Malwarebytes Fund

januskopf198 · 28.10.2024, 11:28

Hallo und guten Morgen,

bei meinem turnusgemäßen Scan hat Malwarebytes heute leider was gefunden.

Hier die Malwarebytes Log-Datei:

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 28.10.2024
Scan-Zeit: 08:52
Protokolldatei: 9f16e618-9501-11ef-8246-d8cb8ae0c9b8.json

-Softwaredaten-
Version: 5.1.11.139
Komponentenversion: 1.0.5072
Version des Aktualisierungspakets: 1.0.90981
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.5011)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-2M6NKLL\Chris

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 279077
Erkannte Bedrohungen: 205
In die Quarantäne verschobene Bedrohungen: 205
Abgelaufene Zeit: 14 Min., 15 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 1
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ServiceHelper.Agent.exe, In Quarantäne, 6380, 799263, 1.0.90981, , ame, , 31E093D3D457A7DD2368A81E829B7A6A, 638A4099E4E3CC8E25091C2D624CC28F3A17FE52946CB03026CC6816CBEEC0F3

Modul: 1
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ServiceHelper.Agent.exe, In Quarantäne, 6380, 799263, 1.0.90981, , ame, , 31E093D3D457A7DD2368A81E829B7A6A, 638A4099E4E3CC8E25091C2D624CC28F3A17FE52946CB03026CC6816CBEEC0F3

Registrierungsschlüssel: 3
Adware.Outbyte, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B38B494B-46F8-4765-8D92-31B8F10D8FD3}_is1, Löschen bei Neustart, 6761, 799466, 1.0.90981, , ame, , , 
Adware.Outbyte, HKLM\SOFTWARE\WOW6432NODE\OUTBYTE\Driver Updater, Löschen bei Neustart, 6761, 799279, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\OutbyteDUHelper, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , , 

Registrierungswert: 1
Adware.Outbyte, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{B38B494B-46F8-4765-8D92-31B8F10D8FD3}_is1|DISPLAYNAME, Löschen bei Neustart, 6761, 799466, 1.0.90981, , ame, , , 

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 48
PUP.Optional.Outbyte, C:\PROGRAM FILES (X86)\OUTBYTE\DRIVER UPDATER, whitelisted, 6380, 799263, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Data, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\PROGRAMDATA\MICROSOFT\WINDOWS\START MENU\PROGRAMS\OUTBYTE\DRIVER UPDATER, Löschen bei Neustart, 6380, 799264, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\PROGRAMDATA\OUTBYTE\DRIVER UPDATER, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-18, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-49, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-57, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-17, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-38, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-16, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-25, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-53, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-42, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-50, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-55-58, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-01, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-22, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-40, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-52, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-02, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-39, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-46, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-55, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-18, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-50, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-01-17, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-07, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-45, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-55, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-23, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-35, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-57, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-04-56, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-24, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-35, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-56, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-06-21, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-01, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-22, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Distr, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Temp, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 

Datei: 152
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Data\Applications.dat, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , DFDFCCAEFC0409B3E2B8CFFB40EDA425, 1009C0E380EFAA847FC3332708382B5C6383D4C85E75C567458CC5292F5BE6F6
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Data\IgnoreGlobal.txt, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 7A096328ABB301CB30E6332EFE9A3FD9, 175D5C776D7019C6E879934C88E1ADDA5DF88990739CB800ED5C98A9538D7E00
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Data\Jingle Updater.mp3, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 98C581A9FE1F433046550538A400E960, E3D23393CBD7E9CD4EBCABDB8E9272C8121AE60E9E54E6035686DDD749531A5B
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Data\main.ini, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 83A0A5827657F7A32CACD4CA6DE35971, 06334D04C199A0BB3ED5CD467F3E710ECF816CBB9638B2A020532054A1196644
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\deu.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , E299326CAC8DD52600F22B840E51AD34, F8D3B971CE4D44D21A5894EC772A30541784B5D0C1C34BE2333C7DB6FB90CED3
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\enu.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 64E35C41140F43812A82BF887E5B1B12, 56CE8A01E3FBB530F06D17B18C5F42DD9ADD634480CA9F48EFDCDD72AD424B5F
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\esp.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 1090487F9F2869083965F93745AD511F, BE65DB125D2D9631CCEE0643F2491A3AF6C3C907532E52A30DEE8CB06A385341
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\fra.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , E9F1A3E154CA774352BC3006A565A3AB, DA26B2D8C80B06B212332A93FF81F9D2A65D22492E5A2A01E41FBF081B6ACDF3
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\ita.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 98EF8393EE4443989BA89F0F9CA61206, DE16F6393902BC9185AA343B3F6CF4D15750C3B3491084D718C22FE22A15A89D
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\jpn.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 36240E0F4AFEA42ABC6FE61E368CC2EE, 541B6B36894C3E8DA26DD5298610A460C35E01E522D257242A2DC1FF9FF42AC2
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Lang\ptb.lng, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C5CB17FFC5C79A8A56DAEDF118C80CDE, 2FBCE711B0E228EFAFE0699518C58AF9593A79319AC70242FEE0F3103B049654
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\AxComponentsRTL.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 648232121AA4EB3C35ADC6B3325DE281, C7C4BC8004B17A0C8972D52E7D6915552FA39D70569B4F88BEFA189974464198
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\AxComponentsVCL.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , F7917C8D6BEC25D8F8D8D2765437E67E, A733F5886D7B3B8EB6B774232647C2B74FF168709F3E219264193618CC27B32B
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\BrowserHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , F9AD9273F216C856534090599F9BE116, 43D01A076BBDF9E95CB3B2CB7037B73DD50C713C6D06BB20281BCC9A7FDDB602
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Chat.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 8027500F64BED2D6BDCFF653FE2685C0, E1E69E64CBDFAB8B29B1402569AABDDCD5E294B991A36E396639AB7FC4931043
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\CommonForms.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , FC4D387C4A11BC35616DC8FDF3BF3FCF, 1A1F1900E4571BB0D1941CE6AD25D0EA7F0B4B578317EF9E3AAF545E72B0B072
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\CommonForms.Routine.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 9411BB90F297089096C0BF5F0183D1E4, 55591BE43B2007C0092ECFFD369222E359A03960D24936C492ACE502A2E3A8F1
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\CommonForms.Site.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 17292D8A6921F57A03C2871CA3269FE2, A988D73274A53E81BA3180F61DA801AFA4E809F6E026273584A07219923DE9A6
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\CustomDllSurrogate.x32.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 14CC1C381AFB18C21DCBF951CE58CDC2, F42ED33B8EEE2DB8EAB4180F89992B3E16A54D785CAA82BD489B4A1A2FE7F887
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DebugHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , A5C64700869F282E0F61B7593A29FF20, F7D21F8F8330BC0C543CF0B713EDDF94EE3CC01D9B703EE8172A5ABF7613700C
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DiskWipeHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , A4931899E70EB596ABC7AD50C48B5991, 8FE31FD1B7D19D6E09C1C6A449526A467EFE8B31BB4F675BDAF9200542118443
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DriverInstaller.x32.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 57F2B47BF5F5E28327CFAA9849FD6DF2, 137D3277F3C4BBFC33D6ABCFBE9F015B86E898C6224CFC83499868673E50735E
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DriverInstaller.x64.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 4CBB0413054D2E481DC99E5FBA584224, 6046883888BA25BA0F40180BA1DD996F6F518CD646FAA60F5F5BB8C781CAFEA7
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DriverUpdater.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , ACCADCECDAFB9B4EAB738C92A562A85E, F03D44C506E19411971B43B5E584A1EBDFEC3B380E57383644D9975A454138D6
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\DriverUpdaterHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 49F23DE72EC68535005BCE20C2BFEB78, 2BCE4A1E68F574743A38639B4C87B4F51CEEEDB9E1576A5C0017433FC1F6F2A7
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\EULA.rtf, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C8D22E22F0D65D6E12215FDB684E0351, FDD970229CF6FDA7794C74F8048CAA473309784F3A0B77DA661024F556846CE9
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\FileRecoveryHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 99AD25397FE63D9BAAB922F802A87563, 69CC757D5D79500EE9951B53669EF88AC71D360E6F1674C34D74137A043393F8
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\GoogleAnalyticsHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , D74275B74AC055DE76686559AC054E5C, 055D7FF45ACA473386EF9F94BB3DD4CBB3A75163A64859F271DA5A55EA9DBAF8
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\GoogleAnalyticsHelperIV.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 786D2C65357F90F4AECD81B8D67065AA, 5D871B4FDCB7B92624A7D1A1B1D4A6044A54E4F0BCFFD7643F6ACE2CA4F038E8
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\guid.dat, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , A59302A926C6649EA881864ED4396434, 8F1D71307F5560CDD55D588632B2BDD7B938776D1E40B05B76F43A49D4D0A738
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\HWHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 5E895C01DED5ADA4FCC13FC8C6C9E886, EC05C9C649952D0815468A3268133615F395B2F60A6240F15ED3E1E6F1FB2C3A
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\libeay32.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 59A621FA3796BBAEDCBC9FFB5FF2A202, 733B7363DBEC4125E9FC849F9AE11D9711977F40BF80E35B847E865114498DF3
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\LibraryHelper.Agent.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 8D05C6185635609944EEBFCB5AAF4957, 7D60512586660EDD49B01C0F3E35AE7E1681DB15B06DE2F99780416ECF2E8666
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\Localizer.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 8D0C4995F0A02347658B05F46D184CC8, F631E33B1D5B5B7934CD31D0B55B30AFAB7CBB0F040B6B72A4D25A5CE948C7E6
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\OxComponentsRTL.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , A796CE84FCE0DABF701DF3EA1988CFF9, 6710375E0BF4BD9CCC7B488508B111C9E585F8A3B2FF8893591F28A91A6B5A89
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\PerformanceMonitorHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , F3A8D32C50B8E9B50AD0B7D701A4D830, F5BA535AC63042268DE990F410F848C22B8A7CE3F9DB8BB029311ADA22208596
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\PopupManagerHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , B413B83A31B20CCB9E65732E6B681716, 3A7A20DBC718BA4B23EAA6D19149EA27CA437DF6418E62657DE3FBF349DFD86A
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\RescueCenterForm.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , F7B6E6AB52FC686DFF5EC20487EFE01C, 38C9E701B2CA8055868B91C2E3A58836622B8881A7961DEF1D1F5150446EAF2F
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\RescueCenterHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , B7CDA90EF4187113D0C474AD5BEC7786, 1EC37E89D4675964A0DE2207D6E57BED35305279AE5C99FE21F99CDC2D6B5C2B
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\rtl250.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 949857843A9672068FFA09E5748907B8, C3F2E697EE50B77D22DD6C1350FAD4CCE486AB41E04862C6F0E4E174FBE73667
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\SendDebugLog.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C1D33D98BF9280AB2C10ABDA365249AA, B297DB4A1AFB7492153F5B1FC7BACC7E5E420D21D848991D6CE18E69093DE8B3
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ServiceHelper.Agent.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 31E093D3D457A7DD2368A81E829B7A6A, 638A4099E4E3CC8E25091C2D624CC28F3A17FE52946CB03026CC6816CBEEC0F3
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ServiceManagerHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C5D8627CF1944D3E10F0EDA38E2B359C, 5272BCC5F678053DEEB07D86D8EA8AA94FD1DC5E55BC4AD2D98FDE2A9E92CA3E
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\sqlite3.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 3E2C3334B2EC58813846AE3E13BEEEB5, EE21EC17BEBEFC655C7F48105DD16B2CC3D16691AE14CFD88CCF96899429C0C4
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ssleay32.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , FB932C578286CC25DA04EC0FF97869BA, 074B9665747AA19C066E88C861EB679D47BD02880B616638DB364CC3E4AE1F25
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\SystemCleanerHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 23283819023423B19AE9670A64734580, 361E76906A739EF9D51D3DA4A3F1C8FD148CC576DAFA4A99A589308DF8411AA7
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\SystemInformationHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 8FC26E2D97757B1AACBBDD8832204164, F29E2310C0F905C1DC7BC01DE88F3B5F08B33F40E3F5CB7215A0CADCA3031113
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\TaskSchedulerHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 825AE57444FADCF8FF025680C13556BF, 47AE35F35C78FD5185DDF944B95A4B4C59CB93CACBC3EC32FD249A3741348EA2
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\ToolsHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 5ACC28F8733FC1419D0CAE4340EBE2C9, BFF97145FDEA5ED7DCEC0BF1A56C195C08EE5CBC40C83751E4B7FBB3EFE58CC9
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\TweakManagerHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C0867F774EAB5AF1982227371CC4A261, C5BD42C7CA7B68B37E41C9C7EC44248E168D1D2F5D980CBF69F8DE83E81E3297
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\unins000.dat, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , BE4544C3A65F357D8E775BBFE06A4012, B93DA8E06BC48F253EE1D8A321423A86448865353D845C6B8044821F9498EC03
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\unins000.exe, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 5A4DEAAE45B1DC5103C8F3B6003F5097, 01E2B32B2D3BE32DA04BBBBECD7313F84DAD9FA5E6574C3C5C698C6563242290
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\unins000.src, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , ADB99DC9732B0FB6D6DD7B58401F4C75, 2336468E6834223E0508AAE2A01E285014CB53F59F446148FCB55F165362B8F9
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\vcl250.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 9DBEC7468E48886942E10EBF16F823C7, 6C591BACBCE1407A6D7A0B7518154F4C91F1805AB43FE813820E7FDC9FD9DDF2
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\vclie250.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , 0464DEAEB19FA1754B7B19ED80ECAC3C, EDFE1D44B24C1D80E0246EDC731C8121515D2A2CE667F442B7FE7BADA0D14A76
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\vclimg250.bpl, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , C52BCA5F1ABC0F3E21902648994F14CE, BF5BAB8842F5CDF533E78DBC8AFA81C4731E8F6E3F629C91EDC6C26E5F7642AA
PUP.Optional.Outbyte, C:\Program Files (x86)\Outbyte\Driver Updater\VolumesHelper.dll, Löschen bei Neustart, 6380, 799263, 1.0.90981, , ame, , BA05DCE5837FABE398371F1C6242B638, 4889432CDDC3467E09AB9D4AC32D306BC4196394AB0A64C82C6F4DF6C6C51C69
PUP.Optional.Outbyte, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte\Driver Updater\Outbyte Driver Updater deinstallieren.lnk, Löschen bei Neustart, 6380, 799264, 1.0.90981, , ame, , 7CC508C69C46133A07288C23FE83A472, 33AE9614E228C76FE350BF62D42335CD276856421864E6986FC0017679D04321
PUP.Optional.Outbyte, C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outbyte\Driver Updater\Outbyte Driver Updater.lnk, Löschen bei Neustart, 6380, 799264, 1.0.90981, , ame, , 2DFB83C39920B43731F8BE585FE28630, 6A56ED2D06A28E136E96855E7625EC8D07EB1E79292681C0A8FB14C7DDC34712
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-18\599930bf0594137cddd7b38001bc57e5.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 47AB5F0071880B60BFF5EB81C94B8045, 9FCF7D9937D52D0FB73EE0AC856DF3B1B7CB3BCB78DB7C9ADBE3B81DCFC44988
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-18\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 693E3C65561C6A7DA1D3B1E65EA43860, 2144ABE70B0DAFA04748654B8B297C7D1068EA9405F0BA16AD07A43D7CB29B83
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-49\6d8ca6ba25788f9a305f74a42e67cc7a.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , C80DD488ACE0A1B06C576D2B55ED603E, 5F2EAA222783044E3167F52001E6CCF4406DE78F923ECC303FC505228A500C6D
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-49\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , A5DDBA7830B80A7A547C9B0572A0AEF6, 537E0ECD535CBFC542746A949F56FEE50E4D6DF5CD447F68B07DC19A17ED2DCE
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-57\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 1F92C21CA91C4FE9EEAC2C756FFCBECC, B1422AFA979F71662EDD10AEE20B100BC32DCE56D7BA4CD5DF87307D4CAD8C8D
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-51-57\cb4c94c8dd09e75113c3a828c8d0994b.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 08CA62DE4AC5EC5FDA6378F91A3F619E, A55AE05FB87FAE1E3C6164FF7361F368951AEC735955DE56B30A70D8EC46B656
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-17\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 8964157B0CFF0D422DD918B7F3A0D71D, 796777A19B514570486136769894005E8FB051F843AD88052995D315F3617538
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-17\ffb31ff54b9200ba7a9babe7f1266b56.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 074B9B7DF9FD0EF7DC3D353544A173D8, 25C1DA78427A860D9082299EA37B30DD7DE395793BFB71E663AC455E312EA5BE
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-38\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 55DE43B8782FC7ACFF6EDE8841FF167F, 89088B79ED5F13928172F08690715C4AC1669455A5496A288B7EE3E5C46E0E3B
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-52-38\d256e507db304bcc49e885335801a072.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , C747808A35ADB02C9410BDB36FEF2464, D4262F995711556E94255EC6DDB8F9AA1835A422234509B9F2B0F3A9FF4E60BB
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-16\aeff1bdb20798bc547ed23143aa58b1a.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , D65E408EA273C12C5988BE89E0D55125, 1EE306E0871C773FF1CA64B6EDBD40D7B9B11C88F4C16F2C816FDA46471D8342
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-16\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , D982BC7424B8DBBFFD14F6B32604D30A, DCD4550834566A6DACC10F39ECA5465887E2F25B1D980CC6DCDAC6214806C496
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-25\b8ae5da4eafea604e06a4133d9e1cc4d.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 76678B7DD2BB43A6663A71EF7A0DA4B4, 1112EE45173699F1F24716A1E380AECE091629698DBE36A239DB4C7B8D535570
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-25\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 4E3FDD0EFE0C63B70033167A54C47AC6, 7C17E402549EC9A1AC2172F933C5612558E339A52B2AD33213ADD640EFE1CB5E
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-53\783dae2aca14919454c49e1876f5aa9f.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , C1E9A286286C1BB4AFAAAE0BAD85DAAE, E281EB47EB6DEC26917AFA6D44FA7CD14A02D8B4CACA003478F0CD846FFE7EB3
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-53-53\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , AA821BAF33A52891C9912BD6BB7F7FE6, C7517E7A75723B2E8CBDA5FA92A3BA185A2F850CB360D33E9EAB9302002F1003
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-42\7a1bdb4d9ccf8c307adad9e5aad325a7.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 3BB954695F6925449F508FD7313B3384, F6CE0D67BBD730BFB29401B2F6D69D84E6A27E26DAC8C383ECADC1D44E986A37
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-42\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 68C520F2EB1113609333B5D3876193F6, BB9C47AB93EE640B187447AFE08E00F947B8209C2E332B85506D6636EC45D50D
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-50\3efc4e1c07eb5283d1aea999ae3fbe4b.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , A2F049A0566CD29D8D16F90294F83D08, BFB2128BD892F2B136BD630696FE60BB4B23FEF862C58A64B5F0CA2000F5CE82
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-54-50\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 620ECD22E51849BF9DE0770543685A40, F84C4A7DFA44047959F15EDE2433049C4578D56F205160D787E7F6CB1B24D599
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-55-58\07d2f8a6b1a48330bb933b5f18ac1a9d.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , CC49429D22C1D6C74D519E7C68943879, C20678B74D649418B95C26455B4BDE9ED589F269E1DA120AAD4E24F48DB8D780
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-55-58\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 0F890B6B2BD249F9F1CACB02F0806594, 550E25B9BB560B50282C81C3FAF23A2DB5D5738FE5487E53EEFD7AC50305BBFB
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-01\a43d11018735112ebaab818d86ce7a58.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7FAEF9449F0A93B490873C38638DC039, D89AEDC8D433E68B18F029EF45634C94EA57F3C5D4CE8E4AE6F213DC68886CF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-01\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , CDB52F545B9BB1A7B0B23E4BE8272D8C, 9056CE6415E4BA9CE0753551A5B7B3089A601D18CC5BA0163FC3101352DA0ED4
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-22\7587923e054ff63fc1226cc5e666cd98.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 2D6A282558ADBAFBC20204A950FE0AAE, 4A8CBF768279D3DB8FB459770EEECE308107A769AD9583BF3FBE5ECAFD8E4628
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-22\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 589A52F6BFD5EDD15BE256638CD05EDB, C19C9DB56D84534BC98E80CD1084AA8498B22C58549D9D037AD85B1F65115325
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-40\a43d11018735112ebaab818d86ce7a58.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7FAEF9449F0A93B490873C38638DC039, D89AEDC8D433E68B18F029EF45634C94EA57F3C5D4CE8E4AE6F213DC68886CF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-40\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7211AEC180B518C519331713A1E20108, 4B1FC64B102ACB5E1FD2D069E3A8C4C6C87A03591E6726DAAFB71B6C0653561C
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-52\a43d11018735112ebaab818d86ce7a58.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7FAEF9449F0A93B490873C38638DC039, D89AEDC8D433E68B18F029EF45634C94EA57F3C5D4CE8E4AE6F213DC68886CF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-57-52\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 61FFB4B9972AAAB4975811189802F004, 5D8BDD2CF4E37355C346AE1E2D4F95BC69F703C10DDF880CCBB9A6365EA75AA8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-02\07d2f8a6b1a48330bb933b5f18ac1a9d.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , CC49429D22C1D6C74D519E7C68943879, C20678B74D649418B95C26455B4BDE9ED589F269E1DA120AAD4E24F48DB8D780
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-02\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 24130ADAE9C0C0C430670B39F40A4B97, 6945B5C81A8A53B39F5C83F10CB6B538523611377E7F8FBF5A81CB0322562CC0
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-39\7587923e054ff63fc1226cc5e666cd98.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 2D6A282558ADBAFBC20204A950FE0AAE, 4A8CBF768279D3DB8FB459770EEECE308107A769AD9583BF3FBE5ECAFD8E4628
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-58-39\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 74BB2BE0B83E10BC48562E6A42432103, 76169DED8679EFE3993AB153E1E7AF968BFF481F14B354788F770E4C54EA41F2
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-46\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 244417E693BAF756B2A547E4657CFDC8, 52F2DD283E09B7132BA3119A11161E8706A68F97C06DB4AE275895CF145ED1CB
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-46\dbdc23f48c02dfbbb56cc46868da2cca.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9620D3320A8BA18D485AE39E4DB60EAD, D926616588ABCC5607D8313AA73D0F567012F6AA5369E024CE439DFA8CA3BB75
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-55\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 98346AEA74A62C99E560A8B745D40A3E, 4DBD79DC11170606F1DBDD5890CAE7E0845972F025AE80F412A17FFCC0586081
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 15-59-55\cb9616107eaad10dd918d3cc224e3ee3.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , D6ABA9A6671706F0006E8F6E7040D231, 2BAE85A989CC0C2BECD77E0B32CF2641E7F298C7D347BA6D367CAA535F9F4585
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-18\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-18\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 3F7A2BF8D26936B80A1ED002D267879F, 421AF949CD5C24472DC2BBF3ED2A0436AAD13C3ECED1517C8278CDFAF1691E79
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-50\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-00-50\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 1932DA3198C5463A84B7B6534D03339B, CFAE03E6C273E4321ED9166BD0AD74B797B2443E34968FEFED6BD1BDA2ECFDD6
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-01-17\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-01-17\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 851083FA2F79F0B649F1714A1D7BD872, 3EC58B57C73920346ED4611712A8CC022108289F3A5D42AE7B0EBD98F048153C
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-07\55c452fb99ae21d8af02e9b3725b77db.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 25EFE6B829B336BFEB0B3DE1616556EF, 06AB86D8F9EA401BF9AEC42A46C9207A4E44B060F5D92120871B07DF383508C9
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-07\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 3CC3239AE06AD4693445D5BA55258C1E, EA7EC6DF07DB7CA35DFA30A0DA0088D0C4EE0D99A38C7E504D47DACE9E56BD95
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-45\afa5a435c63415ff55dc9a1c2399bc88.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 65350830D855DDE188CE810670D4F8C2, 8E0FEDCD7F2A345E4447C84AC03F3901D30E0EAC5D1686C2B6086E107C984BBC
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-45\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 202676AE90FA8016465F04CCD35BFBE2, 063C3BA98E6BFC009757A64319DAA8ACA50CD2F230298502849D9A88BA86E151
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-55\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-02-55\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 34E47F264415A87637DCFA493CB88FD8, D955809AC45D3C6ED982E99F4680E83AF671525A3D01896A4F17D9FCC95CD914
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-23\4a5cba7b09e3d1bf5f204eff747c0f57.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 3E7A44E212BEAEF674A56A17E73A175C, D80B89BD16A060F9EF61FC51E84AD602D3645C956AE2ED12AA971ABAE865A98A
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-23\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , C0D46247865B657448115073D686A16C, 1566F557D042EAD0AB17BA3603145B56EE0E499972A6655E2354190AA90BA34C
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-35\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-35\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 235D9F97CA39DE01D2B59662AE2A098B, 9E2796D9545DE2608858AA626AEC658004D73F51C46C3DBFF6CFB7E222CC65D5
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-57\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-03-57\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 65E6C8A1BEA76DD5BDA0D05053919C30, F615FDD569B5395351D88FEF00935450DCBA5A636310111959EE61DE72F41178
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-04-56\7587923e054ff63fc1226cc5e666cd98.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 2D6A282558ADBAFBC20204A950FE0AAE, 4A8CBF768279D3DB8FB459770EEECE308107A769AD9583BF3FBE5ECAFD8E4628
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-04-56\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , B0FFD6D0ACE3253997C92DCA93420221, EAF5C05D62A2E758C85F85E4C2A8BD5285538C6E647623E4BE71181272493D8A
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-24\a43d11018735112ebaab818d86ce7a58.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7FAEF9449F0A93B490873C38638DC039, D89AEDC8D433E68B18F029EF45634C94EA57F3C5D4CE8E4AE6F213DC68886CF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-24\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 3C71A5D626F85CDF230E97A0789EFCC0, 08C5ABC6650654AB8208B788A2714B01C95E4AF91E810A7DF65867EA4730CE43
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-35\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-35\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9E902C81A78D77BF5A22465C29193784, F57E14FEBCC0224CFCB5753FED1AB8CAB7C836F9183E187A026F795281381209
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-56\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-05-56\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 549D37FBA81D34E286BF657470857D56, C7C425F4A4C7B67B040E0193F6E372C34C46E32E5008391DB13BFF32754D7F14
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-06-21\00eb9cc80783274580501518e230bbb2.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 9AC32F68FD5FFA2C84555CD9A5C78DFE, 628930BAA8E70432BA796854F17E68772B9F9BA5D839C2C17C641DA573BEC2D8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-06-21\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , A9AB574AA1532EDEC5F0540ED84F5740, 7A1E5D4422F61CFD18BADECE5BD40C129839B0E0B110FD5320ACB52DD6CCF78A
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-01\7587923e054ff63fc1226cc5e666cd98.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 2D6A282558ADBAFBC20204A950FE0AAE, 4A8CBF768279D3DB8FB459770EEECE308107A769AD9583BF3FBE5ECAFD8E4628
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-01\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 453D74385B37E6F3417BB21EEC362039, 0CFF4025D4339704456A72EFA70F5652E65524EDF38DDE5A92F6135DDBAEA791
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-22\a43d11018735112ebaab818d86ce7a58.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7FAEF9449F0A93B490873C38638DC039, D89AEDC8D433E68B18F029EF45634C94EA57F3C5D4CE8E4AE6F213DC68886CF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Backup drivers\08.10.2024 16-07-22\backup_info.json, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , B903506CC901CCCDA84E50DF39D1BE91, A85948E9FB7BDF49FAD75139F240B419B562DD06A9D403056D6FC3199CC1C1BB
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\DeviceController.db, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , CF542E8897F68886EAB53BDA86474F5D, 8354ECF0D5B3432BEA03F8E0958172E2D0F73B6A768BC0F6177F9D199595F799
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\DriverUpdater.db, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , F3F472736F8344C9642FCE61BA931DA6, 208DCF7DA3C112841578523B7F00491A864F997E3865662956ABDA793538E7A7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\du_info.db, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , BE1CF85E0A97EB7769E73FF65EBB68E5, ACFF0535B4FB5501C59A5CC68A29D3DD8A3D29BA33250AB4FDF4AFE67EB0382D
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\Minidump.db, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 1C992828E6052268035915CB6A82EFBD, 9973984EC5746844BDB735ED38AD7463C6B88B7629E907A10D55EA13A61F8FF0
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\odu_sign.dat, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , DCC7C8F15B8A621BC44304D32A2CD099, 5389C7B45EF680552A66E5372E0604A8BAC54FAFFC8CE8C0005A799E505D36DC
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\ScannerDB.dat, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 91B511FD5BF1F6D3986A9B6CB2DB9737, D05336088372DD853C648AA676DD3BFE9FAADBBD4B9BA8B82D09602E8C57EE26
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Data\ToolsDB.dat, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 1734242B99BEC16EC99FB4F5E81A635A, 429CFF3E5B17F3D77D72650DB723E2F207A27206CCF754A21A89173F45367E03
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\ChatBot.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 7D3FD8749C17B1EEEF17CCE7A25B695D, 752A10CE6DCEF2C16AD5374B3E8EEA5BABBA68DACA41DD0E153C51FBB8D534B0
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\CheckSerialNumber.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , EFED4727A1ADB58BCA469E1CC93626FC, F8BBE3636F1559E3549D56FC596D5FA459DD7F5DD2A3A33D1BC3AE1DB802A48F
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\CustomDllSurrogate.x32.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 8A2DB4143A9D2178E7CA721B301C76F4, 8D8816C4543B76047D413834D9BD9069B303965A6991D62A79082EE1D715C268
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\DriverInstaller_2024.10.08.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 5120A4D3CE733B80E2A51CD477547C02, 58798F2EE48E424B5EDE8730DD17C399688257E9D9EB0F2696D919A8947AC159
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\DriverUpdaterInternal.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , C8623E51BCCACF4AB46AEE76D7DC67B4, 0B977A4FCADF087B675DA2222DD0483F8E6B3A9011474C7386C58AC5EA5638B9
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\InstallerInternal.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 6C81BB606D9C7585B50C121C4FA56484, 0C3ABADD880C76320303922A99837CEE3A872945C8A0F65674381A0CD0681161
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Logs\TweakManagerStatistics.log, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 2431BE3E3F7AFB7B8C4F0F7D0728D592, 3CDED965E95792CE4FD85938516F9DE7C572CD6F2A4FC1806EFE7A06963F98CB
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155553510.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 8FEDC3D1A4AB5C9E4CC6CF7A3390A86F, 29F620C86DD79FC1546726CCB1B0178D309519DF9A54F5332DBD72D8A9CAB5FD
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155714624.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , ADB13C35C3E13F1C9AE2BD54B9A8FC39, 6C3982D171534359E84290B6EA3E3A1E17A724FEDBEE6A4186E8CDAE7D9F247E
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155905038.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , FD966366CB36557B7F9288CCB0F3F68B, C61879DBBE3B5A11BD4EFF1AD64DF23F3F02F783548FCBD36F1D01D0E54AB11A
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155912471.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 23DD3FE46B48D4B457C3ABBD4DBE6B50, 5B43FC838AD8898919109085EC5497604F9FB74D428B8DE6FC1A22EEF5E6A4B8
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155929036.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 99B0B4960B72A46239B1FDCB0CF34692, 41472590EA72CBB045AB0FE38221B094852E70536237F77E5597E6D68DB07290
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008155934976.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , ED3BBD1AC3AD6F7BABFCCBBF90C42558, 2E5C18D5792885C60437A026B1BFE6D8A565523AA73BE0A701C52695AEB9A1D7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008160448898.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 294D1DEBAE6D1FDCA31A62B7CA80D42D, 672BF14FB548936C65BE556C8F851051DF0E09F45351A9E606120E119E4930C4
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Rescue\Driver Updater\241008160451852.rsc, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , 6BFCED7459C5E3F6CBA1D294BE523440, 19091DA5576CF7F6E0F72403B1D396999D6201E8864CC1D099E011475CEBBBF7
PUP.Optional.Outbyte, C:\ProgramData\Outbyte\Driver Updater\2.x\Temp\d4d37119f07746d046ddeedea10d88dd.zip, Löschen bei Neustart, 6380, 799265, 1.0.90981, , ame, , , 

