Trojaner-Board - Google Chrome Browser in Privater Nutzung wird von einer Organisation verwaltet

Tschuldigung. Hatte vorher schon die verlinkte Seite gelesen, aber nach der 10. goldenen Regel, hab ich die weiterführung für das zusammenstellen der Informationen übersehen. Dachte dort ginge es nicht mehr weiter.

Nur konnte ich keine Logfile vom Defender und dem MBAM finden.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 26-04-2023

durchgeführt von cenan (Administrator) auf THORSTEN (Notebook NH5x_7xDCx_DDx) (27-04-2023 21:30:56)

Gestartet von C:\Users\cenan\Downloads\FRST64.exe

Geladene Profile: cenan

Plattform: Microsoft Windows 10 Home Version 22H2 19045.2846 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: Chrome

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>

(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_71cc42bf8b620f67\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_71cc42bf8b620f67\igfxEM.exe

(explorer.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> ) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe

(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <32>

(explorer.exe ->) (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenu.exe

(explorer.exe ->) (Venturi) [Datei ist nicht signiert] C:\Program Files (x86)\HideVolumeOSD\HideVolumeOSD.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.212\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.212\GoogleCrashHandler64.exe

(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_b117548b2e075ba1\aesm_service.exe

(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\SocketHeciServer.exe

(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe

(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_71cc42bf8b620f67\igfxCUIService.exe

(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_4789e47f6228caeb\OneApp.IGCC.WinService.exe

(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_23a1c1315f01c788\IntelCpHDCPSvc.exe

(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_23a1c1315f01c788\IntelCpHeciSvc.exe

(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_c52b34f1b30918c5\RstMwService.exe

(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe

(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GamingServices_11.76.5001.0_x64__8wekyb3d8bbwe\gamingservices.exe

(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.GamingServices_11.76.5001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_cedafa39846f03cf\DCHUService.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.) C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\NisSrv.exe

(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_5ff814e6f7948a70\Display.NvContainer\NVDisplay.Container.exe <2>

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> ) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt\IGCC.exe

(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23032.186.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe

(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.22031.10091.0_x64__8wekyb3d8bbwe\Music.UI.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.2780_none_7df1b05c7ca1f251\TiWorker.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1084712 2020-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Open-Shell Start Menu] => C:\Program Files\Open-Shell\StartMenu.exe [216576 2020-09-26] (Open-Shell) [Datei ist nicht signiert]

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [711288 2022-09-15] (Oracle America, Inc. -> Oracle Corporation)

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33671648 2022-06-16] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {0df31ce6-929f-11ed-b8d3-80fa5b88b642} - "V:\Browse.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {1bde0eb3-dbd8-11ed-b8dc-80fa5b88b642} - "V:\CDSAMPLE\AUTORUN\AUTORUN.EXE" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {1bde128a-dbd8-11ed-b8dc-80fa5b88b642} - "V:\setup.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {1bde129c-dbd8-11ed-b8dc-80fa5b88b642} - "V:\setup.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {1bde18b6-dbd8-11ed-b8dc-80fa5b88b642} - "V:\CDSAMPLE\AUTORUN\AUTORUN.EXE" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {8e25dae8-8e7b-11ed-b8d2-80fa5b88b642} - "V:\Browse.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {e70ed0de-9375-11ed-b8d4-80fa5b88b642} - "V:\Browse.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {e70ed14c-9375-11ed-b8d4-80fa5b88b642} - "V:\Browse.exe" 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\MountPoints2: {e70ed309-9375-11ed-b8d4-80fa5b88b642} - "V:\Browse.exe" 

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\112.0.5615.138\Installer\chrmstp.exe [2023-04-20] (Google LLC -> Google LLC)

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] -> 

HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\Windows\SysWOW64\advpack.dll [2019-12-07] (Microsoft Windows -> Microsoft Corporation)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HideVolumeOSD.lnk [2021-10-08]

ShortcutTarget: HideVolumeOSD.lnk -> C:\Program Files (x86)\HideVolumeOSD\HideVolumeOSD.exe (Venturi) [Datei ist nicht signiert]

GroupPolicy: Beschränkung ? <==== ACHTUNG

Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0534007D-8D24-498C-85A7-4A6DE6EB119E} - System32\Tasks\ChrUpdate => C:\Users\cenan\AppData\Local\SystemConfigs\App.exe [78848 2023-02-14] () [Datei ist nicht signiert]

Task: {126ACB9C-FD7F-4A70-9B3D-9AED3D8DA7A5} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {245A5EEB-6B90-442D-A145-186C7DE476A9} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {26B51629-C747-4586-A701-7611ECA097AA} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {31C93B1B-B3FE-43CB-BDFA-3B8687752F1C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)

Task: {380565E1-5F53-431A-B5EB-F778EC13A263} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [73184 2022-11-16] (Microsoft Corporation -> Microsoft)

Task: {463DC7A7-E7E8-409D-A1CF-593ADBEEF455} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2010984478-2476206877-2401102801-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4196784 2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

Task: {497DE800-932F-4483-B197-2C0E0FB504C8} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22855048 2020-10-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {4D93E10E-7D06-409C-9781-7EF7793374E0} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2638856 2023-04-23] (Overwolf Ltd -> Overwolf LTD)

Task: {62F23CD0-F957-4D0D-95A6-609B9B985FED} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {6951C1A8-8126-4B57-86DD-EBC22139CABC} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {7B2CC7EC-6FCB-48FB-A490-DB5D9C040B55} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {86E59CBB-00C3-4B0C-A78D-B0540F4706F0} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {9F678E5B-8C0D-45B0-A822-92B6AF405A01} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B5D867E6-90E2-4FAE-B03C-1D685C186973} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4196784 2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

Task: {B6AB02F2-2922-4950-86BF-015BA1E88562} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {B81B43AC-2B80-4635-BC1D-FA1023AF7FF4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22855048 2020-10-08] (Microsoft Corporation -> Microsoft Corporation)

Task: {C24335B2-E009-4E8C-B722-CFA00DC0FCB1} - System32\Tasks\GoogleUpdateTaskMachineUA{B40158C1-7BB6-4A96-A4DF-F0AEA39B6D6D} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-15] (Google LLC -> Google LLC)

Task: {C37A2669-8D61-497C-BC3F-42BF0B157F2B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {C775AB62-FA64-4705-9373-CAC80FE858E9} - System32\Tasks\Uninstall AdwCleaner Application => C:\Users\cenan\Downloads\adwcleaner.exe /uninstall (Keine Datei)

Task: {DA8D9FA8-6242-48B2-BD1F-E8BBB5456366} - System32\Tasks\Remove AdwCleaner Application => CMD.EXE /C DEL /F /Q "C:\Users\cenan\Downloads\adwcleaner.exe"

Task: {DB0BA11A-886E-4D0F-B06A-E005C728C005} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {DD071109-EB80-4520-B0B3-CA2887C878C1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MpCmdRun.exe [1645864 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {E0F06222-B24C-41F3-9C9D-A348641575AB} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117584 2020-11-03] (Microsoft Corporation -> Microsoft Corporation)

Task: {F93D99DC-88FA-4AF5-A99A-60FAD9FA7834} - System32\Tasks\GoogleUpdateTaskMachineCore{B28D6199-CD66-468E-B9A0-7135D7EDC0B9} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-15] (Google LLC -> Google LLC)

