Windows 11 startet sehr langsam und Programmen arbeiten sehr langsam

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2024 01
durchgeführt von Chef (Administrator) auf CHEF (LENOVO 90J0008XGE) (14-12-2024 13:18:44)
Gestartet von C:\Users\rudi1\Downloads\FRST64.exe
Geladene Profile: Chef & RB
Plattform: Microsoft Windows 11 Home Version 24H2 26100.2605 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe <2>
(C:\Users\rudi1\Downloads\FRST64.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2410.21.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <3>
(DriverStore\FileRepository\u0377041.inf_amd64_fa8e32adc5b1fa25\B376743\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0377041.inf_amd64_fa8e32adc5b1fa25\B376743\atieclxx.exe <2>
(explorer.exe ->) (HP Inc. -> Hewlett-Packard Development Company, LP) C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0377041.inf_amd64_fa8e32adc5b1fa25\B376743\atiesrxx.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.1.200.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe <2>
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.22098.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.30502.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SrTasks.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(winlogon.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LogonUI.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1084720 2020-05-07] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" [83426848 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5006880 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5006880 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2550186479-1570727529-3849165133-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5006880 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2550186479-1570727529-3849165133-1001\...\Run: [HP ENVY 5530 series (NET)] => C:\Program Files\HP\HP ENVY 5530 series\Bin\ScanToPCActivationApp.exe [3486368 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\...\Run: [MicrosoftEdgeAutoLaunch_F30F591CCF670E415CE9F985F76F03EC] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3911208 2024-12-12] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5006880 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Print\Monitors\HP C311 Status Monitor: C:\WINDOWS\system32\hpinkstsC311LM.dll [333496 2012-12-16] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP ENVY 5530 series): C:\WINDOWS\system32\HPDiscoPMC311.dll [763040 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2817BEBB-3F54-40C6-8D1C-B708D2916C51} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1574856 2024-09-25] (Adobe Inc. -> Adobe Inc.)
Task: {B01677DA-A948-47D4-B158-1D87E6C8483F} - System32\Tasks\HPCustParticipation HP ENVY 5530 series => C:\Program Files\HP\HP ENVY 5530 series\Bin\HPCustPartic.exe [5744800 2021-11-30] (HP Inc. -> Hewlett-Packard Development Company, LP)
Task: {8E4865EE-C968-4B4D-A69F-6FA1E860136D} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {3F8942BE-AE51-4451-8C5A-6ED3AB82B391} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {300B4F37-4E7F-4B5F-8324-05648DBB1FF3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-11-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {628886D7-35D1-4332-84FB-7832EE18A541} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312408 2024-11-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {36DED079-4D93-4A89-A3C0-BFC748B38161} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187600 2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {E4F54CB5-AE53-463B-B028-1F7ACF97F844} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {58FA6D4A-EA55-4437-9670-8FF1BE5C2E67} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {554F9FE9-4E4F-4699-8716-84A7374346FB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4D713BCA-133A-4245-B87D-5A074F983F86} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7FE6F9C-05EE-4146-A6AB-EBCB2BDED593} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34368 2024-12-11] (Mozilla Corporation -> Mozilla Foundation)
Task: {CE5952B6-E9E9-4217-B6D5-0C147CD59FC3} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214288 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {AF303559-FFDB-4AC9-8D97-4FEC4FFDC435} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2550186479-1570727529-3849165133-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214288 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CDACE37-021A-4F62-B68C-06E1494A1730} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2550186479-1570727529-3849165133-1007 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214288 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{34991355-a140-402b-b271-9dff483e5685}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{34991355-a140-402b-b271-9dff483e5685}: [DhcpDomain] fritz.box

Edge: 
=======
Edge Profile: C:\Users\rudi1\AppData\Local\Microsoft\Edge\User Data\Default [2024-12-14]
Edge Extension: (Google Docs Offline) - C:\Users\rudi1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-02-16]
Edge Extension: (Edge relevant text changes) - C:\Users\rudi1\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-16]

