Win 11 Auf Facebook Warnmeldung hereingefallen, PC läuft langsamer , MS Defender wird blockiert

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-05-2025
durchgeführt von emqi- (Administrator) auf EMQI-LIVINGPICS (Micro-Star International Co., Ltd. MS-7E26) (16-05-2025 11:23:01)
Gestartet von C:\Users\emqi-\Downloads\FRST64.exe
Geladene Profile: emqi-
Plattform: Microsoft Windows 11 Pro Version 24H2 26100.4061 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\js\node_modules\adobe-cr\build\Release\Adobe Crash Processor.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe <4>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe ->) (WacomCenterUI) [Datei ist nicht signiert] C:\Program Files\Tablet\Wacom\WacomCenter\WacomCenterUI.exe
(C:\Program Files\Tablet\Wacom\WacomHost.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_Tablet.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TabletUser.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_TouchUser.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\Wacom_UpdateUtil.exe
(C:\Program Files\Tablet\Wacom\WTabletServicePro.exe ->) (Wacom Co., Ltd. -> Wacom Co., Ltd.) C:\Program Files\Tablet\Wacom\WacomHost.exe
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.10401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.64\msedgewebview2.exe <7>
(C:\Users\emqi-\Downloads\FRST-OlderVersion\FRST64.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2503.16.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <3>
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atieclxx.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <13>
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_7bf038ca4e246b90\AmdPpkgSvc.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atiesrxx.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe
(services.exe ->) (Wacom Co., Ltd. -> Wacom Co. Ltd.) C:\Program Files\Tablet\Wacom\WTabletServicePro.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25032.52.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.9.1.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.10401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-03-24] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1145256 2025-04-15] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-76596380-2333717119-1847427047-1003\...\Run: [MicrosoftEdgeAutoLaunch_3753AF0C68244FA81F8581C5B5045ECE] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4045880 2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {65C83666-9940-4560-8B3D-B6132FCFFCEF} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1035472 2024-11-28] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {65641C37-41B7-4D1F-B470-87FA608FF700} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [191184 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {85B83905-898B-4973-9EEC-230FDAB20760} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\emqi-\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15205744 2025-03-24] (ESET, spol. s r.o. -> ESET)
Task: {92A6E3F6-ADA2-464D-A8E3-E0E8FC353AF0} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\emqi-\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner.exe [15205744 2025-03-24] (ESET, spol. s r.o. -> ESET)
Task: {C2B0E3F9-2A9A-46D6-8500-9F4F81B1C0E8} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194048 2025-04-14] (Adobe Inc. -> Adobe Inc.)
Task: {9907CA05-5F39-4047-8255-D1F3763F6975} - System32\Tasks\Microsoft\Office\Office Apps Prewarm => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [307384 2025-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {5201D26D-040E-48BA-A02F-6A27F838E3B5} - System32\Tasks\Microsoft\Office\Office Apps Prewarm Recurring => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [307384 2025-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {63A6A830-237D-4D8C-947E-43BFCC2DBD98} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29102352 2025-05-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {0CB3F895-FFEF-462C-A019-77DC140A20DB} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\opushutil.exe [68392 2025-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {8FC9062A-83D4-4E9A-9496-944E1E3C4816} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29102352 2025-05-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A525066-2543-40CF-8C50-68822679C2F4} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [307384 2025-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {511C3F4D-57AD-4C16-A922-B04DC2F38364} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [307384 2025-05-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {948813CB-2586-4707-A292-1C26C122F801} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [213216 2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {EC321559-8DD9-4834-A5B5-A3D5F0458A38} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E6CDDE9C-EA8C-4E56-ACDE-9115C966289E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2F4BA091-46F6-46A4-8D86-8DBC074BC574} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1619788B-F44C-4E6A-BF35-892A8EAB0E07} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpCmdRun.exe [1745176 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D80CDC39-C24E-4ECF-9FC7-F0713D013101} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\InitialConfiguration => {709FD5EF-7296-4154-BD3A-E9830FCFA60A} C:\Windows\system32\ShellConfigTask.dll [274432 2025-05-14] (Microsoft Windows -> Microsoft Corporation)
Task: {DD2C0B0E-B6F5-4735-B579-0B0FD439A698} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration => {0BE6820D-B667-4CB6-931B-C153A77DA895} C:\Windows\system32\ShellConfigTask.dll [274432 2025-05-14] (Microsoft Windows -> Microsoft Corporation)
Task: {352CA8DA-CAB1-4639-BE57-72BE012BC051} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1035472 2024-11-28] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {703B758E-B8B5-4209-809C-1FDFC66DABC1} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-76596380-2333717119-1847427047-1003 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [695360 2025-05-14] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {F09DEF76-FAA8-4679-817E-49DDDCE11E27} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-05-14] (Mozilla Corporation -> Mozilla Foundation)
Task: {FF61CB78-91BB-420F-94A2-92CB9B61CBB9} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [139472 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {0452EA46-B53C-4219-AB38-A7E0AA457AA1} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [309968 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5df49ee4-f519-4dbb-b479-5f501a7a713a}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{5df49ee4-f519-4dbb-b479-5f501a7a713a}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{bd7741e0-00cc-4ee1-bb39-2d5b8377a7d5}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{bd7741e0-00cc-4ee1-bb39-2d5b8377a7d5}: [DhcpDomain] speedport.ip