Task: {F9866133-BAA7-4F0B-B9B0-462EEA001C3B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [117584 2020-11-03] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{e81ea3a1-7f2c-41ce-8ca4-3d6bfd9175d9}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{e828856a-a33b-45eb-ac0b-fd12b50e7117}: [DhcpNameServer] 192.168.178.1
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\cenan\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-05]

Edge HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]
 

FireFox:

========

FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden

FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden

FF Plugin: @java.com/DTPlugin,version=11.351.2 -> C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\npDeployJava1.dll [2022-11-01] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.351.2 -> C:\Program Files\Java\jre1.8.0_351\bin\plugin2\npjp2.dll [2022-11-01] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)
 

Chrome: 

=======

CHR DefaultProfile: Default

CHR Profile: C:\Users\cenan\AppData\Local\Google\Chrome\User Data\Default [2023-04-27]

CHR Extension: (Kaspersky Protection) - C:\Users\cenan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2023-04-19]

CHR Extension: (Apps) - C:\Users\cenan\AppData\Local\Google\Chrome\User Data\Default\Extensions\iglfjaeojcakllgbfalclepdncgidelo [2023-02-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\cenan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-02-15]

CHR Extension: (Apps) - C:\Users\cenan\AppData\Local\ServiceApp\apps-helper [2023-02-15]

CHR Profile: C:\Users\cenan\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-04-22]

CHR Profile: C:\Users\cenan\AppData\Local\Google\Chrome\User Data\System Profile [2023-04-25]

CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm

CHR HKLM\...\Chrome\Extension: [iglfjaeojcakllgbfalclepdncgidelo] - C:\Users\cenan\AppData\Local\ServiceApp\apps-helper\apps.crx [2023-02-15]

CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm

CHR HKLM-x32\...\Chrome\Extension: [iglfjaeojcakllgbfalclepdncgidelo] - C:\Users\cenan\AppData\Local\ServiceApp\apps-helper\apps.crx [2023-02-15]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 CCDCHUService; C:\Windows\System32\DriverStore\FileRepository\acpibridge1.inf_amd64_cedafa39846f03cf\DCHUService.exe [79128 2021-09-21] (Microsoft Windows Hardware Compatibility Publisher -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8945512 2020-10-08] (Microsoft Corporation -> Microsoft Corporation)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [926176 2021-03-16] (Epic Games Inc. -> Epic Games, Inc.)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncHelper.exe [3472288 2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1874272 2021-03-26] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6840672 2021-03-26] (GOG Sp. z o.o. -> GOG.com)

R2 GamingServices; C:\Program Files\WindowsApps\Microsoft.GamingServices_11.76.5001.0_x64__8wekyb3d8bbwe\GamingServices.exe [75256 2023-04-13] (Microsoft Corporation -> )

R2 GamingServicesNet; C:\Program Files\WindowsApps\Microsoft.GamingServices_11.76.5001.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe [75256 2023-04-13] (Microsoft Corporation -> )

R2 HKClipSvc; C:\Program Files (x86)\ControlCenter\Driver\x64\HKClipSvc.exe [431696 2019-03-06] (Microsoft Windows Hardware Compatibility Publisher -> Insyde Software Corp.)

R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10207488 2022-12-16] (Logitech Inc -> Logitech, Inc.)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.071.0402.0001\OneDriveUpdaterService.exe [3807664 2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2557656 2021-11-08] (Electronic Arts, Inc. -> Electronic Arts)

R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476184 2021-11-08] (Electronic Arts, Inc. -> Electronic Arts)

S3 OverwolfUpdater; C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe [2638856 2023-04-23] (Overwolf Ltd -> Overwolf LTD)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\NisSrv.exe [3228400 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe [133536 2023-04-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S2 AVP21.3; "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\avp.exe" -r [X]

S3 klvssbridge64_21.3; "C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\vssbridge64.exe" [X]

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_5ff814e6f7948a70\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_5ff814e6f7948a70\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AcpiBridge; C:\Windows\System32\drivers\AcpiBridge.sys [54176 2021-09-08] (Insyde Software Corp. -> Insyde Software Corporation)

R3 ANXUcmCxCD; C:\Windows\System32\drivers\ANXUcmCxCD.sys [101592 2020-06-30] (Analogix Semiconductor, Inc. -> )

R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [237288 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R3 HKKbdFltr; C:\Windows\system32\DRIVERS\HKKbdFltr.sys [40320 2019-03-06] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.)

R3 HKMouFltr; C:\Windows\system32\DRIVERS\HKMouFltr.sys [38552 2019-03-07] (WDKTestCert stone.cheng,131963286194994418 -> Insyde Software Corp.)

R1 klbackupdisk; C:\Windows\system32\DRIVERS\klbackupdisk.sys [105280 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klbackupflt; C:\Windows\System32\DRIVERS\klbackupflt.sys [206600 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 kldisk; C:\Windows\system32\DRIVERS\kldisk.sys [119568 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [41656 2021-02-19] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)

R1 klflt; C:\Windows\system32\DRIVERS\klflt.sys [522504 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klgse; C:\Windows\System32\DRIVERS\klgse.sys [694056 2022-04-05] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klhk; C:\Windows\system32\DRIVERS\klhk.sys [1571680 2022-04-05] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [290600 2022-05-01] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

S3 KLIF; C:\Windows\System32\DRIVERS\klif.sys [1049864 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [90896 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R3 klkbdflt; C:\Windows\system32\DRIVERS\klkbdflt.sys [104728 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R3 klmouflt; C:\Windows\system32\DRIVERS\klmouflt.sys [107328 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klpd; C:\Windows\System32\DRIVERS\klpd.sys [78088 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klpnpflt; C:\Windows\system32\DRIVERS\klpnpflt.sys [88328 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R0 klupd_klif_arkmon; C:\Windows\System32\Drivers\klupd_klif_arkmon.sys [309272 2022-05-01] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

S3 klupd_klif_klark; C:\Windows\System32\Drivers\klupd_klif_klark.sys [319176 2022-05-05] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R0 klupd_klif_klbg; C:\Windows\System32\Drivers\klupd_klif_klbg.sys [116008 2022-05-01] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

S3 klupd_klif_mark; C:\Windows\System32\Drivers\klupd_klif_mark.sys [227664 2022-05-01] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klwfp; C:\Windows\system32\DRIVERS\klwfp.sys [150280 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 klwtp; C:\Windows\system32\DRIVERS\klwtp.sys [325400 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

R1 kneps; C:\Windows\system32\DRIVERS\kneps.sys [294680 2022-02-17] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)

S3 logi_audio_surround; C:\Windows\system32\drivers\logi_audio_surround.sys [52536 2022-12-12] (Logitech Inc -> Logitech)

S3 logi_generic_hid_filter; C:\Windows\system32\drivers\logi_generic_hid_filter.sys [51544 2022-06-06] (WDKTestCert builder,132743893872553407 -> Logitech)

R3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [44880 2022-09-23] (Logitech Inc -> Logitech)

S3 logi_joy_hid_filter; C:\Windows\system32\drivers\logi_joy_hid_filter.sys [53640 2022-06-06] (WDKTestCert builder,132743893872553407 -> Logitech)

S3 logi_joy_hid_lo; C:\Windows\system32\drivers\logi_joy_hid_lo.sys [41280 2022-06-06] (WDKTestCert builder,132743893872553407 -> Logitech)

S3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [32080 2022-09-23] (Logitech Inc -> Logitech)

R3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [73040 2022-09-23] (Logitech Inc -> Logitech)

R3 MpKsla0d91cef; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{8B5A3311-8985-4360-B0B5-EFDD4E60F214}\MpKslDrv.sys [211208 2023-04-27] (Microsoft Windows -> Microsoft Corporation)

R3 NvModuleTracker; C:\Windows\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)

R3 nvpcf; C:\Windows\System32\drivers\nvpcf.sys [238608 2023-03-17] (NVIDIA Corporation -> NVIDIA Corporation)

S3 segwindrv; C:\Windows\System32\drivers\segwindrvx64.sys [93600 2019-11-08] (Insyde Software Corp. -> Insyde Software Corp.)

