Trojaner-Board - Win10: Autostart plötzlich verlangsamt und Installation von Malwarebytes funktioniert nicht (Zu viele Zeichen, Logs aufgeteilt)

Ich sollte mich echt weiterbilden. Gegen die Schelte kann ich mich einfach nicht wehren.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-09-2021

durchgeführt von Christopher (Administrator) auf CHRISTOPHER-PC (02-09-2021 00:35:30)

Gestartet von C:\Users\Christopher\Downloads

Geladene Profile: Christopher

Platform: Windows 10 Pro Version 20H2 19042.1165 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

() [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe

() [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe

(A-Volute -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe

(Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe

(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe

(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe

(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Intel(R) INTELND1617S2 -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <3>

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe

(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.56.11001.0_x64__8wekyb3d8bbwe\gamingservices.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.56.11001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12107.1001.15.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.1161_none_7e3076a27c733477\TiWorker.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <9>

(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>

(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvmdi.inf_amd64_799504293a3d3200\Display.NvContainer\NVDisplay.Container.exe <2>

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Savitech Corp. -> SAVITECH) C:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279432 2018-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [SVLoadSense] => c:\Program Files (x86)\SAVITECH\SVLoadSense\SVLoadSense.exe [1762000 2015-09-21] (Savitech Corp. -> SAVITECH)

HKLM\...\Run: [SS2UILauncher] => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [560096 2019-11-18] (A-Volute -> ASUSTeK COMPUTER INC.)

HKLM\...\Run: [Elgato Sound Capture] => C:\Program Files\Elgato\SoundCapture\SoundCapture.exe [1234944 2020-12-03] () [Datei ist nicht signiert]

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942936 2018-11-02] (Logitech -> Logitech, Inc.)

HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [1706224 2021-04-28] (Cisco Systems, Inc. -> Cisco Systems, Inc.)

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4110568 2021-07-21] (Valve -> Valve Corporation)

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Run: [GalaxyClient] => [X]

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Run: [Spotify] => C:\Users\Christopher\AppData\Roaming\Spotify\Spotify.exe [24731784 2021-08-25] (Spotify AB -> Spotify Ltd)

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [136443296 2021-08-19] (Logitech Inc -> Logitech, Inc.)

Startup: C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2021-03-12]

ShortcutTarget: MEGAsync.lnk -> C:\Users\Christopher\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)

Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0D87FFA4-2A92-458D-81CD-835B88F8B933} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21858176 2021-08-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {1AA06C71-D580-411B-9EF0-6331FD36FB05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [5439384 2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {2430E92B-4C1A-47AD-9744-29673B69F642} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339120 2021-06-15] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {327602FC-5A5E-4DA3-9318-7399043648F9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {348E5E01-FB54-40CE-99D2-1ADAF914A00A} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {489FE668-0D6E-4E3F-82A3-37371BB02398} - System32\Tasks\SS2UILauncherRun => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [560096 2019-11-18] (A-Volute -> ASUSTeK COMPUTER INC.)

Task: {4CA26CA2-C2EA-4442-8BDE-B68FA18888E1} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-3197034990-4118748310-3737670740-1001 => C:\Users\Christopher\AppData\Local\MEGAsync\MEGAupdater.exe [1818360 2021-01-28] (Mega Limited -> Mega Limited)

Task: {4F009ED0-2847-4814-896F-F87D090EE317} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {55338FE0-5552-4BDE-8139-AE31CCB249FA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)

Task: {694E1F37-155D-4159-8645-C5D3D5D141A3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [5439384 2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {73546B27-B5C7-478E-BA15-C3894986D0B8} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [673720 2021-08-26] (Mozilla Corporation -> Mozilla Foundation)

Task: {740F0D58-99BB-4B94-B500-44C308213283} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-3197034990-4118748310-3737670740-1001 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [24064 2019-12-07] (Microsoft Windows -> Microsoft Corporation)

Task: {76993510-EA8D-444D-8F90-7BA5310E05DE} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {886727CE-E8D1-49A3-9DA3-43D90AABA41B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [113496 2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {9189E8CB-6525-4B18-9C12-0FF1C4CB0808} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {97BAE3E6-361A-4907-BB42-C31DDEE7B187} - System32\Tasks\SS2Svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe [2746368 2019-11-18] () [Datei ist nicht signiert]

Task: {9EF7CFB7-71E2-420E-8283-0C36D6E1B044} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [113496 2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {B12AF696-86A9-4064-92AB-0EF147059B3E} - System32\Tasks\SS2Svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe [486400 2019-11-18] () [Datei ist nicht signiert]

Task: {B67224FB-82D6-4FE9-AFF1-60247D4CA388} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21858176 2021-08-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {BC4697AA-BC75-4538-A5C0-EA8199B71F1C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [905072 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {CCF1B205-711C-46B8-BC07-2674066361BA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [645488 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {D986A08A-5352-4898-8B5E-0E374DBECB1A} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-05-04] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log

Task: {DC824065-CE9F-41FE-944D-F34FDF943142} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [816960 2017-09-21] (Intel(R) Trust Services -> Intel(R) Corporation)

Task: {FE8FB68B-920C-4AA8-A4DA-C8F9F740DD69} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1261424 2021-06-09] (NVIDIA Corporation -> NVIDIA Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-31] (Apple Inc. -> Apple Inc.)

Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-31] (Apple Inc. -> Apple Inc.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{44ade80c-d8da-4085-806e-b22f78a67def}: [DhcpNameServer] 192.168.178.1
 

Edge: 

=======

Edge Profile: C:\Users\Christopher\AppData\Local\Microsoft\Edge\User Data\Default [2021-09-02]
 

FireFox:

========

FF DefaultProfile: xa1uws8m.default

FF ProfilePath: C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\xa1uws8m.default [2021-09-01]

FF ProfilePath: C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\9h3w3419.default-release [2021-09-02]

FF Homepage: Mozilla\Firefox\Profiles\9h3w3419.default-release -> web.de

FF Extension: (uBlock Origin) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\9h3w3419.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-08-19]

FF Extension: (Video DownloadHelper) - C:\Users\Christopher\AppData\Roaming\Mozilla\Firefox\Profiles\9h3w3419.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-06]

FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-07-24] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)
 

Chrome: 

=======

CHR Profile: C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default [2021-09-01]

CHR StartupUrls: Default -> "hxxps://web.de/"

CHR Extension: (Präsentationen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-10-29]

CHR Extension: (BetterTTV) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-08-29]

CHR Extension: (Docs) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-10-29]

CHR Extension: (Google Drive) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-29]

CHR Extension: (XN Price Checker) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgkmdbhpfhmbgmbphejlepfcphjfaaej [2021-08-31]

CHR Extension: (YouTube) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-10-29]

CHR Extension: (uBlock Origin) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-07-30]

CHR Extension: (Tampermonkey) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2021-06-03]

CHR Extension: (Augmented Steam) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnhpnfgdlenaccegplpojghhmaamnnfp [2021-07-08]

CHR Extension: (Dark Reader) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2021-07-08]

CHR Extension: (Tabellen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-10-29]

CHR Extension: (Google Docs Offline) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-06-24]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]

CHR Extension: (Google Mail) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-29]

CHR Extension: (Chrome Media Router) - C:\Users\Christopher\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-07-28]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8906088 2021-06-07] (BattlEye Innovations e.K. -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9166736 2021-08-23] (Microsoft Corporation -> Microsoft Corporation)

R2 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [9901976 2021-09-01] (Electronic Arts, Inc. -> Electronic Arts)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803952 2021-04-16] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [926176 2021-03-16] (Epic Games Inc. -> Epic Games, Inc.)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1955680 2021-08-07] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6484832 2021-08-07] (GOG Sp. z o.o. -> GOG.com)

