W11: Windows Sicherheit erscheint als leerer Bildschirm, MD Firewall Warnung, SystemSettings beendet Kommunikation mit Windows

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-09-2026
durchgeführt von sebas (Administrator) auf OASIS11 (ASUS System Product Name) (13-09-2026 18:31:13)
Gestartet von C:\Users\sebas\Desktop\FRST64.exe
Geladene Profile: sebas
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.9445 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Bitwarden Inc. -> Bitwarden Inc.) C:\Users\sebas\AppData\Local\Programs\Bitwarden\Bitwarden.exe <3>
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud UI Helper.exe <4>
(C:\Program Files\DisplayFusion\DisplayFusion.exe ->) (Binary Fortress Software Ltd. -> Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusionHookApp32.exe
(C:\Program Files\DisplayFusion\DisplayFusion.exe ->) (Binary Fortress Software Ltd. -> Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusionHookApp64.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe
(C:\Users\sebas\AppData\Local\MEGAsync\MEGAsync.exe ->) (Mega Limited -> ) C:\Users\sebas\AppData\Local\MEGAsync\mega-desktop-app-gfxworker.exe
(cmd.exe ->) (Bitwarden Inc. -> ) C:\Users\sebas\AppData\Local\Programs\Bitwarden\desktop_proxy.exe <2>
(Discord Inc. -> Discord Inc.) C:\Users\sebas\AppData\Local\Discord\app-1.0.9257\Discord.exe <6>
(discord-code-sign-windows-admin -> Discord Inc.) C:\Users\sebas\AppData\Local\Discord\app-1.0.9257\modules\discord_utils-1\discord_utils\DiscordSystemHelper.exe <2>
(DriverStore\FileRepository\u0199286.inf_amd64_154faf4486d4b311\B025819\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0199286.inf_amd64_154faf4486d4b311\B025819\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <7>
(explorer.exe ->) (Binary Fortress Software Ltd. -> Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusion.exe
(explorer.exe ->) (Bitwarden Inc. -> Bitwarden Inc.) C:\Users\sebas\AppData\Local\Programs\Bitwarden\Bitwarden.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe
(explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\sebas\AppData\Local\MEGAsync\MEGAsync.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ac680e5c6c566c10\RtkAudUService64.exe
(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <18>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <6>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\152.0.4191.66\msedgewebview2.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_b8459fc8f905f657\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc) C:\Windows\System32\DriverStore\FileRepository\amdppkg.inf_amd64_5fd171e24453b255\AmdPpkgSvc.exe
(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_2a2d80570dc9cadf\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0199286.inf_amd64_154faf4486d4b311\B025819\atiesrxx.exe
(services.exe ->) (Binary Fortress Software Ltd. -> Binary Fortress Software) C:\Program Files\DisplayFusion\DisplayFusionService.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Windows\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_0efdf0d8d6ee547b\logi_lamparray_service.AMD64.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_b8459fc8f905f657\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ac680e5c6c566c10\RtkAudUService64.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe OS Extension\AdobeNotificationClient.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\sebas\AppData\Local\Microsoft\OneDrive\26.158.0816.0003\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_ac680e5c6c566c10\RtkAudUService64.exe [3153424 2026-09-08] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2535400 2026-09-07] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2026-09-07] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [211049408 2026-09-08] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5775512 2026-09-03] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\Run: [DisplayFusion] => C:\Program Files\DisplayFusion\DisplayFusion.exe [346320 2026-07-23] (Binary Fortress Software Ltd. -> Binary Fortress Software)
HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\Run: [electron.app.Bitwarden] => C:\Users\sebas\AppData\Local\Programs\Bitwarden\Bitwarden.exe [225603952 2026-09-10] (Bitwarden Inc. -> Bitwarden Inc.)
HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\Run: [MicrosoftEdgeAutoLaunch_5B148DE90C207DD5EDAA5B34E614DD84] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5417288 2026-09-10] (Microsoft Corporation -> Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\152.0.7977.83\Installer\chrmstp.exe [7936664 2026-09-07] (Google LLC -> Google LLC)
Startup: C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2026-09-07]
ShortcutTarget: MEGAsync.lnk -> C:\Users\sebas\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {A6CB88D5-3E6F-493D-97C0-7C059AE80F9A} - System32\Tasks\DropboxSystem\DropboxUpdater\DropboxUpdaterTaskSystem123.0.6299.144{A58BDB69-638A-4F0D-B3BF-39826BDC8536} => C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {B86936B0-BD8B-4138-A241-0021FD18AF99} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem152.0.7933.0{AE2FF042-FA35-40C3-9C67-E1C81C21867E} => C:\Program Files (x86)\Google\GoogleUpdater\152.0.7933.0\updater.exe [7400088 2026-07-05] (Google LLC -> Google LLC)
Task: {42AB814A-6096-430C-B95D-5D62BF90D532} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-862088497-1239916809-729996582-1001 => C:\Users\sebas\AppData\Local\MEGAsync\MEGAupdater.exe [2091024 2026-09-01] (Mega Limited -> )
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {003839AA-2282-4AEC-8060-EF3701287A48} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5E93BF31-1268-470D-9E05-C74EF7E79047} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D9D90B38-B292-4914-BB68-6E3F21B2B649} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A7E12A82-5E16-42A0-A5D0-2D6077AE717F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpCmdRun.exe [1902840 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0778CA62-0337-4DCC-8A5F-441706F2D132} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3656304 2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3f2e5acf-773c-47a2-aac9-9d9edca274f0}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3f2e5acf-773c-47a2-aac9-9d9edca274f0}: [DhcpDomain] fritz.box

FireFox:
========
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-09-07] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-09-07] (Adobe Inc. -> Adobe Systems)

Edge: 
=======
Edge Profile: C:\Users\sebas\AppData\Local\Microsoft\Edge\User Data\Default [2026-09-13]
Edge Extension: (Google Docs Offline) - C:\Users\sebas\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-07]
Edge Extension: (Edge relevant text changes) - C:\Users\sebas\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-09-07]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default [2026-09-13]
CHR Extension: (BetterTTV) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2026-09-07]
CHR Extension: (7TV) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ammjkodgmmoknidbanneddgankgfejfh [2026-09-07]
CHR Extension: (uBlock Origin Lite) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkjiahejlhfcafbddmgiahcphecmpfh [2026-09-08]
CHR Extension: (VPN for Chrome: NordVPN proxy protection) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2026-09-07]
CHR Extension: (Google Docs Offline) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-07]
CHR Extension: (Ghostery Werbeblocker & Datenschutz) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2026-09-09]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-09-07]
CHR Extension: (Bitwarden Passwortmanager) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2026-09-10]
CHR Profile: C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Guest Profile [2026-09-07]
CHR Profile: C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1 [2026-09-13]
CHR Extension: (Pixiv Toolkit Next) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajlcnbbeidbackfknkgknjefhmbngdnj [2026-09-07]
CHR Extension: (BetterTTV) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2026-09-07]
CHR Extension: (7TV) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ammjkodgmmoknidbanneddgankgfejfh [2026-09-07]
CHR Extension: (Soundgasm download button) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cjeifmdoeaaikaecamnflombdjcmocja [2026-09-07]
CHR Extension: (uBlock Origin Lite) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ddkjiahejlhfcafbddmgiahcphecmpfh [2026-09-08]
CHR Extension: (Tampermonkey) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2026-09-07]
CHR Extension: (Dark Reader) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2026-09-07]
CHR Extension: (VPN for Chrome: NordVPN proxy protection) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2026-09-07]
CHR Extension: (IsThereAnyDeal Everywhere) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fpkglohhcpgncijlhfnoloioahigjloj [2026-09-07]
CHR Extension: (Google Docs Offline) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-11]
CHR Extension: (Enable Right Click for Google Chrome™) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hagnihgfmpjkegpopddiigoaabddfkcj [2026-09-07]
CHR Extension: (SteamDB) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kdbmhfkmnlmbkgbabkdealhhbfhlmmon [2026-09-07]
CHR Extension: (Ghostery Werbeblocker & Datenschutz) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mlomiejdfkolichcflejclcbmpeaniij [2026-09-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-09-07]
CHR Extension: (Bitwarden Passwortmanager) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nngceckbapebfimnlniiiahkandclblb [2026-09-10]
CHR Profile: C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 2 [2026-09-10]
CHR Extension: (Google Docs Offline) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-09-07]
CHR Extension: (Proton VPN: Fast & Secure) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\jplgfhpmjnbigmhklmmbgecoobifkmpa [2026-09-07]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\sebas\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-09-07]
CHR Profile: C:\Users\sebas\AppData\Local\Google\Chrome\User Data\System Profile [2026-09-07]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [948704 2026-09-07] (Adobe Inc. -> Adobe Inc.)