FireFox:
========
FF DefaultProfile: 1jkdton7.default
FF ProfilePath: C:\Users\rudi1\AppData\Roaming\Mozilla\Firefox\Profiles\1jkdton7.default [2024-02-16]
FF ProfilePath: C:\Users\rudi1\AppData\Roaming\Mozilla\Firefox\Profiles\kahk7sq8.default-release [2024-12-14]
FF Homepage: Mozilla\Firefox\Profiles\kahk7sq8.default-release -> hxxps://www.google.de/?hl=de
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-12-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-04-04] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-09-25] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13652176 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncHelper.exe [3528208 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9433496 2024-11-27] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-02-26] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\24.226.1110.0004\OneDriveUpdaterService.exe [3873312 2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2023-12-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933432 2023-12-21] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [58808 2022-02-25] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0377041.inf_amd64_fa8e32adc5b1fa25\B376743\amdkmdag.sys [82961352 2022-02-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [232024 2024-12-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-02-26] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2023-12-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-31] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-31] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-31] (Microsoft Windows -> Microsoft Corporation)
R0 WinSetupMon; C:\WINDOWS\System32\DRIVERS\WinSetupMon.sys [169416 2024-11-06] (Microsoft Windows -> Microsoft Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-12-04] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-12-04] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-12-14 13:17 - 2024-12-14 13:18 - 000029802 _____ C:\Users\rudi1\Downloads\Addition.txt
2024-12-14 13:08 - 2024-12-14 13:19 - 000018519 _____ C:\Users\rudi1\Downloads\FRST.txt
2024-12-14 13:07 - 2024-12-14 13:19 - 000000000 ____D C:\FRST
2024-12-14 13:06 - 2024-12-14 13:06 - 002402816 _____ (Farbar) C:\Users\rudi1\Downloads\FRST64.exe
2024-12-13 19:56 - 2024-12-13 19:56 - 000179761 _____ C:\Users\RB\Downloads\20241213_143623_ARBEITSBESCHEINIGUNG.pdf
2024-12-12 19:01 - 2024-12-12 19:01 - 053156736 _____ C:\Users\RB\Downloads\sc68-win-lide220-1_04-ea33_3.exe
2024-12-12 19:01 - 2024-12-12 19:01 - 000000020 ___SH C:\Users\rudi1\ntuser.ini
2024-12-12 19:01 - 2024-12-12 19:01 - 000000000 ____D C:\Users\RB\Downloads\sc68-win-lide220-1_04-ea33_3
2024-12-11 19:18 - 2024-12-11 19:18 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2024-12-11 19:11 - 2024-12-11 19:12 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-12-11 08:30 - 2024-12-11 08:30 - 000141032 _____ C:\Users\RB\Downloads\schriftstueckinhalt-5.pdf
2024-12-11 08:29 - 2024-12-11 08:29 - 000061999 _____ C:\Users\RB\Downloads\schriftstueckinhalt-4.pdf
2024-12-11 08:28 - 2024-12-11 08:28 - 000062974 _____ C:\Users\RB\Downloads\schriftstueckinhalt-3.pdf
2024-12-11 08:27 - 2024-12-11 08:27 - 000171581 _____ C:\Users\RB\Downloads\schriftstueckinhalt-2.pdf
2024-12-11 08:06 - 2024-12-11 08:06 - 000707760 _____ C:\WINDOWS\system32\perfh007.dat
2024-12-11 08:06 - 2024-12-11 08:06 - 000150734 _____ C:\WINDOWS\system32\perfc007.dat
2024-12-10 19:49 - 2024-12-14 13:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-12-10 08:18 - 2024-12-10 08:18 - 000023829 _____ C:\Users\RB\Downloads\schriftstueckinhalt-1.pdf
2024-12-10 08:16 - 2024-12-10 08:16 - 000062586 _____ C:\Users\RB\Downloads\schriftstueckinhalt.pdf
2024-12-07 19:57 - 2024-12-07 19:57 - 000000998 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2024-12-07 19:56 - 2024-12-07 19:56 - 000027132 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-12-07 19:56 - 2024-12-07 19:56 - 000027132 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2024-12-06 18:16 - 2024-12-06 18:16 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2024-12-06 18:12 - 2024-12-06 18:12 - 000000020 ___SH C:\Users\RB\ntuser.ini
2024-12-06 18:09 - 2024-12-14 13:05 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2550186479-1570727529-3849165133-1007
2024-12-06 18:09 - 2024-12-14 13:05 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2550186479-1570727529-3849165133-1001
2024-12-06 18:09 - 2024-12-14 13:05 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2024-12-06 18:09 - 2024-12-11 08:02 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-12-06 18:09 - 2024-12-10 18:53 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-12-06 18:09 - 2024-12-06 18:10 - 000003684 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-12-06 18:09 - 2024-12-06 18:10 - 000003460 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-12-06 18:09 - 2024-12-06 18:10 - 000002672 _____ C:\WINDOWS\system32\Tasks\HPCustParticipation HP ENVY 5530 series
2024-12-06 18:07 - 2024-12-06 18:07 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Network