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)

und noch die FRST Logs

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
durchgeführt von Chris (Administrator) auf DESKTOP-2M6NKLL (MSI MS-7971) (28-10-2024 09:24:40)
Gestartet von C:\Users\Chris\Desktop\FRST64.exe
Geladene Profile: Chris
Plattform: Microsoft Windows 10 Home Version 22H2 19045.5011 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Cyberghost SRL -> CyberGhost S.R.L.) C:\Program Files\CyberGhost 8\Dashboard.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.911.1\DropboxCrashHandler.exe
(ESET, spol. s r.o. -> ESET) C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe
(explorer.exe ->) (ASCOMP Software GmbH -> ASCOMP Software GmbH) D:\Secure Eraser\sEraser.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <15>
(services.exe ->) () <==== ACHTUNG [Null Byte? (Fehler=3)] C:\Program Files (x86)\Outbyte\Driver Updater\ServiceHelper.Agent.exe#C66102D3E8DC025C
(services.exe ->) (Cyberghost SRL -> CyberGhost S.R.L.) C:\Program Files\CyberGhost 8\Dashboard.Service.exe
(services.exe ->) (Cyberghost SRL -> WGHelper) C:\Program Files\CyberGhost 8\Applications\VPN\WGHelper.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9235336 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] => C:\Users\Chris\AppData\Local\Microsoft\Teams\Update.exe [2593816 2024-05-15] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM-x32\...\Run: [TeamsMachineUninstallerProgramData] => %ProgramData%\Microsoft\Teams\Update.exe --uninstall --msiUninstall --source=default (Keine Datei)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [WinPatrol] => D:\WinPatrol\WinPatrol.exe [1223560 2017-05-08] (Ruiware, LLC -> Ruiware)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\Chris\AppData\Local\WebEx\WebexHost.exe [8077920 2024-04-09] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [YouTubeToMP3] => "C:\Program Files\DVDFab\StreamFab\StreamFab64.exe" mode=StartWhenPowerUp (Keine Datei)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [MicrosoftEdgeAutoLaunch_D3FEFEF9604A334C07E903E221AE7560] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3856456 2024-10-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 8\Dashboard.exe [1417696 2024-10-08] (Cyberghost SRL -> CyberGhost S.R.L.)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [809984 2024-05-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP 7112 Status Monitor: C:\Windows\system32\hpinksts7112LM.dll [328704 2014-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [999568 2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\130.0.6723.70\Installer\chrmstp.exe [2024-10-25] (Google LLC -> Google LLC)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {A2758957-7E91-4DE2-90D0-61D99D4B0CCB} - System32\Tasks\{2E2CE07B-4A22-40E3-B7DB-A94E8F2C6065} => c:\program files (x86)\mozilla firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?source=lightinstaller&page=tsMain
Task: {8FF32894-F796-4E53-BE9C-7AD5463DA163} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [5845320 2024-09-29] (Microsoft Windows -> Microsoft Corporation)
Task: {01F75D02-88A8-4415-82A6-CE9CB48DCEE0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {DF925662-4A94-4046-B400-177FA2C39028} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C3FF5C4A-51BD-407D-B01C-7EF127DDFBA0} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007456 2024-10-28] (ESET, spol. s r.o. -> ESET)
Task: {5D6F9836-CCB4-4774-839F-471393AD0534} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007456 2024-10-28] (ESET, spol. s r.o. -> ESET)
Task: {B50E0B96-4B20-4E89-8D1E-977CBDACB701} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem131.0.6776.0{D110E87C-6C17-406A-A379-8BB7C5366EAD} => C:\Program Files (x86)\Google\GoogleUpdater\131.0.6776.0\updater.exe [5507168 2024-10-14] (Google LLC -> Google LLC)
Task: {7CE4326F-40AC-46A1-ADF0-6BB869F96F6F} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_740dc8aba9846dbb\lib\IntelPTTEKRecertification.exe [855672 2024-04-24] (Intel Corporation -> Intel(R) Corporation)
Task: {407E45A5-2F3F-4374-B23A-4080F0754027} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {B81DF236-C906-48A4-B7ED-3D07419F1979} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {5E592C97-4358-4BFD-B063-1FD67FE6AE27} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {283DC23C-B291-43D0-B9C6-11E84353A340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {5E2E8F33-D143-48D1-B10F-84BE327B1704} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D491D56-CF9E-4E70-8025-6083EF70CF66} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {191308F2-7516-4AD2-B8C2-E54A2CA4A569} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [221680 2024-09-29] (Microsoft Windows -> Microsoft Corporation)
Task: {1EE395DD-4D10-4EEF-ACC4-FDBB6748BF52} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8EDB474A-AB2E-43C5-BBE6-62F79D577F08} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {75268E62-22BE-423E-8CE9-8F808F3688F0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C24B0CA2-CA74-4092-A019-D88F2644E1F1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9945977D-D914-4B46-B7ED-FAEB605C6CB9} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {81C02545-3170-4514-8778-90D0AA9A682B} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2085067102-2347417263-2365046495-1001 E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {EED52E06-F291-4A52-BB34-1CCE66550F5D} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34368 2024-10-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {336BD2F0-55D7-44AD-8C1D-67DDC52FC948} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {21C2E302-1A77-4755-92BE-FEB4878BB94B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AFB3358E-62B1-4FC7-86EA-A575A543ADEB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {2B920AAE-A862-41BF-B851-838115345F18} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DD464A46-FE1D-42AD-9E1D-0E9EF1718EB9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {23D18A0B-71A8-4240-8C3C-F4D9107E27E3} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A3380B60-5464-453C-802C-C044F030A10E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C3E80E25-57C7-48B9-90C6-10CB9EDD0C23} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6902B7C7-8FCF-4350-B541-4CEC96353A5A} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4FB87235-6779-4BFB-BA9F-7C43FA8958B9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {BE97602B-80C5-41CC-8338-5DD1F49755C0} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2085067102-2347417263-2365046495-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}\14E64627F696461405: [DhcpNameServer] 192.168.71.30
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}\75C414E413D2931414148343: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}\64259445A51224F6870263839303024444: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}\64259445A51224F6870263839303024444: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{9a9780da-5392-447d-830c-de21e4f15d60}: [NameServer] 185.93.180.131,194.187.251.67
Tcpip\..\Interfaces\{9a9780da-5392-447d-830c-de21e4f15d60}: [DhcpNameServer] 192.168.178.2
Tcpip\..\Interfaces\{9e12574a-62fc-47e0-bc57-e5247d2329a7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9e12574a-62fc-47e0-bc57-e5247d2329a7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{ae647b26-9842-48b9-8376-c59f5f8cabab}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{da0ba8eb-9cdd-48eb-84c1-7c479440b9ea}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [NameServer] 10.0.0.243,185.93.180.131,194.187.251.67
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [DhcpDomain] fritz.box

