Trojaner-Board - Win10 - suspekte Vorgänge nach Warnung zip mit Troj + Malware, Mail von Freundin?

Hi,

Betriebssystem: Windows 10 (Build 19043.2364)
Browser: FF 102.9.0esr
Browser: Brave v1.50.114 Chromium 112.0.5615.49 (off.Build)

Was hab eich für ein Problem?
Nun, eigentlich merke ich nichts verdächtiges am System selbst. Nur haben sich Ereigisse gehäuft die suspekt sind. Jetzt will ich wissen ob mein System kompromittiert ist.

Wie heute alles began:

Code:

1. Freundin sendet mir eine Mail mit Links zu https://seafile.rlp.net/ - Universität Space.

Die Seite verpackt Downloads in ZIP (ein Prozess auf der Seite selbst) gibt aber auch einen Ordner mit WAV Audio Files...die downloads werden von FF gemeldet als Trojaner / Maleware (s.u.). Und die Audio Files konnte man auch so laden. Die anderen Files wurden nicht geladen von FF...denk ich.
 

2. Konnte ich nicht recht glauben, Also hab ich in einem Ordner von der Seite eine WAV Audio geladen, 53 MB (es gab 3 davon)...nach dem Download ließ diese sich nicht in VLC öffnen, keine Meldungen hier....vielleicht nur VLC Anwendungsfehler
 

3. Wollte dann in einem vorhandenen Linux Mint Dualboot (LUKS) die Files ziehen und prüfen, aber ich komme nicht rein, die Passphrase wäre falsch - das kann ich wohl wegwerfen und konnte es kaum glauben :heulen:
 

4. Weil unsicher, nochmal schnell neues Malwarbytes gesaugt und Virtual Box mit Mint XFCE -> diese Torrent in Brave gesaugt.
 

5. Es ploppen Meldungen in Malwarbytes auf auf von Brave vermutlich vom Torrent:

Malwarbytes LOG

Code:

-Protokolldetails-

Datum des Schutzereignisses: 10.04.23

Uhrzeit des Schutzereignisses: 20:12

Protokolldatei: ****40167ea5eebf.json
 

-Softwaredaten-

Version: 4.5.26.259

Komponentenversion: 1.0.1976

Version des Aktualisierungspakets: 1.0.67829

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 10 (Build 19043.2364)

CPU: x64

Dateisystem: NTFS

Benutzer: System
 

-Einzelheiten zu blockierten Websites-

Bösartige Website: 1

, C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe, Blockiert, -1, -1, 0.0.0, , 
 

-Website-Daten-

Kategorie: Schadsoftware

Domäne: 

IP-Adresse: 45.142.215.91

Port: 16881

Typ: Ausgehend

Datei: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe

(end)

Code:

Malwarebytes
 

-Protokolldetails-

Datum des Schutzereignisses: 10.04.23

Uhrzeit des Schutzereignisses: 20:12

Protokolldatei: 34b2df56-d7cb-11ed-a05e-40167ea5eebf.json
 

-Softwaredaten-

Version: 4.5.26.259

Komponentenversion: 1.0.1976

Version des Aktualisierungspakets: 1.0.67829

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 10 (Build 19043.2364)

CPU: x64

Dateisystem: NTFS

Benutzer: System
 

-Einzelheiten zu blockierten Websites-

Bösartige Website: 1

, C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe, Blockiert, -1, -1, 0.0.0, , 
 

-Website-Daten-

Kategorie: Trojaner

Domäne: 

IP-Adresse: 213.136.79.7

Port: 51413

Typ: Ausgehend

Datei: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe

(end)

Code:



Malwarebytes
 

-Protokolldetails-

Datum des Schutzereignisses: 10.04.23

Uhrzeit des Schutzereignisses: 20:11

Protokolldatei: 268b5b7e-d7cb-11ed-a089-40167ea5eebf.json
 

-Softwaredaten-

Version: 4.5.26.259

Komponentenversion: 1.0.1976

Version des Aktualisierungspakets: 1.0.67829

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 10 (Build 19043.2364)

CPU: x64

Dateisystem: NTFS

Benutzer: System
 

-Einzelheiten zu blockierten Websites-

Bösartige Website: 1

, C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe, Blockiert, -1, -1, 0.0.0, , 
 

-Website-Daten-

Kategorie: kompromittiert

Domäne: 

IP-Adresse: 212.3.216.120

Port: 51413

Typ: Ausgehend

Datei: C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe

(end)

Da alles zusammen irgendwie suspekt ist und ein bisschen viel. Wollte ich auf suche gehen. Und da kommt ihr ins Spiel.

====Fragen dazu:====

1. Warum zeigen die Download von der Universität Troj. & Malware an in FF? Können WAV in einer ZIP Maleware sein? Könnte ein der ZIP noch was anderes sein?
2. Die Mail von Freundin klingt an sich authentisch wobei, sie meinte ein neues Handy einzurichten und sei nur auf Telegram (argh*) und Mail (GMAIL urgh*) zu erreichen. Sie schreibt mir sonst auch nie per Mail aber haben Messenger Kontakt. Die Thematik der Mail könnte man auch abgefischt haben wenn sie kompromittiert wäre. Sie gab mir aber nicht Telegram links oder ähnliches nur den download, Ihre GMAIL is neu, ich kenne die nicht
3. Warum spielen die WAVs nicht ab? 53 MB ist jetzt auch nicht sonderlich groß dass VLC das nicht abspielt

Wie gehe ich nun vor um mich selbst abzusichern und evtl. eine Kompromittierung zu beseitigen? Ja ich weiß darum...und auch die Fehler die ich ggf. einging. :stirn:

PS: Da das Forum öffentlich ist muss sich leider Bearbeitungen zur meiner eigenen Sicherheit vornehmen, auch wenn dadurch eine explizite auswertung nicht mögich wäre. Es wurden der Computername geändert, Audio Plugins entfernt, gelöschte Programme entfernt, einige IDs entfernt oder gekürzt, einige Dateipfade umbenannt

=====FRST:=====

Code:



Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 10-04-2023

durchgeführt von bumbum (Administrator) auf DESKTOP-ABCD (ASUS All Series) (10-04-2023 21:11:24)

Gestartet von T:\Folder\Downloads

Geladene Profile: bumbum

Plattform: Microsoft Windows 10 Pro Version 21H1 19043.2364 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe

(C:\Program Files (x86)\GlassWire\GWCtlSrv.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe

(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(C:\Program Files\Sandboxie\SbieSvc.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SbieCtrl.exe

(C:\Windows\runSW.exe ->) (Realtek Semiconductor Corp -> Realtek) C:\Windows\SwUSB.exe

(Discord Inc. -> Discord Inc.) C:\Users\bumbum\AppData\Local\Discord\app-1.0.9012\Discord.exe <6>

(DriverStore\FileRepository\u0364232.inf_amd64_gujt\B364161\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0364232.inf_amd64_gujt\B364161\atieclxx.exe

(explorer.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe

(explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\bumbum\AppData\Local\FluxSoftware\Flux\flux.exe

(explorer.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GlassWire.exe

(explorer.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

(explorer.exe ->) (Mark of the Unicorn, Inc -> ) C:\Program Files (x86)\MOTU\Audio\MFWAKeys.exe

(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <4>

(explorer.exe ->) (Oracle Corporation -> Oracle and/or its affiliates) C:\Program Files\Oracle\VirtualBox\VirtualBox.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <21>

(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0364232.inf_amd64_gujt\B364161\atiesrxx.exe

(services.exe ->) (Apache Software Foundation) [Datei ist nicht signiert] D:\Wiki\Lex\apache2\bin\httpd.exe <2>

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\i-Funbox DevTeam\Mobile Device Support\AppleMobileDeviceService.exe

(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(services.exe ->) (Christian Hermann -> ) C:\Program Files\Simple DNSCrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe

(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe

(services.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe

(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (Mark of the Unicorn, Inc -> MOTU Inc.) C:\Program Files (x86)\MOTU\motuDNSResponder.exe

(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe

(services.exe ->) (MiniTool Software Limited -> ) C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe

(services.exe ->) (MiniTool Software Limited -> ) C:\Program Files (x86)\MiniTool ShadowMaker\SchedulerService.exe

(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe

(services.exe ->) (Oracle Corporation -> Oracle and/or its affiliates) C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe

(services.exe ->) (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe

(services.exe ->) (Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe

(services.exe ->) (Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe

(services.exe ->) (Synology Inc. -> ) C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe

(services.exe ->) (Tonalio GmbH -> Sandboxie-Plus.com) C:\Program Files\Sandboxie\SbieSvc.exe

(services.exe ->) (voidtools -> voidtools) C:\Program Files\Everything\Everything.exe <2>

(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Oracle Corporation -> Oracle and/or its affiliates) C:\Program Files\Oracle\VirtualBox\VBoxSVC.exe

(TechSmith Corporation -> TechSmith Corporation) C:\Users\bumbum\AppData\Local\RelayRecorder\app-2.0.11\RelayRecorder.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [Everything] => C:\Program Files\Everything\Everything.exe [2262176 2021-12-16] (voidtools -> voidtools)

HKLM\...\Run: [Eraser] => C:\Program Files\Eraser\Eraser.exe [1070664 2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3246992 2023-02-08] (Open Source Developer, Dominik Reichl -> Dominik Reichl)

HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11327200 2023-04-04] (Dropbox, Inc -> Dropbox, Inc.)

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [39159608 2023-03-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Run: [f.lux] => C:\Users\bumbum\AppData\Local\FluxSoftware\Flux\flux.exe [1515848 2021-06-18] (F.lux Software LLC -> f.lux Software LLC)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Run: [AMDDVR] => C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe [2496576 2021-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Run: [GlassWire] => C:\Program Files (x86)\GlassWire\glasswire.exe [9620880 2022-09-02] (GlassWire -> SecureMix LLC)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [3397584 2023-04-07] (Tonalio GmbH -> Sandboxie-Plus.com)

HKLM\...\Print\Monitors\EPSON ET-2650 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBRUE.DLL [182784 2015-12-09] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\111.0.5563.147\Installer\chrmstp.exe [2023-03-30] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\Installer\chrmstp.exe [2023-04-05] (Brave Software, Inc. -> Brave Software, Inc.)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MOTU Pedal Service.lnk [2021-12-20]

ShortcutTarget: MOTU Pedal Service.lnk -> C:\Program Files (x86)\MOTU\Audio\MFWAKeys.exe (Mark of the Unicorn, Inc -> )

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WavesLocalServer.lnk [2022-07-26]

ShortcutTarget: WavesLocalServer.lnk -> C:\ProgramData\Waves Audio\WavesLocalServer\WavesLocalServer.bundle\Contents\Win64\WavesLocalServer.exe (Waves Inc -> Waves Audio Ltd.)

GroupPolicy: Beschränkung ? <==== ACHTUNG

Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {11625C0E-FA32-47B7-9390-D28DE4866F34} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-03-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {1690CBBA-84C7-4CCF-9FA1-EDD325420C08} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703544 2023-03-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "523d0d81-1795-4dc8-80e5-220f7fd62d40" --version "6.10.10347" --silent

Task: {23B0D771-AF52-4862-8CCE-9E283FE7283F} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709320 2021-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {376E952F-571B-435C-91EC-405847D4352F} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)

Task: {7BD5A1AF-1DF4-4B6F-9564-97767C9BFDCE} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [635296 2023-03-15] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate

Task: {81875E98-7B16-4E6F-95BB-B127FD946E40} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{44F82029-F42C-4BC4-8FF6-32D90650D3D8} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174976 2022-09-14] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {9234F701-BB4B-4A65-95C9-B5F8CC0DD01E} - System32\Tasks\CCleanerSkipUAC - bumbum => C:\Program Files\CCleaner\CCleaner.exe [33038648 2023-03-07] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

Task: {9DDE0149-08CD-4643-B9A2-AD838E1A5F25} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [1145 2021-04-21] () [Datei ist nicht signiert]

Task: {A9A3F28A-6B5B-42F5-A0AB-09784DAC528B} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68160 2021-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {AADB46F3-5224-4D77-8531-4E4C7F8E2C02} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)

Task: {AC54DC45-1B69-4C5C-90AA-E96E3FD60523} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709320 2021-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {B53D005D-8ADD-4337-9C94-8AA876F3B721} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60480 2021-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

Task: {E1ECED45-E1B6-499A-B213-5E02A6A08B0C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-10-31] (Google LLC -> Google LLC)

Task: {F0B04502-F457-45FE-B870-C2731FAC1D87} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [767392 2023-03-15] (Mozilla Corporation -> Mozilla Foundation)

Task: {F5068E6F-F2B8-4834-80D2-630D0EEBE97A} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{7EE0986F-D870-4FE6-A559-EAD0ED0FFC16} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174976 2022-09-14] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {F7388C3D-2720-41FA-B364-89F634F4D8D1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-10-31] (Google LLC -> Google LLC)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\..\Interfaces\{db209a1a-9968-41a7-***}: [DhcpNameServer] 192.168.178.1
 

Edge: (wird nicht benutzt nur mit ccleaner gesäubert)

=======

DownloadDir: C:\Users\bumbum\Downloads

Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]

Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]

Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]

Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]

Edge Profile: C:\Users\bumbum\AppData\Local\Microsoft\Edge\User Data\Default [2023-04-10]
 

FireFox:

========

FF DefaultProfile: aaa.firefox.bbb

FF ProfilePath: C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccqg6.Stream [2023-04-10]

FF Extension: (Simple Translate) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccqg6.Stream\Extensions\simple-translate@sienori.xpi [2022-09-29]

FF Extension: (uBlock Origin) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccqg6.Stream\Extensions\uBlock0@raymondhill.net.xpi [2022-10-28]

FF ProfilePath: C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccfbj0r.firefox-blackbox-x907412 [2023-04-10]

FF DownloadDir: T:\Folder\Downloads

FF Extension: (Cookie AutoDelete) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\CookieAutoDelete@kennydo.com.xpi [2022-12-12]

FF Extension: (HTTPS Everywhere) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\https-everywhere@eff.org.xpi [2021-07-14]

FF Extension: (Decentraleyes) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2022-02-01]

FF Extension: (Link Gopher) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\linkgopher@oooninja.com.xpi [2021-09-14]

FF Extension: (Open Multiple URLs) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\openmultipleurls@ustat.de.xpi [2022-05-25]

FF Extension: (Simple Translate) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\simple-translate@sienori.xpi [2023-02-25]

FF Extension: (Skip Redirect) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\skipredirect@sblask.xpi [2022-03-11]

FF Extension: (Snap Links) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\snaplinks@snaplinks.mozdev.org.xpi [2021-09-15]

FF Extension: (TinEye Reverse Image Search) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\tineye@ideeinc.com.xpi [2023-02-23]

FF Extension: (uBlock Origin) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\uBlock0@raymondhill.net.xpi [2023-04-06]

