Hallo,
nach vielen Jahren muss ich mich mal wieder hier bei euch melden:
Ich habe heute anscheinend einen falschen Link geöffnet.
Plötzlich erscheinen auf der rechten Seite übereinander mehrere Popoup Fenster,
die das Arbeiten erschweren, und sich nicht wegklicken lassen.
Ich habe vermutlich auf 1-2 der Fenster auf 'Virus jetzt entfernen' geklickt,
natürlich ohne den gewünschten Effekt.
In allen Fenstern sind unterschiedliche Links aufgeführt, die alle mit:
' ...datacoreworks.co.in' enden


- Ich habe Malwarebytes (leider noch ohne Echtzeitschutz) drüber laufen lassen, Die 11 'Bedrohungen' in die Quarantäne verschoben, und jetzt gelöscht. Ich finde keine Berichtsfunktion.

MS Defender habe ich jetzt erst eingeschaltet, war ausgeschaltet.
Daher habe ich keine Logdateien von anderen Sicherheits Programmen.


FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2026
durchgeführt von hduel (Administrator) auf LENOVO-YOGA-14S (LENOVO 21DM) (29-05-2026 13:11:46)
Gestartet von C:\Users\hduel\Downloads\FRST64.exe
Geladene Profile: hduel & IntelTelemetryAgent
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.8524 (X64) Sprache: Englisch (Vereinigte Staaten) -> Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSATray.exe
(C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\LenovoSmartNote.exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(IdeaNotebookAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(SettingsWidgetAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\Intel Graphics Software\PresentMonService.exe
(C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe ->) (8F32EFB2-B494-4AEC-A27C-4B0736252363 -> Lenovo Limited Company) C:\Program Files\WindowsApps\E046963F.AIMeetingManager_3.1.18.0_x64__k1h2ywk1493x8\AIMeetingManager\AIMeetingManager.exe
(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\FaceBeautify.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe ->) (Mega Limited -> ) C:\Users\hduel\AppData\Local\MEGAsync\mega-desktop-app-gfxworker.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\LenovoOobePlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\MessagingPlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDCUserAgent.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyUtility.exe
(explorer.exe ->) (AceBIT GmbH -> AceBIT) C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe
(explorer.exe ->) (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe
(explorer.exe ->) (Lenovo -> Lenovo Limited Company) C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe
(explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\ooditray.exe
(explorer.exe ->) (Surfshark B.V. -> Surfshark) C:\Program Files\Surfshark\Surfshark.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe
(Lenovo -> Lenovo) C:\ProgramData\Lenovo\Vantage\Addins\BatteryWidgetAddin\3.0.0.191\BatteryWidgetHost\BatteryWidgetHost.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\AutoModeDetect.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <15>
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\CollectorService\collector_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_92899f2b73e871b4\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_9d96bfc242ae9e60\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\YMC.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe
(services.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe <2>
(services.exe ->) (Shenzhen Goodix Technology Co., Ltd. -> Goodix) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Surfshark B.V. -> Surfshark.Service) C:\Program Files\Surfshark\Surfshark.Service.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Wacom Co., Ltd. -> Wacom Technology, Corp.) C:\Windows\System32\DriverStore\FileRepository\wtabletserviceisd.inf_amd64_578c2abb4f6ab065\WTabletServiceISD.exe <2>
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2616.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Lenovo -> ) C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AMMW] => C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe [706400 2021-12-20] (Lenovo -> Lenovo Limited Company)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe [1631096 2022-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [OODITRAY.EXE] => C:\Program Files\OO Software\DiskImage\ooditray.exe [8060688 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Intel® Graphics Software] => C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe [448688 2026-03-11] (Intel Corporation -> Intel Corporation)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [BraveSoftware Update] => C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\BraveUpdateCore.exe [199696 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Password Depot] => C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe [28077256 2022-11-24] (AceBIT GmbH -> AceBIT)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Surfshark] => C:\Program Files\Surfshark\Surfshark.exe [282368 2026-05-27] (Surfshark B.V. -> Surfshark)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [176128 2026-04-01] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\OPLAPP3: C:\Windows\System32\spool\prtprocs\x64\OPLAPP3.dll [43520 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\Common XP64 Language Monitor: C:\WINDOWS\system32\oppflm64.dll [24064 2020-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Oki Electric Industry Co., Ltd.)
HKLM\...\Print\Monitors\Oki Common XP64 Language Monitor: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\Oki Language Monitor v2 x64: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\148.0.7778.179\Installer\chrmstp.exe [7621272 2026-05-22] (Google LLC -> Google LLC)
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2025-06-29]
ShortcutTarget: MEGAsync.lnk -> C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sclhelper.lnk [2025-12-05] <==== ACHTUNG
ShortcutTarget: sclhelper.lnk -> C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) <==== ACHTUNG
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2026-02-19]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {E31F6AF0-D6D1-4AB8-8488-31711197F848} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005Core{95A73FE5-3A6D-41D0-8E3F-B590EB9AAF6E} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {0EF163AE-3FD5-4384-AC90-A0F633DF7460} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005UA{B8135846-5CE9-4603-A139-CBEF16C146EE} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {F1394801-624A-471B-BCC8-432339027A75} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem149.0.7814.0{54E4157F-1202-4112-ACCE-B3BE9DB2EFE3} => C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe [8770200 2026-04-28] (Google LLC -> Google LLC)
Task: {0156E26A-A5A4-4A5D-97D7-58DDE0D00D6B} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
Task: {802FA72D-0076-4091-AFC3-3C1ACCBF21CC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
Task: {1FE94625-240B-4FFC-9CDB-A3E8F5A423D1} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {6B460D53-2DFE-4486-9634-FBF7EAB773ED} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {062840A8-94BE-4809-99F8-CEC52FFCCBE4} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {A2BA731F-847B-4154-B999-EEC6C38828A2} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\716a16a1-5006-498b-95a4-cd3d08007a19 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {5B7481B4-5634-4314-9BA0-61D0ECD33497} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\94f9125b-4199-4acb-8652-e060a3d414de => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {8B456EA8-49C8-4BF5-B05A-67C94C10F423} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a859f106-2531-482f-bd1b-9d325494c4a0 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {6CDD40FB-DA8E-4B68-9190-F922F2A2DC14} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [94032 2026-04-29] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {5251F79A-2C55-459B-B84C-65ECF5750B08} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [468448 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {C5B46F4C-4F48-48BA-AD98-05812D410AB8} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo)
Task: {DAA9FEF2-C810-4050-806F-740E65881B17} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {1404CD9B-D544-418A-8D7D-94DAE2A2046B} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {65D0A3A3-A246-45C7-8B82-095DE378CAD3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [91024 2026-04-01] (Lenovo -> Lenovo Group Ltd.) -> C:\windows\system32\drivers\Lenovo\udc\Service\/onidle
Task: {CD43D809-C72D-4013-9817-7BBC8A652E90} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {C815B070-B8D1-4072-850B-8D742FF5D276} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {7BA1380E-5377-4D9D-B6B1-349FCD901047} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [257936 2026-04-01] (Lenovo -> Lenovo Group Ltd.)