Edge: 
=======
Edge Profile: C:\Users\emqi-\AppData\Local\Microsoft\Edge\User Data\Default [2025-05-16]
Edge HomePage: Default -> hxxp://www.msn.com/?pc=NMTE
Edge Extension: (Avira Password Manager) - C:\Users\emqi-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2025-05-14]
Edge Extension: (Google Docs Offline) - C:\Users\emqi-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-27]
Edge Extension: (Edge relevant text changes) - C:\Users\emqi-\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-03-24]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]

FireFox:
========
FF DefaultProfile: gtxv1m88.default
FF ProfilePath: C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\gtxv1m88.default [2025-03-24]
FF ProfilePath: C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release [2025-05-16]
FF Notifications: Mozilla\Firefox\Profiles\0z7ao6fm.default-release -> hxxps://www.youtube.com; hxxps://www.instagram.com; hxxps://www.reutlingen.de; hxxps://www.schwarzwaelder-bote.de; hxxps://www.pinterest.de; hxxps://www.crowdcast.io; hxxps://www.jinbei-deutschland.de; hxxps://www.facebook.com
FF Extension: (Activist – Balanced) - C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release\Extensions\activist-balanced-colorway@mozilla.org.xpi [2023-03-17]
FF Extension: (HTTPS Everywhere) - C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release\Extensions\https-everywhere@eff.org.xpi [2021-07-14]
FF Extension: (uBlock Origin) - C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release\Extensions\uBlock0@raymondhill.net.xpi [2025-03-22]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2022-10-11]
FF Extension: (Mobile View Switcher) - C:\Users\emqi-\AppData\Roaming\Mozilla\Firefox\Profiles\0z7ao6fm.default-release\Extensions\{fa247c57-77ac-41cd-b942-332051e15ced}.xpi [2022-07-30]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2025-04-15] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-04-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2025-04-15] (Adobe Inc. -> Adobe Systems)