FF Extension: (Startpage.com — Datenschutz-Suchmaschine) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\{20fc2e06-e3e4-4b2b-812b-ab431220cada}.xpi [2021-03-26]

FF Extension: (ClearURLs) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\{74145f27-f039-47ce-a470-a662b129930a}.xpi [2023-02-04]

FF Extension: (Return YouTube Dislike) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\{762f9885-5a13-4abd-9c77-433dcd38b8fd}.xpi [2023-03-12]

FF Extension: (User-Agent Switcher and Manager) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}.xpi [2022-12-24]

FF Extension: (Video DownloadHelper) - C:\Users\bumbum\AppData\Roaming\Mozilla\Firefox\Profiles\cccbj0r.firefox-blackbox-x907412\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2022-12-09]

FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)

FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
 

Chrome: (wird nicht benutzt nur mit ccleaner gesäubert)

=======

CHR Profile: C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default [2023-04-10]

CHR Extension: (uBlock Origin) - C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2022-07-31]

CHR Extension: (Cookie AutoDelete) - C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhcgjolkccmbidfldomjliifgaodjagh [2022-07-31]

CHR Extension: (Neat URL) - C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default\Extensions\jchobbjgibcahbheicfocecmhocglkco [2022-07-31]

CHR Extension: (Decentraleyes) - C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2022-07-31]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\bumbum\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-05]

CHR HKLM-x32\...\Chrome\Extension: [aegnopegbbhjeeiganiajffnalhlkkjb]
 

Opera:  (wird nicht benutzt nur mit ccleaner gesäubert)

=======

OPR Profile: C:\Users\bumbum\AppData\Roaming\Opera Software\Opera Stable [2023-04-10]

OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}

OPR Extension: (Rich Hints Agent) - C:\Users\bumbum\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-05-02]
 

Brave: 

=======

BRA DefaultProfile: Profile 1

BRA Profile: C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-04-10]

BRA Extension: (uBlock Origin) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2023-04-08]

BRA Extension: (Void Theme - Black and Minimal) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\kioklelcojgbjoljlilalgdcppkiioge [2023-01-15]

BRA Profile: C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\Guest Profile [2023-04-10]

BRA Profile: C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\Profile 1 [2023-04-10]

BRA Profile: C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\System Profile [2023-04-10]

BRA Extension: (Brave Local Data Files Updater) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-04-08]

BRA Extension: (Brave NTP background images) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-09-14]

BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications List (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2023-04-10]

BRA Extension: (Wallet Data Files Updater) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-04-08]

BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-12-01]

BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2023-03-03]

BRA Extension: (Brave Ad Block Updater (EasyList Germany)) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\faknfgalcghekhfggcdikddilkpjbonh [2022-12-01]

BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-04-08]

BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-04-10]

BRA Extension: (Brave SpeedReader Updater) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-09-14]

BRA Extension: (Brave Ad Block Updater (EasyList Germany (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2023-04-10]

BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-04-08]

BRA Extension: (Brave Ad Block Updater (Fanboy Social List (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\nbkknaieglghmocpollinelcggiehfco [2023-04-10]

BRA Extension: (Brave Ad Block Updater (CJX's Annoyance List (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\npcnkjiaolpnapjleimicclmdcccoeme [2023-04-08]

BRA Extension: (Brave NTP sponsored images) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2023-04-10]

BRA Extension: (Brave Ad Block Updater (Fanboy Annoyances List (plaintext))) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\omoaeaghhgmiojkeaemjkpkmelmalbgo [2023-04-10]

BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\bumbum\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-04-08]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 Apple Mobile Device Service; C:\Program Files (x86)\i-Funbox DevTeam\Mobile Device Support\AppleMobileDeviceService.exe [96056 2021-04-19] (Apple Inc. -> Apple Inc.)

S2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936456 2015-05-14] (Microsoft Windows Hardware Compatibility Publisher -> )

S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174976 2022-09-14] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [174976 2022-09-14] (Brave Software, Inc. -> BraveSoftware Inc.)

S3 BraveVpnService; C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\brave_vpn_helper.exe [3018032 2023-04-05] (Brave Software, Inc. -> Brave Software, Inc.)

S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)

S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-11] (Dropbox, Inc -> Dropbox, Inc.)

R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-04-04] (Dropbox, Inc -> Dropbox, Inc.)

R2 dnscrypt-proxy; C:\Program Files\Simple DNSCrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe [8109728 2020-03-30] (Christian Hermann -> )

R2 dokuwikiApache; D:\Wiki\Lex\apache2\bin\httpd.exe [29696 2020-04-22] (Apache Software Foundation) [Datei ist nicht signiert]

R2 Everything; C:\Program Files\Everything\Everything.exe [2262176 2021-12-16] (voidtools -> voidtools)

R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [6900112 2022-09-02] (GlassWire -> SecureMix LLC)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9098608 2023-04-10] (Malwarebytes Inc. -> Malwarebytes)

R2 MOTU_ZeroConf; C:\Program Files (x86)\MOTU\motuDNSResponder.exe [426712 2021-10-01] (Mark of the Unicorn, Inc -> MOTU Inc.)

R2 MTAgentService; C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe [783728 2021-12-20] (MiniTool Software Limited -> )

R2 MTSchedulerService; C:\Program Files (x86)\MiniTool ShadowMaker\SchedulerService.exe [228208 2021-12-20] (MiniTool Software Limited -> )

R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2019-12-12] (Razer USA Ltd. -> Razer Inc)

S2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [287472 2019-12-30] (Razer USA Ltd. -> Razer Inc.)

S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2447152 2022-02-11] (Rockstar Games, Inc. -> Rockstar Games) [Datei ist nicht signiert]

R2 RunSwUSB; C:\Windows\runSW.exe [48856 2015-09-25] (Realtek Semiconductor Corp -> )

R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [371152 2023-04-07] (Tonalio GmbH -> Sandboxie-Plus.com)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [224184 2022-12-17] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 UsbClientService; C:\Program Files (x86)\Synology\Assistant\UsbClientService.exe [253584 2021-12-14] (Synology Inc. -> )

R3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates)

S3 vncserver; C:\Program Files\RealVNC\VNC Server\vncserver.exe [7508232 2022-03-24] (RealVNC Ltd -> RealVNC)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe [3224328 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe [133544 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\112.1.50.114\elevation_service.exe" [X]

R2 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u hxxps://activation.paceap.com/InitiateActivation
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [287232 2022-06-16] (Microsoft Corporation) [Datei ist nicht signiert]

S3 busenum; C:\WINDOWS\System32\drivers\busenum.sys [57824 2012-08-03] (Synology Inc. -> Windows (R) Win 7 DDK provider)

S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [60312 2021-01-11] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)

R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [104312 2018-08-09] (D3L -> Dokan Project)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R1 gwdrv; C:\WINDOWS\system32\DRIVERS\gwdrv.sys [33152 2015-05-29] (GlassWire -> SecureMix LLC)

S3 KOBRAKAHN; C:\WINDOWS\System32\drivers\KOBRAKAHN.sys [3859376 2020-10-26] (Microsoft Windows Hardware Compatibility Publisher -> C-MEDIA Inc.)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-04-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198584 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77736 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181816 2023-04-10] (Malwarebytes Inc. -> Malwarebytes)

R3 MFWAMIDI64; C:\WINDOWS\system32\drivers\MFWAMIDI64.sys [45184 2021-10-01] (Mark of the Unicorn, Inc -> Mark of the Unicorn)

R3 MFWAWAVE64; C:\WINDOWS\system32\drivers\MFWAWAVE64.sys [84752 2015-07-14] (Mark of the Unicorn -> Mark of the Unicorn)

S3 MOSUMAC; C:\WINDOWS\System32\drivers\MOSUMAC.sys [57208 2014-03-26] (WDKTestCert Alex,130389727012273971 -> ASIX Electronics Corp.)

R3 motubus; C:\WINDOWS\system32\drivers\MotuBus64.sys [42096 2021-10-01] (Mark of the Unicorn, Inc -> Mark of the Unicorn)

R3 MotuFWA64; C:\WINDOWS\system32\drivers\Motufwa64.sys [661096 2021-10-01] (Mark of the Unicorn, Inc -> Mark of the Unicorn)

S3 MYFAULT; C:\WINDOWS\system32\drivers\myfault.sys [27848 2022-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals)

R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74744 2021-04-21] (Insecure.Com LLC -> Insecure.Com LLC.)

S4 npcap_wifi; C:\WINDOWS\system32\DRIVERS\npcap.sys [74744 2021-04-21] (Insecure.Com LLC -> Insecure.Com LLC.)

U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [90168 2022-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com)

R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [37336 2021-03-09] (MiniTool Solution Ltd -> )

S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )

R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [50240 2019-09-19] (Razer USA Ltd. -> Razer Inc)

R3 RzDev_005c; C:\WINDOWS\System32\drivers\RzDev_005c.sys [51992 2019-10-10] (Razer USA Ltd. -> Razer Inc)

R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [236032 2023-04-07] (Microsoft Windows Hardware Compatibility Publisher -> Sandboxie-Plus.com)

S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2022-03-14] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R3 teVirtualMIDI64; C:\WINDOWS\System32\drivers\teVirtualMIDI64.sys [53120 2019-12-07] (Tobias Erichsen -> Tobias Erichsen)

S3 usbscan; C:\WINDOWS\system32\DRIVERS\usbscan.sys [49152 2021-03-20] (Microsoft Corporation) [Datei ist nicht signiert]

R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [254616 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates)

R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [265488 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates)

R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1061392 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates)

R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [825176 2021-11-21] (IDRIX SARL -> IDRIX)

U5 vsock; C:\Windows\System32\Drivers\vsock.sys [105912 2020-08-11] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49608 2023-03-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [495896 2023-03-28] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99624 2023-03-28] (Microsoft Windows -> Microsoft Corporation)

S3 WIMMount; C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\amd64\DISM\wimmount.sys [39736 2019-12-06] (Microsoft Windows -> Microsoft Corporation)

S3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [29680 2022-06-18] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

S3 netr28ux; \SystemRoot\System32\drivers\netr28ux.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2023-04-10 21:10 - 2023-04-10 21:11 - 000000000 ____D C:\FRST

2023-04-10 20:10 - 2023-04-10 20:10 - 000181816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2023-04-10 20:06 - 2023-04-10 20:06 - 000002038 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2023-04-10 20:06 - 2023-04-10 20:06 - 000002026 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2023-04-10 20:01 - 2023-04-10 20:01 - 000000000 ____D C:\ProgramData\Malwarebytes

2023-04-10 19:35 - 2023-04-10 19:35 - 000001154 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk

2023-04-10 19:35 - 2023-04-10 19:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox

2023-04-10 19:35 - 2023-01-11 09:46 - 001061392 _____ (Oracle and/or its affiliates) C:\WINDOWS\system32\Drivers\VBoxSup.sys

2023-04-10 19:35 - 2023-01-11 09:46 - 000204216 _____ (Oracle and/or its affiliates) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys

2023-04-10 19:34 - 2023-04-10 19:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sandboxie

2023-04-10 19:31 - 2023-04-10 19:32 - 110456840 _____ (Oracle and/or its affiliates) C:\Users\bumbum\Downloads\VirtualBox-7.0.6-155176-Win.exe

2023-04-08 05:45 - 2023-04-08 05:45 - 000002506 _____ C:\Users\bumbum\Desktop\Profile 1 - Brave.lnk

2023-04-08 03:13 - 2023-04-08 03:13 - 001713104 _____ C:\Users\bumbum\Desktop\enus_plus_dede_bilingual_dictionary-1.xpi

2023-04-06 17:32 - 2023-04-06 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox

2023-04-05 22:41 - 2023-04-05 22:41 - 000000000 ____D C:\ProgramData\BraveSoftware

2023-04-04 12:51 - 2023-04-04 12:51 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe

2023-03-30 10:38 - 2023-04-03 05:47 - 000000000 ____D C:\Program Files\Mozilla Thunderbird

2023-03-15 16:30 - 2023-03-16 09:54 - 000000000 ____D C:\Program Files\Mozilla Firefox
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2023-04-10 21:11 - 2022-09-23 22:38 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2023-04-10 21:03 - 2020-03-12 12:12 - 000000000 ____D C:\Users\bumbum\AppData\LocalLow\Mozilla

2023-04-10 20:28 - 2020-03-12 11:28 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\Everything

2023-04-10 20:26 - 2020-04-21 09:01 - 000000000 ____D C:\Program Files (x86)\Google

2023-04-10 20:25 - 2020-03-21 15:42 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\discord

2023-04-10 20:25 - 2020-03-21 15:42 - 000000000 ____D C:\Users\bumbum\AppData\Local\Discord

2023-04-10 20:25 - 2020-03-13 20:47 - 000000000 ____D C:\Program Files\CCleaner

2023-04-10 20:16 - 2021-08-21 09:29 - 000000000 ____D C:\Users\bumbum\VirtualBox VMs

2023-04-10 20:15 - 2021-06-11 21:48 - 000000000 ____D C:\Users\bumbum\.VirtualBox

2023-04-10 20:06 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2023-04-10 20:03 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2023-04-10 20:01 - 2020-03-14 10:08 - 000000000 ____D C:\Program Files\Malwarebytes

2023-04-10 19:49 - 2020-09-24 15:06 - 000000000 ____D C:\ProgramData\VirtualBox

2023-04-10 19:46 - 2022-12-29 04:55 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\Element

2023-04-10 19:35 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF

2023-04-10 19:34 - 2022-11-03 21:45 - 000001780 _____ C:\WINDOWS\Sandboxie.ini

2023-04-10 19:34 - 2022-11-03 21:45 - 000000000 ____D C:\Program Files\Sandboxie

2023-04-10 19:32 - 2021-03-20 16:18 - 001723372 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2023-04-10 19:32 - 2019-12-07 16:51 - 000743838 _____ C:\WINDOWS\system32\perfh007.dat

2023-04-10 19:32 - 2019-12-07 16:51 - 000150260 _____ C:\WINDOWS\system32\perfc007.dat

2023-04-10 19:29 - 2023-01-25 18:51 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\vlc

2023-04-10 19:28 - 2020-03-12 11:52 - 000000000 ____D C:\Users\bumbum\AppData\Local\CrashDumps

2023-04-10 19:24 - 2021-05-16 08:16 - 000008192 ___SH C:\DumpStack.log.tmp

2023-04-10 19:24 - 2021-03-20 16:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2023-04-10 19:24 - 2020-03-12 20:10 - 000000000 ____D C:\ProgramData\PACE

2023-04-10 19:10 - 2020-03-10 20:17 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin

2023-04-10 19:10 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2023-04-10 19:09 - 2021-12-06 11:57 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\Signal

2023-04-10 09:53 - 2021-03-20 16:08 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2023-04-10 06:45 - 2020-03-12 19:51 - 000000000 ____D C:\Users\bumbum\AppData\Roaming\KeePass

