| Sanharib | 30.08.2024 10:26 |
Windows 11 Popup "Ihr PC ist infiziert mit (7) Viren" etc.
Guten Morgen,
auch ich werde geplagt mit diversen Popups :(
könnte mir jemand bei dem Problem helfen? Habe auch mit FRST die Logfiles erstellen lassen: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-08.2024
durchgeführt von Daniela Willemsen (Administrator) auf LAPTOP-Q90R8D7K (SAMSUNG ELECTRONICS CO., LTD. 750XGK) (30-08-2024 11:06:31)
Gestartet von C:\Users\Daniela Willemsen\Desktop\FRST64.exe
Geladene Profile: Daniela Willemsen
Plattform: Microsoft Windows 11 Home Version 23H2 22631.4037 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(14C847C8-791E-46EB-9C0D-7CADAF31C930 -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.9.9.0_x64__wyx1vj98g3asy\WindowsMCFCore\WindowsMCFCore.exe
(520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5_6.0.79.0_x64__3c1yjt4zspk6g\Extensions\ScreenMode.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\McAfee\wps\1.21.162.1\mc-fw-host.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\wps\1.21.162.1\mc-web-view.exe
(C:\Program Files\Samsung\SamsungUpdate\SUService.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUEngine.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.18500.10.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.42\msedgewebview2.exe <12>
(cmd.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\browserhost.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_helper.exe
(DriverStore\FileRepository\sfourswcomp15.inf_amd64_4d3eaedc807bd750\SamsungSystemSupportService.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_4d3eaedc807bd750\SamsungSystemSupportEngine.exe
(explorer.exe ->) (Opera Norway AS -> Opera Software) C:\Users\Daniela Willemsen\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <16>
(services.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.24.8080.0_x64__3c1yjt4zspk6g\SAService\SAService.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.24193.0.0_x64__3c1yjt4zspk6g\SmartThingsService\SmartThingsService.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.10.0_x64__3c1yjt4zspk6g\SamsungAnalyticsService\SamsungAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a56d66a9d40a4cb2\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_289adb86c54e3a76\Intel_PIE_Service.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\wps\1.21.162.1\mc-fw-host.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5349479f7c9fe8a6\RtkAudUService64.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Live Wallpaper Service\LiveWallpaperWindowsService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SmartSwitch\qvWindowsService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_4d3eaedc807bd750\SamsungSystemSupportService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\systemplatformenginecomp.inf_amd64_264ff885c2d28710\SystemPlatformEngine.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2433.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.18500.10.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\LocationNotificationWindows.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUUserModeWorker.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\Run: [Opera Browser Assistant] => C:\Users\Daniela Willemsen\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3896224 2024-08-22] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\Run: [Opera Stable] => C:\Users\Daniela Willemsen\AppData\Local\Programs\Opera\opera.exe [1386912 2024-08-23] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\Run: [] => [X]
HKU\S-1-5-21-1952121000-563488710-226379021-1002\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\128.0.6613.113\Installer\chrmstp.exe [2024-08-30] (Google LLC -> Google LLC)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {3C8F0F49-8D61-4D3A-A778-EFA6087B3BC7} - \Opera scheduled assistant Autoupdate 1724584810 -> Keine Datei <==== ACHTUNG
Task: {936B250B-D6FC-4D0D-87AC-09A7F4E6E2A3} - System32\Tasks\ColorEngine => C:\Program Files\Samsung\ColorEngine\ColorEngine.exe [686912 2023-11-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
Task: {39D263C1-2ED9-4AF4-A52F-605542F6A76B} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem129.0.6651.0{BC2E8970-9258-465A-8BFF-EC70EDD52D55} => C:\Program Files (x86)\Google\GoogleUpdater\129.0.6651.0\updater.exe [4906600 2024-08-11] (Google LLC -> Google LLC)
Task: {55FA4FB4-0FE3-4DBD-B343-31FDE2D5B3EC} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem130.0.6679.0{975AC2A7-42F0-4810-AD70-007C225B3EC2} => C:\Program Files (x86)\Google\GoogleUpdater\130.0.6679.0\updater.exe [4884584 2024-08-26] (Google LLC -> Google LLC)
Task: {92EF0C03-086B-4670-A612-FB474C81209A} - System32\Tasks\McAfee\WPS\McAfee Anti-tracker notification => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {BC9BC173-1E49-433F-B801-749F925300B3} - System32\Tasks\McAfee\WPS\McAfee Anti-Tracker Scanner => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {F973EC42-FDD9-49FA-B18F-15FD51EC20B5} - System32\Tasks\McAfee\WPS\McAfee Cloud Configuration Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {34077C85-6F7D-44AA-9223-1F0149E201E4} - System32\Tasks\McAfee\WPS\McAfee Health Check => C:\Program Files\McAfee\wps\1.21.162.1\sustainability\mc-sustainability.exe [968008 2024-08-25] (McAfee, LLC -> McAfee, LLC)
Task: {7A941102-235C-49A9-96DC-BAA99D19A1FF} - System32\Tasks\McAfee\WPS\McAfee Hotfix => C:\Program Files\McAfee\wps\1.21.162.1\dad\mc-dad.exe [2641984 2024-08-25] (McAfee, LLC -> McAfee, LLC)
Task: {BD16485E-319B-48FB-A497-D51D4256DE0B} - System32\Tasks\McAfee\WPS\McAfee Message Check => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {B7B7FDF3-78EF-4DB1-9FE9-6A7B8EA12E33} - System32\Tasks\McAfee\WPS\McAfee PC Optimizer Task => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {F12572AD-3D26-4DEC-B7A9-548E5DE01E2E} - System32\Tasks\McAfee\WPS\McAfee restart of PC => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {10E61FED-EAB2-41A0-BF42-4461222B8187} - System32\Tasks\McAfee\WPS\McAfee Scheduled AV Scan => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {02D21668-4767-40A3-A78A-4377215042DC} - System32\Tasks\McAfee\WPS\McAfee Scheduled Tracker Remover => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {A2B30EFA-9F7A-446B-83BB-9A4AC32F2533} - System32\Tasks\McAfee\wps\McAfee Updater => {81A7CB63-BB07-4DAD-8E72-07B3A9BB08E2} C:\Program Files\McAfee\wps\1.21.162.1\mc-update.exe [3328712 2024-08-25] (McAfee, LLC -> McAfee, LLC)