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944040 2025-04-15] (Adobe Inc. -> Adobe Inc.)
R2 AmdPpkgSvc; C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_7bf038ca4e246b90\AmdPpkgSvc.exe [525608 2024-10-06] (Advanced Micro Devices -> AMD)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13824240 2025-05-02] (Microsoft Corporation -> Microsoft Corporation)
S3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2430504 2024-10-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9406208 2025-05-04] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-03-28] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MpDefenderCoreService.exe [2009608 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\NisSrv.exe [4538400 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25030.2-0\MsMpEng.exe [278320 2025-04-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ZTHELPER; C:\Windows\System32\zthelper.dll [146096 2025-05-14] (Microsoft Windows -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrmgr.sys [36016 2024-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys [112952 2024-06-15] (AMD Test Build -> Advanced Micro Devices)
R3 amduw23g; C:\Windows\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\amdkmdag.sys [110965144 2024-12-04] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [63008 2024-05-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [200704 2024-10-29] (Microsoft Corporation) [Datei ist nicht signiert]
R2 CorsairLLAccess8F050F5E415C1A5882EB9FF7CE2BC59B7BE3A953; C:\Program Files\Corsair\Corsair iCUE5 Software\CorsairLLAccess64.sys [23616 2025-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [331168 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [234072 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [22120 2025-03-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2025-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MTKBTFilterx64; C:\Windows\System32\drivers\mtkbtfilterx.sys [345056 2022-06-26] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
R3 mtkwlex; C:\Windows\System32\drivers\mtkwl6ex.sys [1587680 2022-06-26] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S3 ThermalFilter; C:\Windows\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-04-09] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-04-10] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [605576 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100744 2025-04-10] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\Windows\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys [79288 2025-05-14] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz158; \??\C:\Windows\temp\cpuz158\cpuz158_x64.sys [X] <==== ACHTUNG
S3 SIUSBXP; \??\C:\Windows\system32\drivers\SiUSBXp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2025-05-16 11:22 - 2025-05-16 11:22 - 000000000 ____D C:\Users\emqi-\Downloads\FRST-OlderVersion
2025-05-16 10:46 - 2025-05-16 10:46 - 000036023 _____ C:\Users\emqi-\Downloads\FRST alt 16.5.2025..txt
2025-05-16 10:46 - 2025-05-16 10:46 - 000027961 _____ C:\Users\emqi-\Downloads\Addition alt 16.5.2025.txt
2025-05-16 10:23 - 2025-05-16 10:23 - 000707760 _____ C:\Windows\system32\perfh007.dat
2025-05-16 10:23 - 2025-05-16 10:23 - 000150734 _____ C:\Windows\system32\perfc007.dat
2025-05-16 09:53 - 2025-05-16 09:53 - 000000000 ____D C:\Windows\system32\Tasks\Avira
2025-05-15 19:31 - 2025-05-16 10:16 - 000000000 ____D C:\Windows\system32\Tasks\Remediation
2025-05-15 17:30 - 2025-05-16 10:26 - 000027958 _____ C:\Users\emqi-\Downloads\Addition.txt
2025-05-15 17:29 - 2025-05-16 11:23 - 000025515 _____ C:\Users\emqi-\Downloads\FRST.txt
2025-05-15 17:28 - 2025-05-16 11:23 - 000000000 ____D C:\FRST
2025-05-15 17:27 - 2025-05-16 11:22 - 002405888 _____ (Farbar) C:\Users\emqi-\Downloads\FRST64.exe
2025-05-14 23:40 - 2025-05-16 09:53 - 000992144 _____ C:\Windows\system32\rtp.db