2023-04-10 06:01 - 2022-06-24 19:36 - 000004170 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{CB1D74B0-16C7-4619-A73A-20B0B913B1DE}

2023-04-10 05:58 - 2020-11-11 19:31 - 000001481 _____ C:\Users\bumbum\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Waves Offload.lnk

2023-04-07 22:33 - 2020-03-12 23:17 - 000000000 ____D C:\Program Files\Common Files\VST3

2023-04-07 19:56 - 2020-03-10 20:17 - 000000000 ____D C:\Users\bumbum\AppData\Local\D3DSCache

2023-04-07 19:54 - 2020-03-12 17:51 - 000000000 ____D C:\ProgramData\boost_interprocess

2023-04-06 17:32 - 2020-06-12 22:31 - 000000000 ____D C:\Program Files (x86)\Dropbox

2023-04-06 16:34 - 2021-03-20 16:14 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2023-04-05 22:41 - 2022-09-14 13:35 - 000002361 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk

2023-04-05 22:41 - 2022-09-14 13:35 - 000002320 _____ C:\Users\Public\Desktop\Brave.lnk

2023-04-04 10:02 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2023-04-04 10:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2023-04-03 05:47 - 2020-03-12 11:14 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2023-03-30 22:32 - 2020-12-26 16:24 - 000000000 ____D C:\Users\bumbum\AppData\Local\AMD_Common

2023-03-30 21:52 - 2020-03-12 11:29 - 000001060 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk

2023-03-30 10:01 - 2021-05-13 10:18 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2023-03-28 21:45 - 2021-09-18 05:26 - 000000428 _____ C:\Users\bumbum\Desktop\LAN-Adapter-ONOFF.lnk

2023-03-28 15:33 - 2020-03-10 19:50 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2023-03-27 16:06 - 2022-06-22 18:10 - 000000000 ____D C:\Users\bumbum\Mp3tag

2023-03-21 08:25 - 2022-09-30 15:42 - 000003474 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting

2023-03-17 18:21 - 2020-03-10 20:40 - 000000000 ____D C:\WINDOWS\system32\MRT

2023-03-16 22:17 - 2020-03-10 20:40 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2023-03-15 21:07 - 2022-09-23 22:38 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2023-03-15 21:07 - 2020-03-12 11:14 - 000001010 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-04-13 06:30 - 2022-07-29 01:56 - 000086318 _____ () C:\Program Files\unins000.dat

2022-07-29 01:55 - 2022-07-29 01:55 - 000719521 _____ () C:\Program Files\unins000.exe

2020-10-17 13:05 - 2020-10-17 13:06 - 000043472 _____ () C:\Program Files\unins001.dat

2020-10-17 13:05 - 2020-10-17 13:03 - 000725157 _____ () C:\Program Files\unins001.exe

2022-05-13 19:47 - 2022-05-13 19:47 - 000001417 _____ () C:\Program Files\Common Files\unins000.dat

2022-05-13 19:47 - 2022-05-13 19:46 - 003218493 _____ (                                                            ) C:\Program Files\Common Files\unins000.exe

2022-01-19 23:17 - 2022-01-19 23:17 - 000000008 _____ () C:\Users\bumbum\AppData\Roaming\16f1929937b5acabed6b693658ccb667

2022-01-19 23:17 - 2022-01-19 23:19 - 000000036 _____ () C:\Users\bumbum\AppData\Roaming\2fcb6bd93d09ccfe4e08b66393170543

2021-12-20 09:45 - 2021-12-30 14:20 - 000000056 _____ () C:\Users\bumbum\AppData\Roaming\MOTU FireWire SMPTE Prefs.prefs

2020-03-12 18:26 - 2022-12-26 02:02 - 001249792 _____ (hxxp://www.ruby-lang.org/) C:\Users\bumbum\AppData\Roaming\msvcr90-ruby191.dll

2021-04-18 07:48 - 2021-04-18 07:48 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\3cf976315767f8122bb7d7.09207887

2020-11-20 06:06 - 2020-11-20 06:06 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\62zte7ntuiouiixaz6s5ebl6hza7osi

2021-12-20 02:27 - 2021-12-20 02:27 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\6eebc2b1598089f38a4759.67408981

2020-11-20 06:06 - 2020-11-21 05:14 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\7368ee7c5a2e9307a4d700.36580646

2020-06-26 16:58 - 2020-06-26 16:59 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\78a0e7c359f32e31311c98.97329581

2020-03-13 15:50 - 2020-10-05 16:54 - 000004608 _____ () C:\Users\bumbum\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2020-11-20 06:06 - 2020-11-20 06:06 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\dh3drp3dex4qjdyvz3zwwjh5a7xtbdq

2020-11-20 06:06 - 2020-11-20 06:06 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\fh2cdxostlubeje2g37wg75uzmqyw2a

2022-04-08 07:51 - 2022-04-08 07:51 - 000000039 _____ () C:\Users\bumbum\AppData\Local\kritadisplayrc

2021-07-10 05:44 - 2022-04-08 07:51 - 000016813 _____ () C:\Users\bumbum\AppData\Local\kritarc

2020-11-20 06:06 - 2020-11-20 06:06 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\mcswbqyqxfkzawt75eckjerthfvicxi

2020-11-20 06:06 - 2020-11-20 06:06 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\omooip4754nigh23mgkys2wsoylh7sq

2023-01-06 16:46 - 2023-01-06 16:46 - 000000218 _____ () C:\Users\bumbum\AppData\Local\recently-used.xbel

2020-03-11 09:41 - 2023-02-22 21:07 - 000007630 _____ () C:\Users\bumbum\AppData\Local\Resmon.ResmonCfg

2022-08-28 03:15 - 2023-04-10 05:58 - 000495222 _____ () C:\Users\bumbum\AppData\Local\wle.log

2022-08-29 15:46 - 2022-08-29 15:46 - 000000051 ___SH () C:\Users\bumbum\AppData\Local\yocye2jh5tjsb7d42tgipdibsjvqasq

2021-03-21 01:32 - 2021-03-21 01:32 - 000000000 _____ () C:\Users\bumbum\AppData\Local\{12F0F9DE-A7B0-41D8-90E6-457E24A5F51F}
 

==================== FCheck ================================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

FCheck: C:\WINDOWS\SysWOW64\LIBMTS.dll [2021-04-30] [simlink -> C:\Program Files (x86)\Common Files\MTS-ESP\LIBMTS.dll] [] <==== ACHTUNG

FCheck: C:\WINDOWS\system32\LIBMTS.dll [2021-04-30] [simlink -> C:\Program Files\Common Files\MTS-ESP\LIBMTS.dll] [] <==== ACHTUNG
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

THX

====Addition:====

FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 10-04-2023

durchgeführt von bumbum (10-04-2023 21:12:20)

Gestartet von T:\xxFolder\Downloads

Microsoft Windows 10 Pro Version 21H1 19043.2364 (X64) (2021-03-20 14:14:30)

Start-Modus: Normal

==========================================================
 

==================== Konten: =============================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-605212111-1861643219-2958236025-500 - Administrator - Disabled)

bumbum (S-1-5-21-605212111-1861643219-2958236025-1001 - Administrator - Enabled) => C:\Users\bumbum

DefaultAccount (S-1-5-21-605212111-1861643219-2958236025-503 - Limited - Disabled)

Gast (S-1-5-21-605212111-1861643219-2958236025-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-605212111-1861643219-2958236025-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Malwarebytes (Enabled - Up to date) {0D452135-A081-B000-D6B6-132E52638543}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 22.01 (x64) (HKLM\...\7-Zip) (Version: 22.01 - Igor Pavlov)

AccessData Registry Viewer (HKLM-x32\...\{05BC9439-8F8C-4FC3-8459-39F5A57950A3}) (Version: 1.8.3.0 - AccessData)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 21.2.3 - Advanced Micro Devices, Inc.)

AutoHotkey 1.1.33.10 (HKLM\...\AutoHotkey) (Version: 1.1.33.10 - Lexikos)

BleachBit 4.4.2.2142 (current user) (HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\BleachBit) (Version: 4.4.2.2142 - BleachBit)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Branding64 (HKLM\...\{856DA29A-EA4A-468B-BBC2-B5F60DD75BFE}) (Version: 1.00.0002 - Advanced Micro Devices, Inc.) Hidden

Brave (HKLM-x32\...\BraveSoftware Brave-Browser) (Version: 112.1.50.114 - Die Brave-Autoren)

CCleaner (HKLM\...\CCleaner) (Version: 6.10 - Piriform)

Discord (HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\Discord) (Version: 0.0.311 - Discord Inc.)

Dropbox (HKLM-x32\...\Dropbox) (Version: 171.4.6182 - Dropbox, Inc.)

Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.733.1 - Dropbox, Inc.) Hidden

ENE_QSI_Loki_HAL (HKLM\...\{BDE43F26-5917-44F8-B86A-F1D9A6B80B32}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden

ENE_QSI_Loki_HAL (HKLM-x32\...\{205ef3a8-937b-43cb-90fc-2f58f71408d8}) (Version: 1.0.3.0 - ENE TECHNOLOGY INC.) Hidden

Eraser 6.2.0.2992 (HKLM\...\{6735C886-F5F0-446A-BB8C-03B92BA6775D}) (Version: 6.2.2992 - The Eraser Project)

Everything 1.4.1.1015 (x64) (HKLM\...\Everything) (Version: 1.4.1.1015 - voidtools)

GlassWire 2.3 (remove only) (HKLM-x32\...\GlassWire 2.3) (Version: 2.3.449 - SecureMix LLC)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 111.0.5563.147 - Google LLC)

HWiNFO64 Version 6.22 (HKLM\...\HWiNFO64_is1) (Version: 6.22 - Martin Malik - REALiX)

Intel(R) C++ Redistributables for Windows* on Intel(R) 64 (HKLM-x32\...\{9B7D5CA0-5521-458D-88D9-AF7D9A06E753}) (Version: 11.1.072 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.6.1194 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{54EC951C-4197-4AA4-803B-101F127BBB38}) (Version: 11.0.6.1194 - Intel Corporation) Hidden

Intel(R) ME UninstallLegacy (HKLM\...\{335F9123-9306-4DB0-AF07-9C636317EE9D}) (Version: 1.0.1.0 - Intel Corporation) Hidden

IrfanView 4.57 (64-bit) (HKLM\...\IrfanView64) (Version: 4.57 - Irfan Skiljan)

JACK2 version v1.9.19 (HKLM\...\JACK2_is1) (Version: v1.9.19 - jackaudio.org)

JMJ Tribute 1.0.0 (HKLM-x32\...\JMJ Tribute_is1) (Version: 1.0.0 - Arturia)

KeePass Password Safe 2.53.1 (HKLM-x32\...\KeePassPasswordSafe2_is1) (Version: 2.53.1 - Dominik Reichl)

Kits Configuration Installer (HKLM-x32\...\{8867E8B9-1539-18F3-54AB-B1F1E641AC14}) (Version: 10.1.19041.1 - Microsoft) Hidden

LibreOffice 7.5.0.3 (HKLM\...\{AE6E3BD6-832E-486F-B040-B06228F447F5}) (Version: 7.5.0.3 - The Document Foundation)

Malwarebytes version 4.5.26.259 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.5.26.259 - Malwarebytes)

MCS783x Windows 8.x Drivers (HKLM-x32\...\{2BDD8E68-208B-45E0-BEE7-FB379FBA5D78}) (Version: 1.0.1.0 - ASIX Electronics Corporation) Hidden

MCS783x Windows 8.x Drivers (HKLM-x32\...\InstallShield_{2BDD8E68-208B-45E0-BEE7-FB379FBA5D78}) (Version: 1.0.1.0 - ASIX Electronics Corporation)

Microsoft .NET Host - 5.0.13 (x64) (HKLM\...\{07FD769C-6C18-4038-A261-E9859C74E624}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 5.0.13 (x64) (HKLM\...\{0F011389-4823-40D0-AB50-711628D820F5}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 5.0.13 (x64) (HKLM\...\{C84C2DA1-52E2-4183-8F20-88176B77848F}) (Version: 40.52.30715 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 100.0.1185.50 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 95.0.1020.53 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30139 (HKLM-x32\...\{8d5fdf81-7022-423f-bd8b-b513a1050ae1}) (Version: 14.29.30139.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.32.31332 (HKLM-x32\...\{3746f21b-c990-4045-bb33-1cf98cff7a68}) (Version: 14.32.31332.0 - Microsoft Corporation)

Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30139 (HKLM-x32\...\{1AEA8854-7597-4CD3-948F-8DE364D94E07}) (Version: 14.29.30139 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30139 (HKLM-x32\...\{1679EF65-55F3-4248-B91E-6B3BE1A69CDF}) (Version: 14.29.30139 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.32.31332 (HKLM\...\{F4499EE3-A166-496C-81BB-51D1BCDC70A9}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.32.31332 (HKLM\...\{3407B900-37F5-4CC2-B612-5CD5D580A163}) (Version: 14.32.31332 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.13 (x64) (HKLM\...\{E41C6EA8-A897-4008-835E-151A92FD6F95}) (Version: 40.52.30717 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.13 (x64) (HKLM-x32\...\{e2d1ae32-dd1d-4ad7-a298-10e42e7840fc}) (Version: 5.0.13.30717 - Microsoft Corporation)

MiniTool ShadowMaker Free Edition (HKLM-x32\...\MT-75D7C412-925B-4AD0-90DC-5E4FEE22EAE1_is1) (Version: 3.6 - MiniTool Software Limited)

MOTU Hardware (HKLM\...\{76F8CA15-9F59-446B-A995-6F833FF2764D}) (Version: 4.0.8.9606 - MOTU)

Mozilla Firefox ESR (x64 de) (HKLM\...\Mozilla Firefox 102.9.0 ESR (x64 de)) (Version: 102.9.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 68.5.0 - Mozilla)

Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 102.9.1 (x64 de)) (Version: 102.9.1 - Mozilla)

Noises version 1.1 (HKLM\...\Noises_is1) (Version: 1.1 - AudioThing) <==== ACHTUNG

Npcap (HKLM-x32\...\NpcapInst) (Version: 1.31 - Nmap Project)

Oracle VM VirtualBox 7.0.6 (HKLM\...\{351768D7-4E19-4B41-8420-E1CF6FAD410D}) (Version: 7.0.6 - Oracle and/or its affiliates)

PACE License Support Win64 (HKLM\...\{21CF0E6D-1766-4f63-A833-654A1B21BA86}) (Version: 5.7.1.4270 - PACE Anti-Piracy, Inc.) Hidden

PACE License Support Win64 (HKLM-x32\...\InstallShield_{21CF0E6D-1766-4f63-A833-654A1B21BA86}) (Version: 5.7.1.4270 - PACE Anti-Piracy, Inc.)

paint.net (HKLM\...\{DBC43589-CC32-4502-BBEC-5B931AF4BD2E}) (Version: 5.0.2 - dotPDN LLC)

Process Hacker 2.39 (r124) (HKLM\...\Process_Hacker2_is1) (Version: 2.39.0.124 - wj32)

Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.5.0116.010714 - Razer Inc.)

