Accounts gehackt

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-11-2025
durchgeführt von KaCy (02-01-2026 17:31:17)
Gestartet von C:\Users\KaCy\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) (2025-10-09 14:45:08)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3729264202-1610036436-1823616988-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3729264202-1610036436-1823616988-503 - Limited - Disabled)
Gast (S-1-5-21-3729264202-1610036436-1823616988-501 - Limited - Disabled)
KaCy (S-1-5-21-3729264202-1610036436-1823616988-1001 - Administrator - Enabled) => C:\Users\KaCy
WDAGUtilityAccount (S-1-5-21-3729264202-1610036436-1823616988-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

alt:V Multiplayer (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\altV Multiplayer) (Version:  - altMP)
AMD 3D V-Cache Performance Optimizer Driver (HKLM-x32\...\{4537278A-8E70-4021-A866-38CE644D92F8}) (Version: 1.0.0.12 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.134 - Advanced Micro Devices, Inc.) Hidden
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden
AMD Install Manager (HKLM\...\{4A09C500-303A-4D4A-AC1F-B6FD3779E76A}) (Version: 25.20.25337.1650 - Advanced Micro Devices, Inc.)
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.59 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.40.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Radeon RX 7900 XTX Series RGB LED Settings software (HKLM-x32\...\{1A3E3EA7-5A7C-4292-8A13-B0DE1BF49E13}_AMD_VGA_RX 7900 XTX) (Version: 1.05 - Cooler Master Co., Ltd)
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 25.12.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{a2c5e97a-dd0d-4a8c-b1fc-dfcaf9a0a4a2}) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.) Hidden
ASRRGBLED v2.0.132 (HKLM-x32\...\ASRock RGB LED_is1) (Version: 2.0.132 - ASRock Inc.)
AusweisApp (HKLM\...\{E5B4307B-B88A-46E3-84FE-B85E9864162A}) (Version: 2.3.2 - Governikus GmbH & Co. KG)
blender (HKLM\...\{932B2E6B-7F23-4F97-B9DA-148C3CB3FDB4}) (Version: 4.2.1 - Blender Foundation)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CORSAIR iCUE 4 Software (HKLM\...\{444A58EF-FD29-4558-BD8B-F4839576463C}) (Version: 4.33.138 - Corsair)
CrystalDiskInfo 9.3.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.3.2 - Crystal Dew World)
Discord (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Discord) (Version: 1.0.9219 - Discord Inc.)
DroidCam OBS Plugin (HKLM-x32\...\OBSDroidCam) (Version: 2.3.2 - Dev47Apps)
Elgato Stream Deck (HKLM\...\{A8E9A2C0-949B-497A-ADA7-ABCE8A58C1E0}) (Version: 6.7.3.21005 - Corsair Memory, Inc.)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{5B5CE185-F845-487D-824D-9D02A8B778FB}) (Version: 1.0.9.1 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{661c7ac8-4c45-4772-ba1d-090085dde688}) (Version: 1.0.9.1 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{3f5a70c6-60da-4ae9-8072-a51aa4dc08ee}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{9483ABD9-C772-487B-ADF8-09347CF8F2D2}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FiveM (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\CitizenFX_FiveM) (Version:  - Cfx.re)
FiveMods 0.1.58 (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\4dff2cb0-28b6-5dce-b844-e0150747007e) (Version: 0.1.58 - FiveMods)
GBT_rgbMotherboard_UC 24.02.05.02 (HKLM\...\GBT_rgbMotherboard_UC) (Version: 24.02.05.02 - GIGABYTE)
GIGABYTE Control Center 24.01.20.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.01.20.01 - GIGABYTE)
GIMP 2.10.36 (HKLM\...\GIMP-2_is1) (Version: 2.10.36 - The GIMP Team)
GIMP Updater (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\GIMP Updater) (Version: 2.8.19 - GIMP) <==== ACHTUNG
Hue Sync (HKLM\...\{23EA4BC6-0324-4C9C-B197-90FA68C105D8}) (Version: 1.12.3.73 - Signify Netherlands B.V.)
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.4.31.23 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 6.0.3128 - KYOCERA Document Solutions Inc.)