Edge: 
=======
Edge Profile: C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default [2024-10-28]
Edge Notifications: Default -> hxxps://web.telegram.org
Edge Extension: (Google Docs Offline) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-17]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-10-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: g8bepsdf.default-1490997757038-1609813003616
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616 [2024-10-28]
FF Homepage: Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616 -> about:blank
FF Extension: (uBlock Origin) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\uBlock0@raymondhill.net.xpi [2024-10-02]
FF Extension: (YouTube Video Downloader/YouTube HD Download) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\youtubedownloader@youtubedownloadvideo1clickgroup.com.xpi [2022-04-23]
FF Extension: (Vevioz Youtube Downloader) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\{7f4fdb0c-a234-4eda-bc9e-e1b2bc1c5f10}.xpi [2021-07-07]
FF Extension: (Video DownloadHelper) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-09-11]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x86.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> D:\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> D:\PDF-Exchange Editor\PDF Editor\npPDFXEditPlugin.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2024-02-29] (Ubisoft Entertainment Sweden AB -> )

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default [2024-10-26]
CHR Notifications: Default -> hxxps://web.snapchat.com; hxxps://web.whatsapp.com; hxxps://www.instagram.com; hxxps://www.roadbike.de; hxxps://xtoys.app
CHR Extension: (MEGA) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2024-10-25] [UpdateUrl:hxxps://mega.nz/firefox-web-extension-updates.json] <==== ACHTUNG
CHR Extension: (Avira Browserschutz) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2024-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-17]
CHR Extension: (Hola VPN - Your Website Unblocker) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2024-10-03]
CHR Extension: (Chat and Meet for Hangouts) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbjiabdjpmkpphamabmodmomhoddlan [2019-11-03]
CHR Extension: (Google Hangouts) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2022-04-20]
CHR Extension: (Desktopify) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlhjgcligpbnjphflfdbmabbmjidnmek [2021-01-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-01-05]
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\System Profile [2021-01-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14042624 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
R2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [69088 2024-10-08] (Cyberghost SRL -> CyberGhost S.R.L.)
R4 CyberGhostTunnel$CyberGhost-WireGuard-1; C:\Program Files\CyberGhost 8\Applications\VPN\WGHelper.exe [13280 2024-10-08] (Cyberghost SRL -> WGHelper)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\210.4.4854\DropboxElevationService.exe [1659280 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncHelper.exe [3524648 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2024-10-16] (HP Inc. -> HP Inc.)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9319296 2024-10-21] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-06-12] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 MTAgentService; D:\MiniTool ShadowMaker\AgentService.exe [732992 2023-04-12] (MiniTool Software Limited -> )
S2 MTSchedulerService; D:\MiniTool ShadowMaker\SchedulerService.exe [225088 2023-04-12] (MiniTool Software Limited -> )
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\Display.NvContainer\NVDisplay.Container.exe [1275024 2024-10-16] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.192.0923.0006\OneDriveUpdaterService.exe [3868688 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [19709848 2024-10-15] (Logitech Inc -> Logitech, Inc.)
S3 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [15250864 2024-04-12] (ADLICE -> )
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OutbyteDUHelper; "C:\Program Files (x86)\Outbyte\Driver Updater\ServiceHelper.Agent.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R0 CRUWBlocker; C:\WINDOWS\System32\drivers\CRUWBlocker.sys [40152 2018-08-29] (CRU Acquisition Group, LLC -> CRU Acquisition Group, LLC)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 HKKbdFltr; C:\WINDOWS\System32\drivers\HKKbdFltr.sys [40320 2019-03-05] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.)
R3 JmUsbCcgp; C:\WINDOWS\system32\DRIVERS\jmccgp.sys [17136 2009-07-27] (JMicron Technology Corp. -> JMicron Technology Corp.)
R1 kbdclass; C:\WINDOWS\System32\drivers\f5dnkcls.sys [58344 2016-03-06] (FUJITSU LIMITED -> FUJITSU LIMITED)
R3 ManyCam; C:\WINDOWS\System32\drivers\ManyCam_x64.sys [27136 2008-03-13] (Microsoft Windows Hardware Compatibility Publisher -> ManyCam LLC.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-10-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-08-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MonitorFunction; C:\WINDOWS\System32\drivers\lockscr.sys [24560 2019-01-20] (Remote Utilities LLC -> )
R3 MpKsl97116ffd; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1F76FAF4-38AD-4539-8B3E-3707058CFE5C}\MpKslDrv.sys [267552 2024-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2021-03-26] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2021-03-26] (MiniTool Solution Ltd -> )
S3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
R3 SBAudioRT; C:\WINDOWS\System32\DriverStore\FileRepository\sbaudiort.inf_amd64_1396dccbfc09fb4d\SBAudioRT.sys [99080 2022-11-16] (Screaming Bee Inc -> Windows (R) Win 7 DDK provider)
R3 Serial; C:\WINDOWS\system32\DRIVERS\wdfserial.sys [89976 2018-04-26] (LG Electronics Inc. -> LG Electronics Inc.)
S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [159952 2015-11-14] (RH Software -> Ray Hinchliffe)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [41000 2024-02-26] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 TcPpm; C:\WINDOWS\System32\drivers\TcPpm.sys [9216 2014-08-22] (Beckhoff Automation GmbH -> )
R3 VCSVADHWSer; C:\WINDOWS\System32\drivers\vcsvad.sys [29320 2015-10-01] (AVSOFT CORP. -> AVSOFT Corp.)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [817672 2022-04-03] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX)
R3 voxaldriver; C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys [43472 2016-07-27] (NCH Software Pty Ltd -> )
R3 vtsio; C:\WINDOWS\system32\DRIVERS\VTSIO.sys [29256 2017-04-25] (Trihedral Engineering Limited -> Trihedral Engineering Limited)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
R3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-01-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-28 09:25 - 2024-10-28 09:25 - 000000706 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MauiWowieee.lnk
2024-10-28 09:19 - 2024-10-28 09:25 - 000037702 _____ C:\Users\Chris\Desktop\FRST.txt
2024-10-28 09:18 - 2024-10-28 09:25 - 000000000 ____D C:\FRST
2024-10-28 09:18 - 2024-10-28 09:18 - 002397696 _____ (Farbar) C:\Users\Chris\Desktop\FRST64.exe
2024-10-28 08:08 - 2024-10-28 08:17 - 033554432 _____ C:\Users\Chris\OneDrive\Dokumente\clip1210.avi
2024-10-28 08:08 - 2024-10-28 08:08 - 000780000 _____ C:\Users\Chris\OneDrive\Dokumente\clip1210.avi.bak
2024-10-26 13:02 - 2024-10-26 13:45 - 158451508 _____ C:\Users\Chris\OneDrive\Dokumente\clip1209.avi
2024-10-26 09:35 - 2024-10-26 09:39 - 001370414 _____ C:\Users\Chris\OneDrive\Dokumente\clip1208.avi
2024-10-25 22:54 - 2024-10-25 23:29 - 005301656 _____ C:\Users\Chris\OneDrive\Dokumente\clip1207.avi
2024-10-25 12:27 - 2024-10-25 12:48 - 167570948 _____ C:\Users\Chris\OneDrive\Dokumente\clip1206.avi
2024-10-25 11:34 - 2024-10-25 11:34 - 013120645 _____ C:\Users\Chris\Downloads\Air (Chat Avenue).mp4
2024-10-23 14:01 - 2024-10-23 14:01 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2024-10-23 13:54 - 2024-10-16 09:00 - 002060648 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 002060648 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 001600360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 001600360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-10-23 13:54 - 2024-10-16 08:59 - 001452400 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001452400 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001301864 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001301864 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 000477816 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 000374944 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001554568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001208952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001114752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 000863904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2024-10-23 13:54 - 2024-10-16 08:56 - 000670360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 000505488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 025450104 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2024-10-23 13:54 - 2024-10-16 08:55 - 002185344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 001634944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 001042048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 000800888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 000461944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2024-10-23 13:54 - 2024-10-16 08:54 - 017736824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 016811128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 006953120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 005910168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 005435024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 003807384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 000853112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2024-10-23 13:54 - 2024-10-16 08:53 - 007159112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-10-23 13:54 - 2024-10-16 08:53 - 006236256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-10-23 13:54 - 2024-10-15 20:04 - 000132701 _____ C:\WINDOWS\system32\nvinfo.pb
2024-10-23 13:33 - 2024-10-23 13:52 - 016798024 _____ C:\Users\Chris\OneDrive\Dokumente\clip1205.avi
2024-10-23 11:31 - 2024-10-23 11:31 - 000000000 ____D C:\Users\Chris\Desktop\MauiWowieee
2024-10-23 09:59 - 2024-10-23 10:49 - 026974940 _____ C:\Users\Chris\OneDrive\Dokumente\clip1204.avi
2024-10-23 09:34 - 2024-10-23 09:59 - 017410170 _____ C:\Users\Chris\OneDrive\Dokumente\clip1203.avi
2024-10-21 18:55 - 2024-10-21 19:14 - 004076320 _____ C:\Users\Chris\OneDrive\Dokumente\clip1202.avi
2024-10-21 18:13 - 2024-10-21 18:13 - 000000000 ____D C:\Users\Chris\Downloads\Debbie Martinez (REAL American Spanish teacher in elementary school)
2024-10-21 17:38 - 2024-10-21 18:55 - 002194916 _____ C:\Users\Chris\OneDrive\Dokumente\clip1201.avi
2024-10-21 17:33 - 2024-10-21 17:38 - 009418738 _____ C:\Users\Chris\OneDrive\Dokumente\clip1200.avi
2024-10-21 14:10 - 2024-10-21 15:04 - 029035814 _____ C:\Users\Chris\OneDrive\Dokumente\clip1199.avi
2024-10-21 12:34 - 2024-10-21 14:10 - 244443862 _____ C:\Users\Chris\OneDrive\Dokumente\clip1198.avi
2024-10-19 23:45 - 2024-10-20 00:25 - 003768110 _____ C:\Users\Chris\OneDrive\Dokumente\clip1197.avi
2024-10-19 23:18 - 2024-10-19 23:42 - 157958786 _____ C:\Users\Chris\OneDrive\Dokumente\clip1196.avi
2024-10-18 17:32 - 2024-10-18 17:32 - 001897268 _____ C:\Users\Chris\Desktop\Finger Training.pdf
2024-10-18 13:11 - 2024-10-18 13:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-10-17 19:30 - 2024-10-17 20:15 - 056686714 _____ C:\Users\Chris\OneDrive\Dokumente\clip1195.avi
2024-10-17 19:04 - 2024-10-17 19:30 - 037180426 _____ C:\Users\Chris\OneDrive\Dokumente\clip1194.avi
2024-10-16 19:05 - 2024-10-16 19:05 - 000001180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi Plugin Service.lnk
2024-10-16 19:05 - 2024-10-16 19:05 - 000000000 ____D C:\Users\Default\AppData\Local\Logi
2024-10-16 19:05 - 2024-10-16 19:05 - 000000000 ____D C:\ProgramData\Logi
2024-10-16 19:03 - 2024-10-16 19:03 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2024-10-16 13:56 - 2024-10-16 14:08 - 059034154 _____ C:\Users\Chris\OneDrive\Dokumente\clip1193.avi
2024-10-16 13:46 - 2024-10-16 13:56 - 000150342 _____ C:\Users\Chris\OneDrive\Dokumente\clip1192.avi
2024-10-16 13:29 - 2024-10-16 13:46 - 011149262 _____ C:\Users\Chris\OneDrive\Dokumente\clip1191.avi
2024-10-16 11:56 - 2024-10-16 11:56 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-10-15 14:45 - 2024-10-15 14:58 - 011897574 _____ C:\Users\Chris\OneDrive\Dokumente\clip1190.avi
2024-10-12 22:21 - 2024-10-12 23:10 - 455957060 _____ C:\Users\Chris\OneDrive\Dokumente\clip1189.avi
2024-10-12 11:51 - 2024-10-12 11:51 - 000527192 _____ C:\Users\Chris\Desktop\PDF-Ratgeber_Richtig-Dehnen_01.pdf
2024-10-11 21:18 - 2024-10-11 21:39 - 031153228 _____ C:\Users\Chris\OneDrive\Dokumente\clip1188.avi
2024-10-10 23:14 - 2024-10-11 00:07 - 087874946 _____ C:\Users\Chris\OneDrive\Dokumente\clip1187.avi
2024-10-09 23:41 - 2024-10-09 23:41 - 000000000 ____D C:\Users\Chris\Intel
2024-10-09 19:46 - 2024-10-09 20:18 - 018539330 _____ C:\Users\Chris\OneDrive\Dokumente\clip1186.avi
2024-10-09 09:34 - 2024-10-09 09:34 - 000000000 ___HD C:\$WinREAgent
2024-10-08 22:35 - 2024-10-08 22:35 - 000130264 _____ (CyberGhost S.R.L.) C:\Users\Chris\Downloads\CyberGhostVPNSetup(1).exe
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\Users\Chris\AppData\Roaming\CyberGhost
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 8
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\Program Files\CyberGhost 8
2024-10-08 15:10 - 2024-10-08 15:10 - 002455558 _____ C:\Users\Chris\OneDrive\Dokumente\clip1185.avi
2024-10-08 15:02 - 2024-03-30 23:00 - 000338968 _____ (Intel Corporation) C:\WINDOWS\system32\JHI64.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000323088 _____ (Intel Corporation) C:\WINDOWS\system32\TEEManagement64.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000273936 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\JHI.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000261248 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\TEEManagement.dll
2024-10-08 15:00 - 2009-07-27 23:00 - 000614000 _____ (JMicron Technology Corp.) C:\WINDOWS\system32\jmccgpInst.dll
2024-10-08 15:00 - 2009-07-27 23:00 - 000017136 _____ (JMicron Technology Corp.) C:\WINDOWS\system32\Drivers\jmccgp.sys
2024-10-08 14:59 - 2022-12-12 23:00 - 001095872 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAC.sys
2024-10-08 14:59 - 2018-08-29 23:00 - 000040152 _____ (CRU Acquisition Group, LLC) C:\WINDOWS\system32\Drivers\CRUWBlocker.sys
2024-10-08 14:58 - 2016-03-06 23:00 - 000385512 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnchex.dll
2024-10-08 14:58 - 2016-03-06 23:00 - 000058344 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\Drivers\f5dnkcls.sys
2024-10-08 14:58 - 2016-03-06 23:00 - 000023528 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnoya.dll
2024-10-08 14:58 - 2016-03-06 23:00 - 000023016 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnjis.dll
2024-10-08 14:57 - 2019-03-05 23:00 - 000040320 _____ (Insyde Software Corp.) C:\WINDOWS\system32\Drivers\HKKbdFltr.sys
2024-10-08 14:56 - 2024-10-08 14:56 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2024-10-08 14:56 - 2024-10-08 14:56 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2024-10-08 14:56 - 2024-10-08 14:56 - 000000000 ____D C:\Program Files\Synaptics
2024-10-08 14:56 - 2016-11-21 23:00 - 000912472 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\SynTP.sys
2024-10-08 14:56 - 2016-11-21 23:00 - 000804952 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynCOM.dll
2024-10-08 14:56 - 2016-11-21 23:00 - 000427608 _____ (Synaptics Incorporated) C:\WINDOWS\SysWOW64\SynCom.dll
2024-10-08 14:56 - 2016-11-21 23:00 - 000334424 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPCo41-002.dll
2024-10-08 14:56 - 2016-11-21 23:00 - 000280152 _____ (Synaptics Incorporated) C:\WINDOWS\system32\SynTPAPI.dll
2024-10-08 14:56 - 2016-11-21 23:00 - 000064088 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel_Aux.sys
2024-10-08 14:56 - 2016-11-21 23:00 - 000064088 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_Intel.sys
2024-10-08 14:56 - 2016-11-21 23:00 - 000059992 _____ (Synaptics Incorporated) C:\WINDOWS\system32\Drivers\Smb_driver_AMDASF_Aux.sys
2024-10-08 14:54 - 2016-10-10 23:00 - 003719688 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtwlane.sys
2024-10-08 14:53 - 2024-03-11 23:00 - 001331144 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2024-10-08 14:53 - 2019-01-20 23:00 - 000024560 _____ C:\WINDOWS\system32\Drivers\lockscr.sys
2024-10-08 14:51 - 2024-10-08 14:51 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_wdfserial_01011.Wdf
2024-10-08 14:51 - 2018-04-26 23:00 - 000089976 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\wdfserial.sys
2024-10-08 14:51 - 2017-04-25 23:00 - 000029256 _____ (Trihedral Engineering Limited) C:\WINDOWS\system32\Drivers\VTSIO.sys
2024-10-08 14:51 - 2014-08-22 22:10 - 000009216 _____ C:\WINDOWS\system32\Drivers\TcPpm.sys
2024-10-08 13:48 - 2024-10-08 14:55 - 196177776 _____ C:\Users\Chris\OneDrive\Dokumente\clip1184.avi
2024-10-06 14:08 - 2024-10-06 14:13 - 010371836 _____ C:\Users\Chris\OneDrive\Dokumente\clip1183.avi
2024-10-06 14:06 - 2024-10-06 14:07 - 008360956 _____ C:\Users\Chris\OneDrive\Dokumente\clip1182.avi
2024-10-06 13:35 - 2024-10-06 14:06 - 001924674 _____ C:\Users\Chris\OneDrive\Dokumente\clip1181.avi
2024-10-06 12:46 - 2024-10-06 13:35 - 005181984 _____ C:\Users\Chris\OneDrive\Dokumente\clip1180.avi
2024-10-05 20:18 - 2024-10-05 20:31 - 007908726 _____ C:\Users\Chris\OneDrive\Dokumente\clip1179.avi
2024-10-05 19:54 - 2024-10-05 20:18 - 015168828 _____ C:\Users\Chris\OneDrive\Dokumente\clip1178.avi
2024-10-05 19:05 - 2024-10-05 19:54 - 080654836 _____ C:\Users\Chris\OneDrive\Dokumente\clip1177.avi
2024-10-05 12:52 - 2024-10-05 13:51 - 161292612 _____ C:\Users\Chris\OneDrive\Dokumente\clip1176.avi
2024-10-03 11:02 - 2024-10-03 11:17 - 000770762 _____ C:\Users\Chris\OneDrive\Dokumente\clip1175.avi
2024-10-03 10:59 - 2024-09-28 19:32 - 000125048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-10-02 14:02 - 2024-10-02 13:41 - 004726021 _____ C:\Users\Chris\Desktop\1cad97f7f34647f8901f2cf8ec0b5ca5.mp4
2024-10-02 12:48 - 2024-10-02 14:30 - 169993568 _____ C:\Users\Chris\OneDrive\Dokumente\clip1174.avi
2024-10-02 09:01 - 2024-10-02 09:01 - 008500979 _____ C:\Users\Chris\Desktop\c4ff1-744-4422-762-5f108867dd4_The_Posture_Playbook.pdf
2024-10-01 16:56 - 2024-10-01 17:25 - 015790430 _____ C:\Users\Chris\OneDrive\Dokumente\clip1173.avi
2024-10-01 08:08 - 2024-10-01 08:08 - 000175151 _____ C:\Users\Chris\Downloads\R4C_Kletterschuhe_Reparatur_AF.pdf
2024-09-30 19:51 - 2024-09-30 20:00 - 007204666 _____ C:\Users\Chris\OneDrive\Dokumente\clip1172.avi
2024-09-29 21:24 - 2024-09-29 21:25 - 000000000 ____D C:\WINDOWS\nsnCCB8.tmp