Sandboxie 5.63.4 (64-bit) (HKLM\...\Sandboxie) (Version: 5.63.4 - sandboxie-plus.com)

Signal 6.5.1 (HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\7d96caee-06e6-597c-9f2f-c7bb2e0948b4) (Version: 6.5.1 - Signal Messenger, LLC)

Simple DNSCrypt x64 (HKLM\...\{F21D078F-4055-462F-A9E9-468A4DE37F06}) (Version: 0.7.1 - bitbeans)

SVG See 1.1.0 (HKLM\...\{4CA20D9A-98AC-4DD6-9C16-7449F29AC08A}_is1) (Version: 1.0.0 - Tibold Kandrai)

Synology Assistant (remove only) (HKLM-x32\...\Synology Assistant) (Version: 7.0.2-50046 - Synology)

TechSmith Capture (HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\RelayRecorder) (Version: 2.0.11 - TechSmith Corporation)

teVirtualMIDI64 (HKLM\...\{2F802731-3731-453E-B30B-4381BEED22AC}) (Version: 1.3.0.43 - Tobias Erichsen) Hidden

Toolkit Documentation (HKLM-x32\...\{1978CD82-5D9C-F9BD-4FA3-17AFA5AE12B2}) (Version: 10.1.19041.1 - Microsoft) Hidden

TP-LINK Archer T4U Driver (HKLM-x32\...\{58F414FE-74CC-42A0-9D86-A089849C510A}) (Version: 1.3.1 - TP-LINK)

TreeSize Free V4.5.3 (HKLM-x32\...\TreeSize Free_is1) (Version: 4.5.3 - JAM Software)

Ultra Fractal 6.03 (64-bit) (HKLM-x32\...\Ultra Fractal 6.03 (64-bit)) (Version:  - )

VLC media player (HKLM\...\VLC media player) (Version: 3.0.18 - VideoLAN)

VNC Server 6.9.1 (HKLM\...\{A038A773-0616-4567-B12F-DEE57C400C08}) (Version: 6.9.1.46706 - RealVNC)

Windows Assessment and Deployment Kit - Windows 10 (HKLM-x32\...\{9346016b-6620-4841-8ea4-ad91d3ea02b5}) (Version: 10.1.19041.1 - Microsoft Corporation)

Windows Assessment and Deployment Kit Windows Preinstallation Environment Add-Ons - Windows 10 (HKLM-x32\...\{353df250-4ecc-4656-a950-4df93078a5fd}) (Version: 10.1.19041.1 - Microsoft Corporation)

Windows Deployment Customizations (HKLM-x32\...\{2C4DAAC8-4CD1-9CFC-EBD1-E6A17C8199E4}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows Deployment Tools (HKLM-x32\...\{FE728B5E-3753-0F68-EC2D-66ABE2DEC1C1}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows PE ARM ARM64 (HKLM-x32\...\{82FD70CC-4B6F-2D82-A0CE-8ED02C7D9BE1}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows PE ARM ARM64 wims (HKLM-x32\...\{9D3CFC35-ECE8-ADF5-8E36-6B118163CB2B}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows PE x86 x64 (HKLM-x32\...\{CB37C335-2000-4C7B-BD32-F7F28BA6CDA9}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows PE x86 x64 wims (HKLM-x32\...\{57CCDF62-0F8B-8B79-34CD-F504E7228DEF}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows System Image Manager on amd64 (HKLM-x32\...\{D5CE010A-37F1-27CD-D6A1-61FB1F206892}) (Version: 10.1.19041.1 - Microsoft) Hidden

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

Wireshark 3.4.6 64-bit (HKLM-x32\...\Wireshark) (Version: 3.4.6 - The Wireshark developer community, hxxps://www.wireshark.org)
 

Packages:

=========

Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2021-08-21] (Microsoft Corporation)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-21] (Microsoft Corporation)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-03-12] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-03-12] (Microsoft Corporation) [MS Ad]

WinDbg Preview -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2210.3001.0_x64__8wekyb3d8bbwe [2022-10-10] (Microsoft Corporation)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}\InprocServer32 -> C:\Users\bumbum\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\amd64\FileSyncShell64.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}\InprocServer32 -> C:\Users\bumbum\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\amd64\FileSyncShell64.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}\InprocServer32 -> C:\Users\bumbum\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\amd64\FileSyncShell64.dll => Keine Datei

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{930e604a-cc01-4d06-8d7a-5a07914f3afb}\localserver32 -> C:\Program Files\TechSmith\Camtasia 2019\CamtasiaStudio.exe (TechSmith Corporation -> TechSmith Corporation)

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}\localserver32 -> C:\Users\bumbum\AppData\Local\Microsoft\OneDrive\19.232.1124.0008\FileCoAuth.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-605212111-1861643219-2958236025-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\bumbum\Dropbox [2020-06-12 22:35]

ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers1: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers2: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-10] (Malwarebytes Inc. -> Malwarebytes)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers4: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\WINDOWS\System32\atiacm64.dll [2021-02-22] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.61.0.dll [2023-03-04] (Dropbox, Inc -> Dropbox, Inc.)

ContextMenuHandlers5: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2022-07-15] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [Eraser] -> {BC9B776A-90D7-4476-A791-79D835F30650} => C:\Program Files\Eraser\Eraser.Shell.dll [2021-02-12] (Heidi Computers Ltd -> The Eraser Project)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2023-04-10] (Malwarebytes Inc. -> Malwarebytes)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\bumbum\Desktop\Profile 1 - Brave.lnk -> C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc.) -> --profile-directory="Default"

ShortcutWithArgument: C:\Users\bumbum\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Miniconda3 (64-bit)\Anaconda Prompt (miniconda3).lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation) -> "/K" C:\Users\bumbum\miniconda3\Scripts\activate.bat C:\Users\bumbum\miniconda3
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2020-07-27 15:09 - 2020-07-27 15:09 - 000017920 _____ () [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\libEGL.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 003567616 _____ () [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\libGLESv2.dll
 

2022-07-29 06:13 - 2022-07-15 16:00 - 000094720 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2020-09-23 10:42 - 2015-12-09 04:08 - 000182784 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\E_YLMBRUE.DLL
 

2022-07-16 17:33 - 2017-09-14 14:40 - 000884736 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\MiniTool ShadowMaker\sqldrivers\qsqlite.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000031744 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qgif.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000039424 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qicns.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000031744 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qico.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000414720 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qjpeg.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000025088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qsvg.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000024576 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qtga.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000023552 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwbmp.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000532992 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\imageformats\qwebp.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 001441792 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\platforms\qwindows.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 001189888 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\sqldrivers\qsqlite.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000134656 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\plugins\styles\qwindowsvistastyle.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 006184448 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 006867456 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 001104896 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000325120 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Positioning.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 003668480 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000517120 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QmlModels.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000051712 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QmlWorkerScript.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 004228608 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000171008 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QuickControls2.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 001085440 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5QuickTemplates2.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000205824 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Sql.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000329728 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Svg.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000127488 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebChannel.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000390656 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebEngine.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 095598080 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WebEngineCore.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 005587968 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000462848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000188928 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 002878464 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5XmlPatterns.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000055808 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\private\qtgraphicaleffectsprivate.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000059392 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtGraphicalEffects\qtgraphicaleffectsplugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000017920 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQml\qmlplugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000017920 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick.2\qtquick2plugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000284160 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls.2\qtquickcontrols2plugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000333824 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Controls\qtquickcontrolsplugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000136704 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Dialogs\dialogplugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000090112 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Layouts\qquicklayoutsplugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000313856 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Templates.2\qtquicktemplates2plugin.dll

2020-07-27 15:09 - 2020-07-27 15:09 - 000017920 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtQuick\Window.2\windowplugin.dll

2021-02-17 11:52 - 2021-02-17 11:52 - 000091648 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\QtWebEngine\qtwebengineplugin.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData:482EE99B1E21CE8C [217]

AlternateDataStreams: C:\ProgramData:EEF49EE5D3688B03 [217]

AlternateDataStreams: C:\Users\All Users:482EE99B1E21CE8C [217]

AlternateDataStreams: C:\Users\All Users:EEF49EE5D3688B03 [217]

AlternateDataStreams: C:\ProgramData\Anwendungsdaten:482EE99B1E21CE8C [217]

AlternateDataStreams: C:\ProgramData\Anwendungsdaten:EEF49EE5D3688B03 [217]

AlternateDataStreams: C:\ProgramData\Application Data:482EE99B1E21CE8C [217]

AlternateDataStreams: C:\ProgramData\Application Data:EEF49EE5D3688B03 [217]

AlternateDataStreams: C:\ProgramData\PACE:D796C4DBE9AB60ED [217]

AlternateDataStreams: C:\ProgramData\PACE:E6530E75740592D0 [217]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\Software\Classes\regfile: regedit.exe "%1" <==== ACHTUNG
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = 

HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = 

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = 
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-03-19 06:49 - 2021-05-04 00:45 - 000004100 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1 a-0001.a-msedge.net

127.0.0.1 a.ads1.msn.com

127.0.0.1 a.ads2.msads.net

127.0.0.1 a.ads2.msn.com

127.0.0.1 a.rad.msn.com

127.0.0.1 ac3.msn.com

127.0.0.1 ad.doubleclick.net

127.0.0.1 adnexus.net

127.0.0.1 adnxs.com

127.0.0.1 ads1.msads.net

127.0.0.1 ads1.msn.com

127.0.0.1 ads.msn.com

127.0.0.1 aidps.atdmt.com

127.0.0.1 aka-cdn-ns.adtech.de

127.0.0.1 apps.skype.com

127.0.0.1 az361816.vo.msecnd.net

127.0.0.1 az512334.vo.msecnd.net

127.0.0.1 b.ads1.msn.com

127.0.0.1 b.ads2.msads.net

127.0.0.1 b.rad.msn.com

127.0.0.1 bs.serving-sys.com

127.0.0.1 c.atdmt.com

127.0.0.1 c.msn.com

127.0.0.1 cdn.atdmt.com

127.0.0.1 cds26.ams9.msecn.net

127.0.0.1 choice.microsoft.com

127.0.0.1 choice.microsoft.com.nsatc.net

127.0.0.1 compatexchange.cloudapp.net

127.0.0.1 corp.sts.microsoft.com

127.0.0.1 corpext.msitadfs.glbdns2.microsoft.com
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %C_EM64T_REDIST11%bin\Intel64;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\dotnet\

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\Control Panel\Desktop\\Wallpaper -> T:\xxFolder\Downloads\Midjourney AI\Stardust_a_multidimensional_sky_rift_shattered_crystals_emerald_71b0216e-0170-4468-ab7c-d0356d6e2650.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\SOFTWARE\Microsoft\Windows Security Health\State => (AppAndBrowser_StoreAppsSmartScreenOff: 0)

 ist aktiviert.
 

Network Binding:

=============

Ethernet 2: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

Ethernet 2: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 

Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\StartupFolder: => "Ralink Wireless Utility.lnk"

HKLM\...\StartupApproved\StartupFolder: => "WavesLocalServer.lnk"

HKLM\...\StartupApproved\Run: => "Eraser"

HKLM\...\StartupApproved\Run: => "EPPCCMON"

HKLM\...\StartupApproved\Run: => "MTPW"

HKLM\...\StartupApproved\Run32: => "KeePass 2 PreLoad"

HKLM\...\StartupApproved\Run32: => "Dropbox"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\StartupFolder: => "ProtonMail Bridge.lnk"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Rambox"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000000"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Agent Tray"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Opera Browser Assistant"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "EPLTarget\P0000000000000001"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "EPSDNMON"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "iFunBox"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "PrivadoVPN"

HKU\S-1-5-21-605212111-1861643219-2958236025-1001\...\StartupApproved\Run: => "Overwolf"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{2991F8BA-1856-473C-A209-FD354E7E2009}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (GlassWire -> SecureMix LLC)

FirewallRules: [{440D450E-1802-477E-BD48-6974FF65D4FD}] => (Allow) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe (GlassWire -> SecureMix LLC)

FirewallRules: [{D879141A-64FA-4E73-B900-DD518EA08553}] => (Block) c:\program files\bonjour\mdnsresponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{ED66B58F-9EDF-473B-B133-F367828FA869}] => (Block) c:\program files\bonjour\mdnsresponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{1002F977-2503-4DC6-BB2F-EF51809DEE86}] => (Allow) c:\windows\systemapps\microsoft.windows.search_cw5n1h2txyewy\searchapp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{8959C5F0-5750-46B5-AD5D-A59AD5DC7B42}] => (Allow) c:\windows\systemapps\microsoft.windows.search_cw5n1h2txyewy\searchapp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{5D88FE2F-048F-4AE6-9DC6-E02CC6406479}] => (Block) c:\windows\explorer.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{0D3D734F-CC00-45CB-98C1-F21E9B523EF0}] => (Block) c:\windows\explorer.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{CB2FC16C-5AAE-45D6-8A6A-FCC6FBBC6009}] => (Allow) c:\program files (x86)\motu\motudnsresponder.exe (Mark of the Unicorn, Inc -> MOTU Inc.)

FirewallRules: [{32B77E3A-F5C5-47CD-BFB1-353FE5FA0265}] => (Allow) c:\program files (x86)\motu\motudnsresponder.exe (Mark of the Unicorn, Inc -> MOTU Inc.)