Kyocera TWAIN Driver GX (HKLM\...\Kyocera TWAIN Driver GX) (Version: 2.3.1011 - KYOCERA Document Solutions Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech Capture (HKLM\...\Capture) (Version: 2.08.11 - Logitech)
Logitech Kameraeinstellungen (HKLM-x32\...\LogiUCDPP) (Version: 2.12.20.0 - Logitech Europe S.A.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
LWS Facebook (HKLM-x32\...\{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}) (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (HKLM-x32\...\{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}) (Version: 13.51.827.0 - Logitech) Hidden
LWS Help_main (HKLM-x32\...\{1651216E-E7AD-4250-92A1-FB8ED61391C9}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Launcher (HKLM-x32\...\{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Motion Detection (HKLM-x32\...\{71E66D3F-A009-44AB-8784-75E2819BA4BA}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Pictures And Video (HKLM-x32\...\{08610298-29AE-445B-B37D-EFBE05802967}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Twitter (HKLM-x32\...\{174A3B31-4C43-43DD-866F-73C9DB887B48}) (Version: 13.30.1346.0 - Logitech) Hidden
LWS Webcam Software (HKLM-x32\...\{8937D274-C281-42E4-8CDB-A0B2DF979189}) (Version: 13.51.815.0 - Logitech) Hidden
LWS WLM Plugin (HKLM-x32\...\{9DAEA76B-E50F-4272-A595-0124E826553D}) (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (HKLM-x32\...\{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}) (Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes version 5.4.5.226 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.4.5.226 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Microsoft Corporation) Hidden
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.24601 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 146.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 141.0.3 - Mozilla)
NightLight Desktop (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\NightLight Desktop) (Version: 1.2.0 - NightLight)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
NZXT CAM 4.75.7 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.75.7 - NZXT, Inc.)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)
OpenIV (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\OpenIV) (Version: 4.1.1502 - .black/OpenIV Team)
OpenOffice 4.1.15 (HKLM-x32\...\{D8DD7A6F-CB70-43AF-9A0C-9A5A4C195068}) (Version: 4.115.9813 - Apache Software Foundation)
Opera GX Stable 125.0.5729.58 (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Opera GX 125.0.5729.58) (Version: 125.0.5729.58 - Opera Software)
PDF24 Creator 11.28.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.28.2 - Geek Software GmbH)
posterXXL DE Fotobücher (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\{07C27E89-4C84-40F8-886B-FE711F0805E4}_is1) (Version: 25.4.1.10186 - posterXXL DE)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.10.0730.071519 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9373.1 - Realtek Semiconductor Corp.)
Revo Registry Cleaner 1.5.2 (HKLM\...\{4DC8CC27-2130-4986-95E7-0C8266F5B82B}_is1) (Version: 1.5.2 - VS Revo Group, Ltd.)
Revo Uninstaller 2.6.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.0 - VS Revo Group, Ltd.)
RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.24.0318.1 - Gigabyte)
ROCCAT SWARM (HKLM-x32\...\{E9CA669A-8FB1-4F3D-A771-2E0767D20F89}) (Version: 1.94.790 - ROCCAT GmbH) Hidden
ROCCAT SWARM (HKLM-x32\...\InstallShield_{E9CA669A-8FB1-4F3D-A771-2E0767D20F89}) (Version: 1.94.790 - ROCCAT GmbH)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.98.2208 - Rockstar Games)
Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.3.8.0 - Rockstar Games)
RoomSketcher (HKLM-x32\...\RoomSketcher 1.0) (Version: 1.0 - RoomSketcher)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries GG 90.0.0 (HKLM\...\SteelSeries GG) (Version: 90.0.0 - SteelSeries ApS)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.6.2 - TeamSpeak Systems GmbH)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 168.1.12922 - Ubisoft)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WinRAR 7.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)