2024-12-06 18:03 - 2024-12-11 08:02 - 000000584 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2024-12-06 18:02 - 2024-12-11 08:06 - 001637744 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-12-06 17:56 - 2024-12-13 19:46 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-12-06 17:56 - 2024-12-10 21:52 - 000472904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-12-06 17:55 - 2024-12-10 21:51 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2024-12-06 17:52 - 2024-12-06 18:10 - 000000000 ____D C:\Windows.old
2024-12-04 20:51 - 2024-12-06 17:53 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\Crypto
2024-12-04 20:51 - 2024-12-04 20:51 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\SystemCertificates
2024-12-04 20:51 - 2024-12-04 20:51 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\Network
2024-12-04 20:49 - 2024-12-06 17:53 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Crypto
2024-12-04 20:49 - 2024-12-04 20:49 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\SystemCertificates
2024-12-04 20:49 - 2024-12-04 20:49 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Network
2024-12-04 20:43 - 2024-12-14 13:02 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\Windows
2024-12-04 20:43 - 2024-12-12 19:01 - 000000000 ____D C:\Users\rudi1
2024-12-04 20:43 - 2024-12-06 18:15 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Windows
2024-12-04 20:43 - 2024-12-06 18:12 - 000000000 ____D C:\Users\RB
2024-12-04 20:43 - 2024-12-06 17:53 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\Spelling
2024-12-04 20:43 - 2024-12-06 17:53 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Spelling
2024-12-04 20:43 - 2024-12-06 17:52 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Vorlagen
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Startmenü
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Netzwerkumgebung
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Lokale Einstellungen
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Eigene Dateien
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Druckumgebung
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Documents\Eigene Videos
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Documents\Eigene Musik
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Documents\Eigene Bilder
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\AppData\Local\Verlauf
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\AppData\Local\Anwendungsdaten
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\rudi1\Anwendungsdaten
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Vorlagen
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Startmenü
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Netzwerkumgebung
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Lokale Einstellungen
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Eigene Dateien
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Druckumgebung
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Documents\Eigene Videos
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Documents\Eigene Musik
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Documents\Eigene Bilder
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\AppData\Local\Verlauf
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\AppData\Local\Anwendungsdaten
2024-12-04 20:43 - 2024-12-04 20:43 - 000000000 _SHDL C:\Users\RB\Anwendungsdaten
2024-12-04 20:40 - 2024-12-06 17:53 - 000000000 ____D C:\WINDOWS\system32\AMD
2024-12-04 20:39 - 2024-12-04 20:43 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2024-12-04 20:36 - 2024-12-04 20:36 - 000000000 ____D C:\WINDOWS\InboxApps
2024-12-04 20:25 - 2024-12-04 20:25 - 000005264 _____ C:\WINDOWS\system32\ecoscore_config.json
2024-12-04 19:44 - 2024-12-04 19:44 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2024-12-04 18:40 - 2024-12-06 18:12 - 000000000 ___DC C:\WINDOWS\Panther
2024-11-27 18:33 - 2024-11-27 18:33 - 000057885 _____ C:\Users\RB\Downloads\S_20241127_183251_NBF_-_Postfach_-_Sammeldownload(1).ZIP
2024-11-27 18:32 - 2024-11-27 18:32 - 000057885 _____ C:\Users\RB\Downloads\S_20241127_183251_NBF_-_Postfach_-_Sammeldownload.ZIP
2024-11-23 19:13 - 2024-11-23 19:13 - 000000000 ____D C:\Users\rudi1\.android
2024-11-23 18:46 - 2024-11-23 19:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iMobie
2024-11-23 18:46 - 2024-11-23 18:46 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\iMobie
2024-11-23 18:46 - 2024-11-23 18:46 - 000000000 ____D C:\Users\rudi1\AppData\Local\iMobie_Inc
2024-11-23 18:45 - 2024-11-23 19:17 - 000000000 ____D C:\Program Files (x86)\iMobie
2024-11-23 18:40 - 2024-11-23 18:40 - 000000000 ____D C:\Users\rudi1\AppData\Local\CrashDumps
2024-11-23 18:40 - 2024-11-23 18:40 - 000000000 ____D C:\Users\RB\AppData\Roaming\Samsung
2024-11-23 18:38 - 2023-12-21 09:43 - 000050720 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ss_conn_usb_driver2.sys
2024-11-23 18:37 - 2024-11-23 19:03 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Samsung
2024-11-23 18:37 - 2024-11-23 18:38 - 000000000 ____D C:\ProgramData\Samsung
2024-11-23 18:37 - 2022-01-25 11:29 - 000144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\SysWOW64\secman.dll
2024-11-23 18:35 - 2024-11-23 19:03 - 000000000 ____D C:\Program Files (x86)\Samsung