FirewallRules: [{39FD6E22-FA83-4156-80F8-33A6E452E07D}] => (Allow) c:\program files\simple dnscrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe (Christian Hermann -> )

FirewallRules: [{1D3ADBE3-DB6A-4B7C-A503-E4FE234736A7}] => (Allow) c:\program files\simple dnscrypt x64\dnscrypt-proxy\dnscrypt-proxy.exe (Christian Hermann -> )

FirewallRules: [{193505A2-38CE-4403-87DB-56C8D9FAACC3}] => (Block) c:\windows\system32\msfeedssync.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{4FB4BEA3-5708-4E55-88FC-404C31F92858}] => (Block) c:\windows\system32\msfeedssync.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{6BFF095B-4611-4F02-AC3D-51C18CB93F07}] => (Allow) c:\program files (x86)\google\update\googleupdate.exe (Google LLC -> Google LLC)

FirewallRules: [{F8169B62-19D2-4358-B889-6992CA71072B}] => (Allow) c:\program files (x86)\google\update\googleupdate.exe (Google LLC -> Google LLC)

FirewallRules: [{33833715-F45C-48BC-BFC4-B2F39F1706B4}] => (Allow) c:\windows\system32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{1BB67955-2521-4786-9106-A8CD3D593CD2}] => (Allow) c:\windows\system32\smartscreen.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{1B6758D1-9239-4C82-B60F-FE34BDB68612}] => (Allow) c:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{18DB0C5A-4682-4BB6-98AB-A8D9FCF21299}] => (Allow) c:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{55949FAF-193B-4BA8-9745-7E7FBB0991BC}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9007\discord.exe => Keine Datei

FirewallRules: [{8298921D-5E2E-4E0D-A36A-C54999FD76B5}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9007\discord.exe => Keine Datei

FirewallRules: [{EBD74E0B-4C44-4420-B9D7-964D4AEEF3B0}] => (Allow) c:\program files\malwarebytes\anti-malware\mbamservice.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{A75C8613-82F6-4E9B-9341-C086098524F2}] => (Allow) c:\program files\malwarebytes\anti-malware\mbamservice.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{0156A409-671B-4F71-9211-AFE659CC0414}] => (Allow) c:\program files (x86)\dropbox\update\dropboxupdate.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{26749304-3FB5-4F82-940B-4B4118067E36}] => (Allow) c:\program files (x86)\dropbox\update\dropboxupdate.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{57ADC33A-BEED-44EA-BFEA-55989DEF4F35}] => (Allow) c:\program files (x86)\bravesoftware\update\braveupdate.exe (Brave Software, Inc. -> BraveSoftware Inc.)

FirewallRules: [{6D4E4F8B-622D-457B-B1AB-CD807844890F}] => (Allow) c:\program files (x86)\bravesoftware\update\braveupdate.exe (Brave Software, Inc. -> BraveSoftware Inc.)

FirewallRules: [{80E5DDEF-0003-410F-84B7-9E623BA856A2}] => (Allow) c:\program files (x86)\glasswire\gwctlsrv.exe (GlassWire -> SecureMix LLC)

FirewallRules: [{26ACB01C-E356-4BBE-B402-1680252A5695}] => (Allow) c:\program files (x86)\glasswire\gwctlsrv.exe (GlassWire -> SecureMix LLC)

FirewallRules: [{6D18642D-7D9E-4530-AC87-9327C49AA749}] => (Block) c:\program files (x86)\common files\overwolf\overwolfupdater.exe => Keine Datei

FirewallRules: [{BD531E6B-3237-4ACF-9FD8-4A54BEA44D41}] => (Block) c:\program files (x86)\common files\overwolf\overwolfupdater.exe => Keine Datei

FirewallRules: [{994C6AB4-2014-44C4-8450-27338F0674C3}] => (Allow) c:\program files\ccleaner\ccupdate.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

FirewallRules: [{081AD120-6E08-4CB4-BC43-E04A0953CC11}] => (Allow) c:\program files\ccleaner\ccupdate.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

FirewallRules: [{A7DFF7D5-709A-4883-B12D-67D0BEC5C4C4}] => (Block) c:\windows\system32\backgroundtaskhost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D3AE9CB5-300A-4B7D-AEF2-69F8EFE1B07A}] => (Block) c:\windows\system32\backgroundtaskhost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{96BC3F0B-AD7E-41AD-AA54-4F6F05306C6B}] => (Allow) c:\program files\net.downloadhelper.coapp\bin\net.downloadhelper.coapp-win-64.exe (SARL ACLAP -> Node.js) [Datei ist nicht signiert]

FirewallRules: [{6BB7230C-991D-44DB-B3E8-57FF8466204A}] => (Allow) c:\program files\net.downloadhelper.coapp\bin\net.downloadhelper.coapp-win-64.exe (SARL ACLAP -> Node.js) [Datei ist nicht signiert]

FirewallRules: [{972A7FA9-8527-4144-8D4E-88338A188D60}] => (Allow) c:\program files\mozilla thunderbird\thunderbird.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{123EBAA4-C441-4FB0-B525-07422EA0FB41}] => (Allow) c:\program files\mozilla thunderbird\thunderbird.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{BBEE3CA0-E062-446B-B31D-E22DB6595663}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2209.7-0\msmpeng.exe => Keine Datei

FirewallRules: [{5D4AABCF-C983-46B7-8EDF-B4906B139D74}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2209.7-0\msmpeng.exe => Keine Datei

FirewallRules: [{D4E0D0F3-5805-44E2-8BC9-ED587CD1A50A}] => (Allow) c:\users\bumbum\appdata\local\programs\signal-desktop\signal.exe (Signal Messenger, LLC -> Signal Messenger, LLC)

FirewallRules: [{2568179A-963E-4FF0-A720-11BE619B7C27}] => (Allow) c:\users\bumbum\appdata\local\programs\signal-desktop\signal.exe (Signal Messenger, LLC -> Signal Messenger, LLC)

FirewallRules: [{FA6C3809-018D-4533-81AA-3559427DC16F}] => (Block) c:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [{7B160B8F-FAC2-4983-891C-EEA0FD0719FF}] => (Block) c:\program files (x86)\keepass password safe 2\keepass.exe (Open Source Developer, Dominik Reichl -> Dominik Reichl)

FirewallRules: [{764B9CAE-0653-4DD9-8BCB-CBD31B63E91C}] => (Allow) c:\windows\system32\sihclient.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{305E773D-567B-443D-8754-BC4A1684699A}] => (Allow) c:\windows\system32\sihclient.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{83371E9E-AA33-46FC-A72A-4F8A8EDAB52D}] => (Allow) d:\wiki\lex\apache2\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [{7C1A4FC3-98E5-4BF4-83F8-CE051A02AA1B}] => (Allow) d:\wiki\lex\apache2\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [{D1D789C6-589D-4150-85E7-2E10436B9E87}] => (Allow) c:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [{4EE74A60-789B-4723-98EE-3C32B4644009}] => (Allow) c:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [{D4FF735C-EA5B-4177-842B-71D0A666373E}] => (Block) c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{99DF3353-36A6-4E9F-B6B9-6BBE09805C99}] => (Block) c:\program files (x86)\microsoft\edgeupdate\microsoftedgeupdate.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{C7277D43-C5B8-4049-AEAF-31A31360BFAD}] => (Allow) c:\program files\minitool partition wizard 12\updatechecker.exe => Keine Datei

FirewallRules: [{50B42595-32E9-491B-9B74-0EF15ED1558E}] => (Allow) c:\program files\minitool partition wizard 12\updatechecker.exe => Keine Datei

FirewallRules: [{03A2D495-BE10-47C0-9F7E-5351387B8625}] => (Block) c:\program files\ccleaner\ccleanerbugreport.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software)

FirewallRules: [{239A1237-D35F-4679-B0E4-2FED1BD87C67}] => (Block) c:\program files\ccleaner\ccleanerbugreport.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software)

FirewallRules: [{C359FC09-E21F-4068-9E66-14029661038D}] => (Allow) c:\program files\ccleaner\ccleaner64.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

FirewallRules: [{C0A7ACAE-CAD8-4328-A535-83D1CB6CC2A2}] => (Allow) c:\program files\ccleaner\ccleaner64.exe (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)

FirewallRules: [{9D70B5D5-172C-46FD-876E-39422449290D}] => (Allow) c:\windows\system32\apphostregistrationverifier.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D70F116E-614B-4408-95A2-1F6DEB0A5E2C}] => (Allow) c:\windows\system32\apphostregistrationverifier.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D133979C-BF5F-47B3-B22F-81A730340957}] => (Allow) c:\program files\malwarebytes\anti-malware\mbamtray.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{5C06D7D4-F52F-42A3-A8F0-209BFC4519C5}] => (Allow) c:\program files\malwarebytes\anti-malware\mbamtray.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{5481308F-367D-4E16-BD0B-300C342A8A06}] => (Allow) c:\program files\draw.io\draw.io.exe (JGraph Ltd -> JGraph)

FirewallRules: [{1E7E38C7-C765-41E4-92BF-400244D42382}] => (Allow) c:\program files\draw.io\draw.io.exe (JGraph Ltd -> JGraph)

FirewallRules: [{AFE53BDE-4261-4A16-87BE-3EA67ADCE134}] => (Allow) c:\program files\mozilla firefox\default-browser-agent.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{5B317F9B-CAD3-43F3-9589-268A699AC1F2}] => (Allow) c:\program files\mozilla firefox\default-browser-agent.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{12CAA084-93AA-419C-A8CA-554F2430E40C}] => (Allow) c:\program files\renoise 3.3.0\renoise.exe (Eduard Müller -> Renoise)

FirewallRules: [{98009B6C-194D-4BFA-9F8C-191DBCCF7D7F}] => (Allow) c:\program files\renoise 3.3.0\renoise.exe (Eduard Müller -> Renoise)

FirewallRules: [{5D9E9FF3-E479-4F5A-A24A-F44294E575DF}] => (Allow) c:\program files\propellerhead\authorizer\authorizer.exe (Propellerhead Software AB -> Propellerhead Software AB)

FirewallRules: [{3C0796D9-5ABB-49EC-BE13-56062D85E23E}] => (Allow) c:\program files\propellerhead\authorizer\authorizer.exe (Propellerhead Software AB -> Propellerhead Software AB)

FirewallRules: [{DBB6FB72-EF4B-4E8C-9804-57C39FE7BF85}] => (Allow) c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{07983D8D-CFF6-4DA1-88BB-999F53FB8174}] => (Allow) c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{856D8264-BF5F-41FF-A39D-6A2AAA025998}] => (Allow) t:\xxfolder\production\plugins\sonic charge\sonic charge authenticator.exe (Nuedge Development Enskild firma -> NuEdge Development)

FirewallRules: [{ED8486CA-992B-4E8B-929D-61330A87B77C}] => (Allow) t:\xxfolder\production\plugins\sonic charge\sonic charge authenticator.exe (Nuedge Development Enskild firma -> NuEdge Development)

FirewallRules: [{695B70D0-D59E-4E5E-9C07-713FFAEC8FB2}] => (Allow) c:\program files\libreoffice\program\soffice.bin (The Document Foundation -> The Document Foundation)

FirewallRules: [{68E92163-C7F7-4009-BA25-459B0E3A6385}] => (Allow) c:\program files\libreoffice\program\soffice.bin (The Document Foundation -> The Document Foundation)

FirewallRules: [{848256DF-88E0-4992-8598-A39140FAA11F}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.4-0\msmpeng.exe => Keine Datei

FirewallRules: [{9939BF50-9E7A-468D-B222-D54068E06F74}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.4-0\msmpeng.exe => Keine Datei

FirewallRules: [{C1E64AD1-15A7-4EF1-80D1-91B3EF48B0D6}] => (Allow) c:\windows\system32\dbxsvc.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{B8CF64FA-6DF3-4B25-9540-6EB774C5DD6D}] => (Allow) c:\windows\system32\dbxsvc.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{B846CDF9-AFFE-4B78-A543-1967BEF00663}] => (Allow) c:\program files (x86)\dropbox\update\install\{87db456e-3145-46a3-ba26-c3a31b1c332f}\dropboxclient_160.4.4703.x64.exe => Keine Datei

FirewallRules: [{B7719137-48D7-4EBC-B16C-F29C180346E9}] => (Allow) c:\program files (x86)\dropbox\update\install\{87db456e-3145-46a3-ba26-c3a31b1c332f}\dropboxclient_160.4.4703.x64.exe => Keine Datei

FirewallRules: [{5060EA78-96AA-42A1-A15B-03B6A42D4630}] => (Allow) c:\program files (x86)\dropbox\client\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{5EEF6B5A-AA09-4C84-A9FD-CB0CD34AF30E}] => (Allow) c:\program files (x86)\dropbox\client\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{F4E7500F-9EC6-4324-B264-3667D456406B}] => (Allow) c:\windows\immersivecontrolpanel\systemsettings.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{3D0C6CA3-40D1-4FB5-85DD-33F1EFDBFC22}] => (Allow) c:\windows\immersivecontrolpanel\systemsettings.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{00AAB6CA-5467-432D-B758-3DE9A4826978}] => (Allow) c:\program files\amd\cnext\cnext\radeonsoftware.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

FirewallRules: [{DBB6334E-F1EA-4487-8B9F-9740388DB21B}] => (Allow) c:\program files\amd\cnext\cnext\radeonsoftware.exe (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

FirewallRules: [{82C97137-8C74-46DD-A01D-0D718003E5B8}] => (Allow) c:\windows\system32\wermgr.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{E0EF5218-2AF5-4F73-BEBE-3C4D286E14DB}] => (Allow) c:\windows\system32\wermgr.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D6D6421A-F11E-4C3F-AF05-4F55D22C3C8D}] => (Allow) c:\users\bumbum\appdata\local\temp\nsob0c9.tmp\old-install\signal.exe => Keine Datei

FirewallRules: [{77498C4E-2C02-48AF-9F22-2B7FDFE0573A}] => (Allow) c:\users\bumbum\appdata\local\temp\nsob0c9.tmp\old-install\signal.exe => Keine Datei

FirewallRules: [{C59ED74B-4EF7-4820-8B03-691B64315805}] => (Allow) c:\windows\syswow64\wermgr.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{02DB2DAE-C57E-4210-9C79-2BC1CDCC425C}] => (Allow) c:\windows\syswow64\wermgr.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{C22E3484-7912-451C-915B-2009CF09ADA3}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.5-0\msmpeng.exe => Keine Datei

FirewallRules: [{8A458A7D-BE71-4FC7-8E1F-B12266BD06BB}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.5-0\msmpeng.exe => Keine Datei

FirewallRules: [{223445E6-33E4-429B-BDF1-7FFD737F3030}] => (Allow) c:\program files\mozilla firefox\crashreporter.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{8C88192E-715A-435A-9884-9E631F75795C}] => (Allow) c:\program files\mozilla firefox\crashreporter.exe (Mozilla Corporation -> Mozilla Foundation)

FirewallRules: [{722AEE87-18B9-44D5-923A-4C6F0FDA93EC}] => (Allow) c:\windows\system32\mrt.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{FEDD146C-9A9D-42DD-AE25-8DB63440F78D}] => (Allow) c:\windows\system32\mrt.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{9E22874E-F1A1-4D42-8205-4BE725D694CF}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{076EE07E-3739-4138-B672-3C073EA1F9A3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)

FirewallRules: [{CD4757CD-260A-4DD6-8F0E-AB5084FDE817}] => (Allow) C:\Program Files (x86)\MOTU\motuDNSResponder.exe (Mark of the Unicorn, Inc -> MOTU Inc.)

FirewallRules: [{EB139178-B38E-4369-8CF2-596AB269ECCA}] => (Allow) C:\Program Files (x86)\MOTU\motuDNSResponder.exe (Mark of the Unicorn, Inc -> MOTU Inc.)