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-28 09:24 - 2023-12-18 11:54 - 000000000 ____D C:\Users\Chris\AppData\Local\CyberGhost
2024-10-28 09:18 - 2022-02-10 07:41 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-10-28 09:18 - 2021-01-18 23:02 - 000000000 ____D C:\Users\Chris\AppData\Local\Spotify
2024-10-28 09:17 - 2023-12-06 13:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2024-10-28 09:17 - 2021-01-18 23:01 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Spotify
2024-10-28 09:17 - 2016-03-24 18:42 - 000001289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2024-10-28 09:14 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-10-28 09:13 - 2016-03-14 17:21 - 000000000 ___SD C:\Users\Chris\AppData\Roaming\Microsoft\Credentials
2024-10-28 09:11 - 2021-01-05 20:18 - 000001435 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-10-28 09:08 - 2024-04-25 16:51 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Telegram Desktop
2024-10-28 09:02 - 2023-02-10 12:01 - 000000000 ____D C:\Users\Chris\AppData\Local\LogiOptionsPlus
2024-10-28 09:02 - 2017-04-19 23:44 - 000000000 ____D C:\ProgramData\NVIDIA
2024-10-28 09:01 - 2023-08-02 19:54 - 000000000 ____D C:\Users\Chris\AppData\Local\Malwarebytes
2024-10-28 07:58 - 2020-06-16 21:39 - 001723002 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-10-28 07:58 - 2019-12-07 15:50 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2024-10-28 07:58 - 2019-12-07 15:50 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2024-10-28 07:58 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-10-28 07:52 - 2022-02-17 18:49 - 000000000 ____D C:\Users\Chris\AppData\Local\LogiBolt
2024-10-28 07:52 - 2021-01-05 22:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2024-10-28 07:52 - 2021-01-05 22:06 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2024-10-28 07:52 - 2020-06-16 21:43 - 000004172 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{ACDD8A9F-8B92-4124-84B2-3AD08B1F1B95}
2024-10-26 21:03 - 2021-12-15 20:18 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-10-26 21:03 - 2020-06-16 21:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-10-26 21:03 - 2020-06-16 21:37 - 000008192 ___SH C:\DumpStack.log.tmp
2024-10-26 21:03 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-10-26 19:36 - 2020-06-22 18:58 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-10-26 19:28 - 2016-03-19 00:47 - 000000000 ____D C:\Users\Chris\AppData\Roaming\vlc
2024-10-26 19:28 - 2016-03-14 21:47 - 000000000 ____D C:\Users\Chris\AppData\Local\The Lord of the Rings Online
2024-10-26 19:22 - 2020-06-16 21:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-10-26 13:45 - 2016-03-14 21:44 - 000000000 ____D C:\Users\Chris\AppData\Local\CrashDumps
2024-10-26 09:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-10-25 22:10 - 2021-12-13 08:20 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2085067102-2347417263-2365046495-1001
2024-10-25 22:10 - 2021-09-12 10:09 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-10-25 22:10 - 2021-01-05 13:17 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-10-25 22:10 - 2021-01-05 13:17 - 000002115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-10-25 11:56 - 2017-10-18 17:15 - 000000000 ____D C:\Users\Chris\AppData\Local\Packages
2024-10-25 11:32 - 2016-03-14 19:54 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-10-24 11:52 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-10-23 14:01 - 2016-03-14 17:21 - 000000000 ____D C:\Users\Chris\AppData\Local\NVIDIA
2024-10-23 09:20 - 2018-02-28 21:31 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-10-21 18:06 - 2020-07-23 16:55 - 000000000 ____D C:\WINDOWS\Minidump
2024-10-21 18:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-10-18 13:11 - 2016-04-16 11:47 - 000000000 ____D C:\Users\Chris\AppData\Local\Dropbox
2024-10-18 13:11 - 2016-04-16 11:47 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-10-16 19:05 - 2022-02-17 18:49 - 000000000 ____D C:\Program Files\Logi
2024-10-16 19:03 - 2022-02-17 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2024-10-16 10:58 - 2022-03-23 18:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2024-10-16 10:58 - 2022-03-14 12:46 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2024-10-15 15:14 - 2019-10-20 13:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-10-15 15:13 - 2016-03-14 17:25 - 000001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-10-15 14:42 - 2023-10-15 16:53 - 000000000 ____D C:\Program Files\RUXIM
2024-10-10 20:29 - 2020-06-22 18:58 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-10-10 20:29 - 2020-06-22 18:58 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-10-10 15:20 - 2020-06-16 21:37 - 000449408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-10-10 15:20 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-10-10 09:29 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-10-10 09:27 - 2020-06-16 21:39 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-10-10 09:23 - 2016-02-02 16:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-10-10 09:20 - 2016-02-02 16:27 - 201324920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-10-09 23:41 - 2020-06-16 04:33 - 000000000 ____D C:\Users\Chris
2024-10-09 23:41 - 2016-02-18 16:53 - 000000000 ____D C:\Program Files\Intel
2024-10-08 15:12 - 2020-10-10 09:10 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2024-10-06 15:19 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2024-10-06 00:59 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-10-03 11:12 - 2017-03-15 14:54 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Microsoft\Excel
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2024-07-12 16:17 - 2024-07-12 16:17 - 000000012 _____ () C:\Users\Chris\AppData\Roaming\2457fe3357cbf1220231e8917326f70f
2016-07-27 21:37 - 2016-07-27 21:37 - 000001167 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt
2016-07-27 21:37 - 2016-07-27 21:37 - 000000000 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-08-30 23:51 - 2017-05-23 00:16 - 000020480 _____ () C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-04 19:54 - 2019-01-09 21:54 - 000007625 _____ () C:\Users\Chris\AppData\Local\Resmon.ResmonCfg
2023-06-16 10:28 - 2023-06-16 10:29 - 000000000 _____ () C:\Users\Chris\AppData\Local\{AAF191EF-6104-41D2-820C-A7507D90B70A}

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

--- --- ---

januskopf198 · 28.10.2024, 11:41

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-09-2024
durchgeführt von Chris (28-10-2024 09:26:07)
Gestartet von C:\Users\Chris\Desktop
Microsoft Windows 10 Home Version 22H2 19045.5011 (X64) (2020-06-16 20:43:15)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2085067102-2347417263-2365046495-500 - Administrator - Disabled)
Chris (S-1-5-21-2085067102-2347417263-2365046495-1001 - Administrator - Enabled) => C:\Users\Chris
DefaultAccount (S-1-5-21-2085067102-2347417263-2365046495-503 - Limited - Disabled)
Gast (S-1-5-21-2085067102-2347417263-2365046495-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2085067102-2347417263-2365046495-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (HKLM-x32\...\7-Zip) (Version: 15.14 - Igor Pavlov)
7-Zip 23.01 (x64) (HKLM\...\7-Zip) (Version: 23.01 - Igor Pavlov)
Adobe Photoshop Lightroom 4.4 64-bit (HKLM\...\{11A955CD-4398-405A-886D-E464C3618FBF}) (Version: 4.4.1 - Adobe)
Anno1701 (HKLM-x32\...\Uplay Install 2835) (Version:  - Ubisoft)
Assassin's Creed Mirage (HKLM-x32\...\Uplay Install 6100) (Version:  - Ubisoft)
Assassin's Creed Valhalla (HKLM-x32\...\Uplay Install 13504) (Version:  - Ubisoft)
CyberGhost 8 (HKLM\...\CyberGhost 8) (Version: 8.4.9.14426 - CyberGhost S.R.L.)
CyberGhost TUN (HKLM\...\{677232D6-72D6-4821-8CB5-47969B15D4DF}) (Version: 1.0 - CyberGhost S.R.L.) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 210.4.4854 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.911.1 - Dropbox, Inc.) Hidden
Female Voices (HKLM-x32\...\{2418A64E-51AC-4BE6-A434-DF2AC8AB01E6}) (Version: 4.4.41 - Screaming Bee Inc.) Hidden
Female Voices for MorphVOX (HKLM-x32\...\{d052e867-a25a-46cc-8ed0-9d57de5dc15a}) (Version: 4.4.41 - Screaming Bee Inc.)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 130.0.6723.70 - Google LLC)
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.29.01 - Hyperionics Technology LLC)
Intel(R) Chipset Device Software (HKLM\...\{5CA7FC9B-8508-4494-B365-6FBCBAEB8E89}) (Version: 10.0.27 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{BFACB3F5-7091-429E-A6A9-59C0696B710E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{CCCB484E-79D5-4398-9377-CA6EEB6B53AE}) (Version: 11.0.0.1158 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{DF17C0DB-76D8-4A45-B26E-674F8455B803}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{F94944A8-7BF1-4D63-935D-DAE36FAA3072}) (Version: 30.63.1519.07 - Intel Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{7D84E343-A23D-451C-B123-0195B2D903A6}) (Version: 1.42.17.0 - Intel Corporation) Hidden
Lightworks (HKLM\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 2023.1.141158 - LWKS Software Ltd.)
Logi Bolt (HKLM\...\LogiBolt) (Version: 1.2.6024.0 - Logi)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 1.83.635658 - Logitech)
Logi Plugin Service (HKLM\...\{5F8E11AE-AFB2-4600-95BD-0060B1C8E85A}) (Version: 6.0.0.20749 - Logitech)
LOTRO Plugin Compendium (HKLM-x32\...\{3BF7818D-2482-4676-A237-915A11A97847}) (Version: 1.0.3 - Lunarwater)
Malwarebytes version 5.1.11.139 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.11.139 - Malwarebytes)
ManyCam 2.6.55 (remove only) (HKLM-x32\...\ManyCam) (Version: 2.6.55 - ManyCam LLC)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 130.0.2849.56 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 130.0.2849.52 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.192.0923.0006 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.26.28720 (HKLM-x32\...\{86380aef-fd23-4fc3-8723-a98ccad8f2c6}) (Version: 14.26.28720.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31938 (HKLM-x32\...\{d92971ab-f030-43c8-8545-c66c818d0e05}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.26.28720 (HKLM-x32\...\{2F69FB2B-2C48-491C-B249-22C1BDCE1117}) (Version: 14.26.28720 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.26.28720 (HKLM-x32\...\{31C9EB3A-5F0C-49E7-8E6C-D404E48F433D}) (Version: 14.26.28720 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31938 (HKLM\...\{7DA37AE3-D8AE-49B1-9BDC-23CA0AB9FF22}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31938 (HKLM\...\{0AE39060-F209-4D05-ABC7-54B8F9CFA32E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
MiniTool Partition Wizard 12.8 DEMO (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: 12.8 - MiniTool Software Limited)
MiniTool ShadowMaker PW Edition (HKLM-x32\...\MT-75D7C412-925B-4AD0-90DC-5E4FEE22EAE1_is1) (Version: 4.1 - MiniTool Software Limited)
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
MorphVOX Pro (HKLM-x32\...\{5D9F29C7-D80E-41B0-BA94-42E9651D83A7}) (Version: 4.4.87.18361 - Screaming Bee) Hidden
MorphVOX Pro (HKLM-x32\...\{ee90fb00-381c-4280-be88-d3240491c4c3}) (Version: 4.4.87.18361 - Screaming Bee)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 131.0.3 (x64 de)) (Version: 131.0.3 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 128.3.3 (x64 de)) (Version: 128.3.3 - Mozilla)
MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version:  - )
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Grafiktreiber 566.03 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 566.03 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.4.2.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.2.6 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20114 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
Outbyte Driver Updater (HKLM-x32\...\{B38B494B-46F8-4765-8D92-31B8F10D8FD3}_is1) (Version: 2.6.1.35598 - Outbyte Computing Pty Ltd)
PDF-XChange Editor (HKLM\...\{4814BD0F-544C-4B83-8007-396FFE09C21E}) (Version: 10.1.3.383 - Tracker Software Products (Canada) Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{ef5b79ef-2607-4b32-934c-ff492ce76a6e}) (Version: 10.1.3.383 - Tracker Software Products (Canada) Ltd.)
Personality Voices (HKLM-x32\...\{0A7ACF18-DA8E-4F4F-84C6-37819F1F3038}) (Version: 4.4.41 - Screaming Bee Inc.) Hidden
Personality Voices for MorphVOX (HKLM-x32\...\{4c57deed-dce2-4337-a14e-d69ef9b934c8}) (Version: 4.4.41 - Screaming Bee Inc.)
Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
RogueKiller Version 15.16.1.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.16.1.0 - Adlice Software)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.31.0 - Samsung Electronics Co., Ltd.)
Secure Eraser (HKLM-x32\...\Secure Eraser_is1) (Version: 6.1.0.8 - ASCOMP Software GmbH)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Snapchat (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\6bfb3a0f5367b360172921dcb033ecb8) (Version: 1.0 - Snapchat)
Spotify (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Spotify) (Version: 1.2.49.439.gfae492c7 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suuntolink (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Suuntolink) (Version: 4.1.11 - Suunto)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.2.5.28 - Synaptics Incorporated)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Telegram Desktop (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 5.6.3 - Telegram FZ-LLC)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.25.9 - IDRIX)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{63EFBDB5-01B0-4614-BE9F-7F1908E42275}) (Version: 3.1.2109.29003 - Microsoft Corporation)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 35.5.2017.8 - Ruiware)
WinRAR 6.24 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
XviD MPEG-4 Video Codec (HKLM-x32\...\XviD_is1) (Version: XviD-1.0.3-20122004 - XviD Team (Koepi))

Packages:
=========

Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2024-10-18] (Dropbox Inc.)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2023-07-22] (Microsoft Corporation)
HEVC Video Extensions -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_2.2.10.0_x64__8wekyb3d8bbwe [2024-10-24] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_156.1.1125.0_x64__v10z8vjag6ke6 [2024-10-16] (HP Inc.)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.23.0_neutral__8xx8rvfyw5nnt [2024-08-01] (Instagram)
Instagram -> C:\Program Files\WindowsApps\www.instagram.com-E4B7766F_42.0.21.1_neutral__ysfa6mcnwr1rw [2023-10-31] (www.instagram.com)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-03] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2409.21001.0_x64__8wekyb3d8bbwe [2024-10-05] (Microsoft Corporation) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-10-23] (NVIDIA Corp.)
Snapchat -> C:\Program Files\WindowsApps\SnapInc.Snapchat_3.0.1.0_neutral__k1zn018256b8e [2024-08-13] (Snap Inc.)
Websuche von Microsoft Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.0.0_x64__8wekyb3d8bbwe [2024-10-24] (Microsoft Corporation)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm [2024-10-10] (WhatsApp Inc.) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{B21C40A4-C627-437F-906F-2C2F8E31E7A9}\InprocServer32 -> C:\Program Files (x86)\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Chris\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => Keine Datei
CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Chris\Dropbox
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => D:\PDF-Exchange Editor\Shell Extensions\XCShellMenu.x64.dll [2023-11-14] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> Tracker Software Products (Canada) Ltd.)
ContextMenuHandlers1: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\SecEraser64.dll [2021-02-07] (ASCOMP Software GmbH -> ASCOMP Software GmbH)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-08-02] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\nvshext.dll [2024-10-16] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => D:\7-Zip\7-zip.dll [2023-06-20] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-08-02] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\SecEraser64.dll [2021-02-07] (ASCOMP Software GmbH -> ASCOMP Software GmbH)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\system32\xvidvfw.dll [255488 2011-05-30] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp4e] => C:\Windows\SysWOW64\MPEG4Evfw.dll [1015808 2009-01-16] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [155648 2004-12-20] () [Datei ist nicht signiert]

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Chris\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm
ShortcutWithArgument: C:\Users\Chris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\a3a1d6b8109861c5\Google Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=nckgahadagoaajjgafhacjanaoiihapd
ShortcutWithArgument: C:\Users\Chris\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\971c78a6e6ce6980\Chat and Meet for Hangouts.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory=Default --app-id=lbbjiabdjpmkpphamabmodmomhoddlan

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2021-01-05 20:18 - 2024-10-28 09:11 - 001195008 _____ (ESET) [Datei ist nicht signiert] C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\esets_apiW_a.DLL
2022-04-03 14:45 - 2023-06-20 09:00 - 000101376 _____ (Igor Pavlov) [Datei ist nicht signiert] D:\7-Zip\7-zip.dll
2016-06-11 11:04 - 2012-02-14 18:37 - 000594432 _____ (Realtek Semiconductor Corp.) [Datei ist nicht signiert] C:\WINDOWS\system32\Rtlihvs.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:BDSDRMHK [64]
AlternateDataStreams: C:\Users\All Users:BDSDRMHK [64]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:BDSDRMHK [64]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\sharepoint.com -> hxxps://brunelcorporate-files.sharepoint.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2021-01-05 12:58 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

2018-12-15 12:45 - 2020-04-02 11:15 - 000000668 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
27 76
0.0.0.84 LAPTOP-173CF2E2.mshome.net # 2020 4 1 6 17 34 46 620
152
152
340

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Chris\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\wallpaper_1920_1200_cascada.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
 ist aktiviert.

