-B669-F32DB4AD279F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation) FirewallRules: [{5DD9F0DD-5813-4BC7-BA13-0F9C5FDBC652}] => (Allow) E:\SteamLibrary\steamapps\common\SMITE 2 Playtest\Windows\Hemingway.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [{B73A385D-3A65-480F-87ED-3811624F0E3F}] => (Allow) E:\SteamLibrary\steamapps\common\SMITE 2 Playtest\Windows\Hemingway.exe (Epic Games, Inc.) [Datei ist nicht signiert] FirewallRules: [TCP Query User{9A976402-2BDE-4EC4-9D5D-1436C8F7D488}D:\steamlibrary\steamapps\common\smite\binaries\win64\shippingpc-battlegame.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\shippingpc-battlegame.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [UDP Query User{6064E003-5AA4-4421-8439-DC878FA783BF}D:\steamlibrary\steamapps\common\smite\binaries\win64\shippingpc-battlegame.exe] => (Allow) D:\steamlibrary\steamapps\common\smite\binaries\win64\shippingpc-battlegame.exe (Hirez Studios, Inc.) [Datei ist nicht signiert] FirewallRules: [{3FE35BA6-4693-491A-9135-51372135AA7C}] => (Allow) E:\SteamLibrary\steamapps\common\Uno\UNO.exe (Chengdu Ubisoft Software Co., Ltd. -> ) FirewallRules: [{E24C10CC-01EC-4600-AD7C-883A68B8009F}] => (Allow) E:\SteamLibrary\steamapps\common\Uno\UNO.exe (Chengdu Ubisoft Software Co., Ltd. -> ) FirewallRules: [TCP Query User{80035A2D-7A42-4302-9B73-81D2FE967F25}D:\blizz\starcraft ii\versions\base92174\sc2_x64.exe] => (Allow) D:\blizz\starcraft ii\versions\base92174\sc2_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.) FirewallRules: [UDP Query User{6280A7EB-8AC0-4106-91B6-CF0EB4370717}D:\blizz\starcraft ii\versions\base92174\sc2_x64.exe] => (Allow) D:\blizz\starcraft ii\versions\base92174\sc2_x64.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment, Inc.) FirewallRules: [{C4D62E13-7D53-462D-9C12-CC515D8CED67}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{21051DDD-0F2D-46C9-A194-F7A87D66A6B6}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{0B2D4B85-273A-4969-AA18-D0815593735C}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{6BF2D954-5EE2-4F48-B9E3-6A174FA08661}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAConnect_microsoft.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{06CFF33F-3079-4A95-A5EE-6226EF943769}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{68AA9A97-51DB-49ED-A8A1-3ABD9E07D661}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EADesktop.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{3B9098DF-A906-4761-8C49-C1BE436EE96C}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{143ABDFA-10F6-4FA8-893A-8128E902B11F}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EAGEP.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{6C13D4EC-3778-4710-A484-7D6FD25E941D}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{465B3FC8-6972-460B-A7DF-E04D3B32302F}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALocalHostSvc.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{75240A99-68F0-42B4-B50D-EBAF6C00C535}] => (Allow) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALaunchHelper.exe (Electronic Arts, Inc. -> Electronic Arts) FirewallRules: [{8012592E-54CF-4756-9374-704EA6690AA9}] => (Allow) E:\SteamLibrary\steamapps\common\World of Tanks\wgcs_api.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [{26290A90-78A1-40B2-9C5F-B1112646D080}] => (Allow) E:\SteamLibrary\steamapps\common\World of Tanks\wgcs_api.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [TCP Query User{4264FBEA-DBFF-4CF7-AFC2-1C73613E6F56}E:\steamlibrary\steamapps\common\world of tanks\eu\win64\worldoftanks.exe] => (Allow) E:\steamlibrary\steamapps\common\world of tanks\eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [UDP Query User{D61FAB4B-4AEB-4CFC-B9E0-F25C6B4629EB}E:\steamlibrary\steamapps\common\world of tanks\eu\win64\worldoftanks.exe] => (Allow) E:\steamlibrary\steamapps\common\world of tanks\eu\win64\worldoftanks.exe (Wargaming Group Limited -> Wargaming.net) FirewallRules: [{A4F6D745-6354-4A22-A31E-15C981B3AEDD}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{7466B6AF-5C34-4A99-8B21-1C10E3DD99E8}] => (Allow) C:\Program Files (x86)\Overwolf\0.254.0.13\OverwolfBrowser.exe => Keine Datei FirewallRules: [{B22759F9-4D2A-4765-B259-D77CC1A0C7BD}] => (Allow) C:\Program Files (x86)\Overwolf\0.254.0.13\OverwolfBrowser.exe => Keine Datei FirewallRules: [{D984D301-AA32-4F2E-8B37-5FD145333C75}] => (Block) C:\Program Files (x86)\Overwolf\0.254.0.13\OverwolfBrowser.exe => Keine Datei FirewallRules: [{1BB5A3CB-B774-4A91-969C-CA0B9E3B60B8}] => (Block) C:\Program Files (x86)\Overwolf\0.254.0.13\OverwolfBrowser.exe => Keine Datei FirewallRules: [{BDCD9D9D-02B9-45A0-B9E0-F54665F68A29}] => (Allow) C:\Program Files (x86)\Overwolf\0.256.0.2\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{A3CF7552-791A-43BD-808B-83CFE6D6D509}] => (Allow) C:\Program Files (x86)\Overwolf\0.256.0.2\OverwolfBrowser.exe (Overwolf Ltd -> Overwolf LTD) FirewallRules: [{688C7F3D-7775-47AF-AD37-8132DCD10730}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{9A2EEB17-100F-4568-9C57-66DBC2CF9052}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{2D589699-DDDA-4EB3-BD85-CA2282D3A6A8}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{3144D810-BFAC-48B0-BCA0-93A167FD7A07}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{E1BCB7A6-CF26-409E-B8EF-0E9D63A959B6}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{17C6500C-0193-49D2-AB3B-DA57A715D99C}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{1BBA0628-3310-4420-8728-24D8A3F66293}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{D2FA4F5D-C401-4094-82EE-0BECCA35AA39}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{7A0872CA-8B4F-47DB-A99F-4AA9BA091231}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{C1C9E725-5DA2-4059-A0C3-2786F05AF8C0}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.243.420.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) FirewallRules: [{DA94354B-C3BA-4797-8F2C-B7403ED8BF38}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{3DD3FDBA-2731-46A5-B19B-699FE2017C4D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{70907312-BA75-4133-AB0C-90405863D42E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{50DB615A-6662-46AE-80A5-03E875B6D601}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.125.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.) FirewallRules: [{514810ED-AC5E-4B14-861A-43C85DC885AF}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\127.0.2651.98\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{6680F7ED-8414-47FB-B2BD-445678B02F0E}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{F9DEF32D-0690-4135-B598-88494B0EEBBF}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24193.1805.3040.8975_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation) FirewallRules: [{D35FC087-4921-425C-A83A-14189AF3E15A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC) ==================== Wiederherstellungspunkte ========================= 27-07-2024 18:33:25 Geplanter Prüfpunkt 05-08-2024 17:47:30 Geplanter Prüfpunkt 08-08-2024 18:51:12 Windows Modules Installer ==================== Fehlerhafte Geräte im Gerätemanager ============ ==================== Fehlereinträge in der Ereignisanzeige: ======================== Applikationsfehler: ================== Error: (08/11/2024 06:25:10 PM) (Source: .NET Runtime) (EventID: 1026) (User: ) Description: Anwendung: Razer Synapse Service Process.exe Frameworkversion: v4.0.30319 Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet. Ausnahmeinformationen: System.ObjectDisposedException bei System.Threading.SemaphoreSlim.CheckDispose() bei System.Threading.SemaphoreSlim.Release(Int32) bei Synapse3.UserInteractive.ForegroundWindowMonitor+<ProcessForegroundWindow>d__20.MoveNext() bei System.Runtime.CompilerServices.AsyncMethodBuilderCore+<>c.<ThrowAsync>b__6_1(System.Object) bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object) bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean) bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem() bei System.Threading.ThreadPoolWorkQueue.Dispatch() bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback() Error: (08/11/2024 06:23:04 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.. Error: (08/11/2024 06:23:04 AM) (Source: VSS) (EventID: 13) (User: ) Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.] Error: (08/11/2024 06:23:04 AM) (Source: VSS) (EventID: 8193) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.. Error: (08/11/2024 06:23:04 AM) (Source: VSS) (EventID: 13) (User: ) Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.] Error: (08/10/2024 07:08:55 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: Die Speicheroptimierung konnte erneut optimieren auf Volume (E:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A) Error: (08/02/2024 06:44:50 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: ) Description: Die Speicheroptimierung konnte erneut optimieren auf Volume (E:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A) Error: (08/02/2024 06:17:50 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: ActivePresenter.exe, Version: 