R1 ViGEmBus; C:\Windows\System32\drivers\ViGEmBus.sys [165744 2020-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [49600 2023-04-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [497920 2023-04-13] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [99608 2023-04-13] (Microsoft Windows -> Microsoft Corporation)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2069-02-15 15:28 - 2005-02-14 11:39 - 000286720 ____R C:\Users\cenan\Downloads\server.dll

2069-02-15 15:17 - 2005-02-09 17:55 - 005987980 _____ C:\Users\cenan\Downloads\SPEED2.EXE

2023-04-27 21:30 - 2023-04-27 21:31 - 000029932 _____ C:\Users\cenan\Downloads\FRST.txt

2023-04-27 21:30 - 2023-04-27 21:31 - 000000000 ____D C:\FRST

2023-04-27 21:29 - 2023-04-27 21:29 - 002382336 _____ (Farbar) C:\Users\cenan\Downloads\FRST64.exe

2023-04-27 18:23 - 2023-04-27 18:23 - 000026952 _____ (Wiper Software) C:\Windows\system32\wiperrm.exe

2023-04-27 18:23 - 2023-04-27 18:23 - 000000818 _____ C:\Users\cenan\Desktop\WiperSoft.lnk

2023-04-27 18:23 - 2023-04-27 18:23 - 000000000 ____D C:\Users\cenan\AppData\Roaming\WiperSoft

2023-04-27 18:22 - 2023-04-27 18:23 - 000000000 ____D C:\Program Files\WiperSoft

2023-04-25 12:48 - 2023-04-25 12:48 - 002441232 _____ (Wiper Software, UAB) C:\Users\cenan\Downloads\WiperSoft-installer.exe

2023-04-25 10:49 - 2023-04-25 11:18 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\Word

2023-04-25 10:49 - 2023-04-25 11:18 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\Office

2023-04-25 10:49 - 2023-04-25 10:49 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\UProof

2023-04-25 10:49 - 2023-04-25 10:49 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\Proof

2023-04-25 10:49 - 2023-04-25 10:49 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\AddIns

2023-04-25 10:27 - 2023-04-25 10:27 - 000003316 _____ C:\Windows\system32\Tasks\Remove AdwCleaner Application

2023-04-25 10:27 - 2023-04-25 10:27 - 000003298 _____ C:\Windows\system32\Tasks\Uninstall AdwCleaner Application

2023-04-18 13:21 - 2023-04-18 13:41 - 479059968 _____ C:\Users\cenan\Desktop\treiber win98.iso

2023-04-15 15:25 - 2023-04-15 15:25 - 000000000 ___HD C:\$WinREAgent

2023-04-14 14:47 - 2023-04-10 20:24 - 002172472 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe

2023-04-14 14:47 - 2023-04-10 20:24 - 002172472 _____ C:\Windows\system32\vulkaninfo.exe

2023-04-14 14:47 - 2023-04-10 20:24 - 001607728 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2023-04-14 14:47 - 2023-04-10 20:24 - 001607728 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2023-04-14 14:47 - 2023-04-10 20:24 - 001487912 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2023-04-14 14:47 - 2023-04-10 20:24 - 001479264 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll

2023-04-14 14:47 - 2023-04-10 20:24 - 001479264 _____ C:\Windows\system32\vulkan-1.dll

2023-04-14 14:47 - 2023-04-10 20:24 - 001226776 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2023-04-14 14:47 - 2023-04-10 20:24 - 001211440 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll

2023-04-14 14:47 - 2023-04-10 20:24 - 001211440 _____ C:\Windows\SysWOW64\vulkan-1.dll

2023-04-14 14:47 - 2023-04-10 20:20 - 001535976 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2023-04-14 14:47 - 2023-04-10 20:20 - 000852008 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll

2023-04-14 14:47 - 2023-04-10 20:20 - 000671256 _____ C:\Windows\system32\nvofapi64.dll

2023-04-14 14:47 - 2023-04-10 20:20 - 000506920 _____ C:\Windows\SysWOW64\nvofapi.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 002166296 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 001621016 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 001195008 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 000978968 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 000759296 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2023-04-14 14:47 - 2023-04-10 20:19 - 000741400 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe

2023-04-14 14:47 - 2023-04-10 20:18 - 013768728 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 011650088 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 006084136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 005911552 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 005834776 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 003429912 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2023-04-14 14:47 - 2023-04-10 20:18 - 000457752 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe

2023-04-14 14:47 - 2023-04-10 20:16 - 000853016 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe

2023-04-14 14:47 - 2023-04-10 20:15 - 006798784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2023-04-14 14:47 - 2023-04-08 15:12 - 000104369 _____ C:\Windows\system32\nvinfo.pb

2023-03-30 15:17 - 2023-03-30 15:17 - 000000000 ____D C:\Users\cenan\AppData\Local\CuddlyNights

2023-03-30 15:14 - 2023-03-30 15:14 - 000000000 ____D C:\Users\cenan\AppData\Local\CumOnMe

2023-03-29 18:09 - 2023-04-22 09:17 - 000000000 ____D C:\Users\cenan\Desktop\Games

2023-03-29 14:14 - 2023-03-29 14:14 - 000000000 ____D C:\Users\cenan\AppData\Local\Present4You

2023-03-29 13:26 - 2023-03-29 13:26 - 000000000 ____D C:\Users\cenan\AppData\Local\RebeccaSuckingham
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2023-04-27 21:29 - 2021-05-04 17:45 - 000000000 ____D C:\Program Files (x86)\Google

2023-04-27 21:29 - 2021-05-04 16:39 - 000000000 __SHD C:\Users\cenan\IntelGraphicsProfiles

2023-04-27 21:29 - 2020-11-03 18:53 - 000000000 ____D C:\ProgramData\NVIDIA

2023-04-27 21:26 - 2021-05-04 22:10 - 000000000 ____D C:\Users\cenan\AppData\Local\OpenShell

2023-04-27 18:38 - 2020-11-03 16:42 - 000000000 ____D C:\Windows\system32\SleepStudy

2023-04-27 18:22 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2023-04-27 17:56 - 2021-11-08 17:52 - 000000000 ____D C:\ProgramData\Origin

2023-04-27 14:52 - 2023-01-17 14:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NFS Underground 2

2023-04-27 14:52 - 2021-12-01 01:01 - 000000000 ____D C:\Users\cenan\AppData\LocalLow\Unity

2023-04-27 14:37 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2023-04-27 14:37 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness

2023-04-27 14:33 - 2021-05-04 18:20 - 000000000 ____D C:\Users\cenan\AppData\Local\Overwolf