R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10787232 2021-08-19] (Logitech Inc -> Logitech, Inc.)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7497336 2021-09-02] (Malwarebytes Inc -> Malwarebytes)

S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1856816 2021-08-03] (Rockstar Games, Inc. -> Rockstar Games)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5394872 2021-08-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\NisSrv.exe [2727416 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2107.4-0\MsMpEng.exe [136656 2021-08-04] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_799504293a3d3200\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_799504293a3d3200\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 e60MZ0380.X64; C:\WINDOWS\System32\drivers\e60MZ0380.X64.SYS [4263688 2020-10-28] (Corsair Memory, Inc. -> )

R3 ElgatoVAD; C:\WINDOWS\System32\drivers\ElgatoVAD.sys [39208 2020-11-08] (Elgato Systems LLC -> Elgato Systems GmbH)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [160176 2021-09-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R2 LGHUBTemperatureService; C:\Program Files\LGHUB\logi_core_temp.sys [22864 2021-08-19] (Logitech Inc -> Logitech)

S3 libusbK; C:\WINDOWS\System32\drivers\libusbK.sys [47928 2018-04-30] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)

R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [37200 2021-08-19] (Logitech Inc -> Logitech)

R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [25928 2021-08-19] (Logitech Inc -> Logitech)

R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [66896 2021-08-19] (Logitech Inc -> Logitech)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [210344 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-09-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198888 2021-09-02] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [68528 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-09-02] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [149424 2021-09-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R1 SvThLSNS; c:\Program Files (x86)\SAVITECH\SVLoadSense\x64\SvThLSNS.sys [15184 2015-09-21] (Savitech Corp. -> Windows (R) Win 7 DDK provider)

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2019-10-30] (OpenVPN Technologies, Inc. -> The OpenVPN Project)

S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74048 2021-04-28] (Cisco Systems, Inc. -> Cisco Systems, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49568 2021-08-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [434424 2021-08-04] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [78072 2021-08-04] (Microsoft Windows -> Microsoft Corporation)

S3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [38176 2021-01-24] (WireGuard LLC -> WireGuard LLC)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-09-02 00:19 - 2021-09-02 00:19 - 000198888 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2021-09-02 00:19 - 2021-09-02 00:19 - 000149424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2021-09-02 00:19 - 2021-09-02 00:19 - 000068528 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2021-09-02 00:13 - 2021-09-02 00:13 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2021-09-02 00:13 - 2021-09-02 00:13 - 000001981 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2021-09-02 00:13 - 2021-09-02 00:13 - 000000000 ____D C:\Users\Christopher\AppData\Local\mbam

2021-09-02 00:12 - 2021-09-02 00:12 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2021-09-02 00:12 - 2021-09-02 00:12 - 000210344 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2021-09-02 00:12 - 2021-09-02 00:12 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2021-09-02 00:12 - 2021-09-02 00:12 - 000000000 ____D C:\Program Files\Malwarebytes

2021-09-01 23:57 - 2021-09-01 23:57 - 000000008 __RSH C:\ProgramData\ntuser.pol

2021-09-01 23:56 - 2021-09-01 23:58 - 000008489 _____ C:\Users\Christopher\Downloads\Fixlog.txt

2021-09-01 23:55 - 2021-09-01 23:55 - 000000000 ____D C:\Users\Christopher\Downloads\FRST-OlderVersion

2021-09-01 20:55 - 2021-09-01 20:56 - 000000000 ____D C:\Users\Christopher\Downloads\mb_bios_x570-aorus-elite_f35

2021-09-01 20:44 - 2021-09-01 20:44 - 000002209 _____ C:\Users\Public\Desktop\EA app.lnk

2021-09-01 11:33 - 2021-09-01 11:35 - 000000000 ____D C:\AdwCleaner

2021-09-01 11:33 - 2021-09-01 11:33 - 008553680 _____ (Malwarebytes) C:\Users\Christopher\Downloads\adwcleaner_8.3.0.exe

2021-09-01 01:41 - 2021-09-01 01:41 - 000038712 _____ C:\Users\Christopher\Downloads\Shortcut.txt

2021-09-01 01:39 - 2021-09-01 01:41 - 000085748 _____ C:\Users\Christopher\Downloads\Addition.txt

2021-09-01 01:37 - 2021-09-02 00:35 - 000023311 _____ C:\Users\Christopher\Downloads\FRST.txt

2021-09-01 01:35 - 2021-09-02 00:35 - 000000000 ____D C:\FRST

2021-09-01 01:35 - 2021-09-01 23:55 - 002302464 _____ (Farbar) C:\Users\Christopher\Downloads\FRST64.exe

2021-09-01 01:14 - 2021-09-01 01:14 - 000160176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2021-09-01 01:14 - 2021-09-01 01:14 - 000000000 ____D C:\ProgramData\Malwarebytes

2021-08-31 22:16 - 2021-08-31 22:16 - 114679563 _____ C:\Users\Christopher\Downloads\RGB_Fusion_B21.0608.1.zip

2021-08-31 22:16 - 2021-08-31 22:16 - 078091304 _____ C:\Users\Christopher\Downloads\mb_driver_61_intel_25.6.zip

2021-08-31 22:16 - 2021-08-31 22:16 - 052626373 _____ C:\Users\Christopher\Downloads\mb_driver_597_chipset_2.15.07.2229.zip

2021-08-31 22:15 - 2021-08-31 22:15 - 018471854 _____ C:\Users\Christopher\Downloads\mb_driver_612_realtekdch_6.0.9126.1.zip

2021-08-31 22:14 - 2021-08-31 22:14 - 011297296 _____ C:\Users\Christopher\Downloads\mb_bios_x570-aorus-elite_f35.zip

2021-08-31 12:04 - 2021-08-31 12:04 - 001400244 _____ C:\Users\Christopher\Downloads\BA - Michael Becker 2021.pdf

2021-08-28 14:25 - 2021-08-28 14:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2021-08-28 10:20 - 2021-08-28 10:20 - 000000000 ____D C:\Users\Christopher\AppData\Local\SolidDocuments

2021-08-28 01:01 - 2021-08-28 01:01 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk

2021-08-28 01:01 - 2021-08-28 01:01 - 000000000 ____D C:\Program Files\Adobe

2021-08-28 01:00 - 2021-08-28 01:01 - 000000000 ____D C:\Program Files\Common Files\Adobe

2021-08-26 10:40 - 2021-08-29 11:09 - 000000000 ____D C:\Program Files\Mozilla Firefox

2021-08-23 11:56 - 2021-08-23 11:56 - 000000000 ____D C:\Users\Christopher\AppData\Local\Blairwitch

2021-08-22 09:38 - 2021-08-22 09:38 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\WeMod

2021-08-22 09:34 - 2021-08-22 09:38 - 000000000 ____D C:\Users\Christopher\AppData\Local\WeMod

2021-08-21 14:20 - 2021-08-21 14:20 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\Diablo II

2021-08-19 22:06 - 2021-08-19 22:06 - 000000000 ____D C:\Users\Christopher\AppData\LocalLow\Nomada

2021-08-19 17:31 - 2021-08-19 17:31 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\KillHouseGames

2021-08-19 16:56 - 2021-09-02 00:19 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\LGHUB

2021-08-19 16:56 - 2021-09-02 00:19 - 000000000 ____D C:\Users\Christopher\AppData\Local\LGHUB

2021-08-19 16:55 - 2021-08-19 16:56 - 000000000 ____D C:\ProgramData\LGHUB

2021-08-19 16:55 - 2021-08-19 16:56 - 000000000 ____D C:\Program Files\LGHUB

2021-08-19 16:55 - 2021-08-19 16:55 - 000066896 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_xlcore.sys