2025-05-14 23:40 - 2025-05-14 23:40 - 000000000 ____D C:\Windows\SysWOW64\statReporter
2025-05-14 23:40 - 2025-05-14 23:40 - 000000000 ____D C:\Users\Public\Security Sessions
2025-05-14 23:40 - 2025-05-14 23:40 - 000000000 ____D C:\Users\emqi-\AppData\Local\AviraWebView2Cache
2025-05-14 23:39 - 2025-05-16 10:00 - 000000000 ____D C:\ProgramData\Avira
2025-05-14 23:39 - 2025-05-14 23:40 - 000000000 ____D C:\Users\emqi-\AppData\Local\Avira
2025-05-14 23:37 - 2025-05-14 23:38 - 006843728 _____ (Avira Operations GmbH) C:\Users\emqi-\Downloads\avira_de_sptl1_0bdd1ff358e0d358__pavwws-spotlight-release.exe
2025-05-14 23:00 - 2025-05-15 18:44 - 000000000 ____D C:\Windows\CbsTemp
2025-05-14 16:03 - 2025-05-14 16:03 - 000030998 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-05-14 16:03 - 2025-05-14 16:03 - 000030998 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2025-05-14 15:41 - 2025-05-15 06:27 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-05-09 07:55 - 2025-05-09 07:55 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2025.lnk
2025-05-09 07:45 - 2025-05-09 07:45 - 000001092 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Lightroom Classic.lnk
2025-05-04 15:25 - 2025-05-04 15:25 - 000003858 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onLogOn
2025-05-04 15:25 - 2025-05-04 15:25 - 000003416 _____ C:\Windows\system32\Tasks\EOSv3 Scheduler onTime
2025-05-02 21:52 - 2025-05-08 16:56 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2025-04-24 18:56 - 2025-04-24 18:56 - 001773972 _____ C:\Users\emqi-\Downloads\Plakate_Brunnen_-_Kirchbrunnen-web_6.pdf
2025-04-22 00:25 - 2025-04-22 00:25 - 000223662 _____ C:\Users\emqi-\Downloads\Hausordnung (2)-1.pdf
2025-04-21 16:33 - 2025-04-21 16:33 - 000223662 _____ C:\Users\emqi-\Downloads\Hausordnung (2).pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2025-05-16 11:23 - 2025-03-24 22:03 - 000000000 ____D C:\Users\emqi-\AppData\Roaming\WTablet
2025-05-16 11:22 - 2025-03-28 23:49 - 000000000 ____D C:\Users\emqi-\AppData\Local\Malwarebytes
2025-05-16 11:19 - 2025-03-25 00:10 - 000003582 _____ C:\Windows\system32\Tasks\Launch Adobe CCXProcess
2025-05-16 11:18 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-05-16 11:18 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\AppReadiness
2025-05-16 11:18 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-05-16 11:13 - 2025-03-25 00:44 - 000001385 _____ C:\Users\emqi-\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2025-05-16 10:39 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemTemp
2025-05-16 10:23 - 2024-10-29 15:10 - 001637736 _____ C:\Windows\system32\PerfStringBackup.INI
2025-05-16 10:23 - 2024-04-01 09:24 - 000000000 ____D C:\Windows\INF
2025-05-16 10:22 - 2025-03-24 22:08 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-05-16 10:18 - 2025-03-25 00:45 - 000001279 _____ C:\Users\emqi-\Desktop\ESET Online Scanner.lnk
2025-05-16 10:18 - 2024-10-29 15:06 - 000009490 _____ C:\Windows\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-05-16 10:17 - 2025-02-17 15:17 - 000003118 _____ C:\Windows\system32\Tasks\AMDInstallLauncher
2025-05-16 10:17 - 2024-10-29 15:38 - 000000000 ____D C:\ProgramData\Norton
2025-05-16 10:17 - 2024-10-29 15:06 - 000001623 _____ C:\Windows\system32\config\VSMIDK
2025-05-16 10:17 - 2024-10-29 15:04 - 000012288 ___SH C:\DumpStack.log.tmp
2025-05-16 10:17 - 2024-10-29 15:04 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-05-16 10:16 - 2025-03-24 18:49 - 000000000 ____D C:\Users\emqi-\AppData\Local\Packages
2025-05-16 10:16 - 2024-10-29 15:06 - 000000000 ____D C:\ProgramData\Packages
2025-05-16 10:16 - 2024-04-01 09:26 - 000000000 ___HD C:\Windows\ELAMBKUP
2025-05-16 10:16 - 2024-04-01 09:21 - 000524288 _____ C:\Windows\system32\config\BBI
2025-05-16 10:16 - 2024-04-01 09:21 - 000032768 _____ C:\Windows\system32\config\ELAM
2025-05-16 10:05 - 2025-03-27 15:20 - 000000000 ____D C:\Users\emqi-\AppData\Local\Norton