8.5.7.0, Zeitstempel: 0x62820239 Name des fehlerhaften Moduls: ucrtbase.dll, Version: 10.0.19041.3636, Zeitstempel: 0x81cf5d89 Ausnahmecode: 0xc0000409 Fehleroffset: 0x000000000007286e ID des fehlerhaften Prozesses: 0x11218 Startzeit der fehlerhaften Anwendung: 0x01dae4f725c3c89c Pfad der fehlerhaften Anwendung: C:\Program Files\ATOMI\ActivePresenter\ActivePresenter.exe Pfad des fehlerhaften Moduls: C:\Windows\System32\ucrtbase.dll Berichtskennung: 053bed3d-c6fb-4e4e-9ccc-690a2d91fa28 Vollständiger Name des fehlerhaften Pakets: Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Systemfehler: ============= Error: (08/13/2024 07:56:35 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT) Description: Das Secure Boot-Update konnte eine Secure Boot-Variable mit dem Fehler -2147020471 nicht aktualisieren. Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931 Error: (08/13/2024 04:45:59 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-P3NKH8T) Description: Der Server "Microsoft.AAD.BrokerPlugin_1000.19041.4239.0_neutral_neutral_cw5n1h2txyewy!Windows.Security.Authentication.Web.Core.BackgroundGetTokenTask.ClassId.WebAccountProvider" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (08/12/2024 06:39:01 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-P3NKH8T) Description: Der Server "Microsoft.Windows.ContentDeliveryManager_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (08/12/2024 06:17:20 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT) Description: Das Secure Boot-Update konnte eine Secure Boot-Variable mit dem Fehler -2147020471 nicht aktualisieren. Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931 Error: (08/11/2024 08:18:27 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-P3NKH8T) Description: Der Server "Microsoft.Windows.ContentDeliveryManager_10.0.19041.4239_neutral_neutral_cw5n1h2txyewy!App.AppXwdz8g2fxr36xz0tdtagygnvemf85s7gg.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (08/11/2024 07:02:12 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-P3NKH8T) Description: Der Server "Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden. Error: (08/11/2024 06:00:01 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT) Description: Das Secure Boot-Update konnte eine Secure Boot-Variable mit dem Fehler -2147020471 nicht aktualisieren. Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931 Error: (08/11/2024 05:15:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung. Windows Defender: ================ Date: 2024-08-12 18:35:27 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {B6DC9F5A-8798-4496-8017-B99323657653} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Date: 2024-08-09 20:14:03 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {2F705CBF-DD9C-4160-BDE4-2EA36FA5331A} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Date: 2024-08-07 18:38:17 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {0A9AFAFF-7394-49D8-BE33-6F5CD3966856} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Date: 2024-08-06 04:44:46 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {E0FD745F-EE63-4AE0-8A35-6B048740F52A} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Date: 2024-08-04 08:46:00 Description: Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet. Überprüfungs-ID: {D0F0A367-6593-40FD-B910-492837DB651D} Überprüfungstyp: Antimalware Überprüfungsparameter: Schnellüberprüfung Benutzer: NT-AUTORITÄT\SYSTEM Event[0]: Date: 2024-08-14 04:17:50 Description: Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen. Dateiname: C:\Windows\SystemTemp\chrome_url_fetcher_11672_931636110\-8a69d345-d564-463c-aff1-a69d9e530f96-_127.0.6533.101_all_adrrbni7hsmxgrrpar4q67z5bosa.crx3 Sha256: 2349895ab055e0f66a5adb267ac32a763452bb5b90e4ff551cca3308b7a4d1e5 Aktuelle Sicherheitsversion: AV: 1.417.92.0, AS: 1.417.92.0 Aktuelle Modulversion: 1.1.24070.3 Fehlercode: 0x80508016 Date: 2024-04-14 05:44:39 Description: Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen. Dateiname: C:\Windows\SystemTemp\chrome_url_fetcher_25820_2119226686\-44fc7fe2-65ce-487c-93f4-edee46eeaaab-_125.0.6407.0_all_pjba72w7igxq6c7u6f5fm6otby.crx3 Sha256: 68e47ddbc8505a92865b35804d3f9b570cd2a3474a3d6cb71bdbac4ca4399214 Aktuelle Sicherheitsversion: AV: 1.409.242.0, AS: 1.409.242.0 Aktuelle Modulversion: 1.1.24030.4 Fehlercode: 0x80508016 Date: 2024-02-07 19:18:12 Description: Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features. Feature: Bei Zugriff Fehlercode: 0x80004005 Fehlerbeschreibung: Unbekannter Fehler Ursache: Die Elementenüberprüfung des Filtertreibers