Task: {20CC96F8-0E2C-48A4-95CC-58198B2BDA49} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {B700FF21-9331-4A15-92AA-61B8CF2CE9D4} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {23125073-12AC-42FC-A10F-4644168B40BF} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {93160EAE-9B6B-4422-AC27-F5CC4168C37A} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {4CD0C5B1-6276-4CB7-B960-5B36952603A3} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {0709AF7C-51A5-4578-B304-1009BC72171E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {D056AD18-32EB-41B3-920C-E6A03B1AC347} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {529412F0-792D-4C22-B5E1-7714DB5EFB75} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {051A35F9-C1F4-40CB-A59F-E84C02D82423} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {E9AF3537-6AEA-4E28-BD90-362DAA523483} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.SScan => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {CC0CCEEE-3731-4C16-B27A-C70BD5845CDE} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {D0F92AC3-8FBC-4D45-9A8E-47C9585B4F64} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {ECB4BE4E-FC6E-4808-8F24-30028A8AEFFF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {A7A7F4EA-8EF1-4D85-AFFC-0F57CAAE6CA8} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {FE3388D3-ED57-4DD1-AA07-BE4AECD8F4FF} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {189158B1-9094-4B23-9AB6-14C645B18B0B} - System32\Tasks\Lenovo\Vantage\Schedule\SmartLock.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {8FA97119-B992-44A8-BE06-18F3F20684B4} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {CE6CE30F-C612-4B79-A7AE-74492E17AABA} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {0FB32116-56A8-4179-A428-BB4BCFC95323} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.32\x86\IdleScheduleEventAction.exe [173536 2026-05-22] (Lenovo -> )
Task: {88669291-5FC5-428E-BE74-9ED5133E84D5} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {FEC6AAF2-EA2A-415E-BC24-A1B21FCE763E} - System32\Tasks\LSNUpdater => C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe [33120 2021-12-10] (Lenovo -> )
Task: {6C2ADB0C-F4B3-4FFB-A8D8-CEBFF8F408A7} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\MEGAsync\MEGAupdater.exe [1951760 2026-05-22] (Mega Limited -> )
Task: {C4F7482A-A723-4205-9FCB-DE3B237945A2} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2B66F825-1C99-4ADB-B427-846628007389} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3895FD3E-3A75-4F57-B136-673D370B6BE3} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73648 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1ABB98FC-E12E-4418-B962-4BFC6064170F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0D46D4E-1B88-4B15-863F-26FB29450DC5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {271A2A7B-5263-48DC-AA7D-582E546C4946} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {254EDEFB-4551-4F8A-8B8B-1D83FA4C14C0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1366888 2026-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB5E746C-7B23-46CE-B1ED-CDAA2FBD86CD} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {0B589E44-3D4E-4664-BF5A-76D7CEE9474B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {564C5811-BFF6-4622-AC65-2D8AEE76A0C4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3519DCDB-5367-4E38-97A0-3497B48116F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F09D853D-9F64-4B58-A038-BC4B89EF81E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4DA6A4D-1B55-483F-A1AF-11EFF827FEA8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3382910964-3051966042-937846204-1005 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-05-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {20C9EBDA-94CF-4806-8C26-AA7B80AF3CAB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-05-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {55D2B620-5917-42AC-8B15-25EA5ABEF66F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {87D1556F-EE38-4D24-86D6-3D18C0DA83E5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {BF423E74-C1C5-428B-860D-04E742F13503} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {390425A1-7A79-4BCC-A3E5-0D3A1102445E} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {85592341-D847-441F-8CDB-6CBFF560FBC9} - System32\Tasks\OO DiskImage {080533e5-4d27-4e0a-8db7-ad8feb1d7519} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {E9C8BAC3-D333-4929-A3DB-87284918F5AB} - System32\Tasks\OO DiskImage {087009a6-ffad-4f61-a03b-96ae987f3ad2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {80B3F13C-3094-485A-BBD8-1F76A6D7F875} - System32\Tasks\OO DiskImage {19b83258-1b16-47dc-bf2f-ba92280d21e7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {8F4864CD-B778-4C2E-91AE-55120CF186DA} - System32\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {0CEE552B-422A-4093-8201-BE9BA2C4A557} - System32\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {7905AACA-1E4B-41C9-AB8F-A67B85ED77A0} - System32\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {A02FB61A-23D7-4E27-92C2-10F670D5F352} - System32\Tasks\OO DiskImage {40889dea-cc7f-4277-984e-81ffd98ccbfe} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {5735471D-365B-44A2-9799-A62306F3011C} - System32\Tasks\OO DiskImage {4470a695-74ff-4698-8a4a-265f1faddf88} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {193850FB-B5A5-4A25-BE18-DEE04E58D4FD} - System32\Tasks\OO DiskImage {58ccbf24-062d-41bc-86fc-e5fdecba9f0a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {490A2C39-6147-4DEE-BD50-860280B53129} - System32\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {5323EA76-3595-4A26-B51D-78A474A18578} - System32\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {3C649E58-BF84-41C8-BE5E-970D88A9C871} - System32\Tasks\OO DiskImage {6c9f7822-bc8a-44f5-9614-88da1f17de79} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {23F84720-4BAD-4F65-8F88-1C7D4306B0E8} - System32\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C3B98C42-3D9C-4D7B-9915-95B853DE7FA6} - System32\Tasks\OO DiskImage {7c149ff3-183e-47f3-b4d2-0048350ebbb2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C21A81BA-06C2-420C-BDBA-77D21A964F44} - System32\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {8E68914D-EE07-4E43-9AB2-B53A2DAC4AB7} - System32\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {B4C5AB36-FE43-4195-A4FC-4CB64186F549} - System32\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {D59C73C0-78DD-4666-A6BE-DB51D51EB236} - System32\Tasks\OO DiskImage {abf92fba-ee22-4f6a-9d45-7b619f0272b6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {73CEA15B-4FDB-4834-A5D0-0CCDEAFC93DE} - System32\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {068F0BC6-3749-4678-A98C-B67F06EC354D} - System32\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {31FB6184-6C8E-461C-AA35-370FA28F5E09} - System32\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {0FEDB132-0DAD-48BF-B765-F0E5E9901692} - System32\Tasks\OO DiskImage {cb0d08bf-5dee-4c25-be90-2eb3dc5eb93f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C8939A4B-9B0F-4BF2-A221-FDFBDA90AAFA} - System32\Tasks\OO DiskImage {d1042081-19c2-44e8-8ab7-2acf148ae34c} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {55450491-456E-44BE-A3F1-3AE587898710} - System32\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {906F3F64-A478-4F64-8BF1-E56B0A1212DA} - System32\Tasks\OO DiskImage {f2eb5178-6552-4ebf-ad52-a0dcc434bf34} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {AA4EFF63-B3D0-495A-991C-B14D54DA278B} - System32\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {682220AF-7507-43AC-AE2E-C0530B948E65} - System32\Tasks\OO DiskImage {fd9b7c9f-2c66-41a6-916e-868099eeeaa6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {CA9AC1E7-1F58-467B-B990-0E3C77BBA1DF} - System32\Tasks\SoftMakerUpdater => C:\Program Files\SoftMaker Office 2018\SoftMakerUpdaterTool.exe [6367440 2019-03-04] (SoftMaker Software GmbH -> )
Task: {BC359F39-32CA-4D58-8AE4-EF7BE228255A} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {2FD86584-EBD2-4736-A855-48E318E41354} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {82091FF4-0120-4418-B466-1237C37B9AF5} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\Intel\SUR\QUEENCREEK\x64\-Command "Start-Process -WindowStyle Hidden task.bat"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {1f8635c8-e78b-4506-befb-c6bb9ccc1967}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250524.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {2ec4eff5-a084-442c-9285-dfb73b969b8a}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250622.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {34450140-638d-4780-8b4e-f0b3259a1e29}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250918.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {633ff0ed-bc74-462b-b271-4bd56fe23b85}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250420.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {68b38391-1cfa-410a-8a44-1d42952efc40}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928[1].xml
Task: C:\WINDOWS\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {6dfd33dd-cfd6-4262-90d3-8c45500cac52}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251119.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {99d297da-4565-4bf1-b42e-a32359900bdb}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250510.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250831.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {a1326641-f5c5-4f34-92aa-a45623ad15d7}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250723.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {ae436785-635c-477d-8983-091064a70787}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250611.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250504.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {c60e5c85-c04f-4d4b-98c1-186055bb2eda}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250516.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {d481ac3b-f10e-4cb6-89aa-56903952e178}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251027.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {f852ba26-43cf-4ab9-8f05-911b0a246c1f}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928.xml