2025-05-16 09:44 - 2024-10-29 15:04 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-05-15 21:54 - 2024-10-29 15:11 - 000000000 ____D C:\Windows\system32\MRT
2025-05-15 17:43 - 2025-03-24 18:49 - 000000000 ____D C:\Users\emqi-\AppData\Local\AMD
2025-05-15 06:28 - 2024-10-29 15:04 - 000475880 _____ C:\Windows\system32\FNTCACHE.DAT
2025-05-15 06:27 - 2025-03-24 22:08 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-05-15 06:27 - 2024-04-01 10:03 - 000000000 ____D C:\Windows\system32\Microsoft-Edge-WebView
2025-05-15 06:27 - 2024-04-01 10:03 - 000000000 ____D C:\Windows\InboxApps
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\UUS
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\setup
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\oobe
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SysWOW64\Dism
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemResources
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\SystemApps
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\WinMetadata
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\ShellExperiences
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\setup
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\SecureBootUpdates
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\oobe
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\migwiz
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\HealthAttestationClient
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\Dism
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\DDFs
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\appraiser
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\ShellExperiences
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\Provisioning
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\PolicyDefinitions
2025-05-15 06:27 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\bcastdvr
2025-05-14 22:24 - 2025-03-24 18:52 - 000000000 ____D C:\Users\emqi-\AppData\Roaming\Microsoft\Excel
2025-05-14 20:16 - 2024-10-29 15:11 - 214836568 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2025-05-14 19:55 - 2025-03-24 22:08 - 000001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-05-14 16:03 - 2024-10-29 15:07 - 003369984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2025-05-12 16:45 - 2024-10-29 15:06 - 000000000 ____D C:\Program Files\Microsoft Office
2025-05-11 15:25 - 2025-03-24 18:49 - 000000000 ____D C:\Users\emqi-\AppData\Local\D3DSCache
2025-05-10 08:11 - 2024-10-29 15:04 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-05-10 08:11 - 2024-10-29 15:04 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2025-05-10 08:10 - 2025-03-24 23:50 - 000000000 ____D C:\Users\emqi-\AppData\Local\CrashDumps
2025-05-09 07:55 - 2025-03-24 23:38 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-05-09 07:49 - 2025-03-24 23:39 - 000000000 ____D C:\ProgramData\Adobe
2025-05-09 07:45 - 2025-03-24 23:38 - 000000000 ____D C:\Program Files\Adobe
2025-05-09 07:45 - 2025-03-24 18:57 - 000000000 ____D C:\Users\emqi-\AppData\Local\AMD_Common
2025-05-08 22:42 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\AppLocker
2025-05-08 17:00 - 2024-10-29 15:04 - 000003832 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{323B8279-7486-43E6-B26C-D4E2B6221AA6}
2025-05-08 17:00 - 2024-10-29 15:04 - 000003708 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{0314DEF4-2C78-42E3-98D2-7EF5DB5F46A6}
2025-05-03 11:57 - 2025-03-24 22:45 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2025-05-02 07:13 - 2025-03-29 11:29 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-29 12:57 - 2025-03-24 18:51 - 000000000 ___RD C:\Users\emqi-\OneDrive
2025-04-25 13:54 - 2025-03-24 23:36 - 000000000 ____D C:\Users\emqi-\AppData\Roaming\com.adobe.dunamis
2025-04-18 11:24 - 2024-04-01 09:26 - 000000000 ____D C:\Windows\system32\SecurityHealth