Network Binding:
=============
CyberGhost-WireGuard-1: WireGuard Tunnel -> wireguard.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
LAN-Verbindung: TAP-Windows Adapter V9 -> tap0901.sys
WLAN: Realtek RTL8192CE Wireless LAN 802.11n PCI-E NIC -> rtwlane.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "TeamsMachineUninstallerLocalAppData"
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{364AAC79-BA89-49B5-B85D-F7588FC69F7B}C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe => Keine Datei
FirewallRules: [UDP Query User{D0A296E7-E096-4D4C-ACF8-E21D0E58C7D2}C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe => Keine Datei
FirewallRules: [TCP Query User{118EEF28-9C86-425C-A5A8-5672E54FB3C3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{F35CE7BE-2289-41A0-8B93-CB2A04F1ACC5}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{7EA2FCA3-2FA3-4DD2-BA44-CCC7E019CF7C}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{7AAD3713-7BB1-4242-B9BC-1527BC964A68}C:\program files (x86)\google\chrome\application\chrome.exe] => (Allow) C:\program files (x86)\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{B7BD59C6-6855-48F4-B051-909D56DE5068}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D4276C1F-5259-4BBD-ACB9-2B8A0C4E2AF5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{9095B183-828B-4CE2-99A8-FBCB952495AE}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A8F7B6EB-E93B-438C-BD40-C6AA396E9308}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{A920FC7E-4996-4820-B17D-015D77D8A62A}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{855012B5-3DA3-466B-BFF6-E081A0ACC0EE}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0C56D149-4202-4407-85CD-661F8ABB42DD}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{70EC3610-6A7E-4F8F-B319-0906104F665A}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{84E715BE-6695-4879-869B-E671AECEF3D7}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei
FirewallRules: [{E9048F47-DC34-4634-A961-331D7F9C66BA}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{7D92B2D6-1520-477C-8A6C-5350083A17DE}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{54543152-6D70-450D-8FC6-A1F264B42E8F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EB059017-38C4-4BD3-8F31-0A25784718C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{53A052D1-A931-45AC-9AA7-074ECF1CB038}C:\users\chris\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chris\appdata\local\microsoft\teams\current\teams.exe => Keine Datei
FirewallRules: [UDP Query User{3F78E3F1-20E1-4732-AA0B-B296E5213C50}C:\users\chris\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chris\appdata\local\microsoft\teams\current\teams.exe => Keine Datei
FirewallRules: [TCP Query User{7EFB2A74-EA68-4969-8DC4-F7F1CBA6FE52}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{6147D325-C422-49BB-89D6-8343C1C11D5C}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{3E9C4D03-E9E2-4E88-A321-97AFB08CBA08}C:\users\chris\appdata\local\viber\viber.exe] => (Allow) C:\users\chris\appdata\local\viber\viber.exe => Keine Datei
FirewallRules: [UDP Query User{542295A8-0A7B-46BA-9C92-DF39E9FDC2F4}C:\users\chris\appdata\local\viber\viber.exe] => (Allow) C:\users\chris\appdata\local\viber\viber.exe => Keine Datei
FirewallRules: [{88F23949-AB0E-466E-B505-7C80C9BB61B6}] => (Allow) D:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe (Frogwares Ireland ltd -> Frogwares, Inc.)
FirewallRules: [{265036A5-F9EA-40C4-BDAE-82A61C014F86}] => (Allow) D:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe (Frogwares Ireland ltd -> Frogwares, Inc.)
FirewallRules: [{E9DFEF2D-043D-4BA7-A83B-96EDEB6E6AAA}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{780D7907-C67D-4849-A1B0-A8F3BC4E173E}] => (Allow) D:\Lightworks\lightworks.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{D0BDEF41-61CC-4D86-A7F4-AA0C0260F7D7}] => (Allow) D:\Lightworks\lightworks.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{2F24FA18-6FF0-4CFB-BDC0-BB38F8DD2824}] => (Allow) D:\Lightworks\ntcardvt.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{B52935A5-E2CB-4C10-B923-1BD5033327FC}] => (Allow) D:\Lightworks\ntcardvt.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{94C79420-8BD2-45ED-B9B6-C83EEA4E41FE}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{741DB21C-B949-421C-B67A-B65F62A42470}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice => Keine Datei
FirewallRules: [{C9EC2865-5F8C-451D-9238-B5F21B7074C6}] => (Allow) D:\Assassin's Creed Mirage\ACMirage_plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{25E2FE48-208E-4A75-9A82-CC94BB486F20}] => (Allow) D:\Assassin's Creed Valhalla\ACValhalla_Plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{C8A2F621-7BA0-47A5-8CB0-6E18E0F44A48}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7D6AC75A-F3AC-48C3-ADF8-922A1DCBAF1F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3C3D4655-9901-404E-870B-379894E06B17}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A697E219-BEBD-4704-A671-13B5D33099B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{197F360A-A311-451B-B203-8D2B2C1947C2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3CF73A54-053F-4D8D-909A-AB9E98B8B8A5}] => (Allow) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe (LoupeDeck Oy -> Logitech)
FirewallRules: [{706EFDD7-18AB-4B3C-A6BF-C239B5872EB7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BF0A7870-219D-4779-B625-597EBF6C7DB9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6FDD87EF-68B2-4DA1-854D-E3EAC87D73E5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{560697E8-DEE7-4F68-B2F6-9A4344D09F05}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1E440E37-7F0A-4B51-9D38-4AC598D1AE9C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{6904EE9C-DD19-4302-A2C9-C7C8E49AC1E1}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{A4782F19-7286-4A5D-9195-6078CB0C5A81}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7114E54B-4E82-4D37-BE6C-D19644176F29}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{639A6B97-D59C-4AEC-BD6F-F49B0EF70B21}] => (Allow) D:\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )
FirewallRules: [{1C2D566F-FE8E-4994-83FC-9634D5D640AE}] => (Allow) D:\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager ============

Name: FUJITSU OASYS ｷｰﾎﾞｰﾄﾞ  親指ｼﾌﾄ  Type(実行付)
Description: FUJITSU OASYS ｷｰﾎﾞｰﾄﾞ  親指ｼﾌﾄ  Type(実行付)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: Fujitsu
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: EVGA ClickPad
Description: EVGA ClickPad
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Synaptics
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/26/2024 09:00:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm lotroclient64.exe Version 4104.68.6481.4039 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2f64

Startzeit: 01db27d551fea3b9

Beendigungszeit: 4294967295

Anwendungspfad: D:\Turbine\Der Herr der Ringe Online\x64\lotroclient64.exe

Bericht-ID: 9f4e21f4-b49d-4d8e-97ac-c9f416016c8b

Vollständiger Name des fehlerhaften Pakets: 

Relative Anwendungs-ID des fehlerhaften Pakets: 

Absturztyp: Top level window is idle

Error: (10/26/2024 01:45:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HyCam2.exe, Version: 2.29.1.0, Zeitstempel: 0x53a5cec7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ffd020213d0
ID des fehlerhaften Prozesses: 0x3f84
Startzeit der fehlerhaften Anwendung: 0x01db279ed94fc6ef
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HyperCam 2\HyCam2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 44bbeeb8-d79a-4fb7-86fb-77ba1b049b47
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/26/2024 12:58:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Dashboard.exe, Version: 8.4.9.14426, Zeitstempel: 0xa9a018fd
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.4957, Zeitstempel: 0xc5225d0f
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000003b699
ID des fehlerhaften Prozesses: 0x1fa0
Startzeit der fehlerhaften Anwendung: 0x01db279e1941c9cf
Pfad der fehlerhaften Anwendung: C:\Program Files\CyberGhost 8\Dashboard.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: a754b77a-f37c-4b06-8968-939d7ac977ef
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/26/2024 12:58:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Dashboard.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
   bei CyberGhost.Browser.Controls.CgBrowser+<InitializeAsync>d__44.MoveNext()
   bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
   bei MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Windows.Threading.DispatcherOperation.Invoke()
   bei System.Windows.Threading.Dispatcher.ProcessQueue()
   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunDispatcher(System.Object)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei Dashboard.App.Main()

Error: (10/26/2024 09:39:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HyCam2.exe, Version: 2.29.1.0, Zeitstempel: 0x53a5cec7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ffd021313d0
ID des fehlerhaften Prozesses: 0x241c
Startzeit der fehlerhaften Anwendung: 0x01db2781f2e2e305
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HyperCam 2\HyCam2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: b92b55ea-f712-4614-88ec-0c6c970270bd
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/25/2024 11:31:42 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Dashboard.exe, Version: 8.4.9.14426, Zeitstempel: 0xa9a018fd
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.4957, Zeitstempel: 0xc5225d0f
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000003b699
ID des fehlerhaften Prozesses: 0x489c
Startzeit der fehlerhaften Anwendung: 0x01db272d557091f0
Pfad der fehlerhaften Anwendung: C:\Program Files\CyberGhost 8\Dashboard.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: 598a5239-be05-488c-9ffa-4ba7e507d002
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/25/2024 11:31:41 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Dashboard.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
   bei CyberGhost.Browser.Controls.CgBrowser+<InitializeAsync>d__44.MoveNext()
   bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
   bei MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Windows.Threading.DispatcherOperation.Invoke()
   bei System.Windows.Threading.Dispatcher.ProcessQueue()
   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunDispatcher(System.Object)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei Dashboard.App.Main()

Error: (10/25/2024 11:29:20 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HyCam2.exe, Version: 2.29.1.0, Zeitstempel: 0x53a5cec7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007fff022313d0
ID des fehlerhaften Prozesses: 0x1e00
Startzeit der fehlerhaften Anwendung: 0x01db27241d8f8af0
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HyperCam 2\HyCam2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 602273b3-cb5f-4704-802b-0a9a6747f29e
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (10/28/2024 09:11:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/28/2024 09:11:43 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys

Error: (10/28/2024 09:11:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/28/2024 09:11:42 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys

Error: (10/28/2024 09:11:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/28/2024 09:11:42 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys

Error: (10/28/2024 09:11:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/28/2024 09:11:42 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys


Windows Defender:
================
Date: 2024-09-29 16:00:58
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {44869A81-3F64-4E20-84FF-98774AA1A08A}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: DESKTOP-2M6NKLL\Chris

Date: 2024-09-07 22:46:26
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {75E51CA8-25EC-4F2A-BE94-8244D6B429FC}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2024-09-05 09:26:51
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {791B171F-094E-4A76-B608-22FC0DFB2C9E}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2024-08-31 11:42:19
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4EC5F6D8-D500-4F44-B8BD-42E835A43928}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2024-08-13 10:59:25
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {BD615B04-4A1F-4800-8BDA-F67B190C6D25}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM
Event[0]:

Date: 9224-01-12 00:06:36
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.645.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24080.9
Fehlercode: 0x80070102
Fehlerbeschreibung: Der Wartevorgang wurde abgebrochen. 

Date: 9224-01-12 00:00:23
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.645.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24080.9
Fehlercode: 0x800b0101
Fehlerbeschreibung: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. 

Date: 2023-12-01 11:34:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen.
Dateiname: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\3xlwd4bx.default\Yahoo! Inc\ytoolbar\18hj4awr_o\cachesection
Sha256: 9b080d574ff8a83d25d97f6e234cb88fc8d686ad0f6643ca35491983db214f3e
Aktuelle Sicherheitsversion: AV: 1.401.1481.0, AS: 1.401.1481.0
Aktuelle Modulversion: 1.1.23110.2
Fehlercode: 0x80071112

Date: 2023-11-10 10:17:55
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.401.335.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23100.2009
Fehlercode: 0x80240438
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support". 

Date: 2023-09-01 18:22:02
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.397.144.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23080.2005
Fehlercode: 0x80070102
Fehlerbeschreibung: Der Wartevorgang wurde abgebrochen. 

CodeIntegrity:
===============
Date: 2024-09-11 21:50:52
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.

Date: 2024-09-11 21:50:52
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2024-03-11 20:22:41
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

Date: 2023-07-18 11:46:44
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2023-06-29 11:38:03
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1.80 01/22/2016
Hauptplatine: MSI Z170-A PRO (MS-7971)
Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 16346.89 MB
Verfügbarer physikalischer RAM: 10503.59 MB
Summe virtueller Speicher: 18778.89 MB
Verfügbarer virtueller Speicher: 11895.44 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:222.98 GB) (Free:23.18 GB) (Model: CT240BX200SSD1) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (D1-P1) (Fixed) (Total:931.51 GB) (Free:556.57 GB) (Model: WDC WD10EZRZ-00Z5HB0) NTFS
Drive f: (TOSHIBA EXT) (Fixed) (Total:931.51 GB) (Free:0.24 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS

\\?\Volume{ef94e5d9-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{ef94e5d9-0000-0000-0000-30c537000000}\ () (Fixed) (Total:0.49 GB) (Free:0.05 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: EF94E5D9)
Partition 1: (Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=500 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 38E4ADF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 67EB62E7)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================

cosinus · 28.10.2024, 11:46

Zitat:

Outbyte Driver Updater (HKLM-x32\...\{B38B494B-46F8-4765-8D92-31B8F10D8FD3}_is1) (Version: 2.6.1.35598 - Outbyte Computing Pty Ltd)

Wieso installierst du denn sowas überhaupt?!

januskopf198 · 28.10.2024, 11:51

Dummheit, Naivität, fehlende Aufmerksamkeit... eins von denen wird es gewesen sein

cosinus · 28.10.2024, 12:18

Zitat:

Hauptplatine: MSI Z170-A PRO (MS-7971)
Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz

Dein System ist auch nicht mehr das jüngste und so nicht mit Windows 11 kompatibel. Dass Windows 10 in weniger als einem Jahr EOL ist, ist dir bekannt?

januskopf198 · 28.10.2024, 12:26

ja, das ist mir bekannt

cosinus · 28.10.2024, 12:30

Störende, veraltete oder unnötige Programme deinstallieren

Bitte über Programme und Features (appwiz.cpl) deinstallieren:

7-Zip 15.14
Adobe Photoshop Lightroom 4.4 64-bit
Google Chrome (durch Mozilla Firefox ersetzen)
Microsoft SQL Server 2005 Compact Edition [ENU]
Outbyte Driver Updater

januskopf198 · 28.10.2024, 13:04

alles klar. Erledigt. Wobei ich Outbyte schon nicht mehr in den Programmen finde

cosinus · 28.10.2024, 13:06

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner bitte wiederholen falls es Funde gab.

januskopf198 · 28.10.2024, 13:16

lief ohne Funde durch

Code:

ATTFilter

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.

***** [ Hosts File Entries ] *****

No malicious hosts file entries found.

***** [ Preinstalled Software ] *****

No Preinstalled Software found.


AdwCleaner[S00].txt - [1406 octets] - [08/01/2021 01:05:11]
AdwCleaner[S01].txt - [1467 octets] - [18/01/2021 23:04:18]
AdwCleaner[S02].txt - [1528 octets] - [23/01/2021 01:54:54]
AdwCleaner[S03].txt - [1589 octets] - [06/02/2021 15:20:46]
AdwCleaner[S04].txt - [1828 octets] - [09/03/2021 07:41:16]
AdwCleaner[C04].txt - [1981 octets] - [09/03/2021 08:09:33]
AdwCleaner[S05].txt - [1950 octets] - [09/03/2021 08:15:44]
AdwCleaner[C05].txt - [2103 octets] - [09/03/2021 08:15:58]
AdwCleaner[S06].txt - [1893 octets] - [09/03/2021 08:16:20]
AdwCleaner[S07].txt - [1954 octets] - [15/03/2021 17:51:25]
AdwCleaner[S08].txt - [2016 octets] - [04/04/2021 10:34:50]
AdwCleaner[S09].txt - [2077 octets] - [14/05/2021 12:43:30]
AdwCleaner[S10].txt - [2138 octets] - [23/05/2021 14:32:34]
AdwCleaner[S11].txt - [2199 octets] - [08/07/2021 22:02:54]
AdwCleaner[S12].txt - [2260 octets] - [20/07/2021 22:22:59]
AdwCleaner[S13].txt - [2321 octets] - [27/07/2021 19:01:10]
AdwCleaner[S14].txt - [2382 octets] - [14/11/2021 09:27:55]
AdwCleaner[S15].txt - [2443 octets] - [10/12/2021 13:30:19]
AdwCleaner[S16].txt - [2504 octets] - [15/01/2022 12:35:39]
AdwCleaner[S17].txt - [2565 octets] - [03/04/2022 15:39:39]
AdwCleaner[S18].txt - [2626 octets] - [17/07/2022 22:41:56]
AdwCleaner[S19].txt - [2687 octets] - [23/07/2022 12:30:52]
AdwCleaner[S20].txt - [2748 octets] - [06/08/2022 12:01:48]
AdwCleaner[S21].txt - [2823 octets] - [02/02/2023 14:54:07]
AdwCleaner[S22].txt - [2884 octets] - [19/07/2023 13:51:04]
AdwCleaner[S23].txt - [2945 octets] - [07/08/2023 17:43:33]
AdwCleaner[S24].txt - [3006 octets] - [06/12/2023 13:38:45]
AdwCleaner[S25].txt - [3067 octets] - [14/04/2024 11:44:52]
AdwCleaner[S26].txt - [3128 octets] - [21/05/2024 16:59:48]
AdwCleaner[S27].txt - [3189 octets] - [02/10/2024 18:01:02]
AdwCleaner[S28].txt - [3464 octets] - [28/10/2024 08:59:49]
AdwCleaner[C28].txt - [3578 octets] - [28/10/2024 09:01:58]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S29].txt ##########

cosinus · 28.10.2024, 13:17

Dann jetzt neue FRST-Logs.