wurde übersprungen, und er befindet sich nun im Durchleitungsmodus. Dies ist möglicherweise auf Ressourcenmangel zurückzuführen. Date: 2023-07-08 16:48:15 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten. Neue Version der Sicherheitsinformationen: %Vorherige Version der Sicherheitsinformationen: 1.391.3926.0 Update Source: Microsoft Update-Server Sicherheitstyp: AntiVirus Updatetyp: Voll Benutzer: NT-AUTORITÄT\SYSTEM Aktuelle Modulversion: %Vorherige Modulversion: 1.1.23050.3 Fehlercode: 0x80240438 Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support". Date: 2023-05-16 20:20:03 Description: Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren. Security Intelligence versucht: Aktuell Fehlercode: 0x80501102 Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". Security Intelligence-Version: 1.389.1489.0;1.389.1489.0 Modulversion: 1.1.20300.3 CodeIntegrity: =============== Date: 2024-05-31 16:51:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9147\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files\Common Files\Twitch\Studio\Versions\0.110.8434.1188\TwitchNativeOverlay64.dll that did not meet the Microsoft signing level requirements. Date: 2024-05-31 16:51:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9147\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Overwolf\0.250.1.1\OWClient.dll that did not meet the Microsoft signing level requirements. Date: 2024-05-31 16:51:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9147\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files (x86)\Overwolf\0.250.1.1\ow-graphics-vulkan.dll that did not meet the Microsoft signing level requirements. Date: 2024-05-31 16:51:11 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9046\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files\Common Files\Twitch\Studio\Versions\0.110.8434.1188\TwitchNativeOverlay32.dll that did not meet the Microsoft signing level requirements. Date: 2024-05-31 16:51:05 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9044\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files\Common Files\Twitch\Studio\Versions\0.110.8434.1188\TwitchNativeOverlay32.dll that did not meet the Microsoft signing level requirements. Date: 2024-05-04 20:36:40 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Users\timof\AppData\Local\Discord\app-1.0.9041\Discord.exe) attempted to load \Device\HarddiskVolume6\Program Files\Common Files\Twitch\Studio\Versions\0.110.8434.1188\TwitchNativeOverlay32.dll that did not meet the Microsoft signing level requirements. Date: 2023-11-30 18:02:17 Description: Code Integrity determined that a process (\Device\HarddiskVolume6\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume6\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. ==================== Speicherinformationen =========================== BIOS: American Megatrends International, LLC. 1.81 08/05/2021 Hauptplatine: Micro-Star International Co., Ltd. MPG B550 GAMING PLUS (MS-7C56) Prozessor: AMD Ryzen 9 5900X 12-Core Processor Prozentuale Nutzung des RAM: 33% Installierter physikalischer RAM: 32693.39 MB Verfügbarer physikalischer RAM: 21858.02 MB Summe virtueller Speicher: 34741.39 MB Verfügbarer virtueller Speicher: 21440.14 MB ==================== Laufwerke ================================ Drive c: (Windows) (Fixed) (Total:929.92 GB) (Free:615.66 GB) (Model: Samsung SSD 860 EVO M.2 1TB) NTFS Drive d: (Volume) (Fixed) (Total:1863.02 GB) (Free:250.55 GB) (Model: Samsung SSD 870 QVO 2TB) NTFS Drive e: (Volume) (Fixed) (Total:3726.02 GB) (Free:3094.2 GB) (Model: ST4000VN008-2DR166) NTFS \\?\Volume{6169946c-c0eb-46a4-8b02-9f07868e7288}\ (Recovery) (Fixed) (Total:0.49 GB) (Free:0.47 GB) NTFS \\?\Volume{77b40c68-821c-43e5-8c06-4cc02e91b91b}\ (EFI) (Fixed) (Total:0.97 GB) (Free:0.95 GB) FAT32 ==================== MBR & Partitionstabelle ==================== ========================================================== Disk: 0 (Size: 1863 GB) (Disk ID: 64E0324B) Partition: GPT. ========================================================== Disk: 1 (Size: 3726 GB) (Disk ID: 64E0328D) Partition: GPT. ========================================================== Disk: 2 (Size: 931.5 GB) (Disk ID: 64E030AE) Partition: GPT. ==================== Ende von Addition.txt ======================= |
![]() |
Themen zu Defender Meldung |
administrator, adobe, dateien, defender, firefox, geforce, home, internet, microsoft, mozilla, nvidia, ordner, pdf, performance, prozesse, registry, scan, schutz, services.exe, software, svchost.exe, system, temp, updates, windows |