2023-04-25 20:13 - 2020-11-03 16:48 - 001722792 _____ C:\Windows\system32\PerfStringBackup.INI

2023-04-25 20:13 - 2019-12-07 16:50 - 000744968 _____ C:\Windows\system32\perfh007.dat

2023-04-25 20:13 - 2019-12-07 16:50 - 000150354 _____ C:\Windows\system32\perfc007.dat

2023-04-25 20:13 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF

2023-04-25 20:09 - 2021-05-04 16:33 - 000000000 ____D C:\Users\cenan\AppData\Roaming\Microsoft\Windows

2023-04-25 19:06 - 2022-06-23 10:27 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2023-04-25 19:06 - 2020-11-03 18:52 - 000000000 ____D C:\Intel

2023-04-25 19:06 - 2020-11-03 16:42 - 000008192 ___SH C:\DumpStack.log.tmp

2023-04-25 19:06 - 2020-11-03 16:42 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2023-04-25 19:06 - 2019-12-07 11:03 - 000786432 _____ C:\Windows\system32\config\BBI

2023-04-25 11:55 - 2021-05-07 22:49 - 000000000 ____D C:\Users\cenan\AppData\Roaming\obs-studio

2023-04-25 00:07 - 2023-02-15 13:49 - 000004002 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA{B40158C1-7BB6-4A96-A4DF-F0AEA39B6D6D}

2023-04-25 00:07 - 2023-02-15 13:49 - 000003878 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore{B28D6199-CD66-468E-B9A0-7135D7EDC0B9}

2023-04-24 14:25 - 2021-05-04 16:39 - 000000000 ____D C:\Users\cenan\AppData\Local\D3DSCache

2023-04-24 14:23 - 2021-05-04 18:18 - 000000000 ____D C:\Program Files (x86)\Overwolf

2023-04-23 12:47 - 2020-11-03 16:43 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2023-04-22 18:08 - 2022-06-23 10:27 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2023-04-22 18:08 - 2022-06-23 10:27 - 000002155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2023-04-22 18:08 - 2021-12-12 20:34 - 000003596 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2010984478-2476206877-2401102801-1001

2023-04-22 09:11 - 2021-05-04 17:02 - 000000000 ____D C:\Users\cenan\Sicherungsdateien

2023-04-22 09:10 - 2021-05-04 16:33 - 000000000 ____D C:\Users\cenan

2023-04-20 23:37 - 2023-02-15 13:49 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2023-04-20 21:35 - 2021-12-23 14:13 - 000000000 ____D C:\Users\cenan\AppData\Roaming\discord

2023-04-20 21:35 - 2021-12-23 14:13 - 000000000 ____D C:\Users\cenan\AppData\Local\Discord

2023-04-15 23:54 - 2020-11-03 16:42 - 000455896 _____ C:\Windows\system32\FNTCACHE.DAT

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\DDFs

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions

2023-04-15 15:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr

2023-04-15 15:33 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp

2023-04-15 15:31 - 2020-11-03 16:44 - 003015680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll

2023-04-15 15:25 - 2021-05-07 22:40 - 000000000 ____D C:\Windows\system32\MRT

2023-04-15 15:23 - 2021-05-07 22:40 - 156112424 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2023-04-14 23:21 - 2021-05-05 12:48 - 000000000 ____D C:\Program Files (x86)\Steam

2023-04-14 14:50 - 2021-05-04 16:41 - 000000000 ____D C:\Users\cenan\AppData\Local\NVIDIA

2023-04-13 03:01 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports

2023-04-13 02:53 - 2022-11-01 23:01 - 000079352 _____ (Microsoft Corporation) C:\Windows\system32\xgamehelper.exe

2023-04-13 02:53 - 2022-11-01 23:01 - 000062968 _____ (Microsoft Corporation) C:\Windows\system32\xgamecontrol.exe

2023-04-13 02:53 - 2021-11-20 01:04 - 000165368 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll

2023-04-13 02:53 - 2020-11-03 16:47 - 002790904 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll

2023-04-13 02:53 - 2020-11-03 16:47 - 000484856 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll

2023-04-13 02:53 - 2020-11-03 16:47 - 000247248 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy.dll

2023-04-13 02:53 - 2020-11-03 16:47 - 000202232 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll

2023-04-13 02:53 - 2020-11-03 16:47 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll

2023-04-13 02:51 - 2020-11-03 16:42 - 000000000 ____D C:\Windows\system32\Drivers\wd

2023-04-13 02:50 - 2020-11-03 16:43 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2023-04-13 02:50 - 2020-11-03 16:43 - 000003632 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2023-04-10 20:15 - 2021-06-23 12:52 - 007935544 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2023-03-29 22:54 - 2021-12-01 00:54 - 000000000 ____D C:\Users\cenan\AppData\Roaming\yiffalicious

2023-03-29 18:05 - 2021-09-15 14:00 - 000000128 _____ C:\Users\cenan\AppData\Roaming\winscp.rnd

2023-03-29 13:36 - 2021-05-10 21:15 - 000000000 ____D C:\Users\cenan\AppData\Local\CrashDumps

2023-03-29 13:26 - 2021-06-12 23:57 - 000000000 ____D C:\Users\cenan\AppData\Local\UnrealEngine

2023-03-28 16:01 - 2021-06-13 02:07 - 000000000 ____D C:\Users\cenan\AppData\Local\WildLifeLauncher

2023-03-28 15:40 - 2021-09-15 20:57 - 000000000 ____D C:\ProgramData\Epic
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2021-09-15 14:00 - 2023-03-29 18:05 - 000000128 _____ () C:\Users\cenan\AppData\Roaming\winscp.rnd

2021-05-05 13:08 - 2021-09-01 20:44 - 000007619 _____ () C:\Users\cenan\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 26-04-2023

durchgeführt von cenan (27-04-2023 21:31:56)

Gestartet von C:\Users\cenan\Downloads

Microsoft Windows 10 Home Version 22H2 19045.2846 (X64) (2021-05-04 13:26:36)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-2010984478-2476206877-2401102801-500 - Administrator - Disabled)

cenan (S-1-5-21-2010984478-2476206877-2401102801-1001 - Administrator - Enabled) => C:\Users\cenan

DefaultAccount (S-1-5-21-2010984478-2476206877-2401102801-503 - Limited - Disabled)

Gast (S-1-5-21-2010984478-2476206877-2401102801-501 - Limited - Enabled)

WDAGUtilityAccount (S-1-5-21-2010984478-2476206877-2401102801-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: BullGuard Antivirus (Enabled - Up to date) {0C5A09FB-657F-B94D-DF1B-BB843C6EE0E4}

AV: Kaspersky Total Security (Enabled - Up to date) {4F76F112-43EB-40E8-11D8-F7BD1853EA23}

FW: BullGuard Firewall (Enabled) {346188DE-2F10-B815-F444-12B1C2BDA79F}

FW: Kaspersky Total Security (Disabled) {774D7037-0984-41B0-3A87-5E88E680AD58}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

7-Zip 19.00 (x64 edition) (HKLM\...\{23170F69-40C1-2702-1900-000001000000}) (Version: 19.00.00.0 - Igor Pavlov)

7-Zip 21.06 (x64) (HKLM\...\7-Zip) (Version: 21.06 - Igor Pavlov)

Adobe Reader 6.0.1 - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-A00000000001}) (Version: 006.000.001 - Adobe Systems Incorporated)