Packages:
=========
@{MicrosoftWindows.58683691.InpApp_1000.26100.6899.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-11] ()
@{MicrosoftWindows.59379618.InpApp_1000.26100.7171.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
Crosshair V2 -> C:\Program Files\WindowsApps\47492CenterpointGaming.CrosshairV2_1.1.28.0_neutral__rz8d8f65gztyc [2025-05-28] (CenterPoint Gaming)
Hue Sync -> C:\Program Files\Hue Sync [2025-07-03] (Signify Netherlands B.V.) [Startup Task]
Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.160.0_x64__97hta09mmv6hy [2025-11-29] (rocksdanister) [Startup Task]
 Malwarebytes Anti-Malware  -> C:\Program Files\Malwarebytes\Anti-Malware [2025-12-18] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.36.273.0_x64__dt26b99r8h8gj [2024-03-31] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm [2025-12-20] (WhatsApp Inc.) [Startup Task]
WinDbg -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2508.27001.0_x64__8wekyb3d8bbwe [2025-09-05] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2025-10-13] (win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3729264202-1610036436-1823616988-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\KaCy\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.24601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-12-18] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-12-18] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.i420] => lvcod64.dll
HKLM\...\Drivers32: [MidisrvTransferComplete] => 0
HKLM\...\Drivers32-x32: [vidc.i420] => lvcodec2.dll

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2026-01-02 17:00 - 2026-01-02 17:00 - 000257536 _____ () [Datei ist nicht signiert] \\?\C:\Users\KaCy\AppData\Local\Temp\8228b262-8021-436c-84b3-e551581d5ca8.tmp.node
2026-01-02 17:00 - 2026-01-02 17:00 - 000146432 _____ () [Datei ist nicht signiert] \\?\C:\Users\KaCy\AppData\Local\Temp\bd621cb2-bdee-4780-8f66-f60753f562b7.tmp.node
2026-01-02 17:00 - 2026-01-02 17:00 - 000628224 _____ () [Datei ist nicht signiert] \\?\C:\Users\KaCy\AppData\Local\Temp\d9c43370-d2ee-4eed-bc89-de88ce4fcacb.tmp.node
2015-12-29 05:25 - 2015-12-28 23:25 - 000120334 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\libgcc_s_dw2-1.dll
2015-12-29 05:25 - 2015-12-28 23:25 - 001540622 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\libstdc++-6.dll
2024-05-16 09:51 - 2024-05-16 03:51 - 007984128 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\resource.dll
2024-08-18 11:51 - 2024-07-26 12:18 - 002878976 _____ () [Datei ist nicht signiert] C:\Users\KaCy\AppData\Local\FiveMods\ffmpeg.dll
2024-08-18 11:51 - 2024-07-26 12:18 - 000480768 _____ () [Datei ist nicht signiert] C:\Users\KaCy\AppData\Local\FiveMods\libegl.dll
2024-08-18 11:51 - 2024-07-26 12:18 - 007492608 _____ () [Datei ist nicht signiert] C:\Users\KaCy\AppData\Local\FiveMods\libglesv2.dll