2021-08-19 16:55 - 2021-08-19 16:55 - 000037200 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_bus_enum.sys

2021-08-19 16:55 - 2021-08-19 16:55 - 000025928 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_vir_hid.sys

2021-08-19 16:55 - 2021-08-19 16:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi

2021-08-16 18:58 - 2021-08-16 18:58 - 000000000 ____D C:\WINDOWS\LastGood.Tmp

2021-08-16 18:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2021-08-16 18:56 - 2021-08-06 10:45 - 001858680 _____ C:\WINDOWS\system32\vulkaninfo.exe

2021-08-16 18:56 - 2021-08-06 10:45 - 001474672 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2021-08-16 18:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2021-08-16 18:56 - 2021-08-06 10:45 - 001438840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2021-08-16 18:56 - 2021-08-06 10:45 - 001212536 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2021-08-16 18:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2021-08-16 18:56 - 2021-08-06 10:45 - 001097832 _____ C:\WINDOWS\system32\vulkan-1.dll

2021-08-16 18:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2021-08-16 18:56 - 2021-08-06 10:45 - 000951928 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2021-08-16 18:56 - 2021-08-06 10:42 - 000716928 _____ C:\WINDOWS\system32\nvofapi64.dll

2021-08-16 18:56 - 2021-08-06 10:42 - 000645248 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll

2021-08-16 18:56 - 2021-08-06 10:42 - 000577152 _____ C:\WINDOWS\SysWOW64\nvofapi.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 002112144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 001595536 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 001520760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 001171088 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 000919184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 000750200 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 000706168 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe

2021-08-16 18:56 - 2021-08-06 10:41 - 000676480 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2021-08-16 18:56 - 2021-08-06 10:41 - 000564352 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 008854136 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 007920760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 005680768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 004987512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 002925688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2021-08-16 18:56 - 2021-08-06 10:40 - 000447096 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe

2021-08-16 18:56 - 2021-08-06 10:39 - 000849024 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe

2021-08-16 18:56 - 2021-08-06 10:38 - 006215808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2021-08-16 18:56 - 2021-08-05 23:12 - 000083062 _____ C:\WINDOWS\system32\nvinfo.pb

2021-08-13 10:06 - 2021-08-13 10:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb

2021-08-13 10:06 - 2021-08-13 10:06 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb

2021-08-13 10:06 - 2021-08-13 10:06 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi

2021-08-13 10:06 - 2021-08-13 10:06 - 001393480 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi

2021-08-13 10:06 - 2021-08-13 10:06 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll

2021-08-13 10:06 - 2021-08-13 10:06 - 000011347 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2021-08-13 10:05 - 2021-08-13 10:05 - 000288768 _____ C:\WINDOWS\system32\Windows.Management.InprocObjects.dll

2021-08-13 10:01 - 2021-08-13 10:01 - 000000000 ___HD C:\$WinREAgent

2021-08-11 10:51 - 2021-08-11 10:51 - 000430261 _____ C:\Users\Christopher\Downloads\Leitfaden_zur_Anfertigung_wissenschaftlicher_Arbeiten_am_Historischen_Institut.pdf

2021-08-11 09:01 - 2021-08-30 22:33 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\My Digital Editions

2021-08-11 09:01 - 2021-08-11 09:01 - 000000000 ____D C:\Users\Christopher\AppData\Local\Adobe_Systems_Incorporate

2021-08-11 08:50 - 2021-08-11 08:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cisco

2021-08-10 11:26 - 2021-08-10 11:26 - 000000000 ____D C:\Users\Christopher\AppData\Local\FlightSimulator

2021-08-05 20:07 - 2021-08-05 20:07 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\evox
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2021-09-02 00:28 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2021-09-02 00:25 - 2020-10-29 20:15 - 001927624 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2021-09-02 00:25 - 2019-12-07 16:51 - 000819564 _____ C:\WINDOWS\system32\perfh007.dat

2021-09-02 00:25 - 2019-12-07 16:51 - 000182262 _____ C:\WINDOWS\system32\perfc007.dat

2021-09-02 00:25 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF

2021-09-02 00:21 - 2020-10-29 20:24 - 000000000 ____D C:\ProgramData\NVIDIA

2021-09-02 00:20 - 2020-10-29 21:10 - 000000000 ____D C:\ProgramData\Mozilla

2021-09-02 00:19 - 2020-11-03 02:39 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\eqaba4

2021-09-02 00:19 - 2020-11-03 02:20 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\xot2ry

2021-09-02 00:19 - 2020-10-30 09:56 - 000000000 ____D C:\Users\Christopher\AppData\Local\CrashDumps

2021-09-02 00:19 - 2020-10-29 21:11 - 000000000 ____D C:\Users\Christopher\AppData\LocalLow\Mozilla

2021-09-02 00:19 - 2020-09-27 09:33 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2021-09-02 00:19 - 2020-09-27 07:33 - 000008192 ___SH C:\DumpStack.log.tmp

2021-09-02 00:19 - 2020-09-27 07:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2021-09-02 00:19 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState

2021-09-02 00:12 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2021-09-01 23:57 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2021-09-01 23:56 - 2021-03-03 17:27 - 000000000 ____D C:\Users\Christopher\AppData\LocalLow\Temp

2021-09-01 23:56 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy

2021-09-01 20:44 - 2021-03-18 18:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA

2021-09-01 10:50 - 2020-10-29 20:20 - 000000000 ____D C:\Program Files (x86)\Google

2021-09-01 10:43 - 2021-06-25 19:37 - 000000000 ____D C:\WINDOWS\system32\appmgmt

2021-09-01 10:43 - 2021-01-01 03:22 - 000000000 ____D C:\ProgramData\VEGAS

2021-09-01 10:41 - 2020-10-29 20:27 - 000000000 ____D C:\Program Files\WinRAR

2021-09-01 10:33 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2021-09-01 10:33 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2021-09-01 01:06 - 2020-10-29 20:25 - 000000000 ____D C:\Program Files (x86)\Steam

2021-08-31 21:19 - 2020-10-29 22:01 - 000000000 ____D C:\Users\Christopher\AppData\Local\Spotify

2021-08-31 21:09 - 2020-10-29 22:01 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\Spotify

2021-08-31 14:54 - 2020-10-29 21:26 - 000000000 ____D C:\Users\Christopher\AppData\Local\Battle.net

2021-08-31 12:09 - 2020-10-29 20:16 - 000000000 ____D C:\Users\Christopher\AppData\Local\Packages

2021-08-31 10:16 - 2020-10-29 22:18 - 000803176 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe

2021-08-30 22:35 - 2020-10-29 21:02 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\discord

2021-08-30 22:33 - 2020-10-29 21:02 - 000000000 ____D C:\Users\Christopher\AppData\Local\Discord

2021-08-29 11:09 - 2020-10-29 21:10 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2021-08-28 21:18 - 2020-09-27 09:36 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-08-28 17:17 - 2020-11-21 03:58 - 000000000 ____D C:\Users\Christopher\AppData\Local\StrongVPN

2021-08-28 15:23 - 2020-09-27 09:37 - 000000000 ____D C:\ProgramData\Packages

2021-08-28 14:25 - 2020-10-29 21:10 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2021-08-28 10:20 - 2020-10-29 20:16 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\Adobe

2021-08-28 01:01 - 2020-10-29 21:11 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2021-08-28 01:01 - 2020-10-29 21:11 - 000000000 ____D C:\Program Files (x86)\Adobe

2021-08-28 01:00 - 2020-10-29 21:10 - 000000000 ____D C:\ProgramData\Adobe

2021-08-27 00:05 - 2020-10-29 20:42 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2021-08-26 11:45 - 2020-10-29 20:52 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\Sky Go