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-12-14 13:20 - 2024-02-26 13:15 - 000000000 ____D C:\Users\rudi1\AppData\Local\Malwarebytes
2024-12-14 13:19 - 2024-02-16 22:20 - 000000000 ____D C:\Users\rudi1\AppData\Local\Packages
2024-12-14 13:18 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-12-14 13:18 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2024-12-14 13:18 - 2024-02-16 22:24 - 000000000 ____D C:\Users\rudi1\AppData\Local\D3DSCache
2024-12-14 13:17 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-12-14 13:12 - 2024-02-24 18:07 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\com.adobe.dunamis
2024-12-14 13:12 - 2024-02-24 17:35 - 000000000 ____D C:\Users\rudi1\AppData\Local\Adobe
2024-12-14 13:12 - 2024-02-16 22:20 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Adobe
2024-12-14 13:10 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2024-12-14 13:10 - 2024-02-26 16:21 - 000000000 ____D C:\Users\RB\AppData\Local\Malwarebytes
2024-12-14 13:06 - 2024-02-16 22:22 - 000000000 ____D C:\Users\rudi1\AppData\Local\PlaceholderTileLogoFolder
2024-12-14 13:05 - 2024-02-27 12:44 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2024-12-14 13:05 - 2024-02-26 10:32 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-12-14 13:04 - 2024-02-16 23:06 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-12-14 13:01 - 2024-02-16 22:20 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-12-14 13:00 - 2024-02-16 21:59 - 000000000 ____D C:\ProgramData\Packages
2024-12-14 12:25 - 2024-02-16 21:53 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-12-14 12:25 - 2024-02-16 21:53 - 000002274 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2024-12-14 12:14 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-12-13 19:47 - 2024-02-16 23:47 - 000000000 ____D C:\Users\RB\AppData\Local\D3DSCache
2024-12-12 19:23 - 2024-03-08 17:25 - 000000000 ____D C:\Users\RB\Documents\Versicherungsordner  mit Rechnungen
2024-12-11 19:28 - 2024-02-17 00:12 - 000000000 ____D C:\Users\RB\Documents\Evi
2024-12-11 19:25 - 2024-02-21 21:40 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Word
2024-12-11 19:18 - 2024-02-16 23:05 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-12-11 08:02 - 2024-02-16 21:51 - 000012288 ___SH C:\DumpStack.log.tmp
2024-12-10 21:55 - 2024-04-01 08:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\OCR
2024-12-10 21:49 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-12-10 18:53 - 2024-02-24 17:39 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-12-09 19:02 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2024-12-09 08:26 - 2024-02-21 21:41 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Excel
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\UNP
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2024-12-09 08:16 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2024-12-07 23:13 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\appcompat
2024-12-07 14:50 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2024-12-07 14:46 - 2024-02-16 23:47 - 000000000 ____D C:\Users\RB\AppData\Local\Packages
2024-12-06 18:10 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Windows NT
2024-12-06 18:09 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2024-12-06 18:03 - 2024-04-01 08:26 - 000000000 __RHD C:\Users\Public\Libraries
2024-12-06 17:56 - 2024-04-01 08:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2024-12-06 17:56 - 2024-02-16 22:28 - 000000000 ____D C:\Program Files\AMD
2024-12-06 17:55 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2024-12-06 17:53 - 2024-06-07 17:02 - 000000000 ____D C:\WINDOWS\system32\%userprofile%
2024-12-06 17:53 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WebThreatDefSvc