Task: {AE3A2266-E3FB-41CE-A225-D364A7F032D3} - System32\Tasks\McAfee\WPS\McAfee Virus Definition Update => 1A62D23B-93C2-468A-B6B0-FFB2A23C1C0D
Task: {780E7C7C-1CD3-40F4-8905-171D02A038D2} - System32\Tasks\McAfee\WPS\McAfee Windows Notification Token => \\?\C:\Program Files\McAfee\wps\1.21.162.1\mc-wns-client\mc-wns-client.exe [934152 2024-08-25] (McAfee, LLC -> )
Task: {F877E211-9F04-4952-94CB-20EF252186CC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {E8ECAD43-D433-446F-9537-77F2141DF51B} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28605656 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Task: {7CDFA589-BC68-4167-B6F4-B8592C75A5F2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5B21D3BC-879A-408B-A5C1-043B5877F798} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312520 2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {20A931E1-43D1-443C-A560-4032A7774071} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {D2CBC708-C47D-4DD0-8AAE-A9E6DB5ECA47} - System32\Tasks\Opera scheduled Autoupdate 1724584810 => C:\Users\Daniela Willemsen\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5569440 2024-08-23] (Opera Norway AS -> Opera Software)
Task: {8AC58608-579B-4F91-9A0A-09FAA5299D1C} - System32\Tasks\RtkAudUService64_BG => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_5349479f7c9fe8a6\RtkAudUService64.exe [1951632 2023-12-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {79B802D1-1D1A-4610-A578-2AA64FA7A6AF} - System32\Tasks\Samsung\Recovery8\BulletUserModeWorker => C:\Program Files\Samsung\Recovery\BulletUserModeWorker.exe [624992 2023-05-31] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
Task: {A92BA6AE-A595-4EA3-9B9D-813E3269B653} - System32\Tasks\Samsung\SamsungUpdate\UserModeWorker => C:\Program Files\Samsung\SamsungUpdate\SUUserModeWorker.exe [26464 2023-11-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: 127.0.0.1 12753 #Samsung Analytics
Tcpip\Parameters: [DhcpNameServer] 192.168.10.2
Tcpip\..\Interfaces\{98266ead-0973-414b-be0d-658a619f5beb}: [DhcpNameServer] 192.168.179.1
Tcpip\..\Interfaces\{98266ead-0973-414b-be0d-658a619f5beb}\64259445A51224F6870273539303024505F55374548545: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{98266ead-0973-414b-be0d-658a619f5beb}\64259445A51224F6870273539303024505F55374548545: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{a8513487-b054-4b13-8bcf-72e5d9e84376}: [DhcpNameServer] 192.168.10.2
Tcpip\..\Interfaces\{a8513487-b054-4b13-8bcf-72e5d9e84376}: [DhcpDomain] localdomain
Edge:
=======
Edge Profile: C:\Users\Daniela Willemsen\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-25]
Edge Extension: (Avira Safe Shopping) - C:\Users\Daniela Willemsen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\caiblelclndcckfafdaggpephhgfpoip [2024-08-25]
Edge Extension: (Avira Password Manager) - C:\Users\Daniela Willemsen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2024-08-25]
Edge Extension: (Google Docs Offline) - C:\Users\Daniela Willemsen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-24]
Edge Extension: (Edge relevant text changes) - C:\Users\Daniela Willemsen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-08-24]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Daniela Willemsen\AppData\Local\Google\Chrome\User Data\Default [2024-08-30]
CHR Notifications: Default -> hxxps://cr5g2qm071bc738ug1cg.basicflownetowork.co.in; hxxps://en.softonic.com
CHR HomePage: Default -> hxxps://www.bing.com?pc=U316&form=CHROMN
CHR StartupUrls: Default -> "hxxps://www.bing.com?pc=U316&form=CHROMN"
CHR Extension: (uBlock Origin) - C:\Users\Daniela Willemsen\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-08-30]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\Daniela Willemsen\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2024-08-25]
CHR Extension: (Google Docs Offline) - C:\Users\Daniela Willemsen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Daniela Willemsen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-24]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
Opera:
=======
OPR DefaultProfile: Default
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14042624 2024-08-25] (Microsoft Corporation -> Microsoft Corporation)
S2 ConsultingModeService; C:\Windows\System32\DriverStore\FileRepository\consultingmodecomponent.inf_amd64_d94fdabed8c32a57\ConsultingModeService.exe [796256 2023-12-03] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 DolbyDAXAPI; C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_d727b49de350a60e\DAX3API.exe [2363944 2023-11-08] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_a56d66a9d40a4cb2\ipfsvc.exe [558176 2023-11-30] (Intel Corporation -> Intel Corporation)
S2 Intel(R) Platform License Manager Service; C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_4e9e8c349f3a1aca\lib\PlatformLicenseManagerService.exe [741584 2023-11-16] (Intel Corporation -> Intel(R) Corporation)
S2 IntelAudioService; C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe [530424 2023-09-18] (Intel Corporation -> Intel)
R2 ipfsvc; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_uf.exe [3006656 2023-11-30] (Intel Corporation -> Intel Corporation)
R2 LiveWallpaperService; C:\Program Files\Samsung\Live Wallpaper Service\LiveWallpaperWindowsService.exe [484704 2023-11-21] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 mc-fw-host; C:\Program Files\McAfee\wps\1.21.162.1\mc-fw-host.exe [2602648 2024-08-25] (McAfee, LLC -> McAfee, LLC)
S3 mc-wps-update; C:\Program Files\McAfee\wps\1.21.162.1\mc-update.exe [3328712 2024-08-25] (McAfee, LLC -> McAfee, LLC)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [937296 2024-08-27] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-08-25] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 Quick Search Service; C:\Program Files\Samsung\Quick Search Service\QuickSearchService.exe [164888 2023-12-01] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 Quick Share Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe [50688 2024-08-30] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 Samsung Analytics Agent; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.10.0_x64__3c1yjt4zspk6g\SamsungAnalyticsService\SamsungAnalyticsService.exe [98988798 2024-08-30] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.)