2021-08-23 10:49 - 2020-10-29 20:18 - 000000000 ____D C:\Users\Christopher\AppData\Local\PlaceholderTileLogoFolder

2021-08-23 09:59 - 2020-10-29 20:18 - 000003390 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3197034990-4118748310-3737670740-1001

2021-08-23 09:59 - 2020-10-29 20:14 - 000002417 _____ C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-08-22 13:25 - 2020-10-29 20:56 - 000000000 ____D C:\Users\Christopher\AppData\Local\D3DSCache

2021-08-22 09:38 - 2020-12-13 22:57 - 000000000 ____D C:\Users\Christopher\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WeMod

2021-08-22 09:35 - 2020-10-29 21:02 - 000000000 ____D C:\Users\Christopher\AppData\Local\SquirrelTemp

2021-08-22 09:30 - 2021-04-05 20:24 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\Paradox Interactive

2021-08-21 14:32 - 2020-10-29 21:25 - 000000000 ____D C:\Program Files (x86)\Battle.net

2021-08-21 14:28 - 2020-10-29 21:25 - 000000000 ____D C:\Users\Christopher\AppData\Local\Blizzard Entertainment

2021-08-20 09:23 - 2020-12-17 23:40 - 000000000 ____D C:\Users\Christopher\OneDrive\Dokumente\My Games

2021-08-19 16:57 - 2020-10-29 21:43 - 000000000 ____D C:\Users\Christopher\AppData\Local\Logitech

2021-08-19 16:56 - 2020-10-29 21:44 - 000000000 ____D C:\ProgramData\LogiShrd

2021-08-19 16:19 - 2020-10-29 21:43 - 000000000 ____D C:\Users\Public\Logi

2021-08-18 16:12 - 2020-09-27 09:35 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-08-18 16:12 - 2020-09-27 09:35 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-08-17 21:47 - 2020-10-29 20:58 - 000000000 ____D C:\Users\Christopher\AppData\Local\Ubisoft Game Launcher

2021-08-17 20:28 - 2021-03-27 12:32 - 017023249 _____ C:\Users\Christopher\Downloads\fearlessrevolution.zip

2021-08-17 17:24 - 2021-03-18 18:40 - 000000000 ____D C:\Program Files\EA Games

2021-08-17 16:22 - 2020-10-29 20:44 - 002163152 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll

2021-08-17 16:22 - 2020-10-29 20:44 - 000307648 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll

2021-08-17 16:22 - 2020-10-29 20:44 - 000213456 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll

2021-08-17 16:22 - 2020-10-29 20:44 - 000188856 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll

2021-08-17 16:22 - 2020-10-29 20:44 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll

2021-08-17 16:22 - 2020-10-29 20:44 - 000061904 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe

2021-08-17 16:15 - 2020-10-29 20:55 - 000000000 ____D C:\Users\Christopher\AppData\Local\NVIDIA

2021-08-15 11:16 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

2021-08-15 00:39 - 2021-02-20 17:02 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2021-08-13 11:58 - 2020-09-27 07:33 - 000446360 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2021-08-13 11:57 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellComponents

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2021-08-13 11:57 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2021-08-13 11:57 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\servicing

2021-08-13 10:07 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2021-08-13 10:00 - 2020-11-01 01:27 - 000000000 ____D C:\WINDOWS\system32\MRT

2021-08-13 09:59 - 2020-11-01 01:27 - 133215968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2021-08-10 09:16 - 2020-10-29 20:18 - 000000000 ___RD C:\Users\Christopher\OneDrive

2021-08-07 15:41 - 2020-10-29 21:29 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy

2021-08-06 10:38 - 2020-10-29 20:22 - 007280848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2021-08-04 20:35 - 2020-09-27 09:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-11-03 02:53 - 2020-11-03 02:53 - 000000050 _____ () C:\Users\Christopher\AppData\Roaming\Christopher

2021-04-06 10:35 - 2021-04-06 10:42 - 000000016 _____ () C:\Users\Christopher\AppData\Roaming\obs-virtualcam.txt
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-09-2021

durchgeführt von Christopher (02-09-2021 00:36:26)

Gestartet von C:\Users\Christopher\Downloads

Windows 10 Pro Version 20H2 19042.1165 (X64) (2020-10-29 18:12:05)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3197034990-4118748310-3737670740-500 - Administrator - Disabled)

Christopher (S-1-5-21-3197034990-4118748310-3737670740-1001 - Administrator - Enabled) => C:\Users\Christopher

DefaultAccount (S-1-5-21-3197034990-4118748310-3737670740-503 - Limited - Disabled)

Gast (S-1-5-21-3197034990-4118748310-3737670740-501 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-3197034990-4118748310-3737670740-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4K Capture Utility (HKLM\...\{CE361A72-A4C8-4907-BFA4-214FD879D4AE}) (Version: 1.7.3.4757 - Elgato Systems)

Adobe Acrobat DC (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 21.005.20060 - Adobe)

Adobe Digital Editions 4.5 (HKLM-x32\...\Adobe Digital Editions 4.5) (Version: 4.5.11 - Adobe Systems Incorporated)

Asus Sonic Suite Plugins (HKLM-x32\...\{944d4c60-ef63-447b-b806-b3e5aee1c5d5}) (Version: 2.2.3901 - ASUSTeKcomputer.Inc)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)

Bruteforce Save Data (HKLM-x32\...\Bruteforce Save Data) (Version:  - )

Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 4.10.01075 - Cisco Systems, Inc.)

Cisco AnyConnect Secure Mobility Client (HKLM-x32\...\{F4C97B53-97C8-43B6-A6A1-97CE0286BAE0}) (Version: 4.10.01075 - Cisco Systems, Inc.) Hidden

CPUID CPU-Z 1.96 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.96 - CPUID, Inc.)

CPUID HWMonitor 1.43 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.43 - CPUID, Inc.)

CrystalDiskInfo 8.9.0a (HKLM\...\CrystalDiskInfo_is1) (Version: 8.9.0a - Crystal Dew World)

Discord (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)

EA app (HKLM\...\{C2622085-ABD2-49E5-8AB9-D3D6A642C091}) (Version: 12.0.124.4989 - Electronic Arts) Hidden

EA app (HKLM-x32\...\{d3e84f4a-a180-492d-985f-40cdbc8681a1}) (Version: 12.0.124.4989 - Electronic Arts)

Elgato Game Capture HD (HKLM\...\{D85B8C0A-5A15-4C9C-8AA7-6C1645D988B5}) (Version: 3.70.51.3051 - Elgato Systems GmbH)

Epic Games Launcher (HKLM-x32\...\{07D9F8F3-EC99-4133-919D-DA341C62937C}) (Version: 1.1.298.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Epic Online Services (HKLM-x32\...\{0B736177-814A-4ADE-81D1-66A0FDD55BB4}) (Version: 1.1.11.0 - Epic Games, Inc.)