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-05-2025
durchgeführt von emqi- (16-05-2025 11:23:42)
Gestartet von C:\Users\emqi-\Downloads
Microsoft Windows 11 Pro Version 24H2 26100.4061 (X64) (2025-03-24 16:22:05)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-76596380-2333717119-1847427047-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-76596380-2333717119-1847427047-503 - Limited - Disabled)
emqi- (S-1-5-21-76596380-2333717119-1847427047-1003 - Administrator - Enabled) => C:\Users\emqi-
Gast (S-1-5-21-76596380-2333717119-1847427047-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-76596380-2333717119-1847427047-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Norton 360 (Disabled - Out of date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}
FW: Norton 360 (Disabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.6.0.611 - Adobe Inc.)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_14_3_1) (Version: 14.3.1 - Adobe Inc.)
Adobe Photoshop 2025 (HKLM-x32\...\PHSP_26_6_1) (Version: 26.6.1.7 - Adobe Inc.)
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 6.10.17.152 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.133 - Advanced Micro Devices, Inc.) Hidden
AMD PCI Driver (HKLM-x32\...\{80EC3CEE-2940-42A1-A776-B5D810D39F1E}) (Version: 1.0.0.90 - Advanced Micro Devices, Inc.) Hidden
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.33 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.30.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 24.12.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{d1b7ab36-91d4-42d5-b3d3-e2827144f4d7}) (Version: 6.10.17.152 - Advanced Micro Devices, Inc.) Hidden
Avira Fallback Updater (HKLM-x32\...\Avira Fallback Updater) (Version:  - ) Hidden
Branding64 (HKLM\...\{492AEFBE-1B81-4C20-A111-E6974BB98EC5}) (Version: 1.00.0009 - Advanced Micro Devices, Inc.) Hidden
Corsair Device Control Service (HKLM\...\{3761F1BA-5697-4562-B677-E3CE0F944679}) (Version: 1.3.1 - Corsair)
Corsair iCUE5 Software (HKLM\...\{A9B0B2D7-8C59-4413-A2FB-99EDBE65A608}) (Version: 5.24.57 - Corsair)
Malwarebytes version 5.2.11.183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.2.11.183 - Malwarebytes)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.18730.20142 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 136.0.3240.64 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 136.0.3240.64 - Microsoft Corporation) Hidden
Microsoft Office Home 2024 - de-de (HKLM\...\Home2024Retail - de-de) (Version: 16.0.18730.20142 - Microsoft Corporation)
Microsoft OneNote - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.18730.20142 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.40.33810 (HKLM-x32\...\{5af95fd8-a22e-458f-acee-c61bd787178e}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.40.33810 (HKLM-x32\...\{47109d57-d746-4f8b-9618-ed6a17cc922b}) (Version: 14.40.33810.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.40.33810 (HKLM\...\{59CED48F-EBFE-480C-8A38-FC079C2BEC0F}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.40.33810 (HKLM\...\{B8B3BB4A-A10D-4F51-91B7-A64FFAC31EA7}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.40.33810 (HKLM-x32\...\{5EA6C998-D5AC-4ED9-89C3-9F25B17CCD3D}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.40.33810 (HKLM-x32\...\{0C3457A0-3DCE-4A33-BEF0-9B528C557771}) (Version: 14.40.33810 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 138.0.3 (x64 de)) (Version: 138.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 136.0.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 138.0 (x64 de)) (Version: 138.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18730.20142 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.18623.20156 - Microsoft Corporation) Hidden
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
RyzenMasterSDK (HKLM\...\{8550DA97-C688-45A2-B080-36B97D867DBC}) (Version: 1.2.3.5 - Advanced Micro Devices, Inc.) Hidden
UXP WebView Support (HKLM-x32\...\UXPW_1_3_0) (Version: 1.3.0 - Adobe Inc.)
Wacom Tablett (HKLM\...\Wacom Tablet Driver) (Version: 6.4.9-2 - Wacom Technology Corp.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-15] (Microsoft Windows)
Adobe Notification Client -> C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc [2025-03-24] (Adobe Systems Incorporated)
AMD Radeon Software -> C:\Program Files\AMD\CNext\CNext [2025-03-24] (Advanced Micro Devices Inc.)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.850.1840.0_x64__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.850.1840.0_x86__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.850.1840.0_x64__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.23355.1356.0_x64__8wekyb3d8bbwe [2024-10-29] (Microsoft Corporation)
Klick-und-Los (Vorschau) -> C:\Windows\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-05-15] (Microsoft Windows)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2412.12002.0_x64__8wekyb3d8bbwe [2025-03-24] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-03-26] (Microsoft Corp.)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.9.1.0_x64__8wekyb3d8bbwe [2025-05-09] (Microsoft Corporation)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16 [2025-05-12] ()
Windows Feature Experience Pack -> C:\Windows\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-15] (Microsoft Windows)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-76596380-2333717119-1847427047-1003_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-76596380-2333717119-1847427047-1003_Classes\CLSID\{3978C7B3-066A-45B3-9361-2F73A45C1449}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-76596380-2333717119-1847427047-1003_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-03-24] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-03-24] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-03-24] (Adobe Inc. -> )
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-03-24] (Adobe Inc. -> )
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-03-28] (Malwarebytes Inc. -> Malwarebytes)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2025-03-24] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-03-28] (Malwarebytes Inc. -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2025-03-24 21:59 - 2025-02-06 03:14 - 004311040 _____ () [Datei ist nicht signiert] C:\Program Files\Tablet\Wacom\LicenseManager.dll
2025-03-24 21:59 - 2025-02-06 03:14 - 002655744 _____ () [Datei ist nicht signiert] C:\Program Files\Tablet\Wacom\WacomCenter\libxml2.dll
2025-03-24 21:59 - 2025-02-06 03:14 - 007785984 _____ () [Datei ist nicht signiert] C:\Program Files\Tablet\Wacom\WacomCenter\WacomCenterLibrary.dll
2025-03-24 21:59 - 2025-02-06 03:14 - 001418752 _____ (Microsoft.Graphics.Canvas.Interop) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Tablet\Wacom\WacomCenter\Microsoft.Graphics.Canvas.Interop.dll
2025-03-24 21:59 - 2025-02-06 03:14 - 002357248 _____ (WacomCenterUI) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Tablet\Wacom\WacomCenter\WacomCenterUI.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM-x32 - Kein Name - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Keine Datei
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-05-08] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-76596380-2333717119-1847427047-1003\Control Panel\Desktop\\Wallpaper -> C:\Users\emqi-\AppData\Local\Packages\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\LocalCache\Microsoft\IrisService\1934621923452568658\133914532419826283.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
 ist aktiviert.