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{27080194-2dfc-48fe-9973-59daf5f4c445}: [DhcpNameServer] 192.168.40.12 192.168.40.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpDomain] Speedport_W_921V_1_48_000
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\960586F6E6560267F6E602865627D616E6E602822392: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\A54554F55374F59347A7A72673: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{94c4241e-7070-4b03-b530-98aa8d4ee789}: [DhcpNameServer] 192.168.40.24 192.168.40.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i13zqc65.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\vwlb9ebn.default [2025-04-29]
FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\i13zqc65.default-release [2026-05-29]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-02-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\hduel\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-29]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome: 
=======
CHR Profile: C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default [2026-05-29]
CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://d8cm5ge071bc73bf6t8g.datacoreworks.co.in; hxxps://de.aliexpress.com; hxxps://forum.kinesis.money; hxxps://gab.com; hxxps://ii1c4fst6drl7e.datacoreworks.co.in; hxxps://kundenbereich.check24.de; hxxps://meet.google.com; hxxps://www.mydealz.de,*"; hxxps://www.trip.com; hxxps://www.turkishairlines.com; hxxps://www.youtube.com
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Extension: (AdBlocker Expert) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjpkhfbhcikhabnieacjihhhhdlnfpa [2026-05-29]
CHR Extension: (WOT Website-Sicherheit und Schutz für sicheres Surfen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2026-03-23]
CHR Extension: (DuckDuckGo) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2026-05-27]
CHR Extension: (Ecosia) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2026-04-17]
CHR Extension: (Avast Passwords) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2025-05-28]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-05-26]
CHR Extension: (Google Docs Offline) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-05-28]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-05-19]
CHR Extension: (Magical: Text Expander & Autofill) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibninhmiggehlcdolcilmhacighjamp [2026-04-17]
CHR Extension: (WEB.DE MailCheck) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2025-05-28]
CHR Extension: (Cisco Webex Extension) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2025-05-28]
CHR Extension: (Tag Assistant) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2026-05-26]
CHR Extension: (PowerPoint Online) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2025-05-28]
CHR Extension: (Boomerang for Gmail) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2026-05-27]
CHR Extension: (MetaMask) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-05-28]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [ggojliohohbachojmcgelnjmnjmjgidn]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Brave: 
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-05-28]
BRA Extension: (MetaMask) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-05-08]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-05-28]
BRA Extension: (Brave NTP background images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-04-27]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-05-28]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2026-02-02]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-04-27]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-05-28]
BRA Extension: (Brave Ads Resources) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2026-05-07]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-05-28]
BRA Extension: (Brave Ad Block Updater (German website ad blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-05-28]
BRA Extension: (Brave User Agent) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-05-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2026-05-28]
BRA Extension: (P3A Configuration) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2025-08-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13353792 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe [2356792 2022-11-29] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-11-15] (Intel Corporation -> Intel Corporation)
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2026-03-24] (Intel Corporation -> Intel)
R2 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2026-03-24] (Intel Corporation -> Intel)
R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [326592 2022-09-01] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe [528928 2022-12-13] (Intel Corporation -> Intel)
R2 IntelCollectorService; C:\Program Files\Intel\CollectorService\collector_service.exe [8480464 2026-04-16] (Intel Corporation -> Intel Corporation)
R2 IntelGraphicsSoftwareService; C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe [323760 2026-03-11] (Intel Corporation -> Intel Corporation)
R2 IntelTelemetryAgent; C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe [5432528 2026-04-16] (Intel Corporation -> Intel Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-11-11] (Intel Corporation -> Intel Corporation)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe [199744 2026-03-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe [34368 2026-05-20] (Lenovo -> Lenovo)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1872000 2025-10-23] (Lenovo -> Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11481048 2026-05-01] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-02] (Malwarebytes Inc. -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [999552 2026-05-27] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe [2096384 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
R2 PresentMonSharedService; C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe [3444296 2026-01-15] (Intel Corporation -> Intel(R) Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartAppearanceAISVC; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe [55136 2021-11-04] (Lenovo -> Lenovo)
R2 SmartNoteService; C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe [92000 2021-12-10] (Lenovo -> Lenovo)
R2 Surfshark Service; C:\Program Files\Surfshark\Surfshark.Service.exe [174336 2026-05-27] (Surfshark B.V. -> Surfshark.Service)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [26931024 2026-05-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72592 2026-04-01] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe [4484680 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe [290704 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 YMC; C:\WINDOWS\System32\YMC.exe [927784 2025-09-07] (Lenovo -> Lenovo)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 bhtsddr; C:\WINDOWS\System32\drivers\bhtsddr.sys [175320 2022-08-22] (BayHub Technology Inc. -> BayHubTech)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88784 2022-08-09] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [236136 2026-05-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [131984 2025-03-03] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)
S3 rtu53cx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx22x64.inf_amd64_191dda4f2e7775ce\rtu53cx22x64.sys [1082176 2023-08-03] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 SharkDivert; C:\Program Files\Surfshark\Resources\x64\sharkdivert.sys [184480 2026-03-04] (Microsoft Windows Hardware Compatibility Publisher -> Surfshark)
R3 WacHIDRouterISDF; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)
S3 WacHIDRouterISDFV; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-05-20] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606600 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100784 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_24ebe64bf61b0c49\WiManHu\WiManHu.sys [206448 2022-05-02] (Intel Corporation -> Intel Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2025-11-18] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-04-05] (Microsoft Windows -> Microsoft Corporation)
S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.4.0.15\LenovoDiagnosticsDriver.sys (Keine Datei)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-05-29 13:12 - 2026-05-29 13:12 - 000748376 _____ C:\WINDOWS\system32\perfh007.dat
2026-05-29 13:12 - 2026-05-29 13:12 - 000159426 _____ C:\WINDOWS\system32\perfc007.dat
2026-05-29 13:11 - 2026-05-29 13:12 - 000061928 _____ C:\Users\hduel\Downloads\FRST.txt
2026-05-29 13:11 - 2026-05-29 13:12 - 000000000 ____D C:\FRST
2026-05-29 13:10 - 2026-05-29 13:10 - 002449408 _____ (Farbar) C:\Users\hduel\Downloads\FRST64.exe
2026-05-29 13:07 - 2026-05-29 13:07 - 000001417 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2026-05-29 12:34 - 2026-05-29 12:59 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-05-29 12:33 - 2026-05-29 13:07 - 000000000 ____D C:\WINDOWS\pss
2026-05-28 23:57 - 2026-05-28 23:57 - 000869204 _____ C:\Users\hduel\Documents\Eva Air FlugplanungWarenkorb.pdf
2026-05-28 22:01 - 2026-05-28 22:01 - 000000987 _____ C:\Users\Public\Desktop\Surfshark.lnk
2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Surfshark
2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\Program Files\Common Files\ovpn-dco
2026-05-27 23:22 - 2026-05-29 09:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 11:13 - 2026-05-27 11:13 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-27 10:10 - 2026-05-27 23:23 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.006
2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\TEMP.Font Driver Host.006
2026-05-19 20:48 - 2026-05-19 20:48 - 000003600 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2026-05-19 20:48 - 2026-04-24 12:14 - 000049648 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\semav6msr64.sys
2026-05-19 08:35 - 2026-05-19 08:36 - 000000000 ____D C:\Users\hduel\Documents\Ausweisdokumente
2026-05-19 08:35 - 2026-05-19 08:35 - 000000000 ____D C:\Users\hduel\Documents\Neuer Ordner
2026-05-17 15:47 - 2026-05-17 15:47 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-13 00:04 - 2026-05-13 00:04 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.005
2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\TEMP.Font Driver Host.005
2026-05-03 10:22 - 2026-05-03 10:22 - 000190976 _____ C:\Users\hduel\Downloads\Gmail - Deine Bestellung bei medimops (# 262487461 ).pdf
2026-05-01 21:45 - 2026-05-01 21:45 - 000000000 ____D C:\Users\hduel\AppData\Local\Sentry
2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\system32\ctac.json
2026-04-30 07:46 - 2026-04-30 07:46 - 008715231 _____ C:\Users\hduel\Downloads\Keumgang Short.mp4