Far Cry 5 (HKLM-x32\...\Uplay Install 1803) (Version:  - Ubisoft)

Game Capture HD60 Pro v1.1.0.191 (HKLM-x32\...\Software_Elgato_Game Capture HD60 Pro) (Version: 1.1.0.191 - Elgato Systems)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.7.0.1043 - Intel Corporation)

Intel(R) Network Connections 22.4.16.0 (HKLM\...\PROSetDX) (Version: 22.4.16.0 - Intel)

Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.47.715.0 - Intel Corporation) Hidden

Intel(R) Trusted Connect Services Client (HKLM-x32\...\{2b32b7d0-4f9f-47c8-adb7-807e6cb2fb75}) (Version: 1.47.715.0 - Intel Corporation) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

LauncherSetup (HKLM\...\{FF19684D-8021-463F-AA7E-571E15AA7B56}) (Version: 2.2.3901 - ASUSTeKcomputer.Inc) Hidden

Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2021.8.792 - Logitech)

Malwarebytes version 4.4.5.130 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.4.5.130 - Malwarebytes)

MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 92.0.902.84 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 92.0.902.84 - Microsoft Corporation)

Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Retail - de-de) (Version: 16.0.14326.20238 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\OneDriveSetup.exe) (Version: 21.150.0725.0001 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{852D8FE5-BC66-4061-B1C4-CADF51E5B27D}) (Version: 2.82.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{6a3b46d3-fbf1-4b22-8b42-48b675de6b81}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.28.29334 (HKLM-x32\...\{a9cfe9c7-e54f-46cd-9c5c-542ff8e3e8c4}) (Version: 14.28.29334.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.28.29334 (HKLM-x32\...\{b2d0f752-adc5-496e-8f70-8669de01f746}) (Version: 14.28.29334.0 - Microsoft Corporation)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 91.0.2 (x64 de)) (Version: 91.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 82.0.2 - Mozilla)

NVIDIA FrameView SDK 1.1.4923.29968894 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29968894 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.23.0.74 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.23.0.74 - NVIDIA Corporation)

NVIDIA Grafiktreiber 471.68 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 471.68 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.38.60 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.60 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.0.2 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.14326.20238 - Microsoft Corporation) Hidden

Paradox Launcher v2 (HKLM\...\{66DA3501-823A-4F07-A20D-C64495A59DC8}) (Version: 2.1.0 - Paradox Interactive)

Pokémon Trading Card Game Online (HKLM-x32\...\{64016A5D-F7EF-47DF-B593-022F2F60D294}) (Version: 2.78.0 - The Pokémon Company International)

ProductDaemonSetup (HKLM\...\{75F6CB9F-0FDA-4772-9CC5-3058BAACBC9C}) (Version: 2.2.3901 - ASUSTeKcomputer.Inc) Hidden

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8468 - Realtek Semiconductor Corp.)

REDlauncher (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\{7258BA11-600C-430E-A759-27E2C691A335}-REDlauncher_is1) (Version:  - GOG.com)

Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.45.416 - Rockstar Games)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.8.9 - Rockstar Games)

Sky Go 21.5.2.0 (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\com.bskyb.skygoplayer_is1) (Version: 21.5.2.0 - Sky)

SonicRadarSetup (HKLM\...\{81890295-5074-4624-A1EE-D4A3D9CE27D6}) (Version: 1.0.0.0 - ASUSTeKcomputer.Inc) Hidden

SonicStudioSetup (HKLM\...\{F6D01C22-98BB-4057-A08B-3EC204A76FDF}) (Version: 2.2.3901 - ASUSTeKcomputer.Inc) Hidden

Spotify (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\Spotify) (Version: 1.1.66.580.gbd43cbc9 - Spotify AB)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

StrongVPN (HKLM\...\{1F0FB659-502A-4BF3-AB40-D25BB14FE36C}) (Version: 2.6.2.0 - Strong Technology, LLC) Hidden

StrongVPN (HKLM-x32\...\{9d65bde1-0048-4fe8-bf48-02b946435252}) (Version: 2.6.2.0 - Strong Technology, LLC)

SVLoadSense (HKLM-x32\...\{C4226734-F925-448C-8F15-0D5419F003DF}) (Version: 1.0.12 - SAVITECH)

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.3 - TeamSpeak Systems GmbH)

TegraRcmGUI (HKLM-x32\...\{FD7196C9-BD86-4736-AF9D-7CFCB9E03E67}) (Version: 2.6.0 - eliboa) Hidden

TegraRcmGUI (HKLM-x32\...\TegraRcmGUI 2.6.0) (Version: 2.6.0 - eliboa)

Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 115.2.10179 - Ubisoft)

Windows-Treiberpaket - libusbK Nintendo Switch APX Mode (04/27/2014 3.0.7.0) (HKLM\...\5C4BD94286C931BB5D47200B4AF1D1B99B3C08AB) (Version: 04/27/2014 3.0.7.0 - libusbK)

Zoom (HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\ZoomUMX) (Version: 5.5.4 (13142.0301) - Zoom Video Communications, Inc.)
 

Packages:

=========

Age of Empires IV -> C:\Program Files\WindowsApps\Microsoft.Cardinal_0.1.0.0_x64__8wekyb3d8bbwe [2021-06-17] (Microsoft Studios)

Battletoads -> C:\Program Files\WindowsApps\Microsoft.Frogspawn_1.4.2718.0_x64__8wekyb3d8bbwe [2020-10-30] (Microsoft Studios)

Bridge Constructor Portal -> C:\Program Files\WindowsApps\HeadupGames.BridgeConstructorPortal_5.0.173.2_x64__zedvb25zy7eke [2020-10-30] (Headup Games)

Call of The Sea -> C:\Program Files\WindowsApps\RawFury.CallofTheSeaW10_1.5.15.0_x64__9s0pnehqffj7t [2021-08-27] (Raw Fury)

Celeste -> C:\Program Files\WindowsApps\MattMakesGamesInc.Celeste_20.9.11.2_x64__79daxvg0dq3v6 [2021-01-06] (Matt Makes Games Inc.)

Cuphead -> C:\Program Files\WindowsApps\StudioMDHR.20872A364DAA1_1.2.4.2_x64__tm1s6a95559gt [2021-07-25] (Studio MDHR)

Curse of the Dead Gods -> C:\Program Files\WindowsApps\FocusHomeInteractiveSA.CurseoftheDeadGods-Windows1_1.0.3.0_x64__4hny5m903y3g0 [2021-08-05] (Focus Home Interactive SA)

Descenders -> C:\Program Files\WindowsApps\NoMoreRobots.GamePreviewDescenders_0.1.122.0_x64__671zbmwb2bw9p [2021-07-22] (No More Robots)

DIRT 5 -> C:\Program Files\WindowsApps\CodemastersSoftwareCompan.DiRT5_1.2741.9.0_x64__4cfye3zbe1gaw [2021-08-07] (Codemasters Software Company Limited)

Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.9.253.0_x64__rz1tebttyb220 [2021-08-06] (Dolby Laboratories)

FINAL FANTASY VIII Remastered WINDOWS EDITION -> C:\Program Files\WindowsApps\39EA002F.FINALFANTASYVIIIRemastered_1.0.1.0_x64__n746a19ndrrjg [2021-01-06] (SQUARE ENIX CO. LTD.)

Forza Horizon 5 -> C:\Program Files\WindowsApps\Microsoft.624F8B84B80_3.339.220.0_x64__8wekyb3d8bbwe [2021-06-17] (Microsoft Studios)

Forza Hub -> C:\Program Files\WindowsApps\Microsoft.Lucille_1.0.4.0_x64__8wekyb3d8bbwe [2021-02-14] (Microsoft Studios)

Gears 5 -> C:\Program Files\WindowsApps\Microsoft.HalifaxBaseGame_1.1.948.0_x64__8wekyb3d8bbwe [2021-08-04] (Microsoft Studios)

Gears Tactics -> C:\Program Files\WindowsApps\Microsoft.GanderBaseGame_1.0.151.0_x64__8wekyb3d8bbwe [2021-03-23] (Microsoft Studios)

Hades -> C:\Program Files\WindowsApps\SupergiantGamesLLC.Hades_1.0.38196.0_x64__q53c1yqmx7pha [2021-08-19] (Supergiant Games, LLC)

Halo Infinite -> C:\Program Files\WindowsApps\Microsoft.254428597CFE2_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-28] (Microsoft Studios)