R2 AmdPpkgSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_5fd171e24453b255\AmdPpkgSvc.exe [515472 2026-02-23] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
S2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [845256 2026-09-13] (ASUSTeK Computer Inc. -> )
R2 DbxSvc; C:\WINDOWS\System32\DbxSvc.exe [59048 2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2247552 2026-08-31] (discord-code-sign-windows-admin -> Discord Inc.)
R2 DisplayFusionService; C:\Program Files\DisplayFusion\DisplayFusionService.exe [346336 2026-07-23] (Binary Fortress Software Ltd. -> Binary Fortress Software)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\270.4.3246\DropboxElevationService.exe [1659344 2026-09-08] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterInternalService123.0.6299.144; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterService123.0.6299.144; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 logi_lamparray_service; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_0efdf0d8d6ee547b\logi_lamparray_service.AMD64.exe [11815816 2026-09-07] (Logitech Inc -> Logitech, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667704 2026-09-08] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-09-08] (Malwarebytes Inc -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MpDefenderCoreService.exe [2307816 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_b8459fc8f905f657\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-08] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\NisSrv.exe [5311736 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\MsMpEng.exe [291360 2026-09-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_2a2d80570dc9cadf\amdfendrmgr.sys [56968 2026-03-16] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\DriverStore\FileRepository\amdgpio3.inf_amd64_893f7355b0a16289\amdgpio3.sys [33664 2025-12-03] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AmdPpkg; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_5fd171e24453b255\AmdPpkg.sys [35224 2026-02-23] (Advanced Micro Devices -> Advanced Micro Devices)
R3 amduw23g-199286-eda2a421; C:\WINDOWS\System32\DriverStore\FileRepository\u0199286.inf_amd64_154faf4486d4b311\B025819\amdkmdag.sys [102145040 2026-03-16] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R1 ESProtectionDriver; \??\C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-09-08] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_4a770872f89cc772\hidgamepad.sys [65536 2026-09-08] (Microsoft Windows -> Microsoft Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [83008 2026-09-07] (Microsoft Windows -> Microsoft Corporation)
R3 logi_lamparray; C:\WINDOWS\System32\DriverStore\FileRepository\logi_lamparray_usb.inf_amd64_0efdf0d8d6ee547b\logi_lamparray.AMD64.sys [89480 2026-09-07] (Logitech Inc -> Logitech, Inc.)
R0 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-09-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-09-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217192 2026-09-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [132712 2026-09-13] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [246376 2026-09-08] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; \??\C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-09-13] (Malwarebytes Inc -> )
R3 rt25cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt25cx21x64.inf_amd64_8e61b4ea25373168\rt25cx21x64.sys [887776 2024-10-21] (Realtek Semiconductor Corp. -> Realtek)
S3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-09-07] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21672 2026-09-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [660504 2026-09-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [137240 2026-09-07] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-09-13 18:31 - 2026-09-13 18:31 - 000025938 _____ C:\Users\sebas\Desktop\FRST.txt
2026-09-13 18:31 - 2026-09-13 18:31 - 000000000 ____D C:\FRST
2026-09-13 18:30 - 2026-09-13 18:30 - 002455552 _____ (Farbar) C:\Users\sebas\Desktop\FRST64.exe
2026-09-13 18:20 - 2026-09-13 18:20 - 000707760 _____ C:\WINDOWS\system32\perfh007.dat
2026-09-13 18:20 - 2026-09-13 18:20 - 000150734 _____ C:\WINDOWS\system32\perfc007.dat