FirewallRules: [{0345DBA7-3534-4058-AAA9-5D3B28231CBF}] => (Allow) c:\program files\teamviewer\teamviewer_service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{A2C7EED3-26E3-4DAF-BD00-87F2A678D63D}] => (Allow) c:\program files\teamviewer\teamviewer_service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{41BA7291-ECAF-4F36-A364-A7998D46B369}] => (Allow) c:\program files\ccleaner\ccleaner_update_helper.exe => Keine Datei

FirewallRules: [{DAF8DFA5-42B3-4996-8131-A45442A8B151}] => (Allow) c:\program files\ccleaner\ccleaner_update_helper.exe => Keine Datei

FirewallRules: [{CB410229-7263-4023-B13C-9E5E74111CE2}] => (Allow) c:\users\bumbum\appdata\local\fluxsoftware\flux\flux.exe (F.lux Software LLC -> f.lux Software LLC)

FirewallRules: [{512C4F15-036B-4E3F-AE9A-7EA2633E0437}] => (Allow) c:\users\bumbum\appdata\local\fluxsoftware\flux\flux.exe (F.lux Software LLC -> f.lux Software LLC)

FirewallRules: [{834C6818-01E5-45F1-B8B0-E7E52E61F8EA}] => (Allow) c:\program files (x86)\dropbox\update\install\{1a020172-4eb4-456b-a320-0a29463fbd5d}\dropboxclient_161.4.4923.x64.exe => Keine Datei

FirewallRules: [{E00E13A6-6644-47EA-9A12-A5BDF30CE4DB}] => (Allow) c:\program files (x86)\dropbox\update\install\{1a020172-4eb4-456b-a320-0a29463fbd5d}\dropboxclient_161.4.4923.x64.exe => Keine Datei

FirewallRules: [{39D81E51-828B-41A5-A8FF-0158348CC382}] => (Allow) c:\programdata\battle.net\agent\agent.8067\agent.exe => Keine Datei

FirewallRules: [{CB7B0960-C7DA-44CE-BC3F-8BB51CE21E85}] => (Allow) c:\programdata\battle.net\agent\agent.8067\agent.exe => Keine Datei

FirewallRules: [{C0ED629D-0AE5-4436-B08A-3F6BB0E47BB9}] => (Allow) c:\program files\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{4AE8B4D3-8488-412C-BB5D-CB8B036C4635}] => (Allow) c:\program files\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{D94908E5-5346-46CB-9236-F98EF957FA30}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.6-0\msmpeng.exe => Keine Datei

FirewallRules: [{3BD4235D-020B-470A-A4D5-DF55897D5BA6}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2210.6-0\msmpeng.exe => Keine Datei

FirewallRules: [{12661CF3-A97E-4CA0-946A-61260F6FA17C}] => (Allow) c:\program files (x86)\arturia\arturia software center\arturia software center.exe (Arturia SAS -> Arturia)

FirewallRules: [{49E69C2B-26E8-4D39-BCD5-5FA710C89B2F}] => (Allow) c:\program files (x86)\arturia\arturia software center\arturia software center.exe (Arturia SAS -> Arturia)

FirewallRules: [{B27B63A5-1E68-4C77-84A5-624DF319A7B2}] => (Allow) b:\starcraft ii\versions\base89165\sc2_x64.exe => Keine Datei

FirewallRules: [{BEF49971-DE81-4F00-BF21-9F3430BC3ABF}] => (Allow) b:\starcraft ii\versions\base89165\sc2_x64.exe => Keine Datei

FirewallRules: [{94D02BDC-22C7-43D0-AF0B-2427399D0579}] => (Allow) c:\users\bumbum\appdata\local\temp\nsv6c8c.tmp\old-install\signal.exe => Keine Datei

FirewallRules: [{7EA44E2A-66CF-40AC-A678-F53A6C15E886}] => (Allow) c:\users\bumbum\appdata\local\temp\nsv6c8c.tmp\old-install\signal.exe => Keine Datei

FirewallRules: [{9F0DA67E-3F64-43E8-AD63-D600804F63DA}] => (Allow) c:\windows\system32\mousocoreworker.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{2EC8D7C4-B47F-4118-AA7D-3B999FE9B293}] => (Allow) c:\windows\system32\mousocoreworker.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{F58B61EB-F1A6-49F7-B6EC-E3CFDDF2EE81}] => (Allow) c:\windows\system32\taskhostw.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D697155E-1B38-4CA6-81D0-4E3E08A0FDEE}] => (Allow) c:\windows\system32\taskhostw.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{857097F5-0FC7-4777-83E4-8705F819CEBC}] => (Allow) c:\programdata\arturia\arturia software center\temp\updater.exe () [Datei ist nicht signiert]

FirewallRules: [{196B67C6-2206-4EF3-8A14-750A816C30F6}] => (Allow) c:\programdata\arturia\arturia software center\temp\updater.exe () [Datei ist nicht signiert]

FirewallRules: [{EF1FB69F-CA42-44D1-8596-F3AE4D316A5E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{8CE4DFBF-C0C0-4AED-A502-72212AA64F52}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{8C99EB4E-DB23-4569-91EA-1B6FCBBD6FD9}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\95.0.1020.53\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{4AA6E094-BCBB-44D5-B29C-9111FA85137F}] => (Allow) c:\program files (x86)\image-line\fl studio 21\fl64.exe (Image Line -> Image-Line)

FirewallRules: [{C29F0079-97D7-4331-A135-6ED93E81B7B8}] => (Allow) c:\program files (x86)\image-line\fl studio 21\fl64.exe (Image Line -> Image-Line)

FirewallRules: [{7EB616A8-8D22-48DD-873A-B4423973C94E}] => (Allow) c:\program files (x86)\image-line\fl studio 21\system\tools\bridge\64bit\ilbridge.exe (Image Line -> Image-Line)

FirewallRules: [{26E157DB-941F-4C02-84C8-61510C165E92}] => (Allow) c:\program files (x86)\image-line\fl studio 21\system\tools\bridge\64bit\ilbridge.exe (Image Line -> Image-Line)

FirewallRules: [{C01E308E-D481-4552-940A-26F41FBF909A}] => (Allow) c:\programdata\waves audio\modules\waveslicenseengine.bundle\contents\win32\curl.exe (curl, hxxps://curl.haxx.se/) [Datei ist nicht signiert]

FirewallRules: [{BBF7D437-0322-4F38-842B-C620426478C1}] => (Allow) c:\programdata\waves audio\modules\waveslicenseengine.bundle\contents\win32\curl.exe (curl, hxxps://curl.haxx.se/) [Datei ist nicht signiert]

FirewallRules: [{871DC94E-2325-420E-923B-E74BC113347C}] => (Block) c:\program files (x86)\microsoft\edgewebview\application\95.0.1020.53\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{891BE310-91F1-406C-9958-88CBD79E03A5}] => (Block) c:\program files (x86)\microsoft\edgewebview\application\95.0.1020.53\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{F3955B01-4FB0-4907-8EBB-2C12EA7CB6FE}] => (Allow) c:\users\bumbum\appdata\local\relayrecorder\app-2.0.11\relayrecorder.exe (TechSmith Corporation -> TechSmith Corporation)

FirewallRules: [{D9467561-82D9-4592-A4CF-B75A5A5120E0}] => (Allow) c:\users\bumbum\appdata\local\relayrecorder\app-2.0.11\relayrecorder.exe (TechSmith Corporation -> TechSmith Corporation)

FirewallRules: [{902A94ED-E6C0-4572-A8E9-C8B7C9568687}] => (Allow) e:\portableapps\portableapps.com\portableappsupdater.exe => Keine Datei

FirewallRules: [{97730C9C-692A-44B7-81E5-923CAAC1E001}] => (Allow) e:\portableapps\portableapps.com\portableappsupdater.exe => Keine Datei

FirewallRules: [{B7FAFA07-4AC5-4836-98F8-6266E43B2978}] => (Allow) e:\portableapps\googlechromeportable\app\chrome-bin\chrome.exe => Keine Datei

FirewallRules: [{2B90848F-2184-420B-A8BF-07F320388BFB}] => (Allow) e:\portableapps\googlechromeportable\app\chrome-bin\chrome.exe => Keine Datei

FirewallRules: [{9403F8EC-A679-4C16-8136-9B63CC4A12C8}] => (Allow) c:\users\bumbum\appdata\local\temp\nsva1db.tmp\autorunsportable_14.09_rev_2_english_online.paf.exe => Keine Datei

FirewallRules: [{CEBE4B86-1AB9-446D-9300-5ACF94AD8A4E}] => (Allow) c:\users\bumbum\appdata\local\temp\nsva1db.tmp\autorunsportable_14.09_rev_2_english_online.paf.exe => Keine Datei

FirewallRules: [{6803B2B1-6653-491F-B1B9-6C50BA0CE763}] => (Allow) c:\program files\malwarebytes\anti-malware\mbam.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{EC13EFBB-81D5-435C-B7FD-93BA68BE8036}] => (Allow) c:\program files\malwarebytes\anti-malware\mbam.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{E2CEE32B-B7D9-40FF-8727-CB7E52A8D47C}] => (Allow) c:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)

FirewallRules: [{1B2BF35A-B46B-4EED-9F1A-5BF7848459FD}] => (Allow) c:\program files\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)

FirewallRules: [{3B3FADAA-A4BC-465C-A10D-05A4E7A5F74C}] => (Allow) c:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (Hugh Bailey -> )

FirewallRules: [{372AD14E-EB2A-4383-8DDD-B7A5166D0C01}] => (Allow) c:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (Hugh Bailey -> )

FirewallRules: [{5A8DB1D7-5B10-4F28-B2BB-0937374E6337}] => (Allow) c:\program files (x86)\izotope\updater\izotope updater.exe (iZotope, Inc.) [Datei ist nicht signiert]

FirewallRules: [{7FE279BB-F382-4A6C-9D78-7F68C452E498}] => (Allow) c:\program files (x86)\izotope\updater\izotope updater.exe (iZotope, Inc.) [Datei ist nicht signiert]

FirewallRules: [{806B232B-8977-4C55-B1EA-5B50A887BDB3}] => (Allow) c:\program files\bitwig studio\4.4.3\bitwig studio.exe (Bitwig GmbH -> Bitwig GmbH)

FirewallRules: [{1D5AB100-142F-43F7-914E-7345A8B8F049}] => (Allow) c:\program files\bitwig studio\4.4.3\bitwig studio.exe (Bitwig GmbH -> Bitwig GmbH)

FirewallRules: [{CEDB4862-02CA-40D4-9609-90DCEC00C4DA}] => (Allow) c:\program files\bitwig studio\4.4.3\bin\bitwigpluginhost-x64-sse41.exe (Bitwig GmbH -> Bitwig GmbH)

FirewallRules: [{8F388507-C590-4083-B2AC-B3144163728F}] => (Allow) c:\program files\bitwig studio\4.4.3\bin\bitwigpluginhost-x64-sse41.exe (Bitwig GmbH -> Bitwig GmbH)

FirewallRules: [{20BFA707-737D-4539-B7D5-A7DFB32B5FF3}] => (Allow) c:\users\bumbum\appdata\roaming\wow\wow\wow.exe (Sky International AG -> WOW)

FirewallRules: [{D8355AE3-5AED-456C-A588-A597FE792F65}] => (Allow) c:\users\bumbum\appdata\roaming\wow\wow\wow.exe (Sky International AG -> WOW)

FirewallRules: [{2C45BB46-C427-4984-9AAE-3B9EE46D7FB9}] => (Allow) c:\users\bumbum\appdata\roaming\obs-studio\updates\updater.exe (Hugh Bailey -> obsproject.com)

FirewallRules: [{C16CBAC3-3D6A-471D-960B-7858F4A1F07D}] => (Allow) c:\users\bumbum\appdata\roaming\obs-studio\updates\updater.exe (Hugh Bailey -> obsproject.com)

FirewallRules: [{7D88C2B0-9895-4116-893D-FFB93665E141}] => (Allow) c:\program files (x86)\credland\radio\radio.exe (Plugin Boutique) [Datei ist nicht signiert]

FirewallRules: [{215AEF2D-3824-4BE1-9CAB-2E8F6638CFEB}] => (Allow) c:\program files (x86)\credland\radio\radio.exe (Plugin Boutique) [Datei ist nicht signiert]

FirewallRules: [{9C6AE4AE-B30C-401A-8470-C46D98C4ADF3}] => (Allow) c:\program files\affinity\designer\crashpad_handler.exe (Serif (Europe) Ltd -> )

FirewallRules: [{820AEEA5-83CE-4660-B878-DE00ED2530A0}] => (Allow) c:\program files\affinity\designer\crashpad_handler.exe (Serif (Europe) Ltd -> )

FirewallRules: [{A8B062CC-1D54-4DB8-AB17-3DA9A9562B5F}] => (Allow) c:\program files (x86)\dropbox\update\install\{bbe57cc6-3657-40a6-a27d-df3bbc6da0cb}\dropboxclient_162.4.5419.x64.exe => Keine Datei

FirewallRules: [{E1538435-9D65-4928-9CF6-92FEE995F480}] => (Allow) c:\program files (x86)\dropbox\update\install\{bbe57cc6-3657-40a6-a27d-df3bbc6da0cb}\dropboxclient_162.4.5419.x64.exe => Keine Datei

FirewallRules: [{E075F051-AA89-43EC-8563-BA412E57E583}] => (Allow) c:\users\bumbum\appdata\local\bravesoftware\brave-browser\user data\cpoalefficncklhjfpglfiplenlpccdb\1.0.29\tor-0.4.7.10-win32-brave-2 (Brave Software, Inc. -> )

FirewallRules: [{A7450A48-3958-4F0A-91C3-431FC8DD0C83}] => (Allow) c:\users\bumbum\appdata\local\bravesoftware\brave-browser\user data\cpoalefficncklhjfpglfiplenlpccdb\1.0.29\tor-0.4.7.10-win32-brave-2 (Brave Software, Inc. -> )

FirewallRules: [{078096D5-2B3F-443C-A629-47E1BC3079D7}] => (Allow) c:\program files\eraser\eraser.exe (Heidi Computers Ltd -> The Eraser Project)

FirewallRules: [{A4F04C35-4B84-48AB-9860-A0A0139FD0AF}] => (Allow) c:\program files\eraser\eraser.exe (Heidi Computers Ltd -> The Eraser Project)

FirewallRules: [{D3106FB2-0AC0-4BFE-82C2-BF4D8E0FAD7A}] => (Allow) c:\program files\paint.net\paintdotnet.exe (DOTPDN LLC -> )

FirewallRules: [{87BFA93E-6299-4086-A8E5-E15A92B88F59}] => (Allow) c:\program files\paint.net\paintdotnet.exe (DOTPDN LLC -> )

FirewallRules: [{C740E1B4-5ECE-4CB2-9316-CE1475FB1EA5}] => (Allow) c:\program files (x86)\common files\pace\services\licenseservices\ldsvc.exe (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.)