Halo: The Master Chief Collection -> C:\Program Files\WindowsApps\Mutable\Microsoft.Chelan_1.2448.0.0_x64__8wekyb3d8bbwe [2021-07-24] (Microsoft Studios)

Hollow Knight -> C:\Program Files\WindowsApps\TeamCherry.HollowKnightPC_1.0.3.0_x86__y4jvztpgccj42 [2020-11-13] (Team Cherry)

Humankind™ -> C:\Program Files\WindowsApps\AmplitudeSTUDIOS.Humankind_1.2.116.0_x64__sm4da3szdwjfr [2021-08-29] (AMPLITUDE Studios)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-16] (Microsoft Corporation)

Metro 2033 Redux -> C:\Program Files\WindowsApps\DeepSilver.Metro2033Redux_1.0.8.0_x64__hmv7qcest37me [2020-10-30] (Koch Media GmbH)

Metro: Last Light Redux -> C:\Program Files\WindowsApps\DeepSilver.MetroLastLightRedux_1.0.8.0_x64__hmv7qcest37me [2020-10-30] (Koch Media GmbH)

Microsoft Flight Simulator -> C:\Program Files\WindowsApps\Microsoft.FlightSimulator_1.18.15.0_x64__8wekyb3d8bbwe [2021-08-09] (Microsoft Studios)

Microsoft Flight Simulator Digital Ownership -> C:\Program Files\WindowsApps\Microsoft.DigitalOwnership_1.0.1.0_x64__8wekyb3d8bbwe [2021-07-29] (Microsoft Studios)

Minecraft Dungeons -> C:\Program Files\WindowsApps\Microsoft.Lovika_1.10.3.0_x64__8wekyb3d8bbwe [2021-08-12] (Microsoft Studios)

MotionTwin.DeadCellsWin10 -> C:\Program Files\WindowsApps\MotionTwin.DeadCellsWin10_1.14.0.0_x64__rtjy889c6zgtg [2021-06-11] (Motion Twin)

Mount & Blade: Warband PC -> C:\Program Files\WindowsApps\Mutable\TaleWorldsEntertainment.4434B9962F96_1.0.27.0_x64__mk53pm3ay0384 [2021-06-24] (TaleWorlds Entertainment)

No Man's Sky -> C:\Program Files\WindowsApps\HelloGames.NoMansSky_3.53.8275.0_x64__bs190hzg1sesy [2021-06-17] (Hello Games)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-08-16] (NVIDIA Corp.)

Ori And The Will Of The Wisps -> C:\Program Files\WindowsApps\Microsoft.Patagonia_1.0.8978.0_x64__8wekyb3d8bbwe [2020-11-20] (Microsoft Studios)

Prey -> C:\Program Files\WindowsApps\BethesdaSoftworks.LiluDallas-Multipass_1.11.7.0_x64__3275kfvn8vcwc [2021-06-17] (Bethesda Softworks)

Psychonauts 2 -> C:\Program Files\WindowsApps\Microsoft.Psychonauts2_1.0.16.0_x64__8wekyb3d8bbwe [2021-08-21] (Microsoft Studios)

ReCore -> C:\Program Files\WindowsApps\Microsoft.ReCore_1.1.7468.2_x64__8wekyb3d8bbwe [2021-02-10] (Microsoft Studios)

Sea of Thieves -> C:\Program Files\WindowsApps\Microsoft.SeaofThieves_2.104.2646.2_x64__8wekyb3d8bbwe [2021-08-26] (ms-resource:PublisherDisplayName)

Starbound -> C:\Program Files\WindowsApps\Mutable\Chucklefish.StarboundWindows10Edition_1.0.3.0_x64__ywkyrypjzhpx8 [2021-06-24] (Chucklefish)

State of Decay 2 -> C:\Program Files\WindowsApps\Mutable\Microsoft.Dayton_2.438.134.0_x64__8wekyb3d8bbwe [2021-08-07] (Microsoft Studios)

Streets of Rage 4 -> C:\Program Files\WindowsApps\DotEmu.StreetsofRage4_1.0.23.2_x64__map6zyh9ym1xy [2021-07-17] (DotEmu)

SUPERHOT: MIND CONTROL DELETE -> C:\Program Files\WindowsApps\SUPERHOTTeam.533673F36228B_1.2.13.0_x64__hj98apedv0ctt [2021-07-19] (SUPERHOT Team)

Tetris® Effect: Connected -> C:\Program Files\WindowsApps\48710EnhanceIncorporated.TRIP2.0_1.2.2.0_x64__63vy8jfbpt4dt [2021-08-27] (Enhance Incorporated)

The Ascent -> C:\Program Files\WindowsApps\CurveDigital.TheAscent_2.1.4.0_x64__1ezqdnbhnc70m [2021-08-19] (Curve Digital)

The Gardens Between -> C:\Program Files\WindowsApps\40632TheVoxelAgents.147198BA2FF5B_1.0.10.0_x64__h7sr7gn9kt1nj [2021-02-10] (The Voxel Agents)

The Long Dark -> C:\Program Files\WindowsApps\27620HinterlandStudio.30233944AADE4_1.94.0.2_x64__y1bt56c4151zw [2021-06-29] (Hinterland Studio Inc)

The Master Chief Collection: Halo 2 -> C:\Program Files\WindowsApps\Microsoft.MCCHalo2_1.1448.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Master Chief Collection: Halo 3 -> C:\Program Files\WindowsApps\Microsoft.MCCHalo3_1.12.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Master Chief Collection: Halo 3: ODST -> C:\Program Files\WindowsApps\Microsoft.MCCHalo3ODST_1.12.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Master Chief Collection: Halo 4 -> C:\Program Files\WindowsApps\Microsoft.MCCHalo4_1.12.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Master Chief Collection: Halo CE -> C:\Program Files\WindowsApps\Microsoft.HaloCombatEvolved_1.1367.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Master Chief Collection: REACH -> C:\Program Files\WindowsApps\Microsoft.TheMasterChiefCollectionREACH_1.1.0.0_x64__8wekyb3d8bbwe [2020-11-18] (Microsoft Studios)

The Outer Worlds -> C:\Program Files\WindowsApps\PrivateDivision.TheOuterWorldsWindows10_1.5.696.0_x64__hv3d7yfbgr2rp [2021-03-18] (Private Division)

Wasteland 2: Director's Cut -> C:\Program Files\WindowsApps\181CBCCD.8e9b6fe9-66b3-4704-815d-44ada631592c_1.0.10.0_x64__9y3t8zad226mc [2020-10-30] (inXile entertainment, inc.)

Wasteland 3 -> C:\Program Files\WindowsApps\DeepSilver.56575194F7E04_1.0.33.0_x64__hmv7qcest37me [2021-09-01] (Koch Media GmbH)

Wasteland Remastered -> C:\Program Files\WindowsApps\Microsoft.Wasteland30thAnniversaryEdition_1.0.5088.0_x64__8wekyb3d8bbwe [2020-10-30] (Microsoft Studios)

Yakuza: Like a Dragon -> C:\Program Files\WindowsApps\SEGAofAmericaInc.Yazawa_2.14.0.0_x64__s751p9cej88mt [2021-07-28] (SEGA of America, Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3197034990-4118748310-3737670740-1001_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6} -> [OneDrive - Personal] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-09-02] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Christopher\AppData\Local\MEGAsync\ShellExtX64.dll [2021-01-28] (Mega Limited -> )

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvmdi.inf_amd64_799504293a3d3200\nvshext.dll [2021-08-06] (Nvidia Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2021-09-02] (Malwarebytes Corporation -> Malwarebytes)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2021-08-19 16:56 - 2021-08-19 16:55 - 000634880 _____ () [Datei ist nicht signiert] \\?\C:\Program Files\LGHUB\resources\app.asar.unpacked\node_modules\keytar\build\Release\keytar.node