januskopf198 · 28.10.2024, 13:27

FRST Logfile:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
durchgeführt von Chris (Administrator) auf DESKTOP-2M6NKLL (MSI MS-7971) (28-10-2024 13:18:16)
Gestartet von C:\Users\Chris\Desktop\FRST64.exe
Geladene Profile: Chris
Plattform: Microsoft Windows 10 Home Version 22H2 19045.5011 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> com.logitech) C:\Program Files\LogiOptionsPlus\logi_ai_prompt_builder\LogiAiPromptBuilder.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\1.3.911.1\DropboxCrashHandler.exe
(explorer.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logi\LogiBolt\LogiBolt.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(explorer.exe ->) (Ruiware, LLC -> Ruiware) D:\WinPatrol\WinPatrol.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <10>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Cyberghost SRL -> CyberGhost S.R.L.) C:\Program Files\CyberGhost 8\Dashboard.Service.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_b966ea70c5407e74\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe
(services.exe ->) (MiniTool Software Limited -> ) D:\MiniTool ShadowMaker\AgentService.exe
(services.exe ->) (MiniTool Software Limited -> ) D:\MiniTool ShadowMaker\SchedulerService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8484056 2015-06-12] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9235336 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [TeamsMachineUninstallerLocalAppData] => C:\Users\Chris\AppData\Local\Microsoft\Teams\Update.exe [2593816 2024-05-15] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM-x32\...\Run: [TeamsMachineUninstallerProgramData] => %ProgramData%\Microsoft\Teams\Update.exe --uninstall --msiUninstall --source=default (Keine Datei)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [WinPatrol] => D:\WinPatrol\WinPatrol.exe [1223560 2017-05-08] (Ruiware, LLC -> Ruiware)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\Chris\AppData\Local\WebEx\WebexHost.exe [8077920 2024-04-09] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [LogiBolt] => C:\Program Files\Logi\LogiBolt\LogiBolt.exe [22423104 2021-12-14] (Logitech Inc -> Logitech)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [YouTubeToMP3] => "C:\Program Files\DVDFab\StreamFab\StreamFab64.exe" mode=StartWhenPowerUp (Keine Datei)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [MicrosoftEdgeAutoLaunch_D3FEFEF9604A334C07E903E221AE7560] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3856456 2024-10-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Run: [CyberGhost] => C:\Program Files\CyberGhost 8\Dashboard.exe [1417696 2024-10-08] (Cyberghost SRL -> CyberGhost S.R.L.)
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\Bubbles.scr [809984 2024-05-15] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP 7112 Status Monitor: C:\Windows\system32\hpinksts7112LM.dll [328704 2014-03-03] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\PDF-XChange Lite Port Monitor: C:\WINDOWS\system32\pxcpmL.dll [915280 2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {A2758957-7E91-4DE2-90D0-61D99D4B0CCB} - System32\Tasks\{2E2CE07B-4A22-40E3-B7DB-A94E8F2C6065} => c:\program files (x86)\mozilla firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> hxxp://ui.skype.com/ui/0/7.26.0.101/de/abandoninstall?source=lightinstaller&page=tsMain
Task: {8FF32894-F796-4E53-BE9C-7AD5463DA163} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [5845320 2024-09-29] (Microsoft Windows -> Microsoft Corporation)
Task: {01F75D02-88A8-4415-82A6-CE9CB48DCEE0} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {DF925662-4A94-4046-B400-177FA2C39028} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {C3FF5C4A-51BD-407D-B01C-7EF127DDFBA0} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007456 2024-10-28] (ESET, spol. s r.o. -> ESET)
Task: {5D6F9836-CCB4-4774-839F-471393AD0534} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Chris\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [18007456 2024-10-28] (ESET, spol. s r.o. -> ESET)
Task: {7CE4326F-40AC-46A1-ADF0-6BB869F96F6F} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_740dc8aba9846dbb\lib\IntelPTTEKRecertification.exe [855672 2024-04-24] (Intel Corporation -> Intel(R) Corporation)
Task: {407E45A5-2F3F-4374-B23A-4080F0754027} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {B81DF236-C906-48A4-B7ED-3D07419F1979} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {5E592C97-4358-4BFD-B063-1FD67FE6AE27} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {283DC23C-B291-43D0-B9C6-11E84353A340} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {5E2E8F33-D143-48D1-B10F-84BE327B1704} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D491D56-CF9E-4E70-8025-6083EF70CF66} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {191308F2-7516-4AD2-B8C2-E54A2CA4A569} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => C:\WINDOWS\system32\clipesu.exe [221680 2024-09-29] (Microsoft Windows -> Microsoft Corporation)
Task: {1EE395DD-4D10-4EEF-ACC4-FDBB6748BF52} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8EDB474A-AB2E-43C5-BBE6-62F79D577F08} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {75268E62-22BE-423E-8CE9-8F808F3688F0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C24B0CA2-CA74-4092-A019-D88F2644E1F1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9945977D-D914-4B46-B7ED-FAEB605C6CB9} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {81C02545-3170-4514-8778-90D0AA9A682B} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2085067102-2347417263-2365046495-1001 E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [672320 2024-10-15] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {EED52E06-F291-4A52-BB34-1CCE66550F5D} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [34368 2024-10-15] (Mozilla Corporation -> Mozilla Foundation)
Task: {336BD2F0-55D7-44AD-8C1D-67DDC52FC948} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1277480 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {21C2E302-1A77-4755-92BE-FEB4878BB94B} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3347496 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AFB3358E-62B1-4FC7-86EA-A575A543ADEB} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646696 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {2B920AAE-A862-41BF-B851-838115345F18} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DD464A46-FE1D-42AD-9E1D-0E9EF1718EB9} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908328 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {23D18A0B-71A8-4240-8C3C-F4D9107E27E3} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A3380B60-5464-453C-802C-C044F030A10E} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C3E80E25-57C7-48B9-90C6-10CB9EDD0C23} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6902B7C7-8FCF-4350-B541-4CEC96353A5A} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1673768 2024-06-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4FB87235-6779-4BFB-BA9F-7C43FA8958B9} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {BE97602B-80C5-41CC-8338-5DD1F49755C0} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2085067102-2347417263-2365046495-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4209192 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}\14E64627F696461405: [DhcpNameServer] 192.168.71.30
Tcpip\..\Interfaces\{32ce16c9-d79a-4f88-b03c-ea7b72cf7157}\75C414E413D2931414148343: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}\64259445A51224F6870263839303024444: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{801a14f7-698a-42c2-b897-babe2dc5ebc8}\64259445A51224F6870263839303024444: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{9a9780da-5392-447d-830c-de21e4f15d60}: [NameServer] 185.93.180.131,194.187.251.67
Tcpip\..\Interfaces\{9a9780da-5392-447d-830c-de21e4f15d60}: [DhcpNameServer] 192.168.178.2
Tcpip\..\Interfaces\{9e12574a-62fc-47e0-bc57-e5247d2329a7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9e12574a-62fc-47e0-bc57-e5247d2329a7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{ae647b26-9842-48b9-8376-c59f5f8cabab}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{da0ba8eb-9cdd-48eb-84c1-7c479440b9ea}: [DhcpNameServer] 192.168.2.1 192.168.2.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [NameServer] 10.0.0.243,185.93.180.131,194.187.251.67
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{fc6a36e6-5cd8-4cfb-a312-e10da4f14746}\64259445A51224F6870263839303024444: [DhcpDomain] fritz.box

Edge: 
=======
Edge Profile: C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default [2024-10-28]
Edge Notifications: Default -> hxxps://web.telegram.org
Edge Extension: (Google Docs Offline) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-17]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2024-10-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Chris\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: g8bepsdf.default-1490997757038-1609813003616
FF ProfilePath: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616 [2024-10-28]
FF Homepage: Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616 -> about:blank
FF Extension: (uBlock Origin) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\uBlock0@raymondhill.net.xpi [2024-10-02]
FF Extension: (YouTube Video Downloader/YouTube HD Download) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\youtubedownloader@youtubedownloadvideo1clickgroup.com.xpi [2022-04-23]
FF Extension: (Vevioz Youtube Downloader) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\{7f4fdb0c-a234-4eda-bc9e-e1b2bc1c5f10}.xpi [2021-07-07]
FF Extension: (Video DownloadHelper) - C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\g8bepsdf.default-1490997757038-1609813003616\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-09-11]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> D:\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin-x32: @videolan.org/vlc,version=2.2.2 -> D:\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> D:\VLC\npvlc.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
FF Plugin HKU\S-1-5-21-2085067102-2347417263-2365046495-1001: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2024-02-29] (Ubisoft Entertainment Sweden AB -> )

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default [2024-10-28]
CHR Notifications: Default -> hxxps://web.snapchat.com; hxxps://web.whatsapp.com; hxxps://www.instagram.com; hxxps://www.roadbike.de; hxxps://xtoys.app
CHR Extension: (MEGA) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2024-10-25] [UpdateUrl:hxxps://mega.nz/firefox-web-extension-updates.json] <==== ACHTUNG
CHR Extension: (Avira Browserschutz) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2024-09-05]
CHR Extension: (Google Docs Offline) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-17]
CHR Extension: (Hola VPN - Your Website Unblocker) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2024-10-03]
CHR Extension: (Chat and Meet for Hangouts) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\lbbjiabdjpmkpphamabmodmomhoddlan [2019-11-03]
CHR Extension: (Google Hangouts) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nckgahadagoaajjgafhacjanaoiihapd [2022-04-20]
CHR Extension: (Desktopify) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlhjgcligpbnjphflfdbmabbmjidnmek [2021-01-18]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\Guest Profile [2021-01-05]
CHR Profile: C:\Users\Chris\AppData\Local\Google\Chrome\User Data\System Profile [2021-01-05]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14042624 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
R2 CyberGhost8Service; C:\Program Files\CyberGhost 8\Dashboard.Service.exe [69088 2024-10-08] (Cyberghost SRL -> CyberGhost S.R.L.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\210.4.4854\DropboxElevationService.exe [1659280 2024-10-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncHelper.exe [3524648 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2024-10-16] (HP Inc. -> HP Inc.)
R3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
S2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9319296 2024-10-21] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-06-12] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MTAgentService; D:\MiniTool ShadowMaker\AgentService.exe [732992 2023-04-12] (MiniTool Software Limited -> )
R2 MTSchedulerService; D:\MiniTool ShadowMaker\SchedulerService.exe [225088 2023-04-12] (MiniTool Software Limited -> )
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\Display.NvContainer\NVDisplay.Container.exe [1275024 2024-10-16] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.192.0923.0006\OneDriveUpdaterService.exe [3868688 2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [19709848 2024-10-15] (Logitech Inc -> Logitech, Inc.)
S3 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [15250864 2024-04-12] (ADLICE -> )
S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182392 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 gupdate; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc [X]
S3 gupdatem; "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /medsvc [X]
S2 SynTPEnhService; "C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R0 CRUWBlocker; C:\WINDOWS\System32\drivers\CRUWBlocker.sys [40152 2018-08-29] (CRU Acquisition Group, LLC -> CRU Acquisition Group, LLC)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 HKKbdFltr; C:\WINDOWS\System32\drivers\HKKbdFltr.sys [40320 2019-03-05] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.)
R3 JmUsbCcgp; C:\WINDOWS\system32\DRIVERS\jmccgp.sys [17136 2009-07-27] (JMicron Technology Corp. -> JMicron Technology Corp.)
R1 kbdclass; C:\WINDOWS\System32\drivers\f5dnkcls.sys [58344 2016-03-06] (FUJITSU LIMITED -> FUJITSU LIMITED)
R3 ManyCam; C:\WINDOWS\System32\drivers\ManyCam_x64.sys [27136 2008-03-13] (Microsoft Windows Hardware Compatibility Publisher -> ManyCam LLC.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-10-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-08-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-07-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MonitorFunction; C:\WINDOWS\System32\drivers\lockscr.sys [24560 2019-01-20] (Remote Utilities LLC -> )
R3 MpKsl4c7c815f; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{B23CFD6C-AC50-40A1-B366-A478A9E30B6D}\MpKslDrv.sys [267552 2024-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_ea6cec41fc5b2a8b\NvModuleTracker.sys [47240 2024-04-03] (NVIDIA Corporation -> NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2021-03-26] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2021-03-26] (MiniTool Solution Ltd -> )
S3 rtwlane_13; C:\WINDOWS\System32\drivers\rtwlane_13.sys [3717120 2019-12-07] (Microsoft Windows -> Realtek Semiconductor Corporation)
R3 SBAudioRT; C:\WINDOWS\System32\DriverStore\FileRepository\sbaudiort.inf_amd64_1396dccbfc09fb4d\SBAudioRT.sys [99080 2022-11-16] (Screaming Bee Inc -> Windows (R) Win 7 DDK provider)
R3 Serial; C:\WINDOWS\system32\DRIVERS\wdfserial.sys [89976 2018-04-26] (LG Electronics Inc. -> LG Electronics Inc.)
S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [159952 2015-11-14] (RH Software -> Ray Hinchliffe)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [41000 2024-02-26] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R3 TcPpm; C:\WINDOWS\System32\drivers\TcPpm.sys [9216 2014-08-22] (Beckhoff Automation GmbH -> )
R3 VCSVADHWSer; C:\WINDOWS\System32\drivers\vcsvad.sys [29320 2015-10-01] (AVSOFT CORP. -> AVSOFT Corp.)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [817672 2022-04-03] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX)
R3 voxaldriver; C:\WINDOWS\system32\DRIVERS\voxaldriverx64.sys [43472 2016-07-27] (NCH Software Pty Ltd -> )
R3 vtsio; C:\WINDOWS\system32\DRIVERS\VTSIO.sys [29256 2017-04-25] (Trihedral Engineering Limited -> Trihedral Engineering Limited)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-23] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2024-01-16] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-28 13:18 - 2024-10-28 13:18 - 000038027 _____ C:\Users\Chris\Desktop\FRST.txt
2024-10-28 13:11 - 2024-10-28 13:11 - 008790880 _____ (Malwarebytes) C:\Users\Chris\Downloads\adwcleaner.exe
2024-10-28 10:10 - 2024-10-28 10:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tracker Software
2024-10-28 10:10 - 2024-10-28 10:10 - 000000000 ____D C:\ProgramData\FileOpen
2024-10-28 10:10 - 2024-10-28 10:10 - 000000000 ____D C:\Program Files\Tracker Software
2024-10-28 10:10 - 2024-10-28 10:10 - 000000000 ____D C:\Program Files\Common Files\Tracker Software
2024-10-28 10:10 - 2024-10-15 17:08 - 000915280 _____ (PDF-XChange Co Ltd.) C:\WINDOWS\system32\pxcpmL.dll
2024-10-28 09:53 - 2024-10-28 09:53 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Synaptics
2024-10-28 09:25 - 2024-10-28 09:25 - 000000706 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MauiWowieee.lnk
2024-10-28 09:18 - 2024-10-28 13:18 - 000000000 ____D C:\FRST
2024-10-28 09:18 - 2024-10-28 09:18 - 002397696 _____ (Farbar) C:\Users\Chris\Desktop\FRST64.exe
2024-10-23 14:01 - 2024-10-23 14:01 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2024-10-23 13:54 - 2024-10-16 09:00 - 002060648 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 002060648 _____ C:\WINDOWS\system32\vulkaninfo.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 001600360 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2024-10-23 13:54 - 2024-10-16 09:00 - 001600360 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2024-10-23 13:54 - 2024-10-16 08:59 - 001452400 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001452400 _____ C:\WINDOWS\system32\vulkan-1.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001301864 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 001301864 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 000477816 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2024-10-23 13:54 - 2024-10-16 08:59 - 000374944 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001554568 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001208952 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 001114752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 000863904 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2024-10-23 13:54 - 2024-10-16 08:56 - 000670360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2024-10-23 13:54 - 2024-10-16 08:56 - 000505488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 025450104 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2024-10-23 13:54 - 2024-10-16 08:55 - 002185344 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 001634944 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 001042048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 000800888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2024-10-23 13:54 - 2024-10-16 08:55 - 000461944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2024-10-23 13:54 - 2024-10-16 08:54 - 017736824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 016811128 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 006953120 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 005910168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 005435024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 003807384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2024-10-23 13:54 - 2024-10-16 08:54 - 000853112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2024-10-23 13:54 - 2024-10-16 08:53 - 007159112 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2024-10-23 13:54 - 2024-10-16 08:53 - 006236256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2024-10-23 13:54 - 2024-10-15 20:04 - 000132701 _____ C:\WINDOWS\system32\nvinfo.pb
2024-10-18 13:11 - 2024-10-18 13:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2024-10-16 19:05 - 2024-10-16 19:05 - 000001180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi Plugin Service.lnk
2024-10-16 19:05 - 2024-10-16 19:05 - 000000000 ____D C:\Users\Default\AppData\Local\Logi
2024-10-16 19:05 - 2024-10-16 19:05 - 000000000 ____D C:\ProgramData\Logi
2024-10-16 19:03 - 2024-10-16 19:03 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2024-10-16 11:56 - 2024-10-16 11:56 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2024-10-09 23:41 - 2024-10-09 23:41 - 000000000 ____D C:\Users\Chris\Intel
2024-10-09 09:34 - 2024-10-09 09:34 - 000000000 ___HD C:\$WinREAgent
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\Users\Chris\AppData\Roaming\CyberGhost
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 8
2024-10-08 22:35 - 2024-10-08 22:35 - 000000000 ____D C:\Program Files\CyberGhost 8
2024-10-08 15:02 - 2024-03-30 23:00 - 000338968 _____ (Intel Corporation) C:\WINDOWS\system32\JHI64.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000323088 _____ (Intel Corporation) C:\WINDOWS\system32\TEEManagement64.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000273936 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\JHI.dll
2024-10-08 15:02 - 2024-03-30 23:00 - 000261248 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\TEEManagement.dll
2024-10-08 15:00 - 2009-07-27 23:00 - 000614000 _____ (JMicron Technology Corp.) C:\WINDOWS\system32\jmccgpInst.dll
2024-10-08 15:00 - 2009-07-27 23:00 - 000017136 _____ (JMicron Technology Corp.) C:\WINDOWS\system32\Drivers\jmccgp.sys
2024-10-08 14:59 - 2022-12-12 23:00 - 001095872 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\iaStorAC.sys
2024-10-08 14:59 - 2018-08-29 23:00 - 000040152 _____ (CRU Acquisition Group, LLC) C:\WINDOWS\system32\Drivers\CRUWBlocker.sys
2024-10-08 14:58 - 2016-03-06 23:00 - 000385512 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnchex.dll
2024-10-08 14:58 - 2016-03-06 23:00 - 000058344 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\Drivers\f5dnkcls.sys
2024-10-08 14:58 - 2016-03-06 23:00 - 000023528 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnoya.dll
2024-10-08 14:58 - 2016-03-06 23:00 - 000023016 _____ (FUJITSU LIMITED) C:\WINDOWS\system32\f5dnjis.dll
2024-10-08 14:57 - 2019-03-05 23:00 - 000040320 _____ (Insyde Software Corp.) C:\WINDOWS\system32\Drivers\HKKbdFltr.sys
2024-10-08 14:56 - 2024-10-08 14:56 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_SynTP_01011.Wdf
2024-10-08 14:56 - 2024-10-08 14:56 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_Smb_driver_Intel_01011.Wdf
2024-10-08 14:54 - 2016-10-10 23:00 - 003719688 _____ (Realtek Semiconductor Corporation ) C:\WINDOWS\system32\Drivers\rtwlane.sys
2024-10-08 14:53 - 2024-03-11 23:00 - 001331144 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys
2024-10-08 14:53 - 2019-01-20 23:00 - 000024560 _____ C:\WINDOWS\system32\Drivers\lockscr.sys
2024-10-08 14:51 - 2024-10-08 14:51 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_wdfserial_01011.Wdf
2024-10-08 14:51 - 2018-04-26 23:00 - 000089976 _____ (LG Electronics Inc.) C:\WINDOWS\system32\Drivers\wdfserial.sys
2024-10-08 14:51 - 2017-04-25 23:00 - 000029256 _____ (Trihedral Engineering Limited) C:\WINDOWS\system32\Drivers\VTSIO.sys
2024-10-08 14:51 - 2014-08-22 22:10 - 000009216 _____ C:\WINDOWS\system32\Drivers\TcPpm.sys
2024-10-03 10:59 - 2024-09-28 19:32 - 000125048 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2024-10-01 08:08 - 2024-10-01 08:08 - 000175151 _____ C:\Users\Chris\Downloads\R4C_Kletterschuhe_Reparatur_AF.pdf
2024-09-29 21:24 - 2024-09-29 21:25 - 000000000 ____D C:\WINDOWS\nsnCCB8.tmp