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\spool
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ModemLogs
2024-12-06 17:53 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-12-06 17:53 - 2024-02-26 12:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WISO Steuer 2024
2024-12-06 17:53 - 2024-02-26 10:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2024-12-06 17:53 - 2024-02-21 19:37 - 000000000 ____D C:\Users\RB\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2024-12-06 17:53 - 2024-02-21 19:23 - 000000000 ____D C:\Users\rudi1\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Corporation
2024-12-06 17:53 - 2024-02-17 09:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2024-12-06 17:53 - 2024-02-17 00:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SaalDesignSoftware
2024-12-06 17:53 - 2022-05-07 11:39 - 000000000 ____D C:\WINDOWS\system32\Hydrogen
2024-12-06 17:53 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2024-12-06 17:53 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2024-12-06 17:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2024-12-06 17:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-12-06 17:52 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2024-12-04 20:56 - 2024-04-01 08:29 - 000000000 ____D C:\WINDOWS\Setup
2024-12-04 20:48 - 2024-04-01 08:26 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2024-12-04 20:44 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-12-04 20:44 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2024-12-04 20:43 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\schemas
2024-12-04 20:36 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-12-04 20:36 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-12-04 20:36 - 2024-04-01 17:35 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemApps
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Com
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\IME
2024-12-04 20:36 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2024-12-04 20:36 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2024-12-04 20:34 - 2024-04-01 17:35 - 000040960 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2024-12-04 20:34 - 2024-04-01 17:35 - 000028898 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2024-12-04 20:34 - 2024-04-01 08:26 - 000282624 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2024-12-04 20:34 - 2024-04-01 08:26 - 000235520 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2024-12-04 20:23 - 2024-04-01 08:22 - 000063064 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtIntcLpioDMA.dll
2024-12-04 20:23 - 2024-04-01 08:22 - 000062952 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtIntcPseDMA.dll
2024-12-04 20:23 - 2024-04-01 08:22 - 000062944 _____ (Microsoft Corporation) C:\WINDOWS\system32\HalExtPL080.dll
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\system32\winrm
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\system32\WCN
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\system32\slmgr
2024-12-04 20:00 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2024-12-04 20:00 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\dsc
2024-12-04 20:00 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2024-12-03 17:33 - 2024-02-17 00:17 - 000000000 ____D C:\Users\RB\Documents\Rudi Privat
2024-11-23 19:03 - 2024-02-26 12:44 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2024-11-17 15:25 - 2024-02-21 20:57 - 000000000 ____D C:\Program Files\Microsoft Office
2024-11-14 19:26 - 2024-02-16 23:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-11-14 08:45 - 2024-02-16 22:30 - 202035632 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-11-14 08:45 - 2024-02-16 22:30 - 000000000 ____D C:\WINDOWS\system32\MRT