2019-11-18 11:29 - 2019-11-18 11:29 - 000098816 _____ () [Datei ist nicht signiert] C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\sradarlauncher.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 002815488 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libcrypto-1_1-x64.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 000678400 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\libssl-1_1-x64.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 000046592 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\bearer\qgenericbearer.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 006270976 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Core.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 001389568 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Network.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 000157184 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5WebSockets.dll

2021-09-01 20:44 - 2021-09-01 20:44 - 000210432 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\Qt5Xml.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\ProgramData:BDSDRMHK [64]

AlternateDataStreams: C:\Users\All Users:BDSDRMHK [64]

AlternateDataStreams: C:\ProgramData\Anwendungsdaten:BDSDRMHK [64]

AlternateDataStreams: C:\Users\Christopher\AppData\Local\Temp:$DATA [16]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2021-05-28] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-27] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2021-08-27] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run: => "Elgato Sound Capture"

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"

HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\Run: => "Spotify"

HKU\S-1-5-21-3197034990-4118748310-3737670740-1001\...\StartupApproved\Run: => "HolySnowflake"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [TCP Query User{469DD17B-1662-4F8B-8538-1CFA11C78619}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)

FirewallRules: [UDP Query User{469D887E-5775-4EC9-AAF3-8D3A7DB85749}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
 

==================== Wiederherstellungspunkte =========================
 

01-09-2021 10:39:37 Removed Save Wizard for PS4 MAX 
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64

Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}

Manufacturer: Cisco Systems

Service: vpnva

Problem: : This device is disabled. (Code 22)

Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (09/02/2021 12:19:43 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x240

Startzeit der fehlerhaften Anwendung: 0x01d79f7f75fa2ebe

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 5f0cfa94-00d4-41c6-96c3-f8f6b69af4e4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2021 12:19:42 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x240

Startzeit der fehlerhaften Anwendung: 0x01d79f7f75fa2ebe

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: e6e5d3f5-8834-4b09-9765-b26c4116b21e

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2021 12:19:40 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x3274

Startzeit der fehlerhaften Anwendung: 0x01d79f7f74335467

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 2bf54853-623a-4a9d-909a-11afad84cf05

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2021 12:19:39 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x3274

Startzeit der fehlerhaften Anwendung: 0x01d79f7f74335467

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 9dca8dec-543a-434e-acdb-5535ed6f38aa

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/02/2021 12:19:25 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbamtray.exe, Version: 4.0.0.1089, Zeitstempel: 0x6109559e

Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.14.1.0, Zeitstempel: 0x603971ce

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000219dc5

ID des fehlerhaften Prozesses: 0xb58

Startzeit der fehlerhaften Anwendung: 0x01d79f7f6b53fd32

Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

Pfad des fehlerhaften Moduls: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

Berichtskennung: 9e3e550b-5a27-43fa-b97c-31315b4f3d69

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/01/2021 11:58:16 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x2f74

Startzeit der fehlerhaften Anwendung: 0x01d79f7c7760afc4

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: 18d389d2-34e1-42f1-bc40-c2d762adb3d0

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/01/2021 11:58:15 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x2f74

Startzeit der fehlerhaften Anwendung: 0x01d79f7c7760afc4

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: e674c80c-cec9-4234-89b7-267f69db2cce

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (09/01/2021 11:58:15 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: ATKEX_cmd.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.1151, Zeitstempel: 0x5da51925

Ausnahmecode: 0x0eedfade

Fehleroffset: 0x0012b512

ID des fehlerhaften Prozesses: 0x2be8

Startzeit der fehlerhaften Anwendung: 0x01d79f7c76510040

Pfad der fehlerhaften Anwendung: C:\Program Files\Realtek\Audio\HDA\ATKEX_cmd.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\KERNELBASE.dll

Berichtskennung: fa434451-45e0-4dc9-bba5-d7403c1a441b

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Management and Security Application Local Management Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Gaming Services" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Gaming Services" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "LGHUB Updater Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Microsoft Office-Klick-und-Los-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (09/01/2021 11:56:02 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "EABackgroundService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

Windows Defender:

================

Date: 2021-09-01 11:42:59

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/RootAgent&threatid=2147727907&enterprise=0

Name: Trojan:Win64/RootAgent

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\AdwCleaner\Quarantine\v1\20210901.114155\2\WinmonProcessMonitor.sys#50B8293A3F329DF3

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: System

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: Unknown

Sicherheitsversion: AV: 1.347.836.0, AS: 1.347.836.0, NIS: 1.347.836.0

Modulversion: AM: 1.1.18400.5, NIS: 1.1.18400.5
 

Date: 2021-09-01 11:41:55

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/RootAgent&threatid=2147727907&enterprise=0

Name: Trojan:Win64/RootAgent

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\AdwCleaner\Quarantine\v1\20210901.114155\2\WinmonProcessMonitor.sys#50B8293A3F329DF3

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: CHRISTOPHER-PC\Christopher

Prozessname: C:\Users\Christopher\Downloads\adwcleaner_8.3.0.exe

Sicherheitsversion: AV: 1.347.836.0, AS: 1.347.836.0, NIS: 1.347.836.0

Modulversion: AM: 1.1.18400.5, NIS: 1.1.18400.5
 

Date: 2021-09-01 11:39:53

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/RootAgent&threatid=2147727907&enterprise=0

Name: Trojan:Win64/RootAgent

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\AdwCleaner\Quarantine\v1\20210901.113856\2\WinmonProcessMonitor.sys#50B8293A3F329DF3

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: System

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: Unknown

Sicherheitsversion: AV: 1.347.836.0, AS: 1.347.836.0, NIS: 1.347.836.0

Modulversion: AM: 1.1.18400.5, NIS: 1.1.18400.5
 

Date: 2021-09-01 11:38:57

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/RootAgent&threatid=2147727907&enterprise=0

Name: Trojan:Win64/RootAgent

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\AdwCleaner\Quarantine\v1\20210901.113856\2\WinmonProcessMonitor.sys#50B8293A3F329DF3

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: Echtzeitschutz

Benutzer: CHRISTOPHER-PC\Christopher

Prozessname: C:\Users\Christopher\Downloads\adwcleaner_8.3.0.exe

Sicherheitsversion: AV: 1.347.836.0, AS: 1.347.836.0, NIS: 1.347.836.0

Modulversion: AM: 1.1.18400.5, NIS: 1.1.18400.5
 

Date: 2021-09-01 11:36:17

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win64/RootAgent&threatid=2147727907&enterprise=0

Name: Trojan:Win64/RootAgent

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\AdwCleaner\Quarantine\v1\20210901.113520\2\WinmonProcessMonitor.sys#50B8293A3F329DF3

Erkennungsursprung: Lokaler Computer

Erkennungstype: Konkret

Erkennungsquelle: System

Benutzer: NT-AUTORITÄT\SYSTEM

Prozessname: Unknown

Sicherheitsversion: AV: 1.347.836.0, AS: 1.347.836.0, NIS: 1.347.836.0

Modulversion: AM: 1.1.18400.5, NIS: 1.1.18400.5



CodeIntegrity:

===============

Date: 2021-09-02 00:33:15

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume10\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume10\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. 3802 03/15/2018

Hauptplatine: ASUSTeK COMPUTER INC. MAXIMUS VIII HERO

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 13%

Installierter physikalischer RAM: 32706.37 MB

Verfügbarer physikalischer RAM: 28209.54 MB

Summe virtueller Speicher: 37570.37 MB

Verfügbarer virtueller Speicher: 30810.84 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:236.88 GB) (Free:91.34 GB) NTFS