2026-09-13 18:13 - 2026-09-13 18:17 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\IGDump
2026-09-13 18:13 - 2026-09-13 18:13 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-09-12 18:24 - 2026-09-12 18:24 - 000005120 _____ C:\Users\sebas\Downloads\Microsoft.Services.Store.winmd
2026-09-12 15:44 - 2026-09-12 15:44 - 000339467 _____ C:\Users\sebas\OneDrive\Dokumente\S_20260912_154404_Postfach_-_Sammeldownload.ZIP
2026-09-10 23:42 - 2026-09-13 18:31 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Bitwarden
2026-09-10 23:41 - 2026-09-10 23:41 - 000002401 _____ C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitwarden.lnk
2026-09-10 23:41 - 2026-09-10 23:41 - 000000000 ____D C:\Users\sebas\AppData\Local\bitwarden-updater
2026-09-10 23:39 - 2026-09-10 23:41 - 000000000 ____D C:\Users\sebas\AppData\Local\Programs\Bitwarden
2026-09-10 23:39 - 2026-09-10 23:39 - 000734264 _____ (Bitwarden Inc.) C:\Users\sebas\Downloads\Bitwarden-Installer-2026.8.0.exe
2026-09-10 22:04 - 2026-09-10 22:04 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2026.lnk
2026-09-10 15:56 - 2026-09-10 15:56 - 000000238 _____ C:\Users\sebas\OneDrive\Dokumente\dse.txt
2026-09-10 04:36 - 2026-09-10 04:36 - 000000099 _____ C:\Users\sebas\OneDrive\Dokumente\e.txt
2026-09-10 03:19 - 2026-09-10 03:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2026-09-10 02:27 - 2026-09-10 02:28 - 000000000 ___RD C:\Users\sebas\Dropbox
2026-09-10 02:19 - 2026-09-10 02:19 - 000000000 ___RD C:\Users\sebas\Dropbox (Alt)
2026-09-10 02:18 - 2026-09-13 18:14 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Dropbox
2026-09-10 02:18 - 2026-09-13 18:14 - 000000000 ____D C:\Users\sebas\AppData\Local\Dropbox
2026-09-10 02:18 - 2026-09-10 04:33 - 000000000 ____D C:\Program Files\Dropbox
2026-09-10 02:18 - 2026-09-10 03:19 - 000000000 ____D C:\Program Files (x86)\Dropbox
2026-09-10 02:18 - 2026-09-10 02:18 - 000000000 ____D C:\WINDOWS\system32\Tasks\DropboxSystem
2026-09-10 02:18 - 2026-08-31 01:05 - 000059048 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2026-09-10 01:19 - 2026-09-10 01:19 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2026-09-10 01:16 - 2026-09-06 09:57 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-09-10 01:16 - 2026-09-06 09:57 - 003082800 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-09-10 01:16 - 2026-09-06 09:57 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-09-10 01:16 - 2026-09-06 09:57 - 002626608 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-09-10 01:16 - 2026-09-06 09:57 - 001730096 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-09-10 01:16 - 2026-09-06 09:57 - 001730096 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-09-10 01:16 - 2026-09-06 09:57 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-09-10 01:16 - 2026-09-06 09:57 - 001542192 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-09-10 01:16 - 2026-09-06 09:57 - 000540904 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2026-09-10 01:16 - 2026-09-06 09:57 - 000418024 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2026-09-10 01:16 - 2026-09-06 09:53 - 001701608 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2026-09-10 01:16 - 2026-09-06 09:53 - 001594600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-09-10 01:16 - 2026-09-06 09:53 - 001499368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2026-09-10 01:16 - 2026-09-06 09:53 - 001240808 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-09-10 01:16 - 2026-09-06 09:53 - 000685800 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvofapi64.dll
2026-09-10 01:16 - 2026-09-06 09:53 - 000513768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvofapi.dll
2026-09-10 01:16 - 2026-09-06 09:52 - 028185320 _____ C:\WINDOWS\system32\nvidia-pcc.exe