S2 Samsung Continuity Windows Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.9.9.0_x64__wyx1vj98g3asy\LoopbackExemptionManager\LoopbackExemptionManager.exe [82752 2024-03-18] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
S2 Samsung Multi Control Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.MultiControl_1.8.1301.0_x64__wyx1vj98g3asy\SamsungMultiControlService\SamsungMultiControlService.exe [73088 2024-03-18] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 SamsungAccountService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.24.8080.0_x64__3c1yjt4zspk6g\SAService\SAService.exe [6656 2024-08-30] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> )
R2 SamsungPlatformEngine; C:\Windows\System32\DriverStore\FileRepository\systemplatformenginecomp.inf_amd64_264ff885c2d28710\SystemPlatformEngine.exe [1643344 2023-11-29] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 SamsungPTPService; C:\Windows\System32\DriverStore\FileRepository\ptpfiltercomp.inf_amd64_be78bd014d3dec8b\PTPFilterService.exe [306000 2022-07-06] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S2 SamsungRecoveryService; C:\Program Files\Samsung\Recovery\BulletService.exe [798048 2023-05-31] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungSystemSupportService; C:\Windows\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_4d3eaedc807bd750\SamsungSystemSupportService.exe [149840 2024-05-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungUpdateService; C:\Program Files\Samsung\SamsungUpdate\SUService.exe [383840 2023-11-16] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 SecondScreenService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.8.4.0_x64__wyx1vj98g3asy\SecondScreenService\SecondScreenService.exe [18272 2024-08-30] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 SmartSwitchService; C:\Program Files\Samsung\SmartSwitch\qvWindowsService.exe [297336 2023-10-17] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SmartThingsService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.24193.0.0_x64__3c1yjt4zspk6g\SmartThingsService\SmartThingsService.exe [26560 2024-08-30] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> )
S2 StudiomodeSvc; C:\Program Files (x86)\Samsung\Studiomode\StudiomodeSvc.exe [296256 2023-12-19] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-08-25] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-08-25] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 DCIService; C:\Program Files (x86)\Lavasoft\Web Companion\Service\x64\DCIService.exe [X] <==== ACHTUNG
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 BdDci; C:\Windows\system32\DRIVERS\bddci.sys [800672 2024-08-25] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
R0 fse; C:\Windows\System32\drivers\fse.sys [218608 2024-08-25] (Microsoft Windows -> Microsoft Corporation)
S3 GSCAuxDriver; C:\Windows\System32\DriverStore\FileRepository\gscauxdriver.inf_amd64_f6b6712856d991b0\GSCAuxDriverx64.sys [109272 2023-12-19] (Intel Corporation -> Intel Corporation)
S3 GSCx64; C:\Windows\System32\DriverStore\FileRepository\gscheci.inf_amd64_cf885aa8c7fcd01e\TeeDriverGSCW8x64.sys [279256 2023-12-19] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_bda8110c074a36f5\iaLPSS2_GPIO2_ADL.sys [141312 2023-11-30] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\Windows\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_c4c17f8529a3943d\iaLPSS2_I2C_ADL.sys [211456 2023-11-30] (Intel Corporation -> Intel Corporation)
S3 IntcSdwBus; C:\Windows\System32\DriverStore\FileRepository\intcsdwbus.inf_amd64_f52c196d9030ea0e\IntcSdwBus.sys [523256 2023-09-18] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\Windows\System32\DriverStore\FileRepository\gna.inf_amd64_6f93b7542fd3ead9\gna.sys [88656 2023-11-30] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\Windows\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_b5556c03cda5f7f8\ipf_acpi.sys [88256 2023-11-30] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_cpu.sys [85696 2023-11-30] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_1d0f5f1cb16186f0\ipf_lf.sys [484544 2023-11-30] (Intel Corporation -> Intel Corporation)
S0 mfeelam; C:\Windows\System32\DRIVERS\mfeelam.sys [19536 2024-08-25] (Microsoft Windows Early Launch Anti-malware Publisher -> McAfee, LLC)
R0 mfesec; C:\Windows\System32\DRIVERS\mfesec.sys [85296 2024-08-25] (McAfee, LLC -> McAfee, LLC)
R3 PTPFilter; C:\Windows\System32\drivers\PTPFilter.sys [84824 2023-10-25] (WDKTestCert tguni.kim,132706977925446435 -> )
R3 rt68cx21; C:\Windows\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_81b332badcdcaabe\rt68cx21x64.sys [752600 2023-09-18] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_516e5c9b75c49dc2\rtcx21x64.sys [539648 2022-05-06] (Microsoft Windows -> Realtek)
S3 rtu53cx22x64; C:\Windows\System32\DriverStore\FileRepository\rtu53cx22x64sta.inf_amd64_86fa7d54a068bee8\rtu53cx22x64.sys [1083224 2023-05-18] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 rtux64w10; C:\Windows\System32\DriverStore\FileRepository\rtux64w10.inf_amd64_03831aeaaa2c730e\rtux64w10.sys [683520 2022-05-07] (Microsoft Windows -> Realtek Corporation)
R3 SamsungEventController; C:\Windows\System32\drivers\SamsungEventController.sys [190264 2023-12-04] (Samsung Electronics Co., Ltd. -> Samsung)
S3 vmbusproxy; C:\Windows\system32\drivers\vmbusproxy.sys [94208 2024-03-18] (Microsoft Windows -> )
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [22080 2024-08-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [602504 2024-08-25] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105864 2024-08-25] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2024-08-30 11:06 - 2024-08-30 11:06 - 000027980 _____ C:\Users\Daniela Willemsen\Desktop\FRST.txt
2024-08-30 11:06 - 2024-08-30 11:06 - 000000000 ____D C:\FRST
2024-08-30 11:03 - 2024-08-30 11:03 - 002397184 _____ (Farbar) C:\Users\Daniela Willemsen\Desktop\FRST64.exe
2024-08-30 10:54 - 2024-08-30 10:54 - 111556464 _____ (AO Kaspersky Lab) C:\Users\Daniela Willemsen\Downloads\kvrt.exe
2024-08-30 10:52 - 2024-08-30 10:55 - 000000000 ____D C:\KVRT2020_Data
2024-08-30 10:52 - 2024-02-26 11:33 - 109269872 _____ (AO Kaspersky Lab) C:\Users\Daniela Willemsen\Desktop\KVRT.exe
2024-08-30 10:37 - 2024-08-30 10:37 - 008790880 _____ (Malwarebytes) C:\Users\Daniela Willemsen\Desktop\adwcleaner.exe
2024-08-30 10:37 - 2024-08-30 10:37 - 000000000 ____D C:\AdwCleaner
2024-08-30 10:31 - 2024-08-30 10:31 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-08-29 09:08 - 2024-08-29 09:08 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\McAfee