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 14-12-2024 01
durchgeführt von Chef (14-12-2024 13:20:50)
Gestartet von C:\Users\rudi1\Downloads
Microsoft Windows 11 Home Version 24H2 26100.2605 (X64) (2024-12-06 17:10:48)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-2550186479-1570727529-3849165133-500 - Administrator - Disabled)
Chef (S-1-5-21-2550186479-1570727529-3849165133-1001 - Administrator - Enabled) => C:\Users\rudi1
DefaultAccount (S-1-5-21-2550186479-1570727529-3849165133-503 - Limited - Disabled)
Gast (S-1-5-21-2550186479-1570727529-3849165133-501 - Limited - Disabled)
RB (S-1-5-21-2550186479-1570727529-3849165133-1007 - Limited - Enabled) => C:\Users\RB
WDAGUtilityAccount (S-1-5-21-2550186479-1570727529-3849165133-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 24.005.20320 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601102}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AusweisApp (HKLM\...\{780E63F7-FD7F-4FD4-8224-56C65E7BF2D8}) (Version: 2.2.2 - Governikus GmbH & Co. KG)
HP ENVY 5530 series - Grundlegende Software für das Gerät (HKLM\...\{B687D69A-FDA6-48DB-B515-E8236CB25113}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)
HP ENVY 5530 series Hilfe (HKLM-x32\...\{272E06A0-7B74-481F-BD50-C632D9CA81A3}) (Version: 30.0.0 - Hewlett Packard)
HP Photo Creations (HKLM-x32\...\HP Photo Creations) (Version: 1.0.0.7702 - HP)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
Malwarebytes version 5.2.2.154 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.2.2.154 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 131.0.2903.99 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 131.0.2903.86 - Microsoft Corporation) Hidden
Microsoft Office Home and Business 2021 - de-de (HKLM\...\HomeBusiness2021Retail - de-de) (Version: 16.0.18129.20158 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 24.226.1110.0004 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.36.32532 (HKLM-x32\...\{8bdfe669-9705-4184-9368-db9ce581e0e7}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.36.32532 (HKLM-x32\...\{410c0ee1-00bb-41b6-9772-e12c2828b02f}) (Version: 14.36.32532.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.36.32532 (HKLM\...\{0025DD72-A959-45B5-A0A3-7EFEB15A8050}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.36.32532 (HKLM\...\{D5D19E2F-7189-42FE-8103-92CD1FA457C2}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.36.32532 (HKLM-x32\...\{C2C59CAB-8766-4ABD-A8EF-1151A36C41E5}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.36.32532 (HKLM-x32\...\{73F77E4E-5A17-46E5-A5FC-8A061047725F}) (Version: 14.36.32532 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 133.0.3 (x64 de)) (Version: 133.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 122.0.1 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18129.20100 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18129.20158 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.18129.20100 - Microsoft Corporation) Hidden
Saal Design Software (HKLM-x32\...\SaalDesignSoftware) (Version: 4.0 - )
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.61.0 - Samsung Electronics Co., Ltd.)
Studie zur Verbesserung von HP ENVY 5530 series (HKLM\...\{BC1550BF-4488-4891-A3AE-DBAD42DA0DBD}) (Version: 32.4.116.94128 - Hewlett-Packard Co.)
Support- und Wiederherstellungs-Assistent von Microsoft (HKU\S-1-5-21-2550186479-1570727529-3849165133-1001\...\4336df8a13b91f17) (Version: 17.1.1440.0 - Microsoft Corporation)
Support- und Wiederherstellungs-Assistent von Microsoft (HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\...\4336df8a13b91f17) (Version: 17.1.1440.0 - Microsoft Corporation)
WISO Steuer 2024 (HKLM-x32\...\{E3C9D8FB-6279-4793-95DA-B5426386BBFE}) (Version: 31.00.3240 - Buhl Data Service GmbH)