FirewallRules: [{C9DF6729-C396-4DFF-AB0E-14DE5F5E3871}] => (Allow) c:\program files (x86)\common files\pace\services\licenseservices\ldsvc.exe (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.)

FirewallRules: [{D962114E-BBCB-4B47-99C9-B4D792223CFC}] => (Block) c:\program files (x86)\microsoft\edge\application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{63BCF04E-7604-4C0C-9E26-3A145F6AFA93}] => (Block) c:\program files (x86)\microsoft\edge\application\msedge.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{064FE564-F5F5-4BB1-BE0C-A5A98C885E1A}] => (Allow) c:\windows\system32\msiexec.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{1386182C-5A64-49CF-BD5B-F05AF820E9BD}] => (Allow) c:\windows\system32\msiexec.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{96AFDD11-E772-4EAA-8FF8-D2693F9FF5F1}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2211.5-0\msmpeng.exe => Keine Datei

FirewallRules: [{8498E496-F480-45CB-8B93-B5498E963CB9}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2211.5-0\msmpeng.exe => Keine Datei

FirewallRules: [{1B151C41-37C0-43EE-B136-329687FD4B86}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\discord.exe => Keine Datei

FirewallRules: [{C9BA94F9-E409-4B3D-AFA3-820735493169}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\discord.exe => Keine Datei

FirewallRules: [{6A9CC91E-7586-45E2-8670-021ACB7B0B12}] => (Allow) c:\program files (x86)\dropbox\update\install\{e0e90a53-33c2-4089-ac25-72cc65d9a3bc}\dropboxclient_163.4.5456.x64.exe => Keine Datei

FirewallRules: [{A727D45F-49D4-4524-83DE-5F110CD7FC17}] => (Allow) c:\program files (x86)\dropbox\update\install\{e0e90a53-33c2-4089-ac25-72cc65d9a3bc}\dropboxclient_163.4.5456.x64.exe => Keine Datei

FirewallRules: [{D4CD8B16-0C7F-4482-A825-703DB8162716}] => (Allow) c:\programdata\battle.net\agent\agent.8093\agent.exe => Keine Datei

FirewallRules: [{742BD3A5-B15C-419E-9FF4-DB83CA51BFCA}] => (Allow) c:\programdata\battle.net\agent\agent.8093\agent.exe => Keine Datei

FirewallRules: [{42E8296C-B658-490A-A9B9-996455DE4B5B}] => (Allow) c:\program files\vcv\rack2pro\rack.exe () [Datei ist nicht signiert]

FirewallRules: [{72897A1E-943F-4BDD-A08E-3A8D9DBA224C}] => (Allow) c:\program files\vcv\rack2pro\rack.exe () [Datei ist nicht signiert]

FirewallRules: [{173CFB4F-19CF-4705-A608-3DE52D4C1F4E}] => (Allow) e:\portableapps\qtoxportable\app\qtox\qtox.exe => Keine Datei

FirewallRules: [{E8D959E4-0E98-4D02-BDF0-0B201CCF042D}] => (Allow) e:\portableapps\qtoxportable\app\qtox\qtox.exe => Keine Datei

FirewallRules: [{21149A4C-6A3D-417D-97E2-115E95B69507}] => (Block) e:\portableapps\keepassportable2.4\keepass.exe => Keine Datei

FirewallRules: [{98B9BFF9-B0EC-496E-9E45-31B4C1DB8BAA}] => (Block) e:\portableapps\keepassportable2.4\keepass.exe => Keine Datei

FirewallRules: [{9F91BF60-AE76-4850-9D12-3AF788111470}] => (Allow) t:\xxfolder\production\plugins\flux\fluxcenter.app\contents\x64\fluxcenter-x64.exe (Flux:: sound and picture development) [Datei ist nicht signiert]

FirewallRules: [{79720347-8B89-47BC-B70A-A690387BF12D}] => (Allow) t:\xxfolder\production\plugins\flux\fluxcenter.app\contents\x64\fluxcenter-x64.exe (Flux:: sound and picture development) [Datei ist nicht signiert]

FirewallRules: [{3BE8FB63-4540-4B07-8573-BECEA1C1622C}] => (Allow) c:\users\bumbum\appdata\local\temp\nss9e19.tmp\curl32.exe => Keine Datei

FirewallRules: [{77B1A078-A882-4EF1-8AB1-57D3F2C2371D}] => (Allow) c:\users\bumbum\appdata\local\temp\nss9e19.tmp\curl32.exe => Keine Datei

FirewallRules: [{25A64EDF-D799-4A83-93F3-8A7D76A82067}] => (Allow) c:\users\bumbum\appdata\local\squirreltemp\update.exe => Keine Datei

FirewallRules: [{B9BBC32D-0A89-4379-B0A3-7B90268E68E0}] => (Allow) c:\users\bumbum\appdata\local\squirreltemp\update.exe => Keine Datei

FirewallRules: [{73AF679E-7146-481D-B5BC-E86036434DC4}] => (Allow) c:\program files (x86)\dropbox\update\install\{8c63f79e-b13b-4f79-a1d6-5338ae13f2e5}\dropboxclient_164.4.7914.x64.exe => Keine Datei

FirewallRules: [{26F30885-6E4A-49C4-BD13-B5900249D4C0}] => (Allow) c:\program files (x86)\dropbox\update\install\{8c63f79e-b13b-4f79-a1d6-5338ae13f2e5}\dropboxclient_164.4.7914.x64.exe => Keine Datei

FirewallRules: [{4ADC8D13-C715-4CF2-88AE-136773247BFD}] => (Allow) c:\program files (x86)\dropbox\update\install\{b9162a45-f7aa-4da0-ae96-4d776c5b09e3}\dropboxclient_165.4.4300.x64.exe => Keine Datei

FirewallRules: [{C15FAC61-BF2C-4116-9646-CC8C18107EAA}] => (Allow) c:\program files (x86)\dropbox\update\install\{b9162a45-f7aa-4da0-ae96-4d776c5b09e3}\dropboxclient_165.4.4300.x64.exe => Keine Datei

FirewallRules: [{EF22A711-3F59-46C1-BBCB-9511A06CC57F}] => (Allow) c:\users\bumbum\appdata\local\temp\7zs4cb2bc1a\x64\setupfrontend.exe => Keine Datei

FirewallRules: [{31D33AEF-FAA8-4213-A994-9CA7A733329C}] => (Allow) c:\users\bumbum\appdata\local\temp\7zs4cb2bc1a\x64\setupfrontend.exe => Keine Datei

FirewallRules: [{D455A9BC-21DD-4567-B360-2894D052581E}] => (Allow) c:\users\bumbum\appdata\local\carnac\app-2.3.13\carnac.exe () [Datei ist nicht signiert]

FirewallRules: [{86131A37-4D26-411F-ACB2-2379354BEBE7}] => (Allow) c:\users\bumbum\appdata\local\carnac\app-2.3.13\carnac.exe () [Datei ist nicht signiert]

FirewallRules: [{399D93E9-A136-47D2-8CDF-44A94BA81308}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\modules\discord_hook-1\discord_hook\d07f021492a\discordhookhelper.exe => Keine Datei

FirewallRules: [{8C282D82-7AE5-4041-91BE-CBD0641AB34F}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\modules\discord_hook-1\discord_hook\d07f021492a\discordhookhelper.exe => Keine Datei

FirewallRules: [{DAF634F9-998B-4204-8602-8EABA7CB67FE}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\modules\discord_hook-1\discord_hook\d07f021492a\discordhookhelper64.exe => Keine Datei

FirewallRules: [{FB52085B-8D21-4F16-9A70-0B3A5C35374A}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9008\modules\discord_hook-1\discord_hook\d07f021492a\discordhookhelper64.exe => Keine Datei

FirewallRules: [{288A5F44-D3A1-4356-ADA5-7DB046FFAD59}] => (Block) c:\windows\system32\devicecensus.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{762115B1-02D9-4A29-A557-DDA3B20C1D8A}] => (Block) c:\windows\system32\devicecensus.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{60B05990-FA28-462F-94C3-ADB96FB747C7}] => (Allow) c:\program files (x86)\draw.io\draw.io.exe (JGraph Ltd -> JGraph)

FirewallRules: [{E165065E-AC01-47C8-9CB7-571A0D12C239}] => (Allow) c:\program files (x86)\draw.io\draw.io.exe (JGraph Ltd -> JGraph)

FirewallRules: [{3B17B5EF-009F-47DC-8686-2085BC240E21}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9010\discord.exe => Keine Datei

FirewallRules: [{1E345B95-D9C8-43FA-99F2-4E0941E2F26E}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9010\discord.exe => Keine Datei

FirewallRules: [{EB0E6B82-4991-40F6-B43E-ADA188AE2608}] => (Allow) c:\users\bumbum\appdata\local\temp\nsrc04e.tmp\curl32.exe => Keine Datei

FirewallRules: [{04C0E981-F0EE-4F7E-9B3E-3253A679DC1D}] => (Allow) c:\users\bumbum\appdata\local\temp\nsrc04e.tmp\curl32.exe => Keine Datei

FirewallRules: [{096E68C0-DEBC-4D50-94EA-1281A2CE156F}] => (Allow) powershell.exe => Keine Datei

FirewallRules: [{FE8ADA9C-8F8A-4309-B42D-0DDC1CC220DB}] => (Allow) powershell.exe => Keine Datei

FirewallRules: [{173B25B2-7903-4B6A-B5F6-7072998E3389}] => (Allow) c:\program files (x86)\dropbox\update\install\{9c49e4e3-d938-406b-b979-7c9c053fd8bc}\dropboxclient_166.4.2920.x64.exe => Keine Datei

FirewallRules: [{A0551481-C42B-43BD-8EB6-C150A8FD3202}] => (Allow) c:\program files (x86)\dropbox\update\install\{9c49e4e3-d938-406b-b979-7c9c053fd8bc}\dropboxclient_166.4.2920.x64.exe => Keine Datei

FirewallRules: [{D7D7CEB1-CEA5-4488-8B6B-E899D975B4C6}] => (Allow) c:\program files\windowsapps\microsoft.windbg_1.2210.3001.0_x64__8wekyb3d8bbwe\amd64\enghost.exe (Microsoft Corporation -> )

FirewallRules: [{CADBA902-28B2-4F7C-A66E-84C4A4E92669}] => (Allow) c:\program files\windowsapps\microsoft.windbg_1.2210.3001.0_x64__8wekyb3d8bbwe\amd64\enghost.exe (Microsoft Corporation -> )

FirewallRules: [{2515B43D-ED5C-4391-8C9C-676DFA8F6E1D}] => (Allow) c:\program files (x86)\dropbox\update\install\{5e8d5d4c-3077-4e5f-8061-58e55517e7e2}\dropboxclient_167.4.4719.x64.exe => Keine Datei

FirewallRules: [{BF2125C7-D117-4FB5-AE5F-092E1D6C19A0}] => (Allow) c:\program files (x86)\dropbox\update\install\{5e8d5d4c-3077-4e5f-8061-58e55517e7e2}\dropboxclient_167.4.4719.x64.exe => Keine Datei

FirewallRules: [{3451BF6C-739D-447E-974D-FDC104D51466}] => (Allow) c:\program files\rockstar games\launcher\rockstarservice.exe (Rockstar Games, Inc. -> Rockstar Games) [Datei ist nicht signiert]

FirewallRules: [{1B372D21-30F0-4E0C-9D04-52FF74AD2604}] => (Allow) c:\program files\rockstar games\launcher\rockstarservice.exe (Rockstar Games, Inc. -> Rockstar Games) [Datei ist nicht signiert]

FirewallRules: [{FFF88A95-70FA-481B-8460-717358643356}] => (Allow) c:\program files\windowsapps\microsoft.windowsalarms_11.2212.2.0_x64__8wekyb3d8bbwe\time.exe => Keine Datei

FirewallRules: [{23B65A3E-2A29-4EC9-BD1C-C5B13F8ABF1B}] => (Allow) c:\program files\windowsapps\microsoft.windowsalarms_11.2212.2.0_x64__8wekyb3d8bbwe\time.exe => Keine Datei

FirewallRules: [{17AECC21-AD40-4DFD-BE11-58244AC022B0}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2301.6-0\msmpeng.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{DC855096-A295-4956-BA8B-075F4F1112F6}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2301.6-0\msmpeng.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{21F440B0-6BE4-4B34-846D-E8C2D15136A1}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9011\discord.exe => Keine Datei

FirewallRules: [{46014696-0983-4050-8710-326F3811A028}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9011\discord.exe => Keine Datei

FirewallRules: [{3585F654-4897-46B3-A3C8-629D71FBBECC}] => (Allow) c:\windows\system32\backgroundtransferhost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{ECB6A317-5612-4F48-BBB2-D0EAFFF8BEDC}] => (Allow) c:\windows\system32\backgroundtransferhost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{C7DD5FBC-1A61-4B7B-AD96-3FA10E0D3B04}] => (Block) c:\windows\system32\compattelrunner.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{86E0A050-AF9D-459A-9988-F24F513ECAC7}] => (Block) c:\windows\system32\compattelrunner.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{47E3AA83-7906-4934-9755-E961A9DBDCFD}] => (Allow) c:\program files (x86)\dropbox\update\install\{a1fc1b85-69e3-4f22-bfc8-0ea06fec9558}\dropboxclient_168.4.4802.x64.exe => Keine Datei

FirewallRules: [{A816A97B-44D6-4F2D-8D4C-C6EA90F9921E}] => (Allow) c:\program files (x86)\dropbox\update\install\{a1fc1b85-69e3-4f22-bfc8-0ea06fec9558}\dropboxclient_168.4.4802.x64.exe => Keine Datei

FirewallRules: [{85837911-54C4-474C-9EBA-CD1B6703D9BA}] => (Allow) c:\users\bumbum\appdata\local\temp\7zs8d92a507\x64\setupfrontend.exe => Keine Datei

FirewallRules: [{095D14BC-1629-43C2-A5E9-CE650D187AF5}] => (Allow) c:\users\bumbum\appdata\local\temp\7zs8d92a507\x64\setupfrontend.exe => Keine Datei

FirewallRules: [{FA8606BD-BD24-4DF2-ADB2-4068D8613AD2}] => (Allow) c:\program files (x86)\ilok license manager\ilok license manager.exe (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.)

FirewallRules: [{D44D2919-B12A-4E8A-B7DF-24F946FE320A}] => (Allow) c:\program files (x86)\ilok license manager\ilok license manager.exe (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.)