2024-08-27 21:49 - 2024-08-27 21:49 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\UProof
2024-08-27 21:49 - 2024-08-27 21:49 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\Proof
2024-08-27 21:44 - 2024-08-27 21:44 - 000093191 _____ C:\Users\Daniela Willemsen\Downloads\Sporreiter RG 2 1033.docx.pdf
2024-08-27 21:12 - 2024-08-27 22:01 - 000003377 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\bc40f041980feba7234bf42432844f7538df3a9c018f7ac9a7a4fd7867ef6d0f
2024-08-27 21:12 - 2024-08-27 21:12 - 000002260 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\d19366fdf13a812bded3afafef80f5562aa4952425036e561ee913f199daf0c9
2024-08-27 21:12 - 2024-08-27 21:12 - 000000026 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\bb809ca2074fb9997b9c97aca54a76b5c7ac1640100f48f034b28eb1758df23b
2024-08-25 21:40 - 2024-08-30 10:36 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2024-08-25 21:40 - 2024-08-30 10:36 - 000002198 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2024-08-25 21:40 - 2024-08-25 21:40 - 000000000 ____D C:\Program Files\Google
2024-08-25 21:39 - 2024-08-25 21:40 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-08-25 21:39 - 2024-08-25 21:39 - 008950664 _____ (Google LLC) C:\Users\Daniela Willemsen\Downloads\ChromeSetup(1).exe
2024-08-25 21:39 - 2024-08-25 21:39 - 000241958 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\01c86cc132591a6e184c5dfc10c6bb6e9ae11fc441261809a897f6cb83ada99a
2024-08-25 21:39 - 2024-08-25 21:39 - 000000000 ____D C:\Windows\system32\Tasks\GoogleSystem
2024-08-25 21:38 - 2024-08-25 21:38 - 000002511 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sticky Notes (new).lnk
2024-08-25 21:28 - 2024-08-25 21:28 - 000761564 _____ C:\Windows\system32\perfh007.dat
2024-08-25 21:28 - 2024-08-25 21:28 - 000157732 _____ C:\Windows\system32\perfc007.dat
2024-08-25 21:25 - 2024-08-25 21:25 - 003944480 _____ (McAfee, LLC) C:\Users\Daniela Willemsen\Downloads\McAfee_Installer_serial_j7XYTSsq69GbOVo2AS4k0w2_key_affid_1399_akey (1).exe
2024-08-25 21:17 - 2024-08-25 21:17 - 000002260 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\4cf981cbad121e174ad49a3ef83efa0a21d71fb3f9647eaa4e8f38f69b8b4629
2024-08-25 21:15 - 2024-08-25 21:19 - 000547931 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\181450543a51cee474a4abe5bb70badca44e184843f86b6eeeaad573efe60e6d
2024-08-25 21:15 - 2024-08-25 21:17 - 000000294 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\a5bede5b368248877e997f3f2766eb5c4dc9670d317d81562b680d6d6e7b916f
2024-08-25 21:12 - 2024-08-27 21:49 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\Word
2024-08-25 21:12 - 2024-08-27 21:49 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\Office
2024-08-25 21:12 - 2024-08-25 21:12 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\AddIns
2024-08-25 21:10 - 2024-08-25 21:10 - 000000000 ____D C:\Users\Public\Security Sessions
2024-08-25 21:08 - 2024-08-25 21:08 - 000000000 ____D C:\Windows\system32\Tasks\Avira
2024-08-25 21:05 - 2024-08-25 21:05 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\OneDrive
2024-08-25 20:51 - 2024-08-25 20:51 - 000085296 _____ (McAfee, LLC) C:\Windows\system32\Drivers\mfesec.sys
2024-08-25 20:50 - 2024-08-25 20:50 - 003944480 _____ (McAfee, LLC) C:\Users\Daniela Willemsen\Downloads\McAfee_Installer_serial_j7XYTSsq69GbOVo2AS4k0w2_key_affid_1399_akey.exe
2024-08-25 20:44 - 2024-08-25 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2024-08-25 20:41 - 2024-08-25 20:52 - 000000000 ___HD C:\$MfeDeepRem
2024-08-25 13:24 - 2024-08-25 13:24 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\McAfee
2024-08-25 13:24 - 2024-08-25 13:24 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\CEF
2024-08-25 13:22 - 2024-08-25 20:52 - 000001049 _____ C:\Users\Public\Desktop\McAfee.lnk
2024-08-25 13:20 - 2024-08-25 13:20 - 000004388 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1724584810
2024-08-25 13:20 - 2024-08-25 13:20 - 000001498 _____ C:\Users\Daniela Willemsen\Desktop\Opera-Browser.lnk
2024-08-25 13:20 - 2024-08-25 13:20 - 000001498 _____ C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2024-08-25 13:20 - 2024-08-25 13:20 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\BitCleaner
2024-08-25 13:20 - 2024-08-25 13:20 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Opera Software
2024-08-25 13:19 - 2024-08-25 13:19 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Opera Software
2024-08-25 13:19 - 2024-08-25 13:19 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\AviraWebView2Cache
2024-08-25 13:18 - 2024-08-25 21:08 - 000866128 _____ C:\Windows\system32\rtp.db
2024-08-25 13:18 - 2024-08-25 13:18 - 000000000 ____D C:\Windows\SysWOW64\statReporter
2024-08-25 13:17 - 2024-08-25 21:21 - 000000000 ____D C:\ProgramData\McInstTemp0299651724584644
2024-08-25 13:17 - 2024-08-25 21:21 - 000000000 ____D C:\Program Files\McAfee
2024-08-25 13:17 - 2024-08-25 20:53 - 000000000 ____D C:\Windows\system32\Tasks\McAfee
2024-08-25 13:16 - 2024-08-25 21:21 - 000000000 ____D C:\Program Files\Common Files\McAfee
2024-08-25 13:13 - 2024-08-25 13:13 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Avira
2024-08-25 13:12 - 2024-08-29 09:02 - 000000000 ____D C:\Program Files (x86)\Avira
2024-08-25 13:11 - 2024-08-30 10:37 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Lavasoft
2024-08-25 13:11 - 2024-08-30 10:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2024-08-25 13:11 - 2024-08-25 21:10 - 000000000 ____D C:\ProgramData\Avira
2024-08-25 13:10 - 2024-08-30 10:37 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Roaming\Lavasoft
2024-08-25 13:10 - 2024-08-30 10:37 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2024-08-25 13:09 - 2024-08-30 10:37 - 000000000 ____D C:\ProgramData\Lavasoft
2024-08-25 13:09 - 2024-08-29 09:08 - 000000000 ____D C:\ProgramData\McAfee
2024-08-25 13:09 - 2024-08-25 20:40 - 000000054 _____ C:\Users\Daniela Willemsen\AppData\Roaming\MCVi2UserDetail.ini
2024-08-25 13:09 - 2024-08-25 13:09 - 005331520 _____ (CHIP Digital GmbH) C:\Users\Daniela Willemsen\Downloads\McAfee Total Protection - CHIP Installer _mJ5yp (1).exe
2024-08-25 13:03 - 2024-08-25 13:03 - 005331520 _____ (CHIP Digital GmbH) C:\Users\Daniela Willemsen\Downloads\McAfee Total Protection - CHIP Installer _mJ5yp.exe
2024-08-25 12:55 - 2024-08-25 12:55 - 000000000 ____D C:\Windows\SysWOW64\DDFs
2024-08-25 12:47 - 2024-08-25 12:47 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Samsung