Packages:
=========
AMD Radeon™ Settings Lite -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.59462344778C5_10.19.10006.0_x64__0a9344xs7nr4m [2024-06-16] (Advanced Micro Devices Inc.)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.598.1811.0_x64__8wekyb3d8bbwe [2024-12-06] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.598.1811.0_x86__8wekyb3d8bbwe [2024-12-06] (Microsoft Corporation)
Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.237.110.0_x64__8wekyb3d8bbwe [2024-02-26] (Microsoft Corporation)
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-02-26] (Microsoft Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2024-06-15] (Realtek Semiconductor Corp)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2550186479-1570727529-3849165133-1001_Classes\CLSID\{04271989-C4D2-7554-95FB-8228B9263A5C} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2550186479-1570727529-3849165133-1007_Classes\CLSID\{04271989-C4D2-9489-D50C-66AA62FF44F5} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}
CustomCLSID: HKU\S-1-5-21-2550186479-1570727529-3849165133-1007_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-2550186479-1570727529-3849165133-1007_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-02-26] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\24.226.1110.0004\FileSyncShell64.dll [2024-12-14] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2022-02-25] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2024-02-26] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2024-02-26 10:29 - 2024-02-26 10:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll
2024-02-26 10:29 - 2024-02-26 10:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-10-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-11-01] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2022-05-07 06:24 - 2022-05-07 06:22 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2550186479-1570727529-3849165133-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\DesktopSpotlight\Assets\Images\image_3.jpg
HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\Control Panel\Desktop\\Wallpaper -> C:\Users\RB\Documents\Bilder\BMW S 1000 RR\IMG_2865.JPG
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
WLAN: Realtek 8821CE Wireless LAN 802.11ac PCI-E NIC -> rtwlane.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-2550186479-1570727529-3849165133-1007\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_F30F591CCF670E415CE9F985F76F03EC"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{4849C63E-3791-409A-B013-E23BA0516F01}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{8D9410CF-003A-4FBD-B46E-3EEE14532CA5}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{5C7ECE23-737A-4BAA-9FE5-5E08ED6EACFB}] => (Allow) C:\Program Files\HP\HP ENVY 5530 series\Bin\HPNetworkCommunicatorCom.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{23B0B3CF-A888-4DE2-B2BB-912DDBE72731}] => (Allow) LPort=5357
FirewallRules: [{15AAB80A-AE54-4EA2-9D66-B76FDE218213}] => (Allow) C:\Program Files\HP\HP ENVY 5530 series\Bin\DeviceSetup.exe (HP Inc. -> Hewlett-Packard Development Company, LP)
FirewallRules: [{3348345D-6F8F-4383-AB4F-4B9B2E031999}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AAE49D53-63B1-4EFE-B0F8-7F99A5A1FD07}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A33628A9-B758-4CC6-9461-B19B3B05401E}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.86\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3CB02048-0DEE-4899-B644-33DD350FF414}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24295.605.3225.8804_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4429DC9B-4E96-4387-BA26-CDB0F8A11763}] => (Allow) C:\Program Files\WindowsApps\MSTeams_24295.605.3225.8804_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