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-05-29 13:12 - 2025-11-19 00:20 - 000000000 ____D C:\ProgramData\Surfshark
2026-05-29 13:12 - 2025-04-05 06:09 - 001729568 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-05-29 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-05-29 13:12 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-05-29 13:11 - 2025-12-10 21:51 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\19c27d4cc46ac3fd6df4e439370b45bad0160b30816e254c560d4dd8b88c330a
2026-05-29 13:11 - 2025-06-07 16:43 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\862d29cda0e11323204b0e9107710543301e63bae4f898f932473a92e9ddbb08
2026-05-29 13:09 - 2025-11-19 00:20 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Surfshark
2026-05-29 13:09 - 2025-04-29 13:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-05-29 13:08 - 2025-04-04 23:27 - 000013140 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-05-29 13:07 - 2026-01-11 22:52 - 000000000 ____D C:\Program Files\TeamViewer
2026-05-29 13:07 - 2025-04-04 23:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-05-29 13:07 - 2024-04-01 09:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-05-29 13:07 - 2024-03-21 13:54 - 000000000 ____D C:\ProgramData\Goodix
2026-05-29 13:07 - 2021-09-29 23:08 - 000012288 ___SH C:\DumpStack.log.tmp
2026-05-29 13:04 - 2025-06-07 16:44 - 000013496 _____ C:\Users\hduel\AppData\LocalLow\e6863278dac5c92b8de9c3587a83e7caf83b0c86fe3d61c204aabf43494b2647
2026-05-29 13:04 - 2025-06-07 16:39 - 000055450 _____ C:\Users\hduel\AppData\LocalLow\db0e362fc5496b848e455e3b37be69d99a54d0f25c1bea2043cf543ccca00332
2026-05-29 12:35 - 2025-04-02 12:21 - 000000000 ____D C:\Users\hduel\AppData\Local\CrashDumps
2026-05-29 12:33 - 2025-04-02 12:16 - 000000000 ____D C:\Users\hduel\AppData\Local\Malwarebytes
2026-05-29 12:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-05-29 11:58 - 2025-04-02 12:22 - 000000000 ____D C:\Users\hduel\Documents\Password Depot
2026-05-29 08:39 - 2025-06-08 13:35 - 000167000 _____ C:\Users\hduel\AppData\LocalLow\69e7b4fd919b7d417e92cf35a6c07323b9890426afe8a4147a911cff7fd7b1d0
2026-05-29 08:39 - 2025-06-08 13:35 - 000000298 _____ C:\Users\hduel\AppData\LocalLow\c0b0a919203ae87adfc9f4627f6c1c9e1e873aafeee3d34d3b8f4fdd74446a60
2026-05-29 08:39 - 2025-06-07 16:39 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\b6e15e59adf65281d0253e2636f29e82013e92027a2d7aa9e338ccf745fc5014
2026-05-29 07:59 - 2025-06-07 16:43 - 000319397 _____ C:\Users\hduel\AppData\LocalLow\86edfdf5bd824465412ccbcaa84e9ecac77630ec05d77dc79aaf55dbd04a431a
2026-05-28 22:06 - 2025-04-02 12:00 - 000002622 _____ C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-05-28 22:06 - 2025-04-02 12:00 - 000002585 _____ C:\Users\hduel\Desktop\Brave.lnk
2026-05-28 22:01 - 2025-11-19 00:19 - 000000000 ____D C:\Program Files\Surfshark
2026-05-28 13:05 - 2025-12-10 21:51 - 000651939 _____ C:\Users\hduel\AppData\LocalLow\bbf76672888b767211ac2ed00d5fd77a880425cf39a68791d89947e7a8bd9a44
2026-05-28 07:57 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\D3DSCache
2026-05-28 07:49 - 2025-06-07 16:42 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\d18c7cecdddbcdb04ba86fcda501b25d77b715442f87c259c61456169a0430d6
2026-05-27 23:26 - 2025-04-04 23:23 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-05-27 23:24 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-05-27 23:23 - 2025-04-24 11:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-05-27 23:23 - 2025-04-04 23:23 - 000505304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-05-27 23:22 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 23:22 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-27 22:04 - 2025-06-07 16:45 - 000002264 _____ C:\Users\hduel\AppData\LocalLow\4223439fc4b2af89111f38c20246a29fbcacb124c56847ecf354f94e14b44acd
2026-05-27 22:02 - 2025-06-07 16:39 - 000000026 _____ C:\Users\hduel\AppData\LocalLow\72e8ee8127e83811ef1b3dfc180ec191271c2508131e6705908b94b528984ce2
2026-05-27 17:10 - 2025-04-29 13:10 - 000001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-05-27 11:18 - 2025-04-04 23:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-05-27 11:12 - 2025-04-04 23:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-05-27 10:10 - 2026-02-04 14:00 - 000392320 _____ (Mozilla Foundation) C:\Users\hduel\Desktop\Firefox.exe
2026-05-26 14:43 - 2025-11-28 17:47 - 000000000 ____D C:\Users\hduel\Documents\ATU
2026-05-26 12:42 - 2025-06-08 08:56 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\fe35852a2006dce95e9b7137a925e330333bec4e151c973f6616d0159ca2c579
2026-05-26 08:59 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\Packages
2026-05-26 08:36 - 2025-10-18 07:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-05-25 23:03 - 2025-06-08 08:56 - 000080555 _____ C:\Users\hduel\AppData\LocalLow\de59740c052e2827fd84e8070e9a4c77f0651984687b766aa7f88a0a8262325f
2026-05-24 21:21 - 2025-06-18 08:18 - 000106753 _____ C:\Users\hduel\AppData\LocalLow\958686ab2b834bf192b725c1aaa2eba6764ecb25ef121e647d36ce887f103ac7
2026-05-24 11:15 - 2025-08-24 09:25 - 000000000 ____D C:\Users\hduel\Documents\Solaranlage
2026-05-23 22:27 - 2021-09-29 23:09 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-05-22 20:08 - 2025-06-29 23:59 - 000000000 ____D C:\Users\hduel\AppData\Local\MEGAsync
2026-05-22 20:08 - 2023-01-06 13:04 - 000000000 ____D C:\ProgramData\Packages
2026-05-22 06:53 - 2025-05-28 09:39 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-05-22 06:53 - 2025-05-28 09:39 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-05-20 20:53 - 2025-11-28 09:16 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Telegram Desktop
2026-05-20 09:10 - 2021-09-29 23:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-05-19 20:48 - 2022-06-01 22:41 - 000000000 ____D C:\Program Files\Intel
2026-05-18 08:40 - 2025-06-04 09:31 - 000000000 ____D C:\Users\hduel\Documents\Wärmepumpe
2026-05-17 15:44 - 2022-06-01 22:36 - 000000000 ____D C:\Program Files\Microsoft Office
2026-05-17 15:17 - 2025-04-24 11:20 - 000000000 ____D C:\Users\hduel\Documents\SoftMaker
2026-05-17 00:25 - 2025-04-04 23:24 - 000000000 ____D C:\Users\hduel
2026-05-15 14:19 - 2025-11-28 12:12 - 000000000 ____D C:\Users\hduel\Downloads\Telegram Desktop
2026-05-15 14:16 - 2025-04-24 17:12 - 000000000 ____D C:\Users\hduel\Documents\KIA
2026-05-14 19:04 - 2025-05-08 08:35 - 000000000 ____D C:\Users\hduel\AppData\Local\LenovoServiceBridge
2026-05-13 13:40 - 2026-03-05 18:05 - 000000000 ____D C:\Users\hduel\Documents\Hausverwaltung
2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\system32\de
2026-05-13 00:04 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-05-12 23:57 - 2023-01-06 13:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-05-12 23:51 - 2023-01-06 13:13 - 220340424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-05-12 19:58 - 2025-09-21 14:28 - 000000432 _____ C:\WINDOWS\BRWMARK.INI
2026-05-12 13:07 - 2025-07-05 16:51 - 000206672 _____ C:\Users\hduel\AppData\LocalLow\ee0b3fd139baf022c59877657128b2116b2e69b0155adf8732a4ded74261b1f1
2026-05-08 09:17 - 2025-04-16 18:01 - 000000000 ____D C:\Users\hduel\Documents\DAK
2026-05-07 15:32 - 2025-04-21 07:45 - 000000000 ____D C:\Users\hduel\Documents\Kinesis
2026-05-05 18:55 - 2025-12-10 21:50 - 000074858 _____ C:\Users\hduel\AppData\LocalLow\de8f38afd23996add4871c35de10c91d8534eab617f698cb8660702056cd76f5
2026-05-02 17:32 - 2025-07-09 22:05 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-05-02 17:32 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-05-01 06:59 - 2025-04-04 23:30 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-05-01 06:59 - 2025-04-04 23:30 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-04-29 16:22 - 2025-07-04 06:42 - 000000000 ____D C:\Users\hduel\Documents\Fenitzerplatz