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-28 13:16 - 2023-08-02 19:54 - 000000000 ____D C:\Users\Chris\AppData\Local\Malwarebytes
2024-10-28 13:16 - 2022-02-10 07:41 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-10-28 13:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-10-28 13:12 - 2017-03-15 14:54 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Microsoft\Excel
2024-10-28 12:40 - 2021-12-15 20:18 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-10-28 12:40 - 2016-03-14 19:52 - 000000000 ____D C:\Program Files (x86)\Google
2024-10-28 12:25 - 2017-04-19 23:44 - 000000000 ____D C:\ProgramData\NVIDIA
2024-10-28 11:33 - 2023-02-10 12:01 - 000000000 ____D C:\Users\Chris\AppData\Local\LogiOptionsPlus
2024-10-28 11:13 - 2016-03-14 21:47 - 000000000 ____D C:\Users\Chris\AppData\Local\The Lord of the Rings Online
2024-10-28 11:00 - 2016-03-19 00:47 - 000000000 ____D C:\Users\Chris\AppData\Roaming\vlc
2024-10-28 10:37 - 2020-06-16 21:39 - 001723002 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-10-28 10:37 - 2019-12-07 15:50 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2024-10-28 10:37 - 2019-12-07 15:50 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2024-10-28 10:37 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-10-28 10:31 - 2023-12-18 11:54 - 000000000 ____D C:\Users\Chris\AppData\Local\CyberGhost
2024-10-28 10:31 - 2022-02-17 18:49 - 000000000 ____D C:\Users\Chris\AppData\Local\LogiBolt
2024-10-28 10:30 - 2023-12-06 13:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2024-10-28 10:30 - 2020-06-16 21:43 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-10-28 10:30 - 2020-06-16 21:37 - 000008192 ___SH C:\DumpStack.log.tmp
2024-10-28 10:30 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-10-28 10:10 - 2017-06-02 15:30 - 000000000 ____D C:\ProgramData\Tracker Software
2024-10-28 10:10 - 2015-11-05 21:20 - 000000000 ____D C:\ProgramData\Package Cache
2024-10-28 09:42 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-10-28 09:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-10-28 09:42 - 2017-10-18 17:15 - 000000000 ____D C:\Users\Chris\AppData\Local\Packages
2024-10-28 09:18 - 2021-01-18 23:02 - 000000000 ____D C:\Users\Chris\AppData\Local\Spotify
2024-10-28 09:17 - 2021-01-18 23:01 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Spotify
2024-10-28 09:17 - 2016-03-24 18:42 - 000001289 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2024-10-28 09:13 - 2016-03-14 17:21 - 000000000 ___SD C:\Users\Chris\AppData\Roaming\Microsoft\Credentials
2024-10-28 09:11 - 2021-01-05 20:18 - 000001435 _____ C:\Users\Chris\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2024-10-28 09:08 - 2024-04-25 16:51 - 000000000 ____D C:\Users\Chris\AppData\Roaming\Telegram Desktop
2024-10-28 07:52 - 2021-01-05 22:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2024-10-28 07:52 - 2021-01-05 22:06 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2024-10-28 07:52 - 2020-06-16 21:43 - 000004172 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{ACDD8A9F-8B92-4124-84B2-3AD08B1F1B95}
2024-10-26 19:36 - 2020-06-22 18:58 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-10-26 19:22 - 2020-06-16 21:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-10-26 13:45 - 2016-03-14 21:44 - 000000000 ____D C:\Users\Chris\AppData\Local\CrashDumps
2024-10-25 22:10 - 2021-12-13 08:20 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2085067102-2347417263-2365046495-1001
2024-10-25 22:10 - 2021-09-12 10:09 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-10-25 22:10 - 2021-01-05 13:17 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-10-25 22:10 - 2021-01-05 13:17 - 000002115 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-10-23 14:01 - 2016-03-14 17:21 - 000000000 ____D C:\Users\Chris\AppData\Local\NVIDIA
2024-10-23 09:20 - 2018-02-28 21:31 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-10-21 18:06 - 2020-07-23 16:55 - 000000000 ____D C:\WINDOWS\Minidump
2024-10-21 18:06 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-10-18 13:11 - 2016-04-16 11:47 - 000000000 ____D C:\Users\Chris\AppData\Local\Dropbox
2024-10-18 13:11 - 2016-04-16 11:47 - 000000000 ____D C:\Program Files (x86)\Dropbox
2024-10-16 19:05 - 2022-02-17 18:49 - 000000000 ____D C:\Program Files\Logi
2024-10-16 19:03 - 2022-02-17 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2024-10-16 10:58 - 2022-03-23 18:52 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2024-10-16 10:58 - 2022-03-14 12:46 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2024-10-15 15:14 - 2019-10-20 13:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-10-15 15:13 - 2016-03-14 17:25 - 000001239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-10-15 14:42 - 2023-10-15 16:53 - 000000000 ____D C:\Program Files\RUXIM
2024-10-10 20:29 - 2020-06-22 18:58 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-10-10 20:29 - 2020-06-22 18:58 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-10-10 15:20 - 2020-06-16 21:37 - 000449408 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-10-10 15:20 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-10-10 15:20 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-10-10 09:29 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-10-10 09:27 - 2020-06-16 21:39 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-10-10 09:23 - 2016-02-02 16:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-10-10 09:20 - 2016-02-02 16:27 - 201324920 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-10-09 23:41 - 2020-06-16 04:33 - 000000000 ____D C:\Users\Chris
2024-10-09 23:41 - 2016-02-18 16:53 - 000000000 ____D C:\Program Files\Intel
2024-10-08 15:12 - 2020-10-10 09:10 - 000003840 _____ C:\WINDOWS\system32\Tasks\Intel PTT EK Recertification
2024-10-06 15:19 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2024-10-06 00:59 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-09-29 22:31 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2024-07-12 16:17 - 2024-07-12 16:17 - 000000012 _____ () C:\Users\Chris\AppData\Roaming\2457fe3357cbf1220231e8917326f70f
2016-07-27 21:37 - 2016-07-27 21:37 - 000001167 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt
2016-07-27 21:37 - 2016-07-27 21:37 - 000000000 _____ () C:\Users\Chris\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt
2016-08-30 23:51 - 2017-05-23 00:16 - 000020480 _____ () C:\Users\Chris\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-04 19:54 - 2019-01-09 21:54 - 000007625 _____ () C:\Users\Chris\AppData\Local\Resmon.ResmonCfg
2023-06-16 10:28 - 2023-06-16 10:29 - 000000000 _____ () C:\Users\Chris\AppData\Local\{AAF191EF-6104-41D2-820C-A7507D90B70A}

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

--- --- ---

januskopf198 · 28.10.2024, 13:44

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-09-2024
durchgeführt von Chris (28-10-2024 13:19:33)
Gestartet von C:\Users\Chris\Desktop
Microsoft Windows 10 Home Version 22H2 19045.5011 (X64) (2020-06-16 20:43:15)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2085067102-2347417263-2365046495-500 - Administrator - Disabled)
Chris (S-1-5-21-2085067102-2347417263-2365046495-1001 - Administrator - Enabled) => C:\Users\Chris
DefaultAccount (S-1-5-21-2085067102-2347417263-2365046495-503 - Limited - Disabled)
Gast (S-1-5-21-2085067102-2347417263-2365046495-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-2085067102-2347417263-2365046495-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.14 (HKLM-x32\...\7-Zip) (Version: 15.14 - Igor Pavlov)
Anno1701 (HKLM-x32\...\Uplay Install 2835) (Version:  - Ubisoft)
Assassin's Creed Mirage (HKLM-x32\...\Uplay Install 6100) (Version:  - Ubisoft)
Assassin's Creed Valhalla (HKLM-x32\...\Uplay Install 13504) (Version:  - Ubisoft)
CyberGhost 8 (HKLM\...\CyberGhost 8) (Version: 8.4.9.14426 - CyberGhost S.R.L.)
CyberGhost TUN (HKLM\...\{677232D6-72D6-4821-8CB5-47969B15D4DF}) (Version: 1.0 - CyberGhost S.R.L.) Hidden
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Dropbox (HKLM-x32\...\Dropbox) (Version: 210.4.4854 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.911.1 - Dropbox, Inc.) Hidden
Female Voices (HKLM-x32\...\{2418A64E-51AC-4BE6-A434-DF2AC8AB01E6}) (Version: 4.4.41 - Screaming Bee Inc.) Hidden
Female Voices for MorphVOX (HKLM-x32\...\{d052e867-a25a-46cc-8ed0-9d57de5dc15a}) (Version: 4.4.41 - Screaming Bee Inc.)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Haali Media Splitter (HKLM-x32\...\HaaliMkx) (Version:  - )
HyperCam 2 (HKLM-x32\...\HyperCam 2) (Version: 2.29.01 - Hyperionics Technology LLC)
Intel(R) Chipset Device Software (HKLM\...\{5CA7FC9B-8508-4494-B365-6FBCBAEB8E89}) (Version: 10.0.27 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{98f335cd-0a32-4b3f-b74c-ef9480e834f0}) (Version: 10.0.27 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{BFACB3F5-7091-429E-A6A9-59C0696B710E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{CCCB484E-79D5-4398-9377-CA6EEB6B53AE}) (Version: 11.0.0.1158 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{DF17C0DB-76D8-4A45-B26E-674F8455B803}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{F94944A8-7BF1-4D63-935D-DAE36FAA3072}) (Version: 30.63.1519.07 - Intel Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Intel® Trusted Connect Service Client (HKLM\...\{7D84E343-A23D-451C-B123-0195B2D903A6}) (Version: 1.42.17.0 - Intel Corporation) Hidden
Lightworks (HKLM\...\{E94DD4E4-7746-472c-AA7B-1242FED0CFC8}) (Version: 2023.1.141158 - LWKS Software Ltd.)
Logi Bolt (HKLM\...\LogiBolt) (Version: 1.2.6024.0 - Logi)
Logi Options+ (HKLM\...\{850cdc16-85df-4052-b06e-4e3e9e83c5c6}) (Version: 1.83.635658 - Logitech)
Logi Plugin Service (HKLM\...\{5F8E11AE-AFB2-4600-95BD-0060B1C8E85A}) (Version: 6.0.0.20749 - Logitech)
LOTRO Plugin Compendium (HKLM-x32\...\{3BF7818D-2482-4676-A237-915A11A97847}) (Version: 1.0.3 - Lunarwater)
Malwarebytes version 5.1.11.139 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.1.11.139 - Malwarebytes)
ManyCam 2.6.55 (remove only) (HKLM-x32\...\ManyCam) (Version: 2.6.55 - ManyCam LLC)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 130.0.2849.56 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 130.0.2849.52 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.192.0923.0006 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.26.28720 (HKLM-x32\...\{86380aef-fd23-4fc3-8723-a98ccad8f2c6}) (Version: 14.26.28720.3 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31938 (HKLM-x32\...\{d92971ab-f030-43c8-8545-c66c818d0e05}) (Version: 14.34.31938.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.26.28720 (HKLM-x32\...\{2F69FB2B-2C48-491C-B249-22C1BDCE1117}) (Version: 14.26.28720 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.26.28720 (HKLM-x32\...\{31C9EB3A-5F0C-49E7-8E6C-D404E48F433D}) (Version: 14.26.28720 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31938 (HKLM\...\{7DA37AE3-D8AE-49B1-9BDC-23CA0AB9FF22}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31938 (HKLM\...\{0AE39060-F209-4D05-ABC7-54B8F9CFA32E}) (Version: 14.34.31938 - Microsoft Corporation) Hidden
MiniTool Partition Wizard 12.8 DEMO (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: 12.8 - MiniTool Software Limited)
MiniTool ShadowMaker PW Edition (HKLM-x32\...\MT-75D7C412-925B-4AD0-90DC-5E4FEE22EAE1_is1) (Version: 4.1 - MiniTool Software Limited)
MorphVOX Junior (HKLM-x32\...\{E6C7380F-15DD-445E-BA02-B7A180BA0A5A}) (Version: 2.8.1 - Screaming Bee)
MorphVOX Pro (HKLM-x32\...\{5D9F29C7-D80E-41B0-BA94-42E9651D83A7}) (Version: 4.4.87.18361 - Screaming Bee) Hidden
MorphVOX Pro (HKLM-x32\...\{ee90fb00-381c-4280-be88-d3240491c4c3}) (Version: 4.4.87.18361 - Screaming Bee)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 131.0.3 (x64 de)) (Version: 131.0.3 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 128.3.3 (x64 de)) (Version: 128.3.3 - Mozilla)
MPEG4E VFW - H.264/MPEG-4 AVC codec (remove only) (HKLM-x32\...\MPEG4E) (Version:  - )
MSVCRT (HKLM-x32\...\{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}) (Version: 15.4.2862.0708 - Microsoft) Hidden
MSVCRT110 (HKLM-x32\...\{8E14DDC8-EA60-4E18-B3E3-1937104D5BDA}) (Version: 16.4.1108.0727 - Microsoft) Hidden
MSVCRT110_amd64 (HKLM\...\{E9FA781F-3E80-4399-825A-AD3E11C28C77}) (Version: 16.4.1109.0912 - Microsoft) Hidden
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.28.0.417 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.28.0.417 - NVIDIA Corporation)
NVIDIA Grafiktreiber 566.03 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 566.03 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.4.2.6 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.2.6 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20114 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
PDF-XChange Editor (HKLM\...\{4C17E469-F813-4427-BFC5-476256A6DC2E}) (Version: 10.4.3.391 - PDF-XChange Co Ltd.) Hidden
PDF-XChange Editor (HKLM-x32\...\{e7d72abf-c65a-49d0-8881-e5c1cf721e08}) (Version: 10.4.3.391 - PDF-XChange Co Ltd.)
Personality Voices (HKLM-x32\...\{0A7ACF18-DA8E-4F4F-84C6-37819F1F3038}) (Version: 4.4.41 - Screaming Bee Inc.) Hidden
Personality Voices for MorphVOX (HKLM-x32\...\{4c57deed-dce2-4337-a14e-d69ef9b934c8}) (Version: 4.4.41 - Screaming Bee Inc.)
Photo Common (HKLM-x32\...\{87DABDEA-47A4-4182-AA7C-2C90DAAE3117}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Photo Gallery (HKLM-x32\...\{07AAB66E-4718-422D-9218-4AFB3C922A71}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
RogueKiller Version 15.16.1.0 (HKLM\...\8B3D7924-ED89-486B-8322-E8594065D5CB_is1) (Version: 15.16.1.0 - Adlice Software)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.31.0 - Samsung Electronics Co., Ltd.)
Secure Eraser (HKLM-x32\...\Secure Eraser_is1) (Version: 6.1.0.8 - ASCOMP Software GmbH)
Skype Click to Call (HKLM-x32\...\{873F8E7C-10E6-449F-BD7E-5FBA7C8E1C9B}) (Version: 8.5.0.9167 - Microsoft Corporation)
Snapchat (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\6bfb3a0f5367b360172921dcb033ecb8) (Version: 1.0 - Snapchat)
Spotify (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Spotify) (Version: 1.2.49.439.gfae492c7 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Suuntolink (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\Suuntolink) (Version: 4.1.11 - Suunto)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.18 - TeamSpeak Systems GmbH)
Telegram Desktop (HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 5.6.3 - Telegram FZ-LLC)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{DA80A019-4C3B-4DAA-ACA1-6937D7CAAF9E}) (Version: 8.94.0.0 - Microsoft Corporation)
VdhCoApp 1.6.3 (HKLM\...\weh-iss-net.downloadhelper.coapp_is1) (Version:  - DownloadHelper)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.25.9 - IDRIX)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.20 - VideoLAN)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Windows Live Communications Platform (HKLM-x32\...\{41C61308-6CFD-4D54-AB6A-7136ED08A18E}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\{66233218-CA57-4AB2-BA43-A97AA4635960}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows Live Installer (HKLM-x32\...\{659CB81C-B54E-4DF1-B618-F35777393A54}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live Photo Common (HKLM-x32\...\{1D6432B4-E24D-405E-A4AB-D7E6D088CBC9}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live PIMT Platform (HKLM-x32\...\{B2611F8A-EFE7-4E88-875D-19F0EFAE87E4}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE (HKLM-x32\...\{CDC1AB00-01FF-4FC7-816A-16C67F0923C0}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live SOXE Definitions (HKLM-x32\...\{D1893000-EA77-493C-8DDD-E262436E959B}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform (HKLM-x32\...\{00F9DB8C-65D7-4D47-AB5F-F698EE38580D}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows Live UX Platform Language Pack (HKLM-x32\...\{FC071B45-4A5F-408F-92F8-4D9D693E866F}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{63EFBDB5-01B0-4614-BE9F-7F1908E42275}) (Version: 3.1.2109.29003 - Microsoft Corporation)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
WinPatrol (HKLM-x32\...\{6A206A04-6BC1-411B-AA04-4E52EDEEADF2}) (Version: 35.5.2017.8 - Ruiware)
WinRAR 6.24 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 6.24.0 - win.rar GmbH)
XviD MPEG-4 Video Codec (HKLM-x32\...\XviD_is1) (Version: XviD-1.0.3-20122004 - XviD Team (Koepi))

Packages:
=========

Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2024-10-18] (Dropbox Inc.)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2023-07-22] (Microsoft Corporation)
HEVC Video Extensions -> C:\Program Files\WindowsApps\Microsoft.HEVCVideoExtensions_2.2.10.0_x64__8wekyb3d8bbwe [2024-10-24] (Microsoft Corporation)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_156.1.1125.0_x64__v10z8vjag6ke6 [2024-10-16] (HP Inc.)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.23.0_neutral__8xx8rvfyw5nnt [2024-08-01] (Instagram)
Instagram -> C:\Program Files\WindowsApps\www.instagram.com-E4B7766F_42.0.21.1_neutral__ysfa6mcnwr1rw [2023-10-31] (www.instagram.com)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-03] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-17] (Microsoft Corporation) [MS Ad]
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2409.21001.0_x64__8wekyb3d8bbwe [2024-10-05] (Microsoft Corporation) [Startup Task]
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.966.0_x64__56jybvy8sckqj [2024-10-23] (NVIDIA Corp.)
Websuche von Microsoft Bing -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.1.0.0_x64__8wekyb3d8bbwe [2024-10-24] (Microsoft Corporation)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2440.9.0_x64__cv1g1gvanyjgm [2024-10-10] (WhatsApp Inc.) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{B21C40A4-C627-437F-906F-2C2F8E31E7A9}\InprocServer32 -> C:\Program Files (x86)\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> "C:\Users\Chris\AppData\Local\Microsoft\Teams\current\Teams.exe" --toast => Keine Datei
CustomCLSID: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Chris\Dropbox
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [PDFXChange Editor Context menu] -> {2ACD35AB-F74A-4C20-AA9B-2DE80081626D} => C:\Program Files\Tracker Software\Shell Extensions\XCShellMenu.x64.dll [2024-10-15] (TRACKER SOFTWARE PRODUCTS (CANADA) LIMITED -> PDF-XChange Co Ltd.)
ContextMenuHandlers1: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\SecEraser64.dll [2021-02-07] (ASCOMP Software GmbH -> ASCOMP Software GmbH)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-08-02] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Chris\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.192.0923.0006\FileSyncShell64.dll [2024-10-25] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.76.0.dll [2024-07-23] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ab3196e1830c9b6c\nvshext.dll [2024-10-16] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-08-02] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [Secure Eraser] -> {2A8DEC8D-934E-4FF8-825A-05A800047649} => D:\Secure Eraser\SecEraser64.dll [2021-02-07] (ASCOMP Software GmbH -> ASCOMP Software GmbH)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\WinRAR\rarext32.dll [2023-10-03] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\system32\xvidvfw.dll [255488 2011-05-30] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp4e] => C:\Windows\SysWOW64\MPEG4Evfw.dll [1015808 2009-01-16] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.XVID] => C:\Windows\SysWOW64\xvidvfw.dll [155648 2004-12-20] () [Datei ist nicht signiert]

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Chris\Favorites\NCH Software Download Site.lnk -> hxxp://www.nch.com.au/index.htm

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2023-08-24 08:07 - 2023-04-12 06:32 - 000083968 _____ () [Datei ist nicht signiert] D:\MiniTool ShadowMaker\coresync.dll
2023-08-24 08:07 - 2023-04-12 06:32 - 000067584 _____ (Chengdu Speed Digital Technology Co..Ltd.) [Datei ist nicht signiert] D:\MiniTool ShadowMaker\ChannelNetFileInfo.dll
2023-08-24 08:07 - 2023-04-12 06:32 - 000159744 _____ (Chengdu Speed Digital Technology Co..Ltd.) [Datei ist nicht signiert] D:\MiniTool ShadowMaker\FileInfoCommon.dll
2022-04-03 14:45 - 2023-06-20 09:00 - 000101376 _____ (Igor Pavlov) [Datei ist nicht signiert] D:\7-Zip\7-zip.dll
2016-06-11 11:04 - 2012-02-14 18:37 - 000594432 _____ (Realtek Semiconductor Corp.) [Datei ist nicht signiert] C:\WINDOWS\system32\Rtlihvs.dll
2023-08-24 08:07 - 2022-07-03 06:34 - 002126848 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] D:\MiniTool ShadowMaker\LIBEAY32.dll
2023-08-24 08:07 - 2023-04-12 06:32 - 001267200 _____ (TODO: <Company name>) [Datei ist nicht signiert] D:\MiniTool ShadowMaker\core7z.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData:BDSDRMHK [64]
AlternateDataStreams: C:\Users\All Users:BDSDRMHK [64]
AlternateDataStreams: C:\ProgramData\Anwendungsdaten:BDSDRMHK [64]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\sharepoint.com -> hxxps://brunelcorporate-files.sharepoint.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2021-01-05 12:58 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1       localhost