07-12-2024 14:41:44 Windows Update
10-12-2024 19:36:13 Windows Modules Installer
14-12-2024 13:07:49 Windows Update
14-12-2024 13:07:54 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============

==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (12/11/2024 07:26:52 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 12) (User: Chef)
Description: Microsoft.Windows.Photos_8wekyb3d8bbwe-2147023878

Error: (12/11/2024 08:02:55 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CHEF$ über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Wed, 11 Dec 2024 07:02:55 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 94666ef0-1c5e-4d59-92e4-48440fd49213

Methode: GET(203ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/11/2024 08:02:55 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Wed, 11 Dec 2024 07:02:55 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 6e70ebcb-efc8-4ea6-8b56-8211fa21d01e

Methode: GET(438ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/11/2024 08:02:54 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CHEF$ über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Wed, 11 Dec 2024 07:02:55 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: bd0502e0-1094-48d5-9a1f-8969bd50b9b3

Methode: GET(438ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/10/2024 09:52:39 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CHEF$ über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 10 Dec 2024 20:52:39 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 26abab5d-6a4b-4738-8344-1cf20de3e8b4

Methode: GET(187ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/10/2024 09:52:39 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 10 Dec 2024 20:52:38 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: f56726ee-2182-4fa1-8761-28682dffa922

Methode: GET(672ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/10/2024 09:52:38 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CHEF$ über https://AMD-KeyId-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps
GetCACaps: Not Found
{"Message":"The authority \"amd-keyid-8a0578cf56146fea399af903fb5b0ac36eb2786a.microsoftaik.azure.net\" does not exist."}
HTTP/1.1 404 Not Found
Date: Tue, 10 Dec 2024 20:52:38 GMT
Content-Length: 121
Content-Type: application/json; charset=utf-8
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000;includeSubDomains
x-ms-request-id: 7e004db9-4c65-4c2c-a194-f02dcc4ebed7

Methode: GET(672ms)
Phase: GetCACaps
Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)

Error: (12/10/2024 07:30:01 PM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm firefox.exe Version 133.0.0.2307 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.


Systemfehler:
=============
Error: (12/14/2024 01:06:32 PM) (Source: DCOM) (EventID: 10010) (User: Chef)
Description: Der Server "{8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/13/2024 10:58:30 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80248007 fehlgeschlagen: 9WZDNCRDTBVB-MICROSOFT.WINDOWSMAPS

Error: (12/11/2024 07:10:16 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde mit folgendem Fehler beendet: 
Unzulässige Funktion.

Error: (12/11/2024 06:59:56 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde mit folgendem Fehler beendet: 
Unzulässige Funktion.

Error: (12/11/2024 06:59:41 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "Mozilla Maintenance Service" wurde mit folgendem Fehler beendet: 
Unzulässige Funktion.

Error: (12/11/2024 08:14:26 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80240016 fehlgeschlagen: Security Intelligence-Update für Microsoft Defender Antivirus – KB2267602 (Version 1.421.725.0) – Aktueller Kanal (Allgemein)

Error: (12/10/2024 09:55:09 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT-AUTORITÄT)
Description: Der Gerätezuordnungsdienst hat einen Fehler bei der Endpunktermittlung erkannt.

Error: (12/10/2024 09:55:09 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT-AUTORITÄT)
Description: Der Gerätezuordnungsdienst hat einen Fehler bei der Endpunktermittlung erkannt.


Windows Defender:
================
Date: 2024-12-14 12:14:55
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {410A19A3-1977-48A7-BE0C-B6033C695809}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-12-13 19:46:20
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {31491B8B-5EAF-4208-B96F-1DEE6B26F1E6}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-12-13 18:07:28
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {DE7526F4-AAB0-4B66-8E2B-57D101EB4E7E}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-12-13 17:55:19
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {3539D10F-CB74-49CC-AB28-25D5F7275198}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2024-12-12 18:53:22
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {53D1B08B-7271-4498-B9A3-3203C8D9041A}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2024-12-06 18:10:20
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80070003
Fehlerbeschreibung: Das System kann den angegebenen Pfad nicht finden. 
Security Intelligence-Version: 0.0.0.0;0.0.0.0
Modulversion: 0.0.0.0 

==================== Speicherinformationen =========================== 

BIOS: LENOVO O4DKT35A 12/30/2019
Hauptplatine: LENOVO 3706
Prozessor: AMD Ryzen 3 3200G with Radeon Vega Graphics 
Prozentuale Nutzung des RAM: 43%
Installierter physikalischer RAM: 14265.89 MB
Verfügbarer physikalischer RAM: 8019.55 MB
Summe virtueller Speicher: 15161.89 MB
Verfügbarer virtueller Speicher: 7899.67 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:930.63 GB) (Free:808.12 GB) (Model: ST1000DM003-1SB102) NTFS

\\?\Volume{6cbeccfd-d8aa-48bb-90d4-6edff15ebefb}\ () (Fixed) (Total:0.76 GB) (Free:0.2 GB) NTFS
\\?\Volume{97dc84bc-67aa-4b12-b273-23f12c3beb07}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 476.9 GB) (Disk ID: 2719B1D4)

Partition: GPT.

==================== Ende von Addition.txt =======================