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

--- --- ---

FRST Additions Logfile:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-05-2026
durchgeführt von hduel (29-05-2026 13:13:51)
Gestartet von C:\Users\hduel\Downloads
Microsoft Windows 11 Pro Version 25H2 26200.8524 (X64) (2025-04-05 04:02:34)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-3382910964-3051966042-937846204-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-3382910964-3051966042-937846204-503 - Limited - Disabled)
Gast (S-1-5-21-3382910964-3051966042-937846204-501 - Limited - Disabled)
hduel (S-1-5-21-3382910964-3051966042-937846204-1005 - Administrators - Enabled) => C:\Users\hduel
WDAGUtilityAccount (S-1-5-21-3382910964-3051966042-937846204-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Ai Meeting Manager Service (HKLM\...\{3D0711FE-B992-4424-8825-9D495CD8FCCA}_is1) (Version: 1.0.0.2 - Lenovo Group Ltd.)
Audials COMPUTER BILD Edition2026 (HKLM\...\{AA9A615C-B1DA-4F58-A8A6-5677072982AE}) (Version: 26.0.40.0 - Audials AG)
AusweisApp (HKLM\...\{E5B4307B-B88A-46E3-84FE-B85E9864162A}) (Version: 2.3.2 - Governikus GmbH & Co. KG)
Bandicam (HKLM-x32\...\Bandicam) (Version: 7.1.1.2158 - Bandicam.com)
Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandicam.com)
Brave (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\BraveSoftware Brave-Browser) (Version: 148.1.90.128 - Die Brave-Autoren)
Brother MFL-Pro Suite MFC-9320CW (HKLM-x32\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 3.0.3.0 - Brother Industries, Ltd.)
CheckDrive 2026 (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 7 - Abelssoft)
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 148.0.3967.70 - Microsoft Corporation)
Dolby Vision Provisioning Utility (HKLM-x32\...\provisiondolbyvision1_1-20200601_is1) (Version: 2.0.0.2 (2024 August Data a) - Lenovo Group Limited)
EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 148.0.7778.179 - Google LLC)
IMI Hydronic Engineering EasyPlan Version 10.0.6 (HKLM-x32\...\IMI Hydronic Engineering EasyPlan_is1) (Version: 10.0.6 - ConSoft GmbH)
Intel Driver && Support Assistant (HKLM-x32\...\{D2AEE0A6-F202-4C62-BE2B-AC0C9E00A941}) (Version: 26.1.0.2 - Intel) Hidden
Intel(R) Chipset Device Software (HKLM\...\{C6A1126A-6ED6-4231-BA48-4DA77986FA1C}) (Version: 10.1.18950.8298 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{db747e10-c752-4e5a-b099-922800123b36}) (Version: 10.1.18950.8298 - Intel(R) Corporation)
Intel(R) Computing Improvement Program (HKLM\...\{3687AB9B-8CD2-4BA0-B762-511DEA578DE7}) (Version: 2.4.11211 - Intel Corporation)
Intel(R) Graphics Software & Drivers (HKLM\...\Intel(R) Graphics Software & Drivers) (Version: 1.0.1198.0 - Intel(R) Corporation)
Intel® Driver & Support Assistant (HKLM-x32\...\{C8093AA3-B113-4F81-9A87-B1C41929B346}) (Version: 26.1.0.2 - Intel)
Intel® Graphics Software (HKLM\...\{5039689A-9995-417C-A5A3-A3F1A761E3F2}) (Version: 26.4.2155.3 - Intel Corporation)
Intel® Graphics Software (HKLM\...\{8037CB31-8466-4B66-ABCF-853FBB335583}) (Version: 26.4.2155.3 - Intel Corporation) Hidden
Ledger Wallet 2.132.0 (HKLM\...\c62032b2-0bca-5abc-b458-fd67cfc9e49b) (Version: 2.132.0 - Ledger Wallet Team)
Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.6.0.44 - Lenovo)
Lenovo Service Bridge (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 5.0.2.21 - Lenovo)
Lenovo Smart Appearance Components (HKLM-x32\...\{13E9CBF6-6E32-40D0-874A-018DFEFB0851}_is1) (Version: 2.0.0.0 - Lenovo)
Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.08.03.59 - Lenovo)
Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.2601.31.0 - Lenovo Group Ltd.)
Malwarebytes version 5.5.4.252 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.4.252 - Malwarebytes)
MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)
Microsoft .NET Host - 10.0.1 (x64) (HKLM\...\{9A3CDC3E-B643-4C13-8F8B-1E7F999A0C61}) (Version: 80.4.44025 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.17 (x64) (HKLM\...\{F9A48374-07E7-499E-AFD5-345FB3B78C09}) (Version: 64.68.34370 - Microsoft Corporation) Hidden
Microsoft .NET Host - 9.0.7 (x64) (HKLM\...\{0419550D-D358-47EE-A7D3-6FBDFD416E98}) (Version: 72.28.35968 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.1 (x64) (HKLM\...\{12D4B30A-B8DE-496F-ABBA-8E355A7E2652}) (Version: 80.4.44025 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.17 (x64) (HKLM\...\{B73795E1-2391-49EB-A3E8-C2E16B2CEAC4}) (Version: 64.68.34370 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 9.0.7 (x64) (HKLM\...\{1E4FA106-E70C-42C1-8F95-1E9364563D50}) (Version: 72.28.35968 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.1 (x64) (HKLM\...\{DD248F59-C0EC-48F9-B8DB-CB8268F9E028}) (Version: 80.4.44025 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)
Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.17 (x64) (HKLM\...\{685320E7-FDFC-4BC6-91B3-E16746AFA1A0}) (Version: 64.68.34370 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 9.0.7 (x64) (HKLM\...\{1E385F99-81C4-4738-9336-4CB107EE3ECC}) (Version: 72.28.35968 - Microsoft Corporation) Hidden
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19929.20172 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)
Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 148.0.3967.83 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 148.0.3967.83 - Microsoft Corporation) Hidden
Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.19929.20172 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.31301 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35710 (HKLM\...\{9393725C-A0DA-47F1-8DB9-D1C223A0DD5A}) (Version: 14.50.35710 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35710 (HKLM\...\{0BCFDDE2-AA44-4087-8E77-E0025551AC6E}) (Version: 14.50.35710 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35710 (HKLM-x32\...\{b2f5e2cc-18af-40da-9bb9-c296da1cb96c}) (Version: 14.50.35710.0 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 10.0.1 (x64) (HKLM\...\{E83798A0-54B2-4BF4-AFD2-53F5FD087C95}) (Version: 80.4.44025 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.17 (x64) (HKLM\...\{64AB07EF-120F-4A5A-A356-61D6D8966457}) (Version: 64.68.34385 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.17 (x64) (HKLM-x32\...\{5b3e202b-e0c9-4d25-84df-5f687c3b7c47}) (Version: 8.0.17.34917 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 9.0.7 (x64) (HKLM\...\{56FCF501-A7CF-42F8-B159-6B9F19090AED}) (Version: 72.28.35985 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 9.0.7 (x64) (HKLM-x32\...\{59aa3818-803e-4002-9605-c9c98f3366ea}) (Version: 9.0.7.35017 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.1 (x64) (HKLM-x32\...\{F14BFF87-249C-40A3-8DCD-EC608C3FF361}) (Version: 10.0.1.50000 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 151.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 137.0.2 - Mozilla)
Mozilla Thunderbird 52.9.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 de)) (Version: 52.9.1 - Mozilla)
O&O DiskImage (HKLM\...\{8D2B57CE-FD80-410B-AE9C-9014B5CC4BD5}) (Version: 20.1.336 - O&O Software GmbH)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19929.20172 - Microsoft Corporation) Hidden
OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata)
oneAPI Level Zero (HKLM\...\{2BA535F4-FEF9-45E1-9FF6-66C4E0F629FF}) (Version: 1.24.0 - Intel)
Password Depot 16 (HKLM\...\{6305E0DC-CC0E-44D1-8D60-8B85BE2D91C4}_is1) (Version: 16.0.8 - AceBIT GmbH)
PROGmatic (HKLM-x32\...\{C3439F0C-A8EF-469F-94C4-AC8B5444EC18}) (Version: 1.0.7 - Eurotronic Technology GmbH) Hidden
PROGmatic (HKLM-x32\...\PROGmatic 1.0.7) (Version: 1.0.7 - Eurotronic Technology GmbH)
Skype Version 8.138 (HKLM-x32\...\Skype_is1) (Version: 8.138 - Skype Technologies S.A.)
Smart Note (HKLM\...\{E2715359-FAFC-4C28-8064-526EB44096AD}_is1) (Version: 1.0.13.1121 - Lenovo Group Limited)
Smart View (HKLM-x32\...\{C7B50A89-F1D6-41C1-9375-0AF0C4CFE66F}) (Version: 1.0.0.0 - Samsung )
SoftMaker Office 2018 (HKLM\...\{02B0F09C-4914-4F64-BB8A-F22606E9E320}) (Version: 18.0.4914 - SoftMaker Software GmbH)
Surfshark (HKLM\...\{BC58C700-901B-40CB-859D-BFE56C62F7A8}) (Version: 6.10.0999 - Surfshark) Hidden
Surfshark (HKLM\...\Surfshark 6.10.0999) (Version: 6.10.0999 - Surfshark)
SYSCLEANER (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\SYSCLEANER) (Version: 1.1.5.0 - ) <==== ACHTUNG
TeamViewer (HKLM\...\TeamViewer) (Version: 15.78.3 - TeamViewer)
Telegram Desktop (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 6.8.2 - Telegram FZ-LLC)
Thinkpad USB Ethernet Adapter Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 11.13.0420.2023 - Lenovo)
Trezor Suite 25.12.2 (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.12.2 - SatoshiLabs)
WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1123 - McAfee, LLC)