Drive d: (Lokaler Datenträger) (Fixed) (Total:931.5 GB) (Free:393.53 GB) NTFS

Drive e: (Lokaler Datenträger) (Fixed) (Total:1863 GB) (Free:349.76 GB) NTFS

Drive f: (Lokaler Datenträger) (Fixed) (Total:232.76 GB) (Free:110.11 GB) NTFS
 

\\?\Volume{dbc87ede-719b-4f56-9b94-3ef41a523875}\ (Wiederherstellung) (Fixed) (Total:0.44 GB) (Free:0.43 GB) NTFS

\\?\Volume{7c8c810d-934f-42f1-905f-aee6074b311d}\ () (Fixed) (Total:0.53 GB) (Free:0.1 GB) NTFS

\\?\Volume{62912f0f-2eb6-f0af-1ae9-9623b24cc418}\ () (Fixed) (Total:18.33 GB) (Free:0 GB) NTFS

\\?\Volume{294cdc64-6c8e-8c7d-bfc0-f1663e2663b2}\ () (Fixed) (Total:0.91 GB) (Free:0 GB) NTFS

\\?\Volume{ca7d7eb6-6947-87b2-6b6d-7ed69f7cde51}\ () (Fixed) (Total:151.45 GB) (Free:0 GB) NTFS

\\?\Volume{46b8b30a-b774-031a-3140-8e827195daab}\ () (Fixed) (Total:14.46 GB) (Free:0 GB) NTFS

\\?\Volume{9b945542-a714-ec96-d2d1-40070ea79649}\ () (Fixed) (Total:2.69 GB) (Free:0 GB) NTFS

\\?\Volume{57632eb6-2e58-aee0-c3b3-41f762d36004}\ () (Fixed) (Total:1.33 GB) (Free:0 GB) NTFS

\\?\Volume{226526b1-b4af-08da-3a1b-5b1a21a0b378}\ () (Fixed) (Total:1.54 GB) (Free:0 GB) NTFS

\\?\Volume{6598ecb1-9f7c-21c7-1b8b-f214616731c6}\ () (Fixed) (Total:4 GB) (Free:0 GB) NTFS

\\?\Volume{961a929f-03fb-f8a6-54ed-49c94a893164}\ () (Fixed) (Total:27.37 GB) (Free:0 GB) NTFS

\\?\Volume{ce411661-6bbf-2d14-9d73-47f63d0bba7a}\ () (Fixed) (Total:37.77 GB) (Free:0 GB) NTFS

\\?\Volume{fd777bb3-a00a-2c3f-e601-c5fc144c3674}\ () (Fixed) (Total:38.61 GB) (Free:0 GB) NTFS

\\?\Volume{4bcd32f0-3ae2-657e-a652-b76c8d68aade}\ () (Fixed) (Total:17.16 GB) (Free:0 GB) NTFS

\\?\Volume{5fba4bcc-ada8-0a28-c8ae-718d1bc235dd}\ () (Fixed) (Total:20.9 GB) (Free:0 GB) NTFS

\\?\Volume{a826d7b7-5bd9-be87-29d7-b51bb7610af9}\ () (Fixed) (Total:7.82 GB) (Free:0 GB) NTFS

\\?\Volume{bad8cc7d-f1b0-c100-9e02-882dd062cdcd}\ () (Fixed) (Total:9.24 GB) (Free:0 GB) NTFS

\\?\Volume{c75f4231-7509-3283-68b6-f4827ac6ac15}\ () (Fixed) (Total:2.84 GB) (Free:0 GB) NTFS

\\?\Volume{809cacdc-fba7-c4a2-aaf1-24f87a59cde9}\ () (Fixed) (Total:11.2 GB) (Free:0 GB) NTFS

\\?\Volume{c2d56657-8da2-b02b-de8a-574157dd5886}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{d8e7666c-7a83-0ee5-dcca-7ccbb1ed7090}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{f81ee982-ad3a-e0f3-2325-08d886cd66c9}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{17b9d833-c057-dc2f-8afe-e0747553a43c}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{a74463e5-eb45-4ae5-3791-12ad3e320325}\ () (Fixed) (Total:1.1 GB) (Free:0 GB) NTFS

\\?\Volume{cad7cfcf-dde4-f233-90a6-6b0dfa6cff63}\ () (Fixed) (Total:10.54 GB) (Free:0 GB) NTFS

\\?\Volume{5a2f1b75-7cf3-dc65-6c28-27ec9b597b0b}\ () (Fixed) (Total:29.38 GB) (Free:0 GB) NTFS

\\?\Volume{24fe11b9-311f-75dd-59f6-9f657991d39a}\ () (Fixed) (Total:122.6 GB) (Free:0 GB) NTFS

\\?\Volume{fef99fd2-93ea-80ca-9155-61e105c116a9}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{fb1a2230-9390-b2b1-30cc-d834456616f8}\ () (Fixed) (Total:4.78 GB) (Free:0 GB) NTFS

\\?\Volume{6c13b06c-a0dc-e5f8-ab8a-7be7b50dd034}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{39facdf8-c027-8a74-e579-ac7250cc7dc1}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{e930a4ec-d1bd-3b79-11a2-3df525ee525a}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{25fe2847-8cfa-b6c1-a0a1-3b63d52288c4}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{11d48397-873b-a502-bb32-9165d1967c1a}\ () (Fixed) (Total:11.34 GB) (Free:0 GB) NTFS

\\?\Volume{597f3ecb-c2a4-10db-4e94-b35c4896fe8a}\ () (Fixed) (Total:29.16 GB) (Free:0 GB) NTFS

\\?\Volume{a7537661-921f-ed59-a758-f2ff8a6db369}\ () (Fixed) (Total:0 GB) (Free:0 GB) NTFS

\\?\Volume{d60e95a3-9df7-45b5-0d8f-37f72c95d1d4}\ () (Fixed) (Total:2.84 GB) (Free:0 GB) NTFS

\\?\Volume{f1a81145-98ed-cd80-3af1-c9c79eb197d7}\ () (Fixed) (Total:0.92 GB) (Free:0 GB) NTFS

\\?\Volume{4aa1a03e-1f9e-ea3a-6ce5-297eb250d3b6}\ () (Fixed) (Total:12.41 GB) (Free:0 GB) NTFS

\\?\Volume{2132be11-e903-22fc-6da2-e43b59b94feb}\ () (Fixed) (Total:54.98 GB) (Free:0 GB) NTFS

\\?\Volume{7315615c-ffe3-7221-f856-5e20ae353d35}\ () (Fixed) (Total:37.54 GB) (Free:0 GB) NTFS

\\?\Volume{568ca148-bda1-2a91-8a10-ce4054ce433b}\ () (Fixed) (Total:47.51 GB) (Free:0 GB) NTFS

\\?\Volume{a2cbf1b3-e2b0-8f10-cf28-6e15fcda124a}\ () (Fixed) (Total:10.98 GB) (Free:0 GB) NTFS

\\?\Volume{79252ef8-f285-2269-5a8e-36121bb43f5a}\ () (Fixed) (Total:2.09 GB) (Free:0 GB) NTFS

\\?\Volume{b103b603-9b74-ed5a-137e-1244589ecf8b}\ () (Fixed) (Total:7.4 GB) (Free:0 GB) NTFS

\\?\Volume{59a2667d-16a2-466d-b98f-a0e45aed622a}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 0656FCAD)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Protective MBR) (Size: 232.9 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 2 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 3 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 4.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 5.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 6.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 7.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 8.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 9.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 10.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 11.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 12.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 13.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 14.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 15.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 16.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 17.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 18.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 19.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 20.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 21.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 22.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 23.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 24.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 25.
 

==================== Ende von Addition.txt =======================