2015-12-29 05:25 - 2015-12-28 23:25 - 000079360 _____ (MingW-W64 Project. All rights reserved.) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\libwinpthread-1.dll
2023-01-17 13:13 - 2023-01-17 13:13 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll
2015-12-29 05:52 - 2015-12-28 23:52 - 002177536 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\LIBEAY32.dll
2015-12-29 05:52 - 2015-12-28 23:52 - 000462336 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\ssleay32.dll
2016-06-11 01:15 - 2016-06-10 19:15 - 000058880 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qdds.dll
2016-06-10 14:32 - 2016-06-10 08:32 - 000033792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qgif.dll
2016-06-11 01:15 - 2016-06-10 19:15 - 000046592 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qicns.dll
2016-06-10 14:33 - 2016-06-10 08:33 - 000036352 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qico.dll
2016-06-10 14:32 - 2016-06-10 08:32 - 000258560 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qjpeg.dll
2016-06-11 00:51 - 2016-06-10 18:51 - 000028672 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qsvg.dll
2016-06-11 01:15 - 2016-06-10 19:15 - 000028672 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qtga.dll
2016-06-11 01:15 - 2016-06-10 19:15 - 000495616 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qtiff.dll
2016-06-11 01:15 - 2016-06-10 19:15 - 000027648 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qwbmp.dll
2016-06-11 01:16 - 2016-06-10 19:16 - 000416768 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\imageformats\qwebp.dll
2016-06-10 14:34 - 2016-06-10 08:34 - 001489920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\platforms\qwindows.dll
2020-01-13 08:29 - 2020-01-13 02:29 - 005384704 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Core.dll
2016-06-10 14:23 - 2016-06-10 08:23 - 005283840 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Gui.dll
2016-06-13 02:29 - 2016-06-12 20:29 - 000853504 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Multimedia.dll
2016-06-10 14:17 - 2016-06-10 08:17 - 001610240 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Network.dll
2016-06-11 00:51 - 2016-06-10 18:51 - 000348160 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Svg.dll
2016-06-13 02:27 - 2016-06-12 20:27 - 000188416 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5WebSockets.dll
2016-06-10 14:29 - 2016-06-10 08:29 - 006358528 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\Qt5Widgets.dll
2022-08-15 16:23 - 2022-08-15 10:23 - 000110207 _____ (Un4seen Developments) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\BASS.dll
2022-08-15 16:23 - 2022-08-15 10:23 - 000012166 _____ (Un4seen Developments) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\BASSWASAPI.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============