Chrome apps:
============
Google Passwortmanager (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\9977bf12f6be2ec5e81df92b83cab66d) (Version: 1.0 - Google\Chrome)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-10] ()
AI Meeting Manager -> C:\Program Files\WindowsApps\E046963F.AIMeetingManager_3.1.18.0_x64__k1h2ywk1493x8 [2025-04-02] (LENOVO INC.)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.10030.0_x64__rz1tebttyb220 [2026-05-26] (Dolby Laboratories)
Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.30201.210.0_x64__rz1tebttyb220 [2025-04-02] (Dolby Laboratories)
Dolby Vision -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyVisionHDR_2.20400.722.0_x64__rz1tebttyb220 [2025-04-02] (Dolby Laboratories)
Glance by Mirametrix® -> C:\Program Files\WindowsApps\MirametrixInc.GlancebyMirametrix_11.43.256.0_x64__17mer8kcn3j54 [2026-02-21] (Mirametrix Inc.) [Startup Task]
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1082.2350.0_x64__8wekyb3d8bbwe [2025-12-20] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1082.2350.0_x86__8wekyb3d8bbwe [2025-12-20] (Microsoft Corporation)
Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.1082.2350.0_x64__8wekyb3d8bbwe [2025-12-22] (Microsoft Corporation)
Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-16] (LENOVO INC) [Startup Task]
Lenovo Pen Settings -> C:\Program Files\WindowsApps\WacomTechnologyCorp.157535B83C264_8.2.8.0_neutral__ss941bf8mfs8a [2025-04-03] (Wacom Technology Corp.)
Lenovo Smart Appearance -> C:\Program Files\WindowsApps\E0469640.SmartAppearance_2.3.54.0_x64__5grkq8ppsgwt4 [2025-04-03] (LENOVO INC) [Startup Task]
Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2603.12.0_x64__k1h2ywk1493x8 [2026-04-27] (LENOVO INC.)
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-05-17] ()
 Malwarebytes Anti-Malware  -> C:\Program Files\Malwarebytes\Anti-Malware [2026-05-01] ()
MEGAsync -> C:\Users\hduel\AppData\Local\MEGAsync [2026-05-22] (MEGAsync)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-02-11] (Microsoft Corporation)
Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-05-17] ()
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-05-17] ()
OneNote Virtual Printer -> C:\Program Files\WindowsApps\Microsoft.Office.OneNoteVirtualPrinter_1.0.0.0_x64__8wekyb3d8bbwe [2026-02-19] (Microsoft Corporation)
Smart Microphone Settings -> C:\Program Files\WindowsApps\ElevocTechnologyCo.Ltd.SmartMicrophoneSettings_1.1.51.0_x64__ttaqwwhyt5s6t [2025-04-02] (Elevoc Technology Co., Ltd.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2616.100.0_x64__cv1g1gvanyjgm [2026-05-08] (WhatsApp Inc.) [Startup Task]