Network Binding:
=============
Ethernet: Realtek Gaming 2.5GbE Family Controller -> rt640x64.sys
WLAN: RZ616 Wi-Fi 6E 160MHz -> mtkwl6ex.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{A1261539-259B-4C77-8CBA-DFB4B86C83AD}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25044.2208.3471.2155_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3D88B2AF-4387-48D4-94BE-5888A1869085}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25044.2208.3471.2155_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{857D992C-BF14-4306-9F32-D4490E936433}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{3FA1A680-57A1-4907-A3F6-05020263F4F4}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\Windows\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\Windows\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\Windows\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{CC35BF3D-3774-4C64-BE1E-01B141841AF8}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{E64F8643-F191-4F8E-8925-6E272AE7885C}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{58C2E115-B60A-498C-A6C2-2C3EF5C24404}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4C80DB8B-1096-4CD4-AAC2-58E194139D2E}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.50\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BE4CB71C-9CAD-4066-985B-5CA7301CB14E}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.64\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================


==================== Fehlerhafte Geräte im Gerätemanager ============

==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/16/2025 10:25:36 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (05/16/2025 10:25:32 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (05/16/2025 10:25:30 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\system32\svchost.exe -k netsvcs -p -s wuauserv; Beschreibung = Windows Update; Fehler = 0x80070422).

Error: (05/16/2025 10:17:20 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\EMQI-LIVINGPICS$ über https://AMD-KeyId-bc8eac10844f5c7ebfe8bac2ceb50e8cdf34ef88.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps

Methode: GET(16ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (05/16/2025 10:15:11 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\EMQI-LIVINGPICS$ über https://AMD-KeyId-bc8eac10844f5c7ebfe8bac2ceb50e8cdf34ef88.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps

Methode: GET(15ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (05/16/2025 09:47:14 AM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\Windows\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).

Error: (05/15/2025 04:24:23 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\EMQI-LIVINGPICS$ über https://AMD-KeyId-bc8eac10844f5c7ebfe8bac2ceb50e8cdf34ef88.microsoftaik.azure.net/templates/Aik/scep:

GetCACaps

Methode: GET(47ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)

Error: (05/15/2025 06:29:47 AM) (Source: System Restore) (EventID: 8193) (User: )
Description: Fehler beim Erstellen des Wiederherstellungspunkts (Prozess = C:\Windows\winsxs\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.4060_none_a55287a7772b57c2\TiWorker.exe -Embedding; Beschreibung = Windows Modules Installer; Fehler = 0x80070422).


Systemfehler:
=============
Error: (05/16/2025 10:25:37 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NMPJ99VJBWV-Microsoft.YourPhone

Error: (05/16/2025 10:16:36 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT-AUTORITÄT)
Description: Der Gerätezuordnungsdienst hat einen Fehler bei der Endpunktermittlung erkannt.