==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

DNS Servers: 8.8.8.8 - 8.8.4.4
 ist aktiviert.

Network Binding:
=============
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Intel(R) Ethernet Controller I225-V -> e2f.sys
WLAN 2: RZ616 Wi-Fi 6E 160MHz #2 -> mtkwl6ex.sys

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\KaCy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "Stream Deck"
HKLM\...\StartupApproved\Run: => "SteelSeriesGG"
HKLM\...\StartupApproved\Run32: => "AMD Radeon RX 7900 XTX Series RGB LED"
HKLM\...\StartupApproved\Run32: => "LWS"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A71F778B3640C4FD80334655423A2C67"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "GIMP Updater"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "AMDNoiseSuppression"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "KYOCERA Client Tool"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "Volume Controller SD plugin"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{AAC00C63-44F6-49CA-9EF6-48158B182734}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{9D5A3D1B-D6FE-4DC4-88D0-C788F9248A16}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{F3C2F6D1-661F-40B9-952C-7BCB23EEC833}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404Addon.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{419578FA-D412-4170-A2E3-3744EFC8262F}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404Addon.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [UDP Query User{DE147AA3-7BD9-4321-8B20-529BBB600446}E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe] => (Allow) E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{073E3E30-2DE3-4512-8EB7-24FD281FC861}E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe] => (Allow) E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [{28DDAD18-A79D-42BB-8896-963615F7149A}] => (Allow) D:\Programme\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe => Keine Datei
FirewallRules: [{6883061B-EAEE-45C4-91B4-73C9D3AA008A}] => (Allow) D:\Programme\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe => Keine Datei
FirewallRules: [{518EF5BC-8522-44D1-9314-3975563DC494}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{88AE7E2A-9B57-4580-9166-7AC4E7B0E855}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ECC1C687-2FCF-4D7F-9C01-3DBB43C89BD3}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties, LLC -> Epic Games, Inc.)
FirewallRules: [{BBE3E0D1-181D-4475-9332-A6699DB267D7}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties, LLC -> Epic Games, Inc.)
FirewallRules: [{D546A07A-BD7C-4A30-AB53-8B12B9B37A43}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{B3CFFC2F-C89B-462D-8381-87496A744C6D}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{ED72EAB0-6D58-4242-92B9-AA5A8DDA8238}] => (Allow) E:\SteamLibrary\steamapps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{D1C9D10A-17E7-4E19-AECA-7CC1A13F2B4B}] => (Allow) E:\SteamLibrary\steamapps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{31CDA5C2-08C2-430A-98A6-26A79A09F6A4}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{B838099D-5C5E-462A-90AC-BD8E738D292F}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe () [Datei ist nicht signiert]
FirewallRules: [{C5BF51C1-FA78-42C2-B2ED-2C5891E98154}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe () [Datei ist nicht signiert]
FirewallRules: [{7238D4DE-AB05-4279-99E0-8454EA33F44B}] => (Allow) D:\Programme\Steam\steamapps\common\Enshrouded\enshrouded.exe => Keine Datei
FirewallRules: [{863A9ABA-514D-4FC3-BD39-7DB016B63106}] => (Allow) D:\Programme\Steam\steamapps\common\Enshrouded\enshrouded.exe => Keine Datei
FirewallRules: [{A9906BF3-98B1-4333-A500-8DD917ACB218}] => (Allow) D:\Programme\Steam\steamapps\common\Palworld\Palworld.exe => Keine Datei
FirewallRules: [{E59AC343-2378-4AD6-ACC5-50FC30B81A54}] => (Allow) D:\Programme\Steam\steamapps\common\Palworld\Palworld.exe => Keine Datei
FirewallRules: [{E72BA754-145A-4359-ADDA-08C89160B5A1}] => (Allow) C:\Program Files\Elgato\StreamDeck\node\node20.exe (OpenJS Foundation -> Node.js)