2024-08-25 12:45 - 2024-08-25 12:46 - 000000000 ___HD C:\$SysReset
2024-08-25 12:33 - 2024-08-25 12:33 - 000026169 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2024-08-25 12:31 - 2024-08-25 12:31 - 000026169 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2024-08-24 18:36 - 2024-08-25 21:26 - 000025717 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\aae8a4c9e7638d442891674605cc1b828f6bc14966debd71aae8e122e75143b3
2024-08-24 18:25 - 2024-08-27 22:00 - 000011196 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\bfc2ee0b7170671d9c44e005cdf583a2e0c29792e97130421735d259625591da
2024-08-24 18:25 - 2024-08-27 22:00 - 000000128 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\23dedfe433e9ba030ae0af53c76f516c1e48ffa1d95ee53da49f3d7ed3fafc37
2024-08-24 18:15 - 2024-08-24 18:15 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Google
2024-08-24 18:14 - 2024-08-25 21:39 - 000000000 ____D C:\Program Files (x86)\Google
2024-08-24 18:14 - 2024-08-24 18:14 - 008950664 _____ (Google LLC) C:\Users\Daniela Willemsen\Downloads\ChromeSetup.exe
2024-08-24 18:11 - 2024-08-24 18:30 - 000000000 ____D C:\Windows\Firmware
2024-08-24 18:11 - 2024-08-24 18:11 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\VirtualStore
2024-08-24 18:11 - 2024-08-24 18:11 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2024-08-24 18:04 - 2024-08-24 18:06 - 000000000 ____D C:\Windows\system32\MRT
2024-08-24 18:03 - 2024-08-24 18:03 - 000002260 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\12a5fc4e3918d6fd7b98d25d46988fdea37cd0f4df9fd8869ec8eccf3dcd1673
2024-08-24 18:01 - 2024-08-24 18:01 - 000002260 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\389ea76f34a4f756ec9b53d7e10243d816d26811457eb1302b8604fd925e55fc
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2024-08-30 10:59 - 2022-05-07 07:24 - 000000000 ___HD C:\Program Files\WindowsApps
2024-08-30 10:59 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\AppReadiness
2024-08-30 10:58 - 2024-03-18 02:15 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\CrashDumps
2024-08-30 10:58 - 2023-11-15 07:02 - 000000000 ____D C:\ProgramData\Packages
2024-08-30 10:57 - 2024-03-18 02:11 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Packages
2024-08-30 10:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemTemp
2024-08-30 10:52 - 2024-03-18 04:23 - 000000000 ____D C:\ProgramData\Samsung
2024-08-30 10:52 - 2022-05-07 07:22 - 000000000 ____D C:\Windows\INF
2024-08-30 10:50 - 2024-03-18 04:40 - 000000000 ____D C:\ProgramData\SamsungAnalytics
2024-08-30 10:45 - 2024-03-18 02:14 - 000000128 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\4b931e69a2fb007934ca6ec1160b6e460c8d0f48c112149f1358e2add04139ee
2024-08-30 10:44 - 2024-03-18 02:22 - 000025438 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\eab14c224289d22a2298df1fb4bc178ecaea71ec25810970ecae823a2d5c9761
2024-08-30 10:39 - 2024-03-18 02:14 - 000439579 _____ C:\Users\Daniela Willemsen\AppData\LocalLow\09250348c84fdbff4395c1c5912fcc5d5e27aaf19b0df0dd44d4f27c928080ac
2024-08-30 10:37 - 2024-03-18 02:13 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\D3DSCache
2024-08-30 10:30 - 2024-03-18 04:52 - 000000000 ____D C:\Program Files\Microsoft Office
2024-08-29 09:12 - 2024-03-18 02:10 - 000000000 ____D C:\Users\Daniela Willemsen
2024-08-29 09:02 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-08-27 21:06 - 2024-03-18 02:13 - 000003584 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1952121000-563488710-226379021-1002
2024-08-27 21:06 - 2024-03-18 02:13 - 000003400 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1952121000-563488710-226379021-1002
2024-08-27 21:06 - 2024-03-18 02:13 - 000002431 _____ C:\Users\Daniela Willemsen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-08-25 21:39 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2024-08-25 21:28 - 2024-03-18 04:27 - 001754668 _____ C:\Windows\system32\PerfStringBackup.INI
2024-08-25 21:21 - 2024-03-18 02:11 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\ConnectedDevicesPlatform
2024-08-25 21:20 - 2023-11-15 06:59 - 000474312 _____ C:\Windows\system32\FNTCACHE.DAT
2024-08-25 21:20 - 2023-11-15 06:59 - 000012288 ___SH C:\DumpStack.log.tmp
2024-08-25 21:20 - 2023-11-15 06:59 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2024-08-25 21:20 - 2023-11-15 06:59 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-08-25 21:20 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ServiceState
2024-08-25 21:20 - 2022-05-07 07:17 - 000786432 _____ C:\Windows\system32\config\BBI
2024-08-25 21:14 - 2023-11-15 07:02 - 000000000 __RHD C:\Users\Public\AccountPictures
2024-08-25 21:08 - 2022-05-07 07:24 - 000000000 ___HD C:\Windows\ELAMBKUP
2024-08-25 20:54 - 2022-05-07 07:17 - 000032768 _____ C:\Windows\system32\config\ELAM
2024-08-25 20:53 - 2024-03-18 02:00 - 000000000 ____D C:\Users\defaultuser0
2024-08-25 20:40 - 2023-11-15 06:59 - 000000000 ____D C:\Windows\system32\SleepStudy
2024-08-25 13:22 - 2022-05-07 07:24 - 000000124 _____ C:\Windows\win.ini
2024-08-25 13:13 - 2022-05-07 07:24 - 000000000 ____D C:\ProgramData\USOPrivate
2024-08-25 12:55 - 2024-03-18 12:17 - 000000000 ____D C:\Windows\InboxApps
2024-08-25 12:55 - 2023-10-01 08:55 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\SysWOW64\F12
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\system32\UNP
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\system32\F12
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\PrintDialog
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\WUModels
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\UUS
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\setup
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\Dism
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemResources
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SystemApps
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinMetadata
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\ShellExperiences
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Sgrm
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\setup
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\oobe
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\migwiz
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Dism
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\DDFs
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\appraiser
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellExperiences
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\ShellComponents