FirewallRules: [{7547D8DA-2CE3-4D1D-ACF1-D81BF54F3303}] => (Allow) c:\program files\hwinfo64\hwinfo64.exe (Martin Malik - REALiX -> REALiX)

FirewallRules: [{AFDE6121-97D1-4841-BA48-2007F4C56F2C}] => (Allow) c:\program files\hwinfo64\hwinfo64.exe (Martin Malik - REALiX -> REALiX)

FirewallRules: [{2B49AA3E-78CC-489C-A3D3-6C53E58961FD}] => (Block) c:\windows\system32\wwahost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{632C89D0-D89D-4C8E-A071-998BD2C6EE67}] => (Block) c:\windows\system32\wwahost.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{1FCEA0C4-19B8-4A4D-84D6-1D0902D0B0C8}] => (Allow) c:\users\bumbum\miniconda3\python.exe => Keine Datei

FirewallRules: [{9952E957-590A-4C47-9BDA-4A757DDFAE95}] => (Allow) c:\users\bumbum\miniconda3\python.exe => Keine Datei

FirewallRules: [{2F06AE4A-C6FF-4BE5-874B-1BB66E28C96F}] => (Allow) c:\program files\qbittorrent\qbittorrent.exe (The qBittorrent Project) [Datei ist nicht signiert]

FirewallRules: [{7732BE95-C75D-462E-AB78-9706A3634863}] => (Allow) c:\program files\qbittorrent\qbittorrent.exe (The qBittorrent Project) [Datei ist nicht signiert]

FirewallRules: [{B55F7FE8-F9F9-4FEB-A9DC-0044B2F3C537}] => (Allow) c:\program files (x86)\dropbox\update\install\{ad583d50-44d8-4551-8fb7-4646836a0591}\dropboxclient_169.4.5684.x64.exe => Keine Datei

FirewallRules: [{67A6CEF2-9318-4B93-A34B-ABEBE421416F}] => (Allow) c:\program files (x86)\dropbox\update\install\{ad583d50-44d8-4551-8fb7-4646836a0591}\dropboxclient_169.4.5684.x64.exe => Keine Datei

FirewallRules: [{B7737288-FAFF-4348-824B-DB12E2E90F52}] => (Allow) c:\programdata\arturiasc\arturia software center\temp\updater.exe () [Datei ist nicht signiert]

FirewallRules: [{E56A93C9-A711-4F31-A331-B0810020D308}] => (Allow) c:\programdata\arturiasc\arturia software center\temp\updater.exe () [Datei ist nicht signiert]

FirewallRules: [{5C9592FA-3C10-425F-B4A9-521C8258DDCA}] => (Allow) c:\program files\izotope\product portal\x64\izotope product portal.exe (iZotope, Inc.) [Datei ist nicht signiert]

FirewallRules: [{5CF7A624-3554-4422-A78D-E0BF82131F6B}] => (Allow) c:\program files\izotope\product portal\x64\izotope product portal.exe (iZotope, Inc.) [Datei ist nicht signiert]

FirewallRules: [{E255E47E-0F0D-4832-AD22-B49350848162}] => (Allow) c:\program files\ccleaner\ccupdate610_free.exe => Keine Datei

FirewallRules: [{AD24395D-39FF-45D6-BEFD-AAE2AC561690}] => (Allow) c:\program files\ccleaner\ccupdate610_free.exe => Keine Datei

FirewallRules: [{DCC96045-FCD9-4B94-84D9-8BB2B0F2438D}] => (Allow) c:\program files (x86)\dropbox\update\install\{0200846b-326f-4e8e-864b-8ca1483a6f78}\dropboxclient_170.4.5895.x64.exe => Keine Datei

FirewallRules: [{54109BA5-8902-4FC7-8CA1-395CFCA39798}] => (Allow) c:\program files (x86)\dropbox\update\install\{0200846b-326f-4e8e-864b-8ca1483a6f78}\dropboxclient_170.4.5895.x64.exe => Keine Datei

FirewallRules: [{9654D66A-E031-414D-BA54-A4BC4D8B0AF5}] => (Allow) c:\program files (x86)\western digital\ssd dashboard\qtwebengineprocess.exe (The Qt Company Oy -> The Qt Company Ltd.)

FirewallRules: [{7EA7C0AE-8D33-401F-B7B2-C5B8CEF06E5E}] => (Allow) c:\program files (x86)\western digital\ssd dashboard\qtwebengineprocess.exe (The Qt Company Oy -> The Qt Company Ltd.)

FirewallRules: [{119F25A7-EF29-469F-9059-644E5AF86EE1}] => (Allow) c:\program files (x86)\western digital\ssd dashboard\dashboard.exe (WESTERN DIGITAL CORPORATION -> )

FirewallRules: [{BB8419A6-9E64-4265-951F-372B28429B02}] => (Allow) c:\program files (x86)\western digital\ssd dashboard\dashboard.exe (WESTERN DIGITAL CORPORATION -> )

FirewallRules: [{13A100CE-CE0E-44A2-B4D0-81B8EADE0923}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2302.7-0\msmpeng.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{6B7256DA-2C7F-46F8-857A-8EE51C2CC40F}] => (Allow) c:\programdata\microsoft\windows defender\platform\4.18.2302.7-0\msmpeng.exe (Microsoft Windows Publisher -> Microsoft Corporation)

FirewallRules: [{EDCE7CA3-E8D7-4F58-8E51-64E5E3FB4BC2}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{7BC20353-2AB9-40FF-9C04-0014790FB936}] => (Allow) C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

FirewallRules: [{3701092E-BF80-44A9-AB12-9FA3EC25DDAC}] => (Allow) C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

FirewallRules: [{C47EFACD-22EA-4666-AABC-D0EB33AB6925}] => (Allow) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{B97091C1-007A-4D46-94E3-6A0B441B046D}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)

FirewallRules: [{4093A301-9AB6-44EB-976D-C0305270C11B}] => (Allow) c:\program files (x86)\dropbox\update\install\{504a1bfb-26d3-4c06-9401-0b34f255276d}\dropboxclient_171.4.6182.x64.exe => Keine Datei

FirewallRules: [{6821550B-21EB-40DE-9B8C-4E3585336CC4}] => (Allow) c:\program files (x86)\dropbox\update\install\{504a1bfb-26d3-4c06-9401-0b34f255276d}\dropboxclient_171.4.6182.x64.exe => Keine Datei

FirewallRules: [{334DFA24-4B4B-428F-AC43-332450FF6143}] => (Allow) c:\windows\system32\waasmedicagent.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{2673D956-CD6B-4A6A-9245-86980A396010}] => (Allow) c:\windows\system32\waasmedicagent.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{92D98316-9909-4E09-A0D5-D965C4EEC5F2}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\discord.exe (Discord Inc. -> Discord Inc.)

FirewallRules: [{D7261EDB-C425-46A5-B33D-CB181462A3EF}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\discord.exe (Discord Inc. -> Discord Inc.)

FirewallRules: [{45F73E7D-2E4F-4971-A547-6D316386E28C}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\modules\discord_hook-1\discord_hook\f2b79ae5d10\discordhookhelper.exe (Discord Inc. -> )

FirewallRules: [{7DB20350-4EEE-47FD-BF48-410DBB5ED530}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\modules\discord_hook-1\discord_hook\f2b79ae5d10\discordhookhelper.exe (Discord Inc. -> )

FirewallRules: [{0DD597FC-66E3-47A9-BAB2-D088B769064E}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\modules\discord_hook-1\discord_hook\f2b79ae5d10\discordhookhelper64.exe (Discord Inc. -> )

FirewallRules: [{A0CF6F08-E842-4355-8EB5-306C5C4A9DE3}] => (Allow) c:\users\bumbum\appdata\local\discord\app-1.0.9012\modules\discord_hook-1\discord_hook\f2b79ae5d10\discordhookhelper64.exe (Discord Inc. -> )

FirewallRules: [{403383F0-18E4-4CC0-96F9-3DFD7515E8EF}] => (Allow) c:\program files\techsmith\camtasia 2019\camtasiastudio.exe (TechSmith Corporation -> TechSmith Corporation)

FirewallRules: [{5FD1432E-8619-4EB8-8789-0D1806FE0FDD}] => (Allow) c:\program files\techsmith\camtasia 2019\camtasiastudio.exe (TechSmith Corporation -> TechSmith Corporation)

FirewallRules: [{6A155DAB-A77F-431A-9725-4C7B6B02ED96}] => (Allow) C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

FirewallRules: [{E480D8A9-B2CA-4E65-B803-6CD9C3B0F565}] => (Allow) C:\Program Files (x86)\MiniTool ShadowMaker\AgentService.exe (MiniTool Software Limited -> )

FirewallRules: [{3C65766B-1DFE-4A83-98BA-FF6AB86D9B5D}] => (Allow) c:\program files\sandboxie\sbiectrl.exe (Tonalio GmbH -> Sandboxie-Plus.com)

FirewallRules: [{E9C0A0AC-17B0-46D9-95BE-766FBAC8C39A}] => (Allow) c:\program files\sandboxie\sbiectrl.exe (Tonalio GmbH -> Sandboxie-Plus.com)

FirewallRules: [{2AFE3141-516F-44C4-BA8E-282056619950}] => (Allow) t:\xxfolder\downloads\mbsetup.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{938A1B15-AC9A-4A69-BFA6-E219CCF55450}] => (Allow) t:\xxfolder\downloads\mbsetup.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{DDE82D69-5E69-4DAE-9217-1DB7421C3061}] => (Allow) c:\program files\malwarebytes\anti-malware\mbaminstallerservice.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{4274891E-50F2-4B4A-931B-9CBBB60DAE2D}] => (Allow) c:\program files\malwarebytes\anti-malware\mbaminstallerservice.exe (Malwarebytes Inc. -> Malwarebytes)

FirewallRules: [{BE701EA8-CD6C-4915-B57B-7E43F360AE1C}] => (Allow) t:\xxfolder\downloads\frst64.exe (Farbar) [Datei ist nicht signiert]

FirewallRules: [{D195ED5B-4C08-40B4-BECC-1C7D1F1B0336}] => (Allow) t:\xxfolder\downloads\frst64.exe (Farbar) [Datei ist nicht signiert]
 

==================== Wiederherstellungspunkte =========================
 

10-04-2023 19:28:02 Removed Oracle VM VirtualBox 6.1.36

10-04-2023 19:35:25 Installed Oracle VM VirtualBox 7.0.6
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (04/10/2023 08:14:18 PM) (Source: Windows Search Service) (EventID: 1019) (User: )

Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-605212111-1861643219-2958236025-1001}/">.
 

Error: (04/10/2023 07:52:44 PM) (Source: Windows Search Service) (EventID: 1019) (User: )

Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-605212111-1861643219-2958236025-1001}/">.
 

Error: (04/10/2023 07:25:57 PM) (Source: Windows Search Service) (EventID: 1019) (User: )

Description: Die Liste der eingeschlossenen und ausgeschlossenen Adressen konnte vvon Windows Search nicht verarbeitet werden. Fehler: <30, 0x80040d07, "iehistory://{S-1-5-21-605212111-1861643219-2958236025-1001}/">.
 

Error: (04/10/2023 07:24:54 PM) (Source: NIHardwareService) (EventID: 259) (User: )

Description: MIDIDevice: Unable to unlock BMIDI DLL/driver
 

Error: (04/10/2023 06:09:54 PM) (Source: NIHardwareService) (EventID: 259) (User: )

Description: MIDIDevice: Unable to unlock BMIDI DLL/driver
 

Error: (04/10/2023 10:04:26 AM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.

.
 

Error: (04/10/2023 10:04:26 AM) (Source: VSS) (EventID: 13) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.

]
 

Error: (04/10/2023 05:12:07 AM) (Source: MOTU_ZeroConf Service) (EventID: 100) (User: )

Description: Local Hostname DESKTOP-ABCD.local already in use; will try DESKTOP-ABCD-2.local instead
 
 

Systemfehler:

=============

Error: (04/10/2023 07:25:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "asComSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
 

Error: (04/10/2023 07:25:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst asComSvc erreicht.
 

Error: (04/10/2023 07:24:54 PM) (Source: Service Control Manager) (EventID: 7003) (User: )

Description: Der Dienst "Razer Synapse Service" ist von folgendem Dienst abhängig: RzActionSvc. Dieser Dienst ist möglicherweise nicht installiert.
 

Error: (04/10/2023 07:24:43 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 124) (User: NT-AUTORITÄT)

Description: 03225747456
 

Error: (04/10/2023 07:24:43 PM) (Source: Microsoft-Windows-Hyper-V-Hypervisor) (EventID: 41) (User: NT-AUTORITÄT)

Description: Hypervisor launch failed; Either VMX not present or not enabled in BIOS.
 

Error: (04/10/2023 07:10:07 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "DNSCrypt client proxy" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (04/10/2023 06:10:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "asComSvc" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.
 

Error: (04/10/2023 06:10:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst asComSvc erreicht.
 
 

Windows Defender:

================

Date: 2023-04-08 17:14:52

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {-}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2023-04-08 06:05:27

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {-}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2023-04-07 19:14:03

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {-}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2023-04-06 17:23:56

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {-}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM
 

Date: 2023-04-03 15:46:48

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.

Überprüfungs-ID: {-}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Schnellüberprüfung

Benutzer: NT-AUTORITÄT\SYSTEM



CodeIntegrity:

===============

Date: 2023-04-10 20:09:31

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume8\Program Files\Mozilla Firefox\firefox.exe) attempted to load \Device\HarddiskVolume8\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements.
 

Date: 2022-02-23 07:40:34

Description: 

Windows is unable to verify the image integrity of the file \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. 1603 08/15/2014

Hauptplatine: ASUSTeK COMPUTER INC. MAXIMUS VI GENE

Prozessor: Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

Prozentuale Nutzung des RAM: 43%

Installierter physikalischer RAM: 16320.17 MB

Verfügbarer physikalischer RAM: 9175.39 MB

Summe virtueller Speicher: 24512.17 MB

Verfügbarer virtueller Speicher: 14247.13 MB
 

==================== Laufwerke ================================
 

Drive b: () (Fixed) (Total:232.87 GB) (Free:200.97 GB) (Model:) NTFS

Drive c: () (Fixed) (Total:237.26 GB) (Free:48.7 GB) (Model:) NTFS

Drive d: () (Fixed) (Total:232.88 GB) (Free:125.79 GB) (Model:) NTFS

Drive g: () (Fixed) (Total:465.76 GB) (Free:339.77 GB) (Model:) NTFS

Drive h: () (Fixed) (Total:3725.9 GB) (Free:1276.67 GB) (Model:) NTFS

Drive t: () (Fixed) (Total:931.51 GB) (Free:367.06 GB) (Model:) NTFS
 

\\?\Volume{5760dc3f}\ () (Fixed) (Total:0.53 GB) (Free:0.08 GB) NTFS

\\?\Volume{5760dc40}\ () (Fixed) (Total:0.58 GB) (Free:0.08 GB) NTFS

\\?\Volume{9872022f}\ () (Fixed) (Total:0.5 GB) (Free:0.49 GB) FAT32

\\?\Volume{5760dc3e}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==================== Ende von Addition.txt =======================

--- --- ---