FirewallRules: [{FA5D9AC6-7A36-4487-BDC9-9334DFB6910A}] => (Allow) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)
FirewallRules: [{F1DB24F2-0FE1-4822-BC9B-A9EAD29F6F62}] => (Allow) C:\Program Files\obs-studio\bin\64bit\obs64.exe (OBS Project, LLC -> OBS)
FirewallRules: [{3D8B5BE6-76A9-48E6-B872-47502971F03E}] => (Allow) C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe (Corsair Memory, Inc. -> )
FirewallRules: [UDP Query User{81591EF8-7061-4BF0-8217-19983042E89F}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{28819304-FB63-4DD1-8C12-C42758C62D9F}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{F9080EEA-72A5-4383-9513-576A90AD2114}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{4D6F0981-2293-41EC-911A-189BD63B8512}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0B143BF7-0159-4DFD-BDB6-7F2846B18A6E}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe => Keine Datei
FirewallRules: [TCP Query User{417578F0-3664-4EE8-9D57-7CBEF38C151E}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe => Keine Datei
FirewallRules: [UDP Query User{67D0F5FA-C20F-4492-93FB-54E058704515}D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe => Keine Datei
FirewallRules: [TCP Query User{8B8327E7-78CF-47C0-BBA4-428338C4B5B1}D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe => Keine Datei
FirewallRules: [UDP Query User{2C3A28C1-F903-4E5C-89AC-3CBE82E2F836}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe => Keine Datei
FirewallRules: [TCP Query User{38E55EF8-72E5-4C53-B8A0-0576B38CF417}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe => Keine Datei
FirewallRules: [UDP Query User{31197FD9-BE9D-4D87-8AEB-157B5E59B5E0}D:\fivem\fivem (3).exe] => (Allow) D:\fivem\fivem (3).exe => Keine Datei
FirewallRules: [TCP Query User{E44113F1-1811-4163-84BE-4FC63DE1E618}D:\fivem\fivem (3).exe] => (Allow) D:\fivem\fivem (3).exe => Keine Datei
FirewallRules: [UDP Query User{C86E91E7-0359-413D-B41D-993D22414288}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6D2A9E02-F2DB-4674-A3EC-DC7D53DEBDFC}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [{FCA08AF7-270F-4C79-9C34-A2C6884E4B1D}] => (Allow) C:\Users\KaCy\AppData\Local\altv\backup\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{6FAFBC6C-D766-4667-AF0A-027375EFAA10}] => (Allow) C:\Users\KaCy\AppData\Local\altv\backup\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{D0100485-0321-4974-82D8-705943F2C612}] => (Allow) D:\Programme\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe => Keine Datei
FirewallRules: [{B6651216-CB01-4D3F-BAE3-59C096F7F21F}] => (Allow) D:\Programme\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe => Keine Datei
FirewallRules: [UDP Query User{FF5A5D29-7D62-43B9-BE84-65722D201555}C:\users\kacy\appdata\local\fivemods\fivemods.exe] => (Allow) C:\users\kacy\appdata\local\fivemods\fivemods.exe (Danylo Babenko -> FiveMods)
FirewallRules: [TCP Query User{F5B73DF1-9CE3-4EC0-A2F3-6A16D5D59E1F}C:\users\kacy\appdata\local\fivemods\fivemods.exe] => (Allow) C:\users\kacy\appdata\local\fivemods\fivemods.exe (Danylo Babenko -> FiveMods)
FirewallRules: [UDP Query User{9A0FF43E-B8A3-4038-B388-39A9B493976A}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [TCP Query User{7E1A73F0-CB7C-4BE4-9851-B539372A5705}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [UDP Query User{D436F890-E8D6-4704-9F7F-78CEC54C87A3}C:\users\kacy\appdata\local\fivem\fivem.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [TCP Query User{B5EE7878-FF0A-417F-82B3-8D84F05CD42D}C:\users\kacy\appdata\local\fivem\fivem.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [{A3480D9C-FDF7-448A-9319-58734DA22B0A}] => (Allow) E:\SteamLibrary\steamapps\common\Soundpad\Soundpad.exe => Keine Datei
FirewallRules: [{4437ABE8-5190-4FE3-8028-448D34E153A7}] => (Allow) E:\SteamLibrary\steamapps\common\Soundpad\Soundpad.exe => Keine Datei
FirewallRules: [{FC21B12D-B00B-40F4-9BD0-879E83C80539}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Keine Datei
FirewallRules: [{87DD953C-0EC8-4C59-85E6-64095DF0F8C2}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Keine Datei