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\schemas
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\Provisioning
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\PolicyDefinitions
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\BrowserCore
2024-08-25 12:55 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\bcastdvr
2024-08-25 12:55 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\servicing
2024-08-25 12:37 - 2022-05-07 08:10 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2024-08-25 12:37 - 2022-05-07 08:10 - 000024383 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2024-08-25 12:37 - 2022-05-07 07:25 - 000209920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2024-08-25 12:37 - 2022-05-07 07:25 - 000077312 _____ (Khronos Group) C:\Windows\SysWOW64\opencl.dll
2024-08-25 12:37 - 2022-05-07 07:24 - 000249856 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2024-08-25 12:37 - 2022-05-07 07:24 - 000118784 _____ (Khronos Group) C:\Windows\system32\opencl.dll
2024-08-25 12:37 - 2022-05-07 07:17 - 000000000 ____D C:\Windows\CbsTemp
2024-08-25 12:33 - 2023-11-15 07:01 - 003212800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2024-08-25 12:05 - 2023-11-15 06:59 - 000000000 ____D C:\Windows\system32\Drivers\wd
2024-08-25 12:04 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Windows Defender
2024-08-24 18:21 - 2023-11-14 08:51 - 000000000 ____D C:\Windows\SysWOW64\XPSViewer
2024-08-24 18:21 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2024-08-24 18:21 - 2022-05-07 08:10 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\SysWOW64\winrm
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\SysWOW64\WCN
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\SysWOW64\slmgr
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\SysWOW64\Printing_Admin_Scripts
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\system32\winrm
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\system32\WCN
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\system32\slmgr
2024-08-24 18:21 - 2022-05-07 08:01 - 000000000 ____D C:\Windows\system32\Printing_Admin_Scripts
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ___SD C:\Windows\system32\dsc
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\oobe
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\MUI
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\SysWOW64\Com
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Sysprep
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\MUI
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\Com
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\OCR
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\IME
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\Globalization
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files\Common Files\System
2024-08-24 18:21 - 2022-05-07 07:24 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2024-08-24 18:17 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\appcompat
2024-08-24 18:04 - 2023-11-15 14:59 - 000000000 ____D C:\Windows\Panther
2024-08-24 18:02 - 2024-03-18 02:13 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\Publishers
2024-08-24 17:59 - 2022-05-07 07:24 - 000000000 ____D C:\Windows\system32\SecurityHealth
2024-08-24 17:55 - 2024-03-18 02:12 - 000000000 ____D C:\Users\Daniela Willemsen\AppData\Local\PlaceholderTileLogoFolder
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2024-08-25 13:09 - 2024-08-25 20:40 - 000000054 _____ () C:\Users\Daniela Willemsen\AppData\Roaming\MCVi2UserDetail.ini
==================== FLock ==============================
2024-08-25 20:52 C:\$MfeDeepRem
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-08.2024
durchgeführt von Daniela Willemsen (30-08-2024 11:07:25)
Gestartet von C:\Users\Daniela Willemsen\Desktop
Microsoft Windows 11 Home Version 23H2 22631.4037 (X64) (2024-03-18 00:00:26)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1952121000-563488710-226379021-500 - Administrator - Disabled)
Daniela Willemsen (S-1-5-21-1952121000-563488710-226379021-1002 - Administrator - Enabled) => C:\Users\Daniela Willemsen
DefaultAccount (S-1-5-21-1952121000-563488710-226379021-503 - Limited - Disabled)
Gast (S-1-5-21-1952121000-563488710-226379021-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-1952121000-563488710-226379021-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee (Enabled - Up to date) {0BE13B34-492A-21C0-AE43-C1742279CCB6}
FW: McAfee (Enabled) {33DABA11-0345-2098-851C-6841DCAA8BCD}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
ColorEngine (HKLM\...\{0B48E952-494A-408B-8D9D-5F3331F96659}) (Version: 5.6 - Samsung Electronics Co., Ltd.)
Display Profile (HKLM\...\{97CE6D18-8335-4420-A7C7-A72B8AFAFFFD}) (Version: 5.4 - Samsung Electronics Co., Ltd.)
Galaxy Book Smart Switch service (HKLM\...\{A4BCC00A-AE47-4774-A5F0-F5204C2C001A}) (Version: 1.5.2 - Samsung Electronics Co., Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 128.0.6613.113 - Google LLC)
Live Wallpaper Service (HKLM\...\{08785395-5758-400E-97CF-AD0E89B0A305}) (Version: 3.3.8 - Samsung Electronics Co., Ltd.)
McAfee (HKLM\...\McAfee.wps) (Version: 1.21.162.1 - McAfee, LLC)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 128.0.2739.42 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\OneDriveSetup.exe) (Version: 24.161.0811.0001 - Microsoft Corporation)
Microsoft OneNote - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.17928.20114 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.16.27027 (HKLM-x32\...\{fd9b6070-d13e-45dc-819b-41806bf45b6b}) (Version: 14.16.27027.1 - Microsoft Corporation)
Microsoft Visual C++ 2017 X64 Additional Runtime - 14.16.27024 (HKLM\...\{9D29FC96-9EEE-4253-943F-96B3BBFDD0B6}) (Version: 14.16.27024 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 X64 Minimum Runtime - 14.16.27024 (HKLM\...\{F1B0FB3A-E0EA-47A6-9383-3650655403B0}) (Version: 14.16.27024 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20018 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20114 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17628.20110 - Microsoft Corporation) Hidden
Opera Stable 113.0.5230.32 (HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\Opera 113.0.5230.32) (Version: 113.0.5230.32 - Opera Software)
Quick Search Service (HKLM\...\{6C5F1310-159C-45E9-8182-E3248CB42B55}) (Version: 4.0.24 - Samsung Electronics Co., Ltd.)
Samsung Recovery Service (HKLM\...\{A942FE64-54BE-4787-A336-C0674F50A118}) (Version: 8.1.48 - Samsung Electronics Co., Ltd.)