2026-09-10 01:16 - 2026-09-06 09:52 - 002343144 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-09-10 01:16 - 2026-09-06 09:52 - 001734888 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-09-10 01:16 - 2026-09-06 09:52 - 001077992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2026-09-10 01:16 - 2026-09-06 09:52 - 000828136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2026-09-10 01:16 - 2026-09-06 09:52 - 000470760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2026-09-10 01:16 - 2026-09-06 09:51 - 032279784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 020934376 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 008488168 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 006052584 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 005926120 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 004790504 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 000853736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2026-09-10 01:16 - 2026-09-06 09:51 - 000574040 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2026-09-10 01:16 - 2026-09-06 09:51 - 000442640 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-09-10 01:16 - 2026-09-05 05:07 - 000176631 _____ C:\WINDOWS\system32\nvinfo.pb
2026-09-09 22:24 - 2026-09-09 22:24 - 000000000 ____D C:\Users\sebas\AppData\Roaming\HandBrake
2026-09-09 22:24 - 2026-09-09 22:24 - 000000000 ____D C:\Users\sebas\AppData\Local\ToastNotificationManagerCompat
2026-09-09 22:24 - 2026-09-09 22:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HandBrake
2026-09-09 22:24 - 2026-09-09 22:24 - 000000000 ____D C:\Program Files\HandBrake
2026-09-09 22:22 - 2026-09-09 22:22 - 194264877 _____ C:\Users\sebas\Downloads\Shutter Encoder 20.3 Windows 64bits.zip
2026-09-09 22:22 - 2026-09-09 22:22 - 000000000 ____D C:\Users\sebas\Shutter Encoder
2026-09-09 22:22 - 2026-09-09 22:22 - 000000000 ____D C:\Users\sebas\Downloads\Shutter Encoder
2026-09-09 22:20 - 2026-09-09 22:20 - 025331264 _____ C:\Users\sebas\Downloads\HandBrake-1.11.2-x86_64-Win_GUI.exe
2026-09-09 00:24 - 2026-09-09 00:24 - 125787696 _____ (Logitech Inc.) C:\Users\sebas\Downloads\LGS_9.04.49_x64_Logitech.exe
2026-09-09 00:23 - 2026-09-09 00:23 - 000000000 ____D C:\Users\sebas\AppData\Roaming\LGHUB_BKP
2026-09-08 23:06 - 2026-09-08 23:06 - 000000000 ____D C:\Users\sebas\AppData\Local\PeerDistRepub
2026-09-08 22:54 - 2026-09-09 00:30 - 000000000 ____D C:\ProgramData\UWP
2026-09-08 22:53 - 2026-09-08 22:55 - 000000000 ___HD C:\Program Files (x86)\Temp
2026-09-08 22:53 - 2026-09-08 22:53 - 000000000 ____D C:\Program Files (x86)\Realtek
2026-09-08 22:53 - 2026-09-08 22:47 - 000313304 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RTHDASIO64.dll
2026-09-08 22:53 - 2026-09-08 22:47 - 000268248 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\SysWOW64\RTHDASIO.dll
2026-09-08 22:48 - 2026-09-08 22:48 - 000000000 ____D C:\Users\sebas\AppData\Roaming\AMD
2026-09-08 22:48 - 2026-09-08 22:48 - 000000000 ____D C:\Users\sebas\AppData\Local\setup
2026-09-08 22:48 - 2026-09-08 22:48 - 000000000 ____D C:\Program Files (x86)\AMD
2026-09-08 22:48 - 2026-09-08 22:48 - 000000000 ____D C:\AMD
2026-09-08 22:46 - 2026-09-08 22:47 - 000000000 ____D C:\Users\sebas\Downloads\MB Treiber
2026-09-08 22:12 - 2026-09-08 22:12 - 000001345 _____ C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\PC Health Check.lnk
2026-09-08 22:12 - 2026-09-08 22:12 - 000000000 ____D C:\Users\sebas\AppData\Local\PCHealthCheck
2026-09-08 21:51 - 2026-09-09 19:36 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\MMC
2026-09-08 20:33 - 2026-09-13 18:13 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-09-08 20:31 - 2026-09-08 20:31 - 000039215 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-09-08 20:31 - 2026-09-08 20:31 - 000039215 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-09-08 20:31 - 2026-09-08 20:31 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-09-08 20:31 - 2026-09-08 20:31 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-09-08 20:31 - 2026-09-08 20:31 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-09-08 20:31 - 2026-09-08 20:31 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-09-08 20:31 - 2026-09-08 20:31 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-09-08 20:31 - 2026-09-08 20:31 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-09-08 20:31 - 2026-09-08 20:31 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-09-08 18:32 - 2026-09-08 18:32 - 000000000 _____ C:\Users\sebas\OneDrive\Dokumente\netstat -ano.txt