Autobahn Raser (HKLM-x32\...\Autobahn Raser) (Version:  - )

ControlCenter 3.0 Package v3.12 (HKLM-x32\...\{52CF73F1-9FE1-4917-AE56-55BF319988EC}) (Version: 3.12 - Control Center)

CurseForge (HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\Overwolf_cchhcaiapeikjbdbpfplgmpobbcdkdaphclbmkbj) (Version: 0.223.1.9730 - Overwolf app)

Discord (HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)

Documentation Manager (HKLM\...\{623332F1-D628-481B-91CD-8C08F50AA9B4}) (Version: 21.60.0.5 - Intel Corporation) Hidden

Dynamic Application Loader Host Interface Service (HKLM\...\{D63BD6A4-EE54-4D60-9B15-1587DD32B699}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Epic Games Launcher (HKLM-x32\...\{2DFD5B26-4543-4112-8780-2F48DB87333A}) (Version: 1.2.35.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Epic Online Services (HKLM-x32\...\{0B736177-814A-4ADE-81D1-66A0FDD55BB4}) (Version: 1.1.11.0 - Epic Games, Inc.)

Free WMA to MP3 Converter 1.16 (HKLM-x32\...\Free WMA to MP3 Converter_is1) (Version:  - Jodix Technologies Ltd.)

FTB App (HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\Overwolf_cmogmmciplgmocnhikmphehmeecmpaggknkjlbag) (Version: 1.23.412.1437 - Overwolf app)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 112.0.5615.138 - Google LLC)

HideVolumeOSD 1.2 (HKLM-x32\...\HideVolumeOSD_is1) (Version: 1.2 - Venturi)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel(R) Chipset Device Software (HKLM\...\{44C34709-F068-4CBC-8A71-515EDBC3B2A6}) (Version: 10.1.18383.8213 - Intel Corporation) Hidden

Intel(R) Chipset Device Software (HKLM-x32\...\{afad3740-3061-4b48-a9ab-6f1435cb3dd6}) (Version: 10.1.18383.8213 - Intel(R) Corporation)

Intel(R) HID Event Filter (HKLM-x32\...\3FB06EEC-013D-4366-9918-71B97DFB84EB) (Version: 2.2.1.377 - Intel Corporation)

Intel(R) Icls (HKLM\...\{F2BE9A7C-3C2D-4E8A-8C43-68AD76479889}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) LMS (HKLM\...\{1FC035FB-00A0-4109-BCF0-60F9483B61D1}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2021.14.0.1623 - Intel Corporation)

Intel(R) Management Engine Components (HKLM\...\{DAEC227B-CB34-470B-9D02-E239CE87FAA7}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Management Engine Components (HKLM\...\{FE2CA70C-EEC3-419E-AAC3-C2990F59C79A}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Management Engine Driver (HKLM\...\{3287E1FC-36EE-459E-AB15-FA2BA93EDC33}) (Version: 1.0.0.0 - Intel Corporation) Hidden

Intel(R) Serial IO (HKLM\...\{0940A8E6-DBBC-4554-B07D-EBFB10627716}) (Version: 30.100.2020.7 - Intel Corporation) Hidden

Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)

Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000060-0210-1031-84C8-B8D95FA3C8C3}) (Version: 21.60.0.4 - Intel Corporation)

Intel® Software Installer (HKLM-x32\...\{e1d82936-c734-4d7f-a993-42f3e8bf0608}) (Version: 21.60.0.5 - Intel Corporation) Hidden

Java 8 Update 351 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180351F0}) (Version: 8.0.3510.10 - Oracle Corporation)

Java(TM) SE Development Kit 16.0.2 (64-bit) (HKLM\...\{84539E3B-68B6-54F1-9CA3-EA920673C714}) (Version: 16.0.2.0 - Oracle Corporation)

Kaspersky Total Security (HKLM-x32\...\{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky) Hidden

Kaspersky Total Security (HKLM-x32\...\InstallWIX_{4FC79BE9-AD63-46C0-9626-E4F6BCE6A976}) (Version: 21.3.10.391 - Kaspersky)

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

LEGO Racers (HKLM-x32\...\LEGO Racers) (Version:  - )

LEGO Racers 2 (HKLM-x32\...\{3DD2E9EA-0544-4162-B8BE-E21E994E9F3B}) (Version:  - )

Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2022.12.348746 - Logitech)

Microsoft .NET Host - 5.0.6 (x64) (HKLM\...\{0541E599-10CB-44F4-A33A-32FE6DEA2F49}) (Version: 40.24.30020 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 5.0.6 (x64) (HKLM\...\{54F41FBB-AB2F-46B5-AA28-3C9492066E9C}) (Version: 40.24.30020 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 5.0.6 (x64) (HKLM\...\{DDBF9749-FF6E-419C-BAAD-9F4948B75DDE}) (Version: 40.24.30020 - Microsoft Corporation) Hidden

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.13231.20390 - Microsoft Corporation)

Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.13231.20390 - Microsoft Corporation)

Microsoft 365 - es-es (HKLM\...\O365HomePremRetail - es-es) (Version: 16.0.13231.20390 - Microsoft Corporation)

Microsoft 365 - fr-fr (HKLM\...\O365HomePremRetail - fr-fr) (Version: 16.0.13231.20390 - Microsoft Corporation)

Microsoft 365 - it-it (HKLM\...\O365HomePremRetail - it-it) (Version: 16.0.13231.20390 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 112.0.1722.58 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 112.0.1722.58 - Microsoft Corporation)

Microsoft GameInput (HKLM-x32\...\{1F2B6AF3-C260-8666-5950-E3FEDBC851D6}) (Version: 10.1.22621.3036 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 23.071.0402.0001 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{89581302-705F-42C5-99B0-E368A845DAD5}) (Version: 3.70.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.34.31931 (HKLM-x32\...\{d4cecf3b-b68f-4995-8840-52ea0fab646e}) (Version: 14.34.31931.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.34.31931 (HKLM-x32\...\{6ba9fb5e-8366-4cc4-bf65-25fe9819b2fc}) (Version: 14.34.31931.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.34.31931 (HKLM\...\{EAE242B1-0A26-485A-BFEB-0292EE9F03CB}) (Version: 14.34.31931 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.34.31931 (HKLM\...\{CF4C347D-954E-4543-88D2-EC17F07F466F}) (Version: 14.34.31931 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.34.31931 (HKLM-x32\...\{C2662EFF-06E6-4FD1-9D6D-FDCA91025757}) (Version: 14.34.31931 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.34.31931 (HKLM-x32\...\{AB1BDF73-7393-42CE-812D-9A90918814D5}) (Version: 14.34.31931 - Microsoft Corporation) Hidden

Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 3.4.2244.14676 - Microsoft Corporation)

Microsoft Visual Studio Setup Configuration (HKLM-x32\...\{B1CFE19E-298A-4D14-BACD-CAA36AC4895B}) (Version: 3.4.1128.26111 - Microsoft Corporation) Hidden

Microsoft Visual Studio Setup WMI Provider (HKLM-x32\...\{85516DED-4402-44CD-9D01-1D1F3D0C0178}) (Version: 3.4.1128.26111 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.6 (x64) (HKLM\...\{0F871294-4452-40AB-BAAD-A1D624E7E405}) (Version: 40.24.30021 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 5.0.6 (x64) (HKLM-x32\...\{744f4ca7-5613-4d87-8332-b816ecf7dabd}) (Version: 5.0.6.30021 - Microsoft Corporation)

Moonlighter - Between Dimensions (HKLM-x32\...\1546956723_is1) (Version: 1.11.22 - GOG.com)

Moonlighter (HKLM-x32\...\2147483047_is1) (Version: 1.11.22 - GOG.com)

Need for Speed Underground 2 (HKLM-x32\...\Need for Speed Underground 2) (Version: 1.2 - Electronic Arts)

Nefarius Virtual Gamepad Emulation Bus Driver (HKLM\...\{93D91F60-7C94-4A79-863F-EA713D2EB3F3}) (Version: 1.17.333.0 - Nefarius Software Solutions e.U.)

NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.27.0.112 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.112 - NVIDIA Corporation)

NVIDIA Grafiktreiber 531.61 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 531.61 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)

NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 26.1.1 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.13231.20200 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0409-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-040C-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0410-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0C0A-0000-0000000FF1CE}) (Version: 16.0.13231.20126 - Microsoft Corporation) Hidden

Open-Shell (HKLM\...\{F4B6EE58-F183-4B0D-930B-4480673C0F5B}) (Version: 4.4.160 - The Open-Shell Team)

OptaneDowngradeGuard (HKLM\...\{86B0E6C1-32E0-42CC-BC4F-BF3C0730CECB}) (Version: 18.0.0.0 - Intel Corporation) Hidden

Origin (HKLM-x32\...\Origin) (Version: 10.5.106.49298 - Electronic Arts, Inc.)

Overwolf (HKLM-x32\...\Overwolf) (Version: 0.221.109.14 - Overwolf Ltd.)

Overwolf.Setup.VC100CRTx64.Dist (HKLM\...\{EC9D5554-6852-4A55-81BB-AC02C7A8CFED}) (Version: 1.0.0 - Overwolf)

Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.19041.21336 - Realtek Semiconductor Corp.)

Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.38.1118.2019 - Realtek)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8858.1 - Realtek Semiconductor Corp.)

RstDowngradeGuard (HKLM\...\{13C2A26E-7AD4-4D82-BB4F-DEA6E871B958}) (Version: 18.0.0.0 - Intel Corporation) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Twitch (HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 8.0.0 - Twitch Interactive, Inc.)

Universal CRT Redistributable (HKLM-x32\...\{0460C87B-7F4C-3170-FAC9-B7A6AE5CE4E9}) (Version: 10.0.26624 - Microsoft Corporation) Hidden

Unreal Tournament 2004 (HKLM-x32\...\{394DC0BC-5476-4260-B52C-BDE1BDEFA958}) (Version: 1.00.0000 - Epic Games)

Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{C22F49B1-0F67-47DC-A490-E8B4B6558EA9}) (Version: 8.91.0.0 - Microsoft Corporation)

Visual Studio Community 2022 (HKLM-x32\...\d8baae4e) (Version: 17.4.1 - Microsoft Corporation)

VS Script Debugging Common (HKLM\...\{C8EA234A-FC2F-4EEC-BF7F-DB14C28C84D2}) (Version: 17.0.118.0 - Microsoft Corporation) Hidden

vs_communitymsires (HKLM-x32\...\{054FA51E-54FC-466F-9A1C-7AB520F2DF83}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_communitysharedmsi (HKLM-x32\...\{B56EF9C1-B982-45B1-BEB5-3C8F50B21CF2}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_communityx64msi (HKLM\...\{9BF7BDD3-62E8-4E47-AF96-13EA1EB853AD}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_CoreEditorFonts (HKLM-x32\...\{6AA3DE9F-ADDE-463B-8F29-27DD247C5282}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_devenvsharedmsi (HKLM-x32\...\{04D84C30-B442-49D2-A139-B8AAA7ACD445}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_devenx64vmsi (HKLM\...\{0DE775A3-1C63-4210-9CDC-D23F5330D715}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_filehandler_amd64 (HKLM-x32\...\{12B0A225-610B-43DA-8585-E2EAD563D611}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_filehandler_x86 (HKLM-x32\...\{56373DD6-9A8E-4C0C-95F6-F64DF2054A6F}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_FileTracker_Singleton (HKLM-x32\...\{49559293-3192-40D3-864C-5AB88E744A79}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_minshellinteropsharedmsi (HKLM-x32\...\{1EF48E65-5B07-4502-B6C2-43BC8311DAC3}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_minshellinteropx64msi (HKLM\...\{5691C5AB-0847-4862-8C49-43245E7DCE2C}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_minshellmsires (HKLM-x32\...\{90A40604-2094-4524-9025-849BB6139C4A}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_minshellsharedmsi (HKLM-x32\...\{C32CB038-8A83-4860-853F-9168214E3536}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_minshellx64msi (HKLM\...\{1AB2F81F-A360-4BE1-B68F-B50F0609A1AE}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_tipsmsi (HKLM-x32\...\{6A7EA630-41A1-455D-849D-2AA2D1420236}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_vswebprotocolselectormsi (HKLM-x32\...\{ACBBFCA9-A48A-425A-BF50-B6FB8EFE7934}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

vs_vswebprotocolselectormsires (HKLM-x32\...\{F8EE4760-20BA-4A28-B112-59EF84811189}) (Version: 17.4.33006 - Microsoft Corporation) Hidden

WinCDEmu (HKLM-x32\...\WinCDEmu) (Version: 4.1 - Sysprogs)

Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)

WinSCP 5.21.6 (HKLM-x32\...\winscp3_is1) (Version: 5.21.6 - Martin Prikryl)

WiperSoft 1.1.1161.64 (HKLM\...\{AB1C8C91-4D8E-4C28-80E7-FD135FB90515}}_is1) (Version: 1.1.1161.64 - WiperSoft)

Yiffalicious version 1.0 (HKLM-x32\...\{50B550F8-09B3-42D0-84CF-AAEE2A816973}_is1) (Version: 1.0 - Yiffalicious crew)

Zip Motion Block Video codec (Remove Only) (HKLM-x32\...\ZMBV) (Version:  - DOSBox Team)
 

Packages:

=========

Control Center 3.0 -> C:\Program Files\WindowsApps\CLEVOCO.ControlCenter3.0_6.16.0.0_x64__6h6z29zh29qx0 [2023-03-20] (CLEVO CO.)

Fan Speed Setting -> C:\Program Files\WindowsApps\CLEVOCO.504814C03D814_3.47.0.0_x64__6h6z29zh29qx0 [2022-08-06] (CLEVO CO.)

Flexikey -> C:\Program Files\WindowsApps\CLEVOCO.Flexikey_6.17.4.0_x64__6h6z29zh29qx0 [2023-03-20] (CLEVO CO.)