Samsung Update Service (HKLM\...\{07FC8E1F-C688-4ED8-9C13-F88D2BFB83E8}) (Version: 3.0.96 - Samsung Electronics Co., Ltd.)
Studio mode (HKLM\...\{3F610C12-D47B-4051-93CE-D7FC21C2F8CD}) (Version: 2.0 - Samsung Electronics Co., Ltd.)
WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.937 - McAfee, LLC)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5587.0_x64__8j3eq9eme6ctt [2024-08-30] (INTEL CORP) [Startup Task]
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.23.1658.0_x64__rz1tebttyb220 [2024-08-30] (Dolby Laboratories)
Galaxy Book Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungWelcome_3.2.2.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Galaxy Book Smart Switch -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_1.6.5.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Goodnotes for GalaxyBook -> C:\Program Files\WindowsApps\GoodnotesLimited.GoodnotesforGalaxyBook_1.0.7.0_x64__wjqdg2qn10y2j [2024-08-24] (Goodnotes Limited)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.23306.1292.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation)
Live Wallpaper -> C:\Program Files\WindowsApps\Sidia.LiveWallpaper_3.3.12.0_x64__wkpx6gdq8qyz8 [2024-08-30] (Samsung Electronics Co. Ltd.)
McAfee -> C:\Program Files\McAfee\wps\1.21.162.1 [2024-08-25] ()
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21110.548.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.2.1293.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation)
Microsoft.BingSearch -> C:\Program Files\WindowsApps\Microsoft.BingSearch_1.0.95.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation)
Microsoft.MPEG2VideoExtension -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.61931.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation)
Mozilla Firefox -> C:\Program Files\WindowsApps\Mozilla.Firefox_129.0.2.0_x64__n80bbvh6b1yt2 [2024-08-25] (Mozilla) [Startup Task]
Multi Control -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.MultiControl_1.8.1301.0_x64__wyx1vj98g3asy [2024-03-18] (Samsung Electronics Co, Ltd.)
Power Automate -> C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2407.242.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corporation) [Startup Task]
Quick Share -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy [2024-08-30] (Samsung Electronics Co, Ltd.) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.48.315.0_x64__dt26b99r8h8gj [2024-08-24] (Realtek Semiconductor Corp)
Samsung Account -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.24.8080.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Analytics Agent -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.10.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Cloud Assistant -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_1.5.13.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Cloud Bluetooth Sync -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungCloudBluetoothSync_1.0.49.0_x64__3c1yjt4zspk6g [2024-08-24] (Samsung Electronics Co. Ltd.)
Samsung Continuity Service -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.9.9.0_x64__wyx1vj98g3asy [2024-03-18] (Samsung Electronics Co, Ltd.)
Samsung Flow -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1203.0_x64__wyx1vj98g3asy [2024-08-30] (Samsung Electronics Co, Ltd.)
Samsung Gallery -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.PCGallery_4.13.17.0_x64__3c1yjt4zspk6g [2024-08-24] (Samsung Electronics Co. Ltd.)
Samsung Notes -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungNotes_4.3.242.0_x64__wyx1vj98g3asy [2024-08-30] (Samsung Electronics Co, Ltd.) [Startup Task]
Samsung Pass -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPass_1.5.7.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Quick Search -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_4.0.24.0_x64__3c1yjt4zspk6g [2024-08-24] (Samsung Electronics Co. Ltd.)
Samsung Recovery -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_8.1.51.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Screen Recorder -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_2.2.17.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Settings 1.5 -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5_6.0.79.0_x64__3c1yjt4zspk6g [2024-08-24] (Samsung Electronics Co. Ltd.)
Samsung Settings Runtime -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_6.0.14.0_x64__3c1yjt4zspk6g [2024-08-24] (Samsung Electronics Co. Ltd.)
Samsung Studio -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungStudio_1.5.1.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Samsung Update -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3.0.100.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
SamsungDeviceCare -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_3.5.21.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
SAMSUNGELECTRONICSCO.LTD.Bixby -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.Bixby_5.2.1.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.)
Second Screen -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.8.4.0_x64__wyx1vj98g3asy [2024-08-30] (Samsung Electronics Co, Ltd.)
SmartThings -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.24193.0.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.) [Startup Task]
Telefon -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPhone_1.0.26.0_x64__3c1yjt4zspk6g [2024-08-30] (Samsung Electronics Co. Ltd.) [Startup Task]
Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_5.4.1.0_x64__t4vj0pshhgkwm [2024-08-27] (Telegram Messenger LLP) [Startup Task]
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2433.3.0_x64__cv1g1gvanyjgm [2024-08-27] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1309.2056.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_5001.214.1843.0_x64__8wekyb3d8bbwe [2024-08-30] (Microsoft Corp.)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2024-03-18] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2024-08-24] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\Windows\SystemApps\LKG\MicrosoftWindows.LKG.DesktopSpotlight_cw5n1h2txyewy [2024-08-25] (Microsoft Windows)
Windows-Fotoanzeige -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos_2024.11070.31001.0_x64__8wekyb3d8bbwe [2024-08-24] (Microsoft Corporation) [Startup Task]
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.21.162.1\mc-ctxmnu.dll [2024-08-25] (McAfee, LLC -> McAfee, LLC)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers6: [McCtxMenu] -> {4ADAAC88-E1BD-424F-816D-15E059007938} => C:\Program Files\McAfee\wps\1.21.162.1\mc-ctxmnu.dll [2024-08-25] (McAfee, LLC -> McAfee, LLC)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mc-fw-host => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mc-fw-host => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2024-08-29] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2024-08-30] (Microsoft Corporation -> Microsoft Corporation)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-1952121000-563488710-226379021-1002\...\localhost -> localhost
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2022-05-07 07:24 - 2024-03-18 04:40 - 000000861 _____ C:\Windows\system32\drivers\etc\hosts
127.0.0.1 12753 #Samsung Analytics
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1952121000-563488710-226379021-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Daniela Willemsen\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\8930442544460593716\133694803807835835.jpg
DNS Servers: 192.168.10.2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
ist aktiviert.