FirewallRules: [{C02D1CDA-5C8A-4E54-A665-0042A50AF918}] => (Allow) E:\SteamLibrary\steamapps\common\Dominion\Dominion.exe => Keine Datei
FirewallRules: [{D05866C0-0917-4D27-9134-3876D3BDAEEC}] => (Allow) E:\SteamLibrary\steamapps\common\Dominion\Dominion.exe => Keine Datei
FirewallRules: [{14C5FE19-B08E-403A-AB35-CE1AA63327FC}] => (Allow) E:\SteamLibrary\steamapps\common\Farm Together 2\FarmTogether2.exe () [Datei ist nicht signiert]
FirewallRules: [{D18A0272-192A-4A34-9B25-F672B80DD121}] => (Allow) E:\SteamLibrary\steamapps\common\Farm Together 2\FarmTogether2.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{C84D17F4-6A8E-483A-AD84-1795F2579812}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)
FirewallRules: [TCP Query User{BD492B0D-8C47-4AE0-BCCF-987392876ABD}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)
FirewallRules: [{6C8C4C0B-9E37-4EFA-B9A7-8B9660F4460F}] => (Allow) E:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{4D124DF5-729B-4173-8958-BFC398D83C94}] => (Allow) E:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{B7F33A35-D90F-41A5-A028-9F964D74EDBC}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{705A6C99-AF86-4643-B7E2-1EE2C4E3C147}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{9F2C45B6-44A4-424D-B50F-FA4A27422CDB}] => (Allow) D:\Programme\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{57FE8E25-08BF-4A74-BD3B-F9DFD8F67171}] => (Allow) D:\Programme\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5600126F-4EE7-4107-AC92-5A0BC95B680E}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{604B3023-1D99-4D5B-9DCB-43E9101CCEAE}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{FF78C245-2D6D-4AE4-96DF-953C05C3B126}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{D9397312-8CE6-4E06-A6A7-F9B506A081F6}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{A0E452AC-0EC6-46F7-AD2F-D9F31958C698}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended.exe => Keine Datei
FirewallRules: [{35FD5AF1-01C3-436E-9246-19836BD892DA}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended.exe => Keine Datei
FirewallRules: [{607EC4BC-FC8C-467F-A0B6-94C9968A1936}] => (Allow) E:\SteamLibrary\steamapps\common\ItTakesTwo\Nuts\Binaries\Win64\ItTakesTwo.exe (Hazelight Studios AB -> Hazelight Studios)
FirewallRules: [{558CE7E6-AD94-4C18-B8B1-059E92D156DC}] => (Allow) E:\SteamLibrary\steamapps\common\ItTakesTwo\Nuts\Binaries\Win64\ItTakesTwo.exe (Hazelight Studios AB -> Hazelight Studios)
FirewallRules: [TCP Query User{C419CBAA-1C35-4E40-820C-7234999E165E}C:\users\kacy\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\kacy\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{C1BE5E5C-A283-439E-B65F-B5A5C6771C7F}C:\users\kacy\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\kacy\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{05CA6B5E-87C0-48A3-A86A-0FC5E6E96D29}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{E118FA0F-C268-4702-BAF4-66FA6C57424A}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{0798AB6E-89CE-41DC-A538-F5D79DB9EAA7}] => (Allow) E:\SteamLibrary\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{C5382C16-97EC-4CBE-AB2E-5E0D89C85E15}] => (Allow) E:\SteamLibrary\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{3293AEB4-5B5B-4C68-B26D-22D26B81D01B}] => (Allow) D:\Programme\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2EC49867-9C50-4B4E-8443-EA3D5EFEC6A4}] => (Allow) D:\Programme\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CBECD319-4D20-4479-8828-7DE8FC38D545}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{158975E7-1A6A-4F58-8AE5-EE22EF445ED8}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{255155AD-D65E-43C7-8313-1B4CE657DBA3}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{83244613-65C3-487A-9CDA-551D03C9C567}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EAFF87C9-4598-445A-930A-9E3F39F411C4}] => (Allow) D:\Programme\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{5DDFED58-8A45-42ED-A6D6-C8845F983092}] => (Allow) D:\Programme\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )

==================== Wiederherstellungspunkte =========================

30-12-2025 14:30:57 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager ============
Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (01/02/2026 02:01:36 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.

Error: (01/02/2026 04:05:11 AM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)

Error: (01/01/2026 01:02:49 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-36P160C)
Description: Fehlerhafter Anwendungsname: iCUE.exe, Version: 4.33.138.0, Zeitstempel: 0x63caad7c
Fehlerhafter Modulname: iCUE.dll, Version: 4.33.138.0, Zeitstempel: 0x63caaca0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004768b3
Fehlerhafte Prozess-ID: 0x3a2c
Fehlerhafte Anwendungsstartzeit: 0x1dc7b166fdab25a
Fehlerhafter Anwendungspfad: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe
Fehlerhafter Modulpfad: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.dll
Berichts-ID: b8ffb342-a6f5-4bc9-8f00-29d4f7036337
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (01/01/2026 03:19:46 AM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)

Error: (12/31/2025 01:16:05 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.

Error: (12/29/2025 11:35:38 PM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)

Error: (12/29/2025 05:06:52 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.

Error: (12/27/2025 03:26:56 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.


Systemfehler:
=============
Error: (01/01/2026 03:19:46 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-36P160C)
Description: Der Server "{6FA05A24-B1DF-4155-909E-7B424F2D2BB5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/31/2025 03:10:01 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Secure Boot certificates have been updated but are not yet applied to the device firmware. Review the published guidance to complete the update and ensure full protection. This device signature information is included here.
DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends International, LLC.;FirmwareVersion:F21;OEMModelNumber:B650 AORUS PRO AX;OEMModelBaseBoard:B650 AORUS PRO AX;OEMModelSystemFamily:B650 MB;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;
BucketId: e99c779f6125fada277eea5e882545e8ee21639dcab0fad526806da4de32c907
BucketConfidenceLevel: 
UpdateType: 
For more information, please see https://go.microsoft.com/fwlink/?linkid=2301018.

Error: (12/31/2025 03:05:01 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎31.‎12.‎2025 um 14:25:48 unerwartet heruntergefahren.

Error: (12/30/2025 02:14:24 PM) (Source: volsnap) (EventID: 36) (User: )
Description: Die Schattenkopien von Volume "C:" wurden abgebrochen, weil der Schattenkopiespeicher nicht auf ein benutzerdefiniertes Limit vergrößert werden konnte.

Error: (12/30/2025 03:22:26 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-36P160C)
Description: Der Server "{6FA05A24-B1DF-4155-909E-7B424F2D2BB5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/29/2025 11:35:38 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-36P160C)
Description: Der Server "{6FA05A24-B1DF-4155-909E-7B424F2D2BB5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/26/2025 02:57:41 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-36P160C)
Description: Der Server "{6FA05A24-B1DF-4155-909E-7B424F2D2BB5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/26/2025 02:46:20 AM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-36P160C)
Description: Der Server "{6FA05A24-B1DF-4155-909E-7B424F2D2BB5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================
Date: 2025-12-31 13:37:20
Description: 
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{393658AD-7F71-4197-8873-49760149AFA5}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn  %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ 

Date: 2025-12-30 14:03:52
Description: 
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{EB8DC431-DE2E-4A2E-84B5-2909AF220EE0}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn  %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ 

Date: 2025-12-29 17:16:40
Description: 
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{C719D7C6-9ED9-43B1-A064-B46B5F1CF23F}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn  %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ 

Date: 2025-12-24 16:11:05
Description: 
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{F66861A4-9440-4789-A27E-24741D521A81}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn  %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ 

Date: 2025-12-23 13:34:55
Description: 
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{4ECBD180-6AB3-44FC-88D3-CB1B6A592DFD}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn  %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ 
Event[0]

Date: 2025-10-19 21:04:10
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.439.285.0;1.439.285.0
Modulversion: 1.1.25090.3001 

CodeIntegrity:
===============
Date: 2026-01-02 14:01:14
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Users\KaCy\AppData\Local\Discord\app-1.0.9219\Discord.exe) attempted to load \Device\HarddiskVolume3\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: American Megatrends International, LLC. F21 01/10/2024
Hauptplatine: Gigabyte Technology Co., Ltd. B650 AORUS PRO AX
Prozessor: AMD Ryzen 7 7800X3D 8-Core Processor 
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 64662.16 MB
Verfügbarer physikalischer RAM: 41886.06 MB
Summe virtueller Speicher: 68758.16 MB
Verfügbarer virtueller Speicher: 41302.28 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:222.69 GB) (Free:31.66 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive d: (Ark/GTA) (Fixed) (Total:931.51 GB) (Free:103.96 GB) (Model: Samsung SSD 870 EVO 1TB) NTFS
Drive e: (Programme) (Fixed) (Total:465.76 GB) (Free:142.43 GB) (Model: Samsung SSD 860 EVO 500GB) NTFS
Drive f: (My Passport) (Fixed) (Total:931.48 GB) (Free:839.01 GB) (Model: WD My Passport 082A USB Device) NTFS

\\?\Volume{34fda401-3967-43e4-b7b8-8cba2291cd0b}\ () (Fixed) (Total:0.76 GB) (Free:0.11 GB) NTFS
\\?\Volume{6f72cac7-46e2-4a4e-b9a0-58b9a5910bac}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: B3A24FEC)

Partition: GPT.

==========================================================
Disk: 2 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 25962205)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt =======================