2018-12-15 12:45 - 2020-04-02 11:15 - 000000668 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
27 76
0.0.0.84 LAPTOP-173CF2E2.mshome.net # 2020 4 1 6 17 34 46 620
152
152
340

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Chris\AppData\Local\Microsoft\Windows\Themes\RoamedThemeFiles\DesktopBackground\wallpaper_1920_1200_cascada.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: RequireAdmin)
 ist aktiviert.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
LAN-Verbindung: TAP-Windows Adapter V9 -> tap0901.sys
WLAN: Realtek RTL8192CE Wireless LAN 802.11n PCI-E NIC -> rtwlane.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run32: => "Dropbox"
HKLM\...\StartupApproved\Run32: => "TeamsMachineUninstallerLocalAppData"
HKU\S-1-5-21-2085067102-2347417263-2365046495-1001\...\StartupApproved\Run: => "CiscoMeetingDaemon"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{364AAC79-BA89-49B5-B85D-F7588FC69F7B}C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe => Keine Datei
FirewallRules: [UDP Query User{D0A296E7-E096-4D4C-ACF8-E21D0E58C7D2}C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe] => (Allow) C:\program files (x86)\turbine\der herr der ringe online\x64\lotroclient64.exe => Keine Datei
FirewallRules: [TCP Query User{118EEF28-9C86-425C-A5A8-5672E54FB3C3}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{F35CE7BE-2289-41A0-8B93-CB2A04F1ACC5}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{B7BD59C6-6855-48F4-B051-909D56DE5068}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{D4276C1F-5259-4BBD-ACB9-2B8A0C4E2AF5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{9095B183-828B-4CE2-99A8-FBCB952495AE}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{A8F7B6EB-E93B-438C-BD40-C6AA396E9308}C:\users\chris\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\chris\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{A920FC7E-4996-4820-B17D-015D77D8A62A}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [UDP Query User{855012B5-3DA3-466B-BFF6-E081A0ACC0EE}D:\steam\steam.exe] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{0C56D149-4202-4407-85CD-661F8ABB42DD}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{70EC3610-6A7E-4F8F-B319-0906104F665A}] => (Allow) D:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{84E715BE-6695-4879-869B-E671AECEF3D7}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\Zoom.exe => Keine Datei
FirewallRules: [{E9048F47-DC34-4634-A961-331D7F9C66BA}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{7D92B2D6-1520-477C-8A6C-5350083A17DE}] => (Allow) C:\Users\Chris\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei
FirewallRules: [{54543152-6D70-450D-8FC6-A1F264B42E8F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{EB059017-38C4-4BD3-8F31-0A25784718C4}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{53A052D1-A931-45AC-9AA7-074ECF1CB038}C:\users\chris\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chris\appdata\local\microsoft\teams\current\teams.exe => Keine Datei
FirewallRules: [UDP Query User{3F78E3F1-20E1-4732-AA0B-B296E5213C50}C:\users\chris\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\chris\appdata\local\microsoft\teams\current\teams.exe => Keine Datei
FirewallRules: [TCP Query User{7EFB2A74-EA68-4969-8DC4-F7F1CBA6FE52}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [UDP Query User{6147D325-C422-49BB-89D6-8343C1C11D5C}D:\videolan\vlc\vlc.exe] => (Allow) D:\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)
FirewallRules: [TCP Query User{3E9C4D03-E9E2-4E88-A321-97AFB08CBA08}C:\users\chris\appdata\local\viber\viber.exe] => (Allow) C:\users\chris\appdata\local\viber\viber.exe => Keine Datei
FirewallRules: [UDP Query User{542295A8-0A7B-46BA-9C92-DF39E9FDC2F4}C:\users\chris\appdata\local\viber\viber.exe] => (Allow) C:\users\chris\appdata\local\viber\viber.exe => Keine Datei
FirewallRules: [{88F23949-AB0E-466E-B505-7C80C9BB61B6}] => (Allow) D:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe (Frogwares Ireland ltd -> Frogwares, Inc.)
FirewallRules: [{265036A5-F9EA-40C4-BDAE-82A61C014F86}] => (Allow) D:\Steam\steamapps\common\Sherlock Holmes - The Devil's Daughter\Binaries\Win64\Sherlock.exe (Frogwares Ireland ltd -> Frogwares, Inc.)
FirewallRules: [{E9DFEF2D-043D-4BA7-A83B-96EDEB6E6AAA}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{780D7907-C67D-4849-A1B0-A8F3BC4E173E}] => (Allow) D:\Lightworks\lightworks.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{D0BDEF41-61CC-4D86-A7F4-AA0C0260F7D7}] => (Allow) D:\Lightworks\lightworks.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{2F24FA18-6FF0-4CFB-BDC0-BB38F8DD2824}] => (Allow) D:\Lightworks\ntcardvt.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{B52935A5-E2CB-4C10-B923-1BD5033327FC}] => (Allow) D:\Lightworks\ntcardvt.exe (LWKS Software Ltd. -> LWKS Software Ltd)
FirewallRules: [{94C79420-8BD2-45ED-B9B6-C83EEA4E41FE}] => (Allow) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [{741DB21C-B949-421C-B67A-B65F62A42470}] => (Allow) C:\Program Files\LogiOptionsPlus\logivoice\logioptionsplus_logivoice => Keine Datei
FirewallRules: [{C9EC2865-5F8C-451D-9238-B5F21B7074C6}] => (Allow) D:\Assassin's Creed Mirage\ACMirage_plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{25E2FE48-208E-4A75-9A82-CC94BB486F20}] => (Allow) D:\Assassin's Creed Valhalla\ACValhalla_Plus.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{C8A2F621-7BA0-47A5-8CB0-6E18E0F44A48}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{7D6AC75A-F3AC-48C3-ADF8-922A1DCBAF1F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{3C3D4655-9901-404E-870B-379894E06B17}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{A697E219-BEBD-4704-A671-13B5D33099B7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{197F360A-A311-451B-B203-8D2B2C1947C2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3CF73A54-053F-4D8D-909A-AB9E98B8B8A5}] => (Allow) C:\Program Files\Logi\LogiPluginService\LogiPluginService.exe (LoupeDeck Oy -> Logitech)
FirewallRules: [{706EFDD7-18AB-4B3C-A6BF-C239B5872EB7}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{BF0A7870-219D-4779-B625-597EBF6C7DB9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6FDD87EF-68B2-4DA1-854D-E3EAC87D73E5}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{560697E8-DEE7-4F68-B2F6-9A4344D09F05}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.130.3205.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{1E440E37-7F0A-4B51-9D38-4AC598D1AE9C}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{6904EE9C-DD19-4302-A2C9-C7C8E49AC1E1}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{A4782F19-7286-4A5D-9195-6078CB0C5A81}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\130.0.2849.52\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{1F1DEBA2-971A-41C0-8598-5821D0B522C7}] => (Allow) D:\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )
FirewallRules: [{C9C41922-A836-4149-81B3-807CA39CF2A2}] => (Allow) D:\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

==================== Wiederherstellungspunkte =========================

28-10-2024 10:09:06 PDF-XChange Editor

==================== Fehlerhafte Geräte im Gerätemanager ============

Name: FUJITSU OASYS ｷｰﾎﾞｰﾄﾞ  親指ｼﾌﾄ  Type(実行付)
Description: FUJITSU OASYS ｷｰﾎﾞｰﾄﾞ  親指ｼﾌﾄ  Type(実行付)
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: Fujitsu
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (10/28/2024 01:12:38 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm lotroclient64.exe Version 4104.68.6481.4039 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: da0

Startzeit: 01db292678a9b0e0

Beendigungszeit: 4294967295

Anwendungspfad: D:\Turbine\Der Herr der Ringe Online\x64\lotroclient64.exe

Bericht-ID: f4cb3d97-5b93-4d25-8d60-4588b36133ca

Vollständiger Name des fehlerhaften Pakets: 

Relative Anwendungs-ID des fehlerhaften Pakets: 

Absturztyp: Top level window is idle

Error: (10/28/2024 10:09:08 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddWin32ServiceFiles: Unable to back up image of service Outbyte DU Helper since QueryServiceConfig API failed

System Error:
Das System kann die angegebene Datei nicht finden..

Error: (10/28/2024 10:09:08 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Synaptics TouchPad Driver.

System Error:
Das System kann die angegebene Datei nicht finden..

Error: (10/26/2024 09:00:57 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Das Programm lotroclient64.exe Version 4104.68.6481.4039 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2f64

Startzeit: 01db27d551fea3b9

Beendigungszeit: 4294967295

Anwendungspfad: D:\Turbine\Der Herr der Ringe Online\x64\lotroclient64.exe

Bericht-ID: 9f4e21f4-b49d-4d8e-97ac-c9f416016c8b

Vollständiger Name des fehlerhaften Pakets: 

Relative Anwendungs-ID des fehlerhaften Pakets: 

Absturztyp: Top level window is idle

Error: (10/26/2024 01:45:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HyCam2.exe, Version: 2.29.1.0, Zeitstempel: 0x53a5cec7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ffd020213d0
ID des fehlerhaften Prozesses: 0x3f84
Startzeit der fehlerhaften Anwendung: 0x01db279ed94fc6ef
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HyperCam 2\HyCam2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: 44bbeeb8-d79a-4fb7-86fb-77ba1b049b47
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/26/2024 12:58:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Dashboard.exe, Version: 8.4.9.14426, Zeitstempel: 0xa9a018fd
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.4957, Zeitstempel: 0xc5225d0f
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000000000003b699
ID des fehlerhaften Prozesses: 0x1fa0
Startzeit der fehlerhaften Anwendung: 0x01db279e1941c9cf
Pfad der fehlerhaften Anwendung: C:\Program Files\CyberGhost 8\Dashboard.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll
Berichtskennung: a754b77a-f37c-4b06-8968-939d7ac977ef
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (10/26/2024 12:58:55 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Dashboard.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
   bei CyberGhost.Browser.Controls.CgBrowser+<InitializeAsync>d__44.MoveNext()
   bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()
   bei MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)
   bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)
   bei System.Windows.Threading.DispatcherOperation.Invoke()
   bei System.Windows.Threading.Dispatcher.ProcessQueue()
   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
   bei System.Windows.Application.RunDispatcher(System.Object)
   bei System.Windows.Application.RunInternal(System.Windows.Window)
   bei Dashboard.App.Main()

Error: (10/26/2024 09:39:04 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: HyCam2.exe, Version: 2.29.1.0, Zeitstempel: 0x53a5cec7
Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00007ffd021313d0
ID des fehlerhaften Prozesses: 0x241c
Startzeit der fehlerhaften Anwendung: 0x01db2781f2e2e305
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\HyperCam 2\HyCam2.exe
Pfad des fehlerhaften Moduls: unknown
Berichtskennung: b92b55ea-f712-4614-88ec-0c6c970270bd
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:


Systemfehler:
=============
Error: (10/28/2024 11:46:19 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-2M6NKLL)
Description: Der Server "Windows.Gaming.GameBar.PresenceServer.Internal.PresenceWriter" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/28/2024 10:33:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Google Update-Dienst (gupdate)" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (10/28/2024 10:33:02 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Google Update-Dienst (gupdate) erreicht.

Error: (10/28/2024 10:31:00 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "WMPNetworkSvc" ist vom Dienst "WSearch" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (10/28/2024 10:31:00 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "SynTPEnhService" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (10/28/2024 09:11:43 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (10/28/2024 09:11:43 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\Chris\AppData\Local\Temp\ehdrv.sys

Error: (10/28/2024 09:11:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.


Windows Defender:
================
Date: 2024-10-28 11:01:31
Description: 
D:\Secure Eraser\sEraser.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\OneDrive\Dokumente\ zu ändern.
Erkennungszeit: 2024-10-28T10:01:31.604Z
Benutzer: DESKTOP-2M6NKLL\Chris
Pfad: %userprofile%\OneDrive\Dokumente\
Prozessname: D:\Secure Eraser\sEraser.exe
Sicherheitsversion: 1.419.746.0
Modulversion: 1.1.24090.11
Produktversion: 4.18.24090.11

Date: 2024-10-28 11:01:14
Description: 
D:\Secure Eraser\sEraser.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\OneDrive\Dokumente\ zu ändern.
Erkennungszeit: 2024-10-28T10:01:14.971Z
Benutzer: DESKTOP-2M6NKLL\Chris
Pfad: %userprofile%\OneDrive\Dokumente\
Prozessname: D:\Secure Eraser\sEraser.exe
Sicherheitsversion: 1.419.746.0
Modulversion: 1.1.24090.11
Produktversion: 4.18.24090.11

Date: 2024-10-28 10:43:42
Description: 
D:\Secure Eraser\sEraser.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\OneDrive\Dokumente\ zu ändern.
Erkennungszeit: 2024-10-28T09:43:42.689Z
Benutzer: DESKTOP-2M6NKLL\Chris
Pfad: %userprofile%\OneDrive\Dokumente\
Prozessname: D:\Secure Eraser\sEraser.exe
Sicherheitsversion: 1.419.746.0
Modulversion: 1.1.24090.11
Produktversion: 4.18.24090.11

Date: 2024-10-28 10:31:48
Description: 
D:\Secure Eraser\sEraser.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\OneDrive\Dokumente\ zu ändern.
Erkennungszeit: 2024-10-28T09:31:48.543Z
Benutzer: DESKTOP-2M6NKLL\Chris
Pfad: %userprofile%\OneDrive\Dokumente\
Prozessname: D:\Secure Eraser\sEraser.exe
Sicherheitsversion: 1.419.744.0
Modulversion: 1.1.24090.11
Produktversion: 4.18.24090.11

Date: 2024-10-28 10:05:26
Description: 
D:\Secure Eraser\sEraser.exe wurde durch den überwachten Ordnerzugriff daran gehindert, %userprofile%\OneDrive\Dokumente\ zu ändern.
Erkennungszeit: 2024-10-28T09:05:26.954Z
Benutzer: DESKTOP-2M6NKLL\Chris
Pfad: %userprofile%\OneDrive\Dokumente\
Prozessname: D:\Secure Eraser\sEraser.exe
Sicherheitsversion: 1.419.744.0
Modulversion: 1.1.24090.11
Produktversion: 4.18.24090.11
Event[0]:

Date: 9224-01-12 00:06:36
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.645.0
Update Source: Microsoft Center zum Schutz vor Schadsoftware
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24080.9
Fehlercode: 0x80070102
Fehlerbeschreibung: Der Wartevorgang wurde abgebrochen. 

Date: 9224-01-12 00:00:23
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.417.645.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.24080.9
Fehlercode: 0x800b0101
Fehlerbeschreibung: Ein erforderliches Zertifikat befindet sich nicht im Gültigkeitszeitraum gemessen an der aktuellen Systemzeit oder dem Zeitstempel in der signierten Datei. 

Date: 2023-12-01 11:34:13
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen.
Dateiname: C:\Users\Chris\AppData\Roaming\Mozilla\Firefox\Profiles\3xlwd4bx.default\Yahoo! Inc\ytoolbar\18hj4awr_o\cachesection
Sha256: 9b080d574ff8a83d25d97f6e234cb88fc8d686ad0f6643ca35491983db214f3e
Aktuelle Sicherheitsversion: AV: 1.401.1481.0, AS: 1.401.1481.0
Aktuelle Modulversion: 1.1.23110.2
Fehlercode: 0x80071112

Date: 2023-11-10 10:17:55
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.401.335.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23100.2009
Fehlercode: 0x80240438
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support". 

Date: 2023-09-01 18:22:02
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.397.144.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.23080.2005
Fehlercode: 0x80070102
Fehlerbeschreibung: Der Wartevorgang wurde abgebrochen. 

CodeIntegrity:
===============
Date: 2024-09-11 21:50:52
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.

Date: 2024-09-11 21:50:52
Description: 
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume2\Windows\System32\aepic.dll because the set of per-page image hashes could not be found on the system.

Date: 2024-03-11 20:22:41
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.

Date: 2023-07-18 11:46:44
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files (x86)\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.

Date: 2023-06-29 11:38:03
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume2\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1.80 01/22/2016
Hauptplatine: MSI Z170-A PRO (MS-7971)
Prozessor: Intel(R) Core(TM) i5-6600K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 16346.89 MB
Verfügbarer physikalischer RAM: 10757.09 MB
Summe virtueller Speicher: 18778.89 MB
Verfügbarer virtueller Speicher: 12212.81 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:222.98 GB) (Free:29.06 GB) (Model: CT240BX200SSD1) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (D1-P1) (Fixed) (Total:931.51 GB) (Free:557.68 GB) (Model: WDC WD10EZRZ-00Z5HB0) NTFS

\\?\Volume{ef94e5d9-0000-0000-0000-100000000000}\ (System) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS
\\?\Volume{ef94e5d9-0000-0000-0000-30c537000000}\ () (Fixed) (Total:0.49 GB) (Free:0.05 GB) NTFS

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.6 GB) (Disk ID: EF94E5D9)
Partition 1: (Active) - (Size=99 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=223 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=500 MB) - (Type=27)

==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.5 GB) (Disk ID: 38E4ADF8)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================

cosinus · 28.10.2024, 13:59

Sieht soweit gut aus. Kannst ja nochmal nen Kontrollscans mit Malwarebytes machen.

januskopf198 · 28.10.2024, 14:33

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 28.10.2024
Scan-Zeit: 14:19
Protokolldatei: 4f5b483e-952f-11ef-b085-d8cb8ae0c9b8.json

-Softwaredaten-
Version: 5.1.11.139
Komponentenversion: 1.0.5072
Version des Aktualisierungspakets: 1.0.90987
Lizenz: Kostenlos

-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.5011)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-2M6NKLL\Chris

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 277095
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 12 Min., 43 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)

28.10.2024, 12:30	#7
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Malwarebytes Fund Störende, veraltete oder unnötige Programme deinstallieren Bitte über Programme und Features (appwiz.cpl) deinstallieren: 7-Zip 15.14 Adobe Photoshop Lightroom 4.4 64-bit Google Chrome (durch Mozilla Firefox ersetzen) Microsoft SQL Server 2005 Compact Edition [ENU] Outbyte Driver Updater __________________ Logfiles bitte immer in CODE-Tags posten

28.10.2024, 13:06	#9
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Malwarebytes Fund adwCleaner Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags. adwcleaner bitte wiederholen falls es Funde gab. __________________ Logfiles bitte immer in CODE-Tags posten

28.10.2024, 13:17	#11
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Malwarebytes Fund Dann jetzt neue FRST-Logs. __________________ Logfiles bitte immer in CODE-Tags posten

28.10.2024, 13:59	#14
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Malwarebytes Fund Sieht soweit gut aus. Kannst ja nochmal nen Kontrollscans mit Malwarebytes machen. __________________ Logfiles bitte immer in CODE-Tags posten

Malwarebytes Fund

Plagegeister aller Art und deren Bekämpfung: Malwarebytes Fund