Forza Horizon 5 -> C:\Program Files\WindowsApps\Microsoft.624F8B84B80_3.581.488.0_x64__8wekyb3d8bbwe [2023-04-25] (Microsoft Studios)

Forza Horizon 5: Hot Wheels -> C:\Program Files\WindowsApps\Microsoft.Expansion1FH5_3.484.939.0_x64__8wekyb3d8bbwe [2022-07-20] (Microsoft Studios)

Forza Horizon 5: Rally Adventure -> C:\Program Files\WindowsApps\Microsoft.Expansion2FH5_3.573.834.0_x64__8wekyb3d8bbwe [2023-03-31] (Microsoft Studios)

Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-08-25] (Microsoft Corporation)

GuitarTab - Tabs and chords -> C:\Program Files\WindowsApps\221GT1Apps.GuitarTab-Tabsandchords_1.1.130.0_x64__y1fj0mwhzkcr4 [2023-04-15] (GT1 Apps)

Intel® Grafik-Kontrollraum -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.4779.0_x64__8j3eq9eme6ctt [2023-04-15] (INTEL CORP) [Startup Task]

Led Keyboard Setting -> C:\Program Files\WindowsApps\CLEVOCO.LedKeyboardSetting_3.32.0.0_x64__6h6z29zh29qx0 [2021-07-27] (CLEVO CO.)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-09-15] (Microsoft Corporation)

Microsoft Midi gm.dls -> C:\Program Files\WindowsApps\Microsoft.Midi.GmDls_1.0.1.0_neutral__8wekyb3d8bbwe [2022-07-24] (Microsoft Platform Extensions)

Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.2.4.0_x64__8wekyb3d8bbwe [2023-03-27] (Microsoft Studios)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.964.0_x64__56jybvy8sckqj [2023-04-14] (NVIDIA Corp.)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.12.219.0_x64__dt26b99r8h8gj [2021-06-23] (Realtek Semiconductor Corp)

Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-03-27] (Microsoft Studios) [MS Ad]

WindowsAppRuntime.1.1 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.1_1005.616.1651.0_x64__8wekyb3d8bbwe [2022-10-14] (Microsoft Corporation)

WindowsAppRuntime.1.1 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.1_1005.616.1651.0_x86__8wekyb3d8bbwe [2022-10-14] (Microsoft Corporation)

XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2021-09-24] (New Work SE)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\shellex.dll [2022-02-17] (AO Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers2: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\shellex.dll [2022-02-17] (AO Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers2: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU) [Datei ist nicht signiert]

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\shellex.dll [2022-02-17] (AO Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers4: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} =>  -> Keine Datei

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\23.071.0402.0001\FileSyncShell64.dll [2023-04-22] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nvcvi.inf_amd64_5ff814e6f7948a70\nvshext.dll [2023-04-10] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2021-11-24] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers6: [Kaspersky Anti-Virus 21.3] -> {37303E08-14C9-4FC3-B1D9-7993682A4691} => C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\shellex.dll [2022-02-17] (AO Kaspersky Lab -> AO Kaspersky Lab)

ContextMenuHandlers6: [PowerISO] -> {967B2D40-8B7D-4127-9049-61EA0C2C6DCE} =>  -> Keine Datei

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

ContextMenuHandlers6: [WinCDEmu] -> {A9901FCD-B4DF-43A1-BD5D-6C9F88679497} => C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll [2015-09-28] (Sysprogs OU) [Datei ist nicht signiert]
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [VIDC.ZMBV] => C:\Windows\SysWOW64\zmbv.dll [94208 2010-04-09] () [Datei ist nicht signiert]
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2020-09-26 13:47 - 2020-09-26 13:47 - 000975872 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\ClassicExplorer64.dll

2020-09-26 13:47 - 2020-09-26 13:47 - 002659328 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenuDLL.dll

2020-09-26 13:48 - 2020-09-26 13:48 - 000562688 _____ (Open-Shell) [Datei ist nicht signiert] C:\Windows\system32\StartMenuHelper64.dll

2017-02-12 02:28 - 2015-09-28 20:08 - 000255488 _____ (Sysprogs OU) [Datei ist nicht signiert] C:\Program Files (x86)\WinCDEmu\x64\WinCDEmuContextMenu.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5WebSockets.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll

2021-11-08 17:54 - 2021-11-08 17:54 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\BsScanner => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\BsScanner => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://localoem.msn.com/?pc=SBJB

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com/?pc=SBJB

SearchScopes: HKU\S-1-5-21-2010984478-2476206877-2401102801-1001 -> DefaultScope {4E03C2CD-FB53-48E2-A717-15C28937DED9} URL = 

SearchScopes: HKU\S-1-5-21-2010984478-2476206877-2401102801-1001 -> {4E03C2CD-FB53-48E2-A717-15C28937DED9} URL = 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_351\bin\ssv.dll [2022-11-01] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_351\bin\jp2ssv.dll [2022-11-01] (Oracle America, Inc. -> Oracle Corporation)

BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll [2003-11-03] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Open-Shell\ClassicIEDLL_32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer64.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer32.dll [2020-09-26] (Open-Shell) [Datei ist nicht signiert]

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2020-11-03] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 11:14 - 2023-04-25 10:26 - 000000852 _____ C:\Windows\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Oracle\Java\javapath;%systemroot%\system32;%systemroot%;%systemroot%\system32\wbem;%systemroot%\system32\windowspowershell\v1.0\;c:\windows\system32;c:\windows;c:\windows\system32\wbem;c:\windows\system32\windowspowershell\v1.0\;c:\windows\system32\openssh\;c:\program files (x86)\nvidia corporation\physx\common;c:\program files\nvidia corporation\nvidia nvdlisr;c:\program files\dotnet\

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\cenan\Pictures\HIntergründe\331ee7f20d893bc5182b648235ddff64.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run: => "RtkAudUService"

HKLM\...\StartupApproved\Run: => "Open-Shell Start Menu"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\StartupApproved\Run: => "GogGalaxy"

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\StartupApproved\Run: => "Overwolf"

HKU\S-1-5-21-2010984478-2476206877-2401102801-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [TCP Query User{753715D8-B114-47CF-A24C-D16AFAF991CF}C:\users\cenan\cursforge\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Block) C:\users\cenan\cursforge\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe

FirewallRules: [UDP Query User{4B4127C2-50D5-4452-B2B8-EBCB431D7399}C:\users\cenan\cursforge\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe] => (Block) C:\users\cenan\cursforge\install\runtime\java-runtime-gamma\windows-x64\java-runtime-gamma\bin\javaw.exe

FirewallRules: [{CB82D7B7-7F8F-4B6B-B9D2-B09C4FEA6538}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )

FirewallRules: [{0EED49B1-BC27-49C6-A3D6-9A5585F21C4D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )

FirewallRules: [{BB9699C2-584E-4AFD-A5B3-A907979A07C6}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )

FirewallRules: [{726D83AB-EA36-4B68-AE65-A28EB2A11BBB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.97.3204.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> )
 

==================== Wiederherstellungspunkte =========================
 
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (04/22/2023 08:50:26 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf \\?\Volume{40c011b3-e21d-5107-fd84-4ab7cac32fda}\ nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
 

Error: (04/22/2023 08:50:24 AM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf \\?\Volume{60e8794a-9b00-918f-c9b3-e53fdd507489}\ nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
 

Error: (04/20/2023 01:45:19 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf \\?\Volume{40c011b3-e21d-5107-fd84-4ab7cac32fda}\ nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
 

Error: (04/20/2023 01:45:17 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf \\?\Volume{60e8794a-9b00-918f-c9b3-e53fdd507489}\ nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
 

Error: (04/15/2023 03:35:48 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.

.
 

Error: (04/15/2023 03:35:48 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.