Network Binding:
=============
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Realtek PCIe GbE Family Controller -> rt68cx21x64.sys
WLAN: Intel(R) Wi-Fi 6 AX201 160MHz -> Netwtw14.sys
vms_vsf: Erweiterungsfilter für virtuellen Hyper-V-Switch
vms_vsp: Extension-Protokoll für virtuellen Hyper-V-Switch
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{142CBDF6-029A-487C-919D-256733AFEC98}] => (Allow) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2308.40000.3.0_x64__8wekyb3d8bbwe\WsaClient\WsaClient.exe => Keine Datei
FirewallRules: [{89B755FA-1CC2-4355-A73E-2AB3670C616E}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.9.9.0_x64__wyx1vj98g3asy\WindowsMCFCore\WindowsMCFCore.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{BF50B0E5-222E-4139-8C33-E65B1FAC0DEE}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\128.0.2739.42\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CFDB680C-7B44-4DAD-A0BA-869B00D495DF}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{2C0ED34D-5D73-40C2-894D-09AF9828BE21}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24124.2402.2858.5617_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D927D3AA-E71F-4F61-A91E-FF2C995052CA}] => (Allow) C:\Users\Daniela Willemsen\AppData\Local\Programs\Opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{8A0075F9-CF58-4B6D-AFFD-6259D48C463F}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{21AFAA11-5A42-45F6-BE7C-B5B41D4B2848}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{E53BC002-D5E2-4727-9294-987FCA7EB8F6}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.8.4.0_x64__wyx1vj98g3asy\SecondScreenDesktop\SecondScreenDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{6FC406D1-AAF6-4194-A7F0-CC3069BD1E95}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.8.4.0_x64__wyx1vj98g3asy\SecondScreenDesktop\SecondScreenDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{51113AE0-4F8B-4A3D-8BB6-58EE47F474AE}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{535F9951-5F4A-4EF8-99FA-3B9DDEC4B2BA}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{26E57F23-4C2F-44E6-ABC5-A1ECF00E9E18}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{A3FF0851-BD04-4EAC-9035-C76058C467B4}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_1.7.55.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{791E8F3D-4BF4-46E8-91F2-A96383755FA0}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1203.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{8BD44287-3B4E-4E13-922E-FE71325543A8}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1203.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{F98ADE9C-1C43-441B-B002-56973B457CDD}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1203.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{9C7AE966-81C3-4013-A077-8778F5CA41DE}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1203.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
==================== Wiederherstellungspunkte =========================
27-08-2024 21:08:26 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (08/30/2024 10:58:21 AM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-Q90R8D7K)
Description: Name der fehlerhaften Anwendung: backgroundTaskHost.exe, Version: 10.0.22621.1, Zeitstempel: 0x004687c2
Name des fehlerhaften Moduls: twinapi.appcore.dll, Version: 10.0.22621.3958, Zeitstempel: 0xe9a0da90
Ausnahmecode: 0xc000027b
Fehleroffset: 0x00000000000ca473
ID des fehlerhaften Prozesses: 0x0x2628
Startzeit der fehlerhaften Anwendung: 0x0x1dafabac31e0307
Pfad der fehlerhaften Anwendung: C:\Windows\system32\backgroundTaskHost.exe
Pfad des fehlerhaften Moduls: C:\Windows\System32\twinapi.appcore.dll
Berichtskennung: 42f8ba95-b447-4553-aee1-a72ed5cc0aa6
Vollständiger Name des fehlerhaften Pakets: SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_1.5.13.0_x64__3c1yjt4zspk6g
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
Error: (08/30/2024 10:32:59 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: LAPTOP-Q90R8D7K)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\Windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\SysWOW64\wbem\WmiPrvSE.exe, PID: 12880, ProfSvc PID: 1732.
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\System32\svchost.exe, PID: 2900, ProfSvc PID: 1732.
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\System32\svchost.exe, PID: 2900, ProfSvc PID: 1732.
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\System32\svchost.exe, PID: 2900, ProfSvc PID: 1732.
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\System32\svchost.exe, PID: 2900, ProfSvc PID: 1732.
Error: (08/30/2024 10:29:25 AM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)
Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Windows\System32\svchost.exe, PID: 1204, ProfSvc PID: 1732.
Systemfehler:
=============
Error: (08/30/2024 10:57:42 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NGW9K44GQ5F-SAMSUNGELECTRONICSCoLtd.SamsungContinuityService
Error: (08/30/2024 10:52:26 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\system32\IntelIHVRouter14.dll
Error: (08/30/2024 10:52:26 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\Windows\system32\IntelIHVRouter14.dll
Error: (08/30/2024 10:37:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "DCIService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/30/2024 10:37:52 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "McAfee WebAdvisor" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/30/2024 10:37:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Multi Control" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/30/2024 10:37:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Samsung Analytics Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/30/2024 10:37:52 AM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Quick Search Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
CodeIntegrity:
===============
Date: 2024-08-30 11:07:44
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\McAfee\wps\1.21.162.1\mc-sec-plugin-x64.dll that did not meet the Windows signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends International, LLC. P02CFP.015.240409.HQ 04/09/2024
Hauptplatine: SAMSUNG ELECTRONICS CO., LTD. NP750XGK-KB5DE
Prozessor: Intel(R) Core(TM) 3 100U
Prozentuale Nutzung des RAM: 79%
Installierter physikalischer RAM: 7875.48 MB
Verfügbarer physikalischer RAM: 1581.14 MB
Summe virtueller Speicher: 9795.48 MB
Verfügbarer virtueller Speicher: 2721.6 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:219.96 GB) (Free:154.06 GB) (Model: SSSTC CL4-8D256) NTFS
Drive d: (USB_STRELEC) (Removable) (Total:29.28 GB) (Free:20.38 GB) FAT32
\\?\Volume{13c404c2-dd18-44c7-8826-665600ee4c0b}\ (Windows RE tools) (Fixed) (Total:0.83 GB) (Free:0.13 GB) NTFS
\\?\Volume{4b6c15a3-038e-4bb8-bda2-6c03cd18a328}\ (SAMSUNG_REC2) (Fixed) (Total:16.41 GB) (Free:1.7 GB) NTFS
\\?\Volume{51bde1e7-74ec-4152-4173-636c65706975}\ (SAMSUNG_REC) (Fixed) (Total:1 GB) (Free:0.37 GB) FAT32
\\?\Volume{801a6c0b-f441-4bcc-81f4-8b05aa128689}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.2 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 26EA9241)
Partition: GPT.
==========================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 29.3 GB) (Disk ID: 00E0C959)
Partition 1: (Active) - (Size=29.3 GB) - (Type=FAT32)
==================== Ende von Addition.txt =======================
Wäre echt super nett, wenn mir dabei jemand helfen könnte! Vielen Dank |