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B4CA0}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B771B}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{06B74C04-E813-4DD4-A972-172836EFA8D6}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\localserver32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\Application\148.1.90.128\notification_helper.exe (Brave Software, Inc. -> Brave Software, Inc.)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{2928B1E6-08F1-4898-A955-9DEBA592BAA8}\localserver32 -> c:\program files\intel\intel graphics software\intelgraphicssoftware.exe (Intel Corporation -> Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{30291A01-707C-11d0-B457-4446490043BF}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{399254F2-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{399254F3-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{8a087491-5264-11d4-95F6-00A0CC3CCA14}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{9DFA9DB2-FC69-4E0B-9A1D-7450AFCF00BC}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{bf608490-5373-11d0-8efb-4446490043bf}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)
CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{F6E536F5-F795-49CE-A85D-2DA66503C6F1}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)
ShellIconOverlayIdentifiers: [
 MEGA (NotFound)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890635} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [OODIIcon] -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll [2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1-x32: [pdShellExt32] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA2} => C:\Program Files\AceBIT\Password Depot 16\pdShell32.dll [2022-11-24] (AceBIT GmbH -> AceBIT)
ContextMenuHandlers1: [pdShellExt64] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA3} => C:\Program Files\AceBIT\Password Depot 16\pdShell64.dll [2022-11-24] (AceBIT GmbH -> AceBIT)
ContextMenuHandlers2: [OODIDismount] -> {BF5F9978-5B95-4F2E-BB19-5D95234187EE} => C:\Program Files\OO Software\DiskImage\oodishd.dll [2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-01] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4-x32: [pdShellExt32] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA2} => C:\Program Files\AceBIT\Password Depot 16\pdShell32.dll [2022-11-24] (AceBIT GmbH -> AceBIT)
ContextMenuHandlers4: [pdShellExt64] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA3} => C:\Program Files\AceBIT\Password Depot 16\pdShell64.dll [2022-11-24] (AceBIT GmbH -> AceBIT)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-01] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Drivers32: [vidc.mjpg] => C:\WINDOWS\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\WINDOWS\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\WINDOWS\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )
HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\hduel\Desktop\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd
ShortcutWithArgument: C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_kajebgjangihfbkjfejcanhanjmmbcfd\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd
ShortcutWithArgument: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2025-09-21 14:28 - 2009-02-27 16:38 - 000139264 ____R () [Datei ist nicht signiert] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll
2022-06-01 22:46 - 2021-11-04 13:57 - 000229376 _____ () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\freeglut.dll
2022-06-01 22:46 - 2021-11-04 13:57 - 000364032 _____ () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\glew32.dll
2025-09-21 14:28 - 2005-04-22 13:36 - 000143360 ____N () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll
2025-04-02 12:21 - 2022-11-24 11:21 - 005273288 _____ (AceBIT) [Datei ist nicht signiert] C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn64.dll
2025-09-21 14:28 - 2010-03-10 18:16 - 000770048 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccDCtl.dll
2025-09-21 14:28 - 2012-10-09 15:30 - 000372736 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccFCtl.dll
2025-09-21 14:28 - 2010-03-29 04:53 - 000159744 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccger.dll
2025-09-21 14:28 - 2009-09-28 13:38 - 005390336 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccimg.dll
2025-09-21 14:28 - 2012-07-05 20:32 - 000084480 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2025-09-21 14:28 - 2003-06-30 00:00 - 000259584 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTDIS12n.dll
2025-09-21 14:28 - 2005-07-05 00:00 - 000131584 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTFIL12n.DLL
2025-09-21 14:28 - 2003-06-30 00:00 - 000406016 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTKRN12n.dll
2022-06-01 22:37 - 2022-06-01 22:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2022-06-01 22:37 - 2022-06-01 22:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2025-04-04 21:47 - 2015-01-28 11:15 - 001722368 _____ (Oki Data Corporation) [Datei ist nicht signiert] C:\WINDOWS\system32\spool\DRIVERS\x64\3\okW_u04N.dll
2026-04-24 12:14 - 2026-04-24 12:14 - 003033088 _____ (SQLite Development Team) [Datei ist nicht signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\hduel\Downloads\bandicam_setup.exe:MBAM.Zone.Identifier [60]
AlternateDataStreams: C:\Users\hduel\Downloads\everest_home_220.exe:MBAM.Zone.Identifier [60]
AlternateDataStreams: C:\Users\hduel\Downloads\LenovoServiceBridgeSetup.exe:MBAM.Zone.Identifier [63]
AlternateDataStreams: C:\Users\hduel\Downloads\OKW3S04N103_90367.exe:MBAM.Zone.Identifier [56]
AlternateDataStreams: C:\Users\hduel\Downloads\OKW3X04N103_90397.exe:MBAM.Zone.Identifier [56]
AlternateDataStreams: C:\Users\hduel\Downloads\Skype-8.138.0.214.exe:MBAM.Zone.Identifier [58]
AlternateDataStreams: C:\Users\hduel\Downloads\WhatsApp Installer.exe:MBAM.Zone.Identifier [61]
AlternateDataStreams: C:\Users\hduel\Documents\Privat_Brief_Color_000.doc:com.dropbox.attributes [168]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO: Password Depot -> {CFC4FC07-1F20-4705-8629-03B15B0E2351} -> C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn64.dll [2022-11-24] (AceBIT) [Datei ist nicht signiert]
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-02-01] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Password Depot -> {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} -> C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn32.dll [2022-11-24] (AceBIT) [Datei ist nicht signiert]
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2021-06-05 14:08 - 2021-06-05 14:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2025-11-20 20:58 - 2025-11-28 09:50 - 000000506 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

==================== Network ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

DNS Servers: 192.168.178.1
 ist aktiviert.

Network Binding:
=============
OpenVPN Data Channel Offload for Surfshark: OpenVPN Data Channel Offload -> ovpn-dco.sys
WLAN 2: Realtek RTL8852BE WiFi 6 802.11ax PCIe Adapter -> rtwlane601.sys

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\hduel\Pictures\2026 NASA Science Planning Guide (print resolution)26.jpg
HKU\S-1-5-80-863171341-2975503981-1811344707-3769924460-3995132968\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{6BA13B4E-76CB-428A-86D2-3B6CF9F47677}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25059.1703.3489.334_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{9E5E565E-735F-417E-8437-9786900E0188}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25059.1703.3489.334_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4E924E44-95C9-43C2-A655-5055695950BD}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{4BBF6F6B-CB53-4415-90A3-3FAC1B5844EA}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{F53010AA-AE99-449F-9A27-5DDAB3205118}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Allow) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [TCP Query User{301AD267-9860-48EF-93E8-EFFA8F7704A3}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Allow) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{4D86B2BF-5546-44CD-BCF5-5917F0BD4CCC}] => (Allow) C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe (AceBIT GmbH -> AceBIT)
FirewallRules: [{318017E8-DC46-4071-BC79-1F070E7D3882}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{CA7C2572-CEA4-4E3E-90FE-C13EC51A2CA4}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)
FirewallRules: [{5D4F4BCF-41E6-4921-85DA-1CF12451F774}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Keine Datei
FirewallRules: [TCP Query User{0492E59E-59CE-4871-BFF6-9E6CE33EE0C0}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [UDP Query User{79BE0DB9-7F75-43F8-8132-1021793F9306}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)
FirewallRules: [{97A13596-3C50-480B-B795-78886DD321A8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ECC3D3E1-E12C-4798-BE7D-535D4E5D0229}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{AE632503-9F75-4D1F-8EBB-2A269ABF546C}] => (Allow) C:\Program Files (x86)\Brother\Brmfl08j\FAXRX.exe (Brother Industries Ltd.) [Datei ist nicht signiert]
FirewallRules: [{04DA22DA-5583-4FF4-BCC8-1233C4909C5D}] => (Allow) C:\Program Files (x86)\Brother\Brmfl08j\FAXRX.exe (Brother Industries Ltd.) [Datei ist nicht signiert]
FirewallRules: [{945DFE12-96AA-48C3-B36C-951BF072796B}] => (Allow) LPort=54925
FirewallRules: [{227CE79E-9CEB-45B1-A05B-04E237C39022}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{4F3358C9-894A-4A6A-9EDA-006E82A9A2AD}C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [UDP Query User{6C76DD60-8BFF-4949-BBCC-E6CECFAAF663}C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)
FirewallRules: [TCP Query User{794BF9B3-7BE6-445D-9B1C-199F7540DD60}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{23540DE7-6B51-415C-8A30-823DBB115203}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [Datei ist nicht signiert]
FirewallRules: [{D114E2FE-3A34-402B-AA62-EC6789AA7762}] => (Allow) LPort=12972
FirewallRules: [{D3653415-DAE6-486F-9C85-8C25F3EFFAB0}] => (Allow) C:\Program Files\Audials\ComputerBild 2026\Audials.exe (Audials AG -> Audials AG)
FirewallRules: [{BCBFB453-17A1-47EE-872E-A59B4997C499}] => (Allow) LPort=14714
FirewallRules: [{9F609B48-492B-449C-AE47-DDEB8B12C9B5}] => (Allow) LPort=31931
FirewallRules: [{4770C195-4898-4245-B5AB-BE00AF6C4701}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6FF14A23-596F-451A-950A-0C646A1EB465}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{8D46364F-85E4-4502-A0A5-9D9F0A9D00C2}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{E5804F27-DA78-41A3-B1E7-9AF492583E39}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{916D8F20-7F9D-42A4-9945-31047A3A3751}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{ADF23265-9589-4385-91CE-B941E875B033}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{40D78D1E-6859-4FAB-81B8-7B539EF2481F}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{7DA9C800-62B9-41EE-B1B7-A291F2688BAF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6CDEC80A-AF05-4397-8C80-F846F183228F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{37FF4D62-EEA4-4ABF-AD28-B94D88588A48}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{AA9734C1-B747-4AB2-A044-FE9AF607E197}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