]
 

Error: (04/02/2023 06:18:22 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Das Programm obs64.exe Version 28.0.3.0 hat die Interaktion mit Windows beendet und wurde geschlossen. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: 238c
 

Startzeit: 01d9657c3add4def
 

Beendigungszeit: 3
 

Anwendungspfad: C:\Program Files\obs-studio\bin\64bit\obs64.exe
 

Bericht-ID: 322d19c4-2710-4031-b9cb-9fcc4b05025c
 

Vollständiger Name des fehlerhaften Pakets: 
 

Relative Anwendungs-ID des fehlerhaften Pakets: 
 

Absturztyp: Cross-thread
 

Error: (03/30/2023 02:56:14 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )

Description: Die Speicheroptimierung konnte erneut optimieren auf \\?\Volume{acdbb887-488b-959d-cd8b-01c4c871728c}\ nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
 
 

Systemfehler:

=============

Error: (04/26/2023 01:24:53 AM) (Source: DCOM) (EventID: 10010) (User: THORSTEN)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (04/26/2023 01:24:53 AM) (Source: DCOM) (EventID: 10010) (User: THORSTEN)

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (04/25/2023 10:21:42 PM) (Source: volsnap) (EventID: 36) (User: )

Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.
 

Error: (04/25/2023 08:09:15 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)

Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NMPJ99VJBWV-Microsoft.YourPhone
 

Error: (04/25/2023 07:06:34 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "AVP21.3" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (04/25/2023 02:37:28 PM) (Source: DCOM) (EventID: 10010) (User: THORSTEN)

Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (04/25/2023 02:37:25 PM) (Source: DCOM) (EventID: 10010) (User: THORSTEN)

Description: Der Server "{283EDD52-69B2-473D-BEB6-2C0B4C01FD73}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (04/25/2023 02:37:25 PM) (Source: DCOM) (EventID: 10010) (User: THORSTEN)

Description: Der Server "{283EDD52-69B2-473D-BEB6-2C0B4C01FD73}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 
 

Windows Defender:

================

Date: 2023-04-27 18:23:26

Description: 

Der überwachte Ordnerzugriff hat C:\Program Files\WiperSoft\WiperSoft.exe daran gehindert, Änderungen am Speicher durchzuführen.

Erkennungszeit: 2023-04-27T16:23:26.783Z

Benutzer: THORSTEN\cenan

Pfad: \Device\Harddisk0\DR0

Name des Prozesses: C:\Program Files\WiperSoft\WiperSoft.exe

Sicherheitsversion: 1.387.2321.0

Modulversion: 1.1.20200.4

Produktversion: 4.18.2303.8
 

Date: 2023-04-27 18:22:53

Description: 

Der überwachte Ordnerzugriff hat C:\Users\cenan\Downloads\WiperSoft-installer.exe daran gehindert, Änderungen am Speicher durchzuführen.

Erkennungszeit: 2023-04-27T16:22:53.323Z

Benutzer: THORSTEN\cenan

Pfad: \Device\Harddisk0\DR0

Name des Prozesses: C:\Users\cenan\Downloads\WiperSoft-installer.exe

Sicherheitsversion: 1.387.2321.0

Modulversion: 1.1.20200.4

Produktversion: 4.18.2303.8
 

Date: 2023-04-27 18:04:12

Description: 

Der überwachte Ordnerzugriff hat C:\Users\cenan\AppData\Local\Temp\WiperSoft-inst.exe daran gehindert, Änderungen am Speicher durchzuführen.

Erkennungszeit: 2023-04-27T16:04:12.809Z

Benutzer: THORSTEN\cenan

Pfad: \Device\Harddisk0\DR0

Name des Prozesses: C:\Users\cenan\AppData\Local\Temp\WiperSoft-inst.exe

Sicherheitsversion: 1.387.2321.0

Modulversion: 1.1.20200.4

Produktversion: 4.18.2303.8
 

Date: 2023-04-27 18:02:26

Description: 

Der überwachte Ordnerzugriff hat C:\Program Files\WiperSoft\WiperSoft.exe daran gehindert, Änderungen am Speicher durchzuführen.

Erkennungszeit: 2023-04-27T16:02:26.828Z

Benutzer: THORSTEN\cenan

Pfad: \Device\Harddisk0\DR0

Name des Prozesses: C:\Program Files\WiperSoft\WiperSoft.exe

Sicherheitsversion: 1.387.2321.0

Modulversion: 1.1.20200.4

Produktversion: 4.18.2303.8
 

Date: 2023-04-27 17:57:57

Description: 

Der überwachte Ordnerzugriff hat C:\Users\cenan\Downloads\WiperSoft-installer.exe daran gehindert, Änderungen am Speicher durchzuführen.

Erkennungszeit: 2023-04-27T15:57:57.656Z

Benutzer: THORSTEN\cenan

Pfad: \Device\Harddisk0\DR0

Name des Prozesses: C:\Users\cenan\Downloads\WiperSoft-installer.exe

Sicherheitsversion: 1.387.2321.0

Modulversion: 1.1.20200.4

Produktversion: 4.18.2303.8

Event[0]:
 

Date: 2023-03-28 12:48:59

Description: 

Die Microsoft Defender Antivirus-Überprüfung wurde nach einem Fehler beendet.

Überprüfungs-ID: {7CB3B69B-6691-47C2-AEA1-AE10C9F2418B}

Überprüfungstyp: Antimalware

Überprüfungsparameter: Benutzerdefinierte Überprüfung

Benutzer: THORSTEN\cenan

Fehlercode: 0x80508023

Fehlerbeschreibung: Auf dem Gerät wurde keine Schadsoftware oder andere potenziell unerwünschte Software gefunden. 
 

CodeIntegrity:

===============

Date: 2023-04-27 16:58:34

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.
 

Date: 2023-04-27 12:48:52

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.
 

Date: 2023-04-25 20:19:20

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.2303.8-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 

Date: 2023-04-25 20:09:26

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.3\x64\antimalware_provider.dll that did not meet the Windows signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: INSYDE Corp. 1.07.06 06/17/2020

Hauptplatine: Notebook NH5x_7xDCx_DDx

Prozessor: Intel(R) Core(TM) i7-10750H CPU @ 2.60GHz

Prozentuale Nutzung des RAM: 36%

Installierter physikalischer RAM: 16173.36 MB

Verfügbarer physikalischer RAM: 10268.69 MB

Summe virtueller Speicher: 22317.36 MB

Verfügbarer virtueller Speicher: 14922.02 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows) (Fixed) (Total:930.42 GB) (Free:438.63 GB) (Model: CT1000P2SSD8) NTFS
 

\\?\Volume{ed60aa3d-80b5-4594-9761-5e6b1d6a7b45}\ (Recovery tools) (Fixed) (Total:0.98 GB) (Free:0.49 GB) NTFS

\\?\Volume{60e8794a-9b00-918f-c9b3-e53fdd507489}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{dffc4314-459c-f93b-c616-5a29c34024b5}\ () (Fixed) (Total:132.11 GB) (Free:0 GB) NTFS

\\?\Volume{23e0fd98-cdb0-9bd4-124f-1efbab7a3003}\ () (Fixed) (Total:10.71 GB) (Free:0 GB) NTFS

\\?\Volume{5e4d59b5-0f71-8b6a-d1e8-49ae16c0f751}\ () (Fixed) (Total:17.7 GB) (Free:0 GB) NTFS

\\?\Volume{4e9d57d5-046f-4e04-860a-104747b86937}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 931.5 GB) (Disk ID: 85C664CC)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 1.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 2.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 3.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 4.
 

==================== Ende von Addition.txt =======================