Error: (05/16/2025 10:16:36 AM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3503) (User: NT-AUTORITÄT)
Description: Der Gerätezuordnungsdienst hat einen Fehler bei der Endpunktermittlung erkannt.

Error: (05/16/2025 10:14:18 AM) (Source: DCOM) (EventID: 10010) (User: EMQI-LIVINGPICS)
Description: Der Server "{740FE937-01F7-4482-AA62-C83F0AD3D6D0}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (05/16/2025 09:46:12 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Avira Security Updater" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (05/16/2025 09:46:12 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Avira Security Updater erreicht.

Error: (05/16/2025 09:44:07 AM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎15.‎05.‎2025 um 21:43:59 unerwartet heruntergefahren.

Error: (05/16/2025 09:43:38 AM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225684A fatal error occurred processing the restoration data.


Windows Defender:
================
Date: 2025-05-14 23:26:06
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Full Scan

Date: 2025-05-12 17:41:30
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-05-11 15:47:58
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-05-10 19:39:02
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan

Date: 2025-05-04 14:40:56
Description: 
Microsoft Defender Antivirus scan has been stopped before completion.
Scan Type: Antimalware
Scan Parameters: Quick Scan
Event[0]

Date: 2025-05-16 10:43:10
Description: 
Microsoft Defender Antivirus has encountered an error trying to download and configure Microsoft Defender Antivirus (offline scan).
Error code: 0x80070032
Error description: Die Anforderung wird nicht unterstützt.  

Date: 2025-05-16 10:43:02
Description: 
Microsoft Defender Antivirus has encountered an error trying to download and configure Microsoft Defender Antivirus (offline scan).
Error code: 0x80070032
Error description: Die Anforderung wird nicht unterstützt.  

Date: 2025-05-14 22:56:22
Description: 
Microsoft Defender Antivirus has encountered an error trying to download and configure Microsoft Defender Antivirus (offline scan).
Error code: 0x80070032
Error description: Die Anforderung wird nicht unterstützt.  

Date: 2025-05-14 22:55:33
Description: 
Microsoft Defender Antivirus has encountered an error trying to download and configure Microsoft Defender Antivirus (offline scan).
Error code: 0x80070032
Error description: Die Anforderung wird nicht unterstützt.  

Date: 2025-05-14 22:48:37
Description: 
Microsoft Defender Antivirus has encountered an error trying to download and configure Microsoft Defender Antivirus (offline scan).
Error code: 0x80070032
Error description: Die Anforderung wird nicht unterstützt.  

CodeIntegrity:
===============
Date: 2025-05-16 10:15:11
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.8.36\symamsi.dll that did not meet the Windows signing level requirements. 

Date: 2025-05-16 10:15:01
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.24.8.36\symamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: American Megatrends International, LLC. 1.I0 12/27/2024
Hauptplatine: Micro-Star International Co., Ltd. PRO B650-S WIFI (MS-7E26)
Prozessor: AMD Ryzen 5 7500F 6-Core Processor 
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 32361.99 MB
Verfügbarer physikalischer RAM: 17806.88 MB
Summe virtueller Speicher: 35049.99 MB
Verfügbarer virtueller Speicher: 14748.7 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:930.52 GB) (Free:774.38 GB) (Model: KINGSTON SNV2S1000G) NTFS
Drive d: (Volume) (Fixed) (Total:1863 GB) (Free:623.91 GB) (Model: WD_BLACK SN770 2TB) NTFS
Drive g: () (Removable) (Total:29.85 GB) (Free:12.12 GB) FAT32

\\?\Volume{65a0ed77-80f7-45f3-b738-502983e78c35}\ (Recovery) (Fixed) (Total:0.88 GB) (Free:0.46 GB) NTFS
\\?\Volume{a06396d4-135d-4615-a166-2d7a28f83397}\ (SYSTEM) (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: BF8DF24A)

Partition: GPT.

==========================================================
Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (Protective MBR) (Size: 29.9 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt =======================