==================== Wiederherstellungspunkte =========================

26-05-2026 10:39:43 Windows Update
27-05-2026 11:01:19 Windows Modules Installer
28-05-2026 22:00:40 Installed Surfshark

==================== Fehlerhafte Geräte im Gerätemanager ============

==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (05/29/2026 01:04:45 PM) (Source: Application Error) (EventID: 1000) (User: LENOVO-YOGA-14S)
Description: Fehlerhafter Anwendungsname: Malwarebytes.exe, Version: 5.0.0.1614, Zeitstempel: 0x65d50000
Fehlerhafter Modulname: KERNELBASE.dll, Version: 10.0.26100.8521, Zeitstempel: 0xdd98c8ba
Ausnahmecode: 0xe0434352
Fehleroffset: 0x00000000000c1b6a
Fehlerhafte Prozess-ID: 0x24a0
Fehlerhafte Anwendungsstartzeit: 0x1dcef5acce4a5a9
Fehlerhafter Anwendungspfad: C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\KERNELBASE.dll
Berichts-ID: 422c3705-2ae4-42f9-93e3-1a3634a4ab00
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (05/29/2026 01:03:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)
Description: Event-ID 17

Error: (05/29/2026 12:35:27 PM) (Source: Application Error) (EventID: 1000) (User: LENOVO-YOGA-14S)
Description: Fehlerhafter Anwendungsname: Malwarebytes.exe, Version: 5.0.0.1614, Zeitstempel: 0x65d50000
Fehlerhafter Modulname: KERNELBASE.dll, Version: 10.0.26100.8521, Zeitstempel: 0xdd98c8ba
Ausnahmecode: 0xe0434352
Fehleroffset: 0x00000000000c1b6a
Fehlerhafte Prozess-ID: 0x11f0
Fehlerhafte Anwendungsstartzeit: 0x1dcef56d5e6f0a9
Fehlerhafter Anwendungspfad: C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\KERNELBASE.dll
Berichts-ID: 8b2c132f-b764-446d-b175-d6fed9cdde94
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (05/29/2026 12:23:40 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3
Fehlerhafter Modulname: ucrtbase.dll, Version: 10.0.26100.8521, Zeitstempel: 0xc38f7a35
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000000a527e
Fehlerhafte Prozess-ID: 0x5478
Fehlerhafte Anwendungsstartzeit: 0x1dcef5536e77001
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\ucrtbase.dll
Berichts-ID: b8a82902-e143-460b-9cee-822df43f55c1
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (05/28/2026 10:04:04 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3
Fehlerhafter Modulname: AudioModule.dll, Version: 1.0.10.165, Zeitstempel: 0x69aa406d
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000034aef
Fehlerhafte Prozess-ID: 0x4dc4
Fehlerhafte Anwendungsstartzeit: 0x1dceedd2043a234
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe
Fehlerhafter Modulpfad: C:\ProgramData\Lenovo\Vantage\Addins\LenovoMachineFixSystemAddin\1.0.10.165\AudioModule.dll
Berichts-ID: 6e38d813-eb9a-48a8-ba0b-f25d322bb70e
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (05/28/2026 10:04:04 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: LenovoVantage-(LenovoMachineFixSystemAddin).exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00007FFDF15E4AEF

Error: (05/27/2026 05:10:25 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5

Error: (05/27/2026 07:51:32 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3
Fehlerhafter Modulname: ucrtbase.dll, Version: 10.0.26100.8328, Zeitstempel: 0x3e0a6430
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00000000000a4aee
Fehlerhafte Prozess-ID: 0x4f98
Fehlerhafte Anwendungsstartzeit: 0x1dced9cdd497efe
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\ucrtbase.dll
Berichts-ID: a11e3a28-a657-4578-a21a-9963b38894cc
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:


Systemfehler:
=============
Error: (05/29/2026 01:09:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "System Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (05/29/2026 01:08:51 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3509) (User: NT-AUTORITÄT)
Description: Fehler bei der Gerätezuordnung: Zeremonie auswählen.

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 
Das System kann die angegebene Datei nicht finden.

Error: (05/29/2026 01:07:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (05/29/2026 01:07:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.

Error: (05/29/2026 01:07:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.


Windows Defender:
================
Date: 2026-05-29 09:41:37
Description: 
Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ʼn %τŠςäп ÎĎ:%ъ{01DCAC44-170F-41A0-A87B-1C7A17B5B485}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ʼn  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 

Date: 2026-05-28 12:39:41
Description: 
Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ʼn %τŠςäп ÎĎ:%ъ{A7FE755E-AA42-4BD7-8497-992FA8254933}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ʼn  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъҐРĈ ¢οŋʼnéçтĩŏⁿ гυлďŏŵή 

Date: 2026-05-27 11:14:52
Description: 
Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ʼn %τŠςäп ÎĎ:%ъ{3639DC0F-3CE8-418E-BFD4-4E2B06EF87C8}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ʼn  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 

Date: 2026-05-26 10:39:23
Description: 
Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ʼn %τŠςäп ÎĎ:%ъ{F8D1889F-6953-4331-ADAC-6672EF4B917F}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ʼn  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 

Date: 2026-05-25 10:32:37
Description: 
Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ʼn %τŠςäп ÎĎ:%ъ{99592425-BEB3-4827-8238-9B4EF73A10A5}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ʼn  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 
Event[0]

Date: 2026-05-29 12:59:28
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoft-Sicherheitsfunktion wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden. 

Date: 2026-05-29 12:34:55
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoft-Sicherheitsfunktion wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden. 

Date: 2026-01-22 14:35:57
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.443.770.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.25110.1
Fehlercode: 0x8024402c
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".  

Date: 2025-08-12 23:51:33
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen: 
%Vorherige Version der Sicherheitsinformationen: 1.435.134.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
%Vorherige Modulversion: 1.1.25070.4
Fehlercode: 0x80240016
Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".  

CodeIntegrity:
===============
Date: 2026-04-13 09:11:32
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\AI\aimgr.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bandicam\bdcamvk64.dll that did not meet the Microsoft signing level requirements. 

Date: 2025-11-05 07:16:36
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6173ca47e9fde277\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: LENOVO JFCN51WW(V2.17) 09/06/2024
Hauptplatine: LENOVO LNVNB161216
Prozessor: 12th Gen Intel(R) Core(TM) i7-1255U
Prozentuale Nutzung des RAM: 63%
Installierter physikalischer RAM: 16092.43 MB
Verfügbarer physikalischer RAM: 5924.65 MB
Summe virtueller Speicher: 21212.43 MB
Verfügbarer virtueller Speicher: 9090.23 MB

==================== Laufwerke ================================

Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:325.18 GB) (Model: Micron MTFDKCD512TFK) NTFS

\\?\Volume{eb80e848-5acd-4c90-9c0a-eb3af92b74e3}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.07 GB) NTFS
\\?\Volume{c1002e58-9114-4654-b1e9-c13c21323335}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: F3290C6E)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

--- --- ---





Danke vorab,