2026-09-08 18:31 - 2026-09-08 18:31 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-09-08 17:15 - 2026-09-13 18:18 - 000000000 ____D C:\Users\sebas\AppData\Local\Malwarebytes
2026-09-08 17:15 - 2026-09-08 17:15 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-09-08 17:15 - 2026-09-08 17:15 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-09-08 17:15 - 2026-09-08 17:15 - 000000000 ____D C:\Program Files\Malwarebytes
2026-09-08 17:14 - 2026-09-08 17:14 - 002886560 _____ (Malwarebytes) C:\Users\sebas\Downloads\MBSetup-1.1.exe
2026-09-08 16:40 - 2026-09-08 16:40 - 000000000 ____D C:\Users\sebas\AppData\Roaming\CELSYS_EN
2026-09-08 16:38 - 2026-09-08 16:40 - 000000000 ____D C:\Users\sebas\AppData\Roaming\CELSYS
2026-09-08 16:38 - 2026-09-08 16:38 - 000000000 ____D C:\Users\sebas\AppData\Roaming\CELSYSUserData
2026-09-08 16:37 - 2026-09-08 22:53 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2026-09-08 16:37 - 2026-09-08 16:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CLIP STUDIO
2026-09-08 16:37 - 2026-09-08 16:37 - 000000000 ____D C:\ProgramData\CELSYS
2026-09-08 16:37 - 2026-09-08 16:37 - 000000000 ____D C:\Program Files\CELSYS
2026-09-08 16:35 - 2026-09-08 16:36 - 464253256 _____ (CELSYS) C:\Users\sebas\Downloads\CSP_4010w_setup.exe
2026-09-08 05:02 - 2026-09-08 05:02 - 000000000 ____D C:\WINDOWS\Minidump
2026-09-08 02:59 - 2026-09-08 02:59 - 000723953 _____ C:\Users\sebas\Downloads\CGS Fractal Noise - User Manual_EN.pdf
2026-09-08 02:59 - 2026-09-08 02:59 - 000219173 _____ C:\Users\sebas\Downloads\CGS_FractalNoiseEN.zip
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Digseum
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\sokpop
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\FollyToot
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Coatsink
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Adam Travers
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\Local\UntitledSuikaLike
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\Local\StevesWarehouse
2026-09-08 02:38 - 2026-09-08 02:38 - 000000000 ____D C:\Users\sebas\AppData\Local\ControllerCompanion
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Vampire_Survivors_Data
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Vampire_Survivors_93023228
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Vampire_Survivors
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\TurtleFox Games
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Obsidian Entertainment
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Liica
2026-09-08 02:37 - 2026-09-08 02:37 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\DivingSwanGames
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\Roaming\com.giab.games.gcfw.steam
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Flanne
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\EmpromGame
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\ColePowered Games
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\ArchmageLabs
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Alawar
2026-09-08 02:36 - 2026-09-08 02:36 - 000000000 ____D C:\Users\sebas\AppData\Local\Heretic_s_Fork
2026-09-08 02:25 - 2026-09-08 02:27 - 000000000 ____D C:\Users\sebas\AppData\Local\Larian Studios
2026-09-08 01:54 - 2026-09-09 00:23 - 000000000 ____D C:\Users\sebas\AppData\Local\LGHUB
2026-09-08 01:54 - 2026-09-09 00:23 - 000000000 ____D C:\ProgramData\Logishrd
2026-09-08 01:54 - 2026-09-09 00:22 - 000000000 ____D C:\Users\sebas\AppData\Roaming\G HUB
2026-09-08 01:54 - 2026-09-08 01:54 - 000000000 ____D C:\ProgramData\LGHUBData
2026-09-08 01:53 - 2026-09-08 17:15 - 000000000 ____D C:\Users\sebas\AppData\Local\Sentry
2026-09-08 01:53 - 2026-09-08 01:53 - 070346392 _____ (Logitech, Inc.) C:\Users\sebas\Downloads\lghub_installer.exe
2026-09-08 01:53 - 2026-09-08 01:53 - 000000000 ____D C:\ProgramData\Logi
2026-09-08 01:53 - 2026-09-08 01:53 - 000000000 ____D C:\Program Files\Logitech
2026-09-08 01:53 - 2026-09-08 01:53 - 000000000 ____D C:\Program Files\Logi
2026-09-08 01:48 - 2026-09-08 01:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDisplayEx
2026-09-08 01:48 - 2026-09-08 01:48 - 000000000 ____D C:\Program Files\CDisplayEx
2026-09-08 01:47 - 2026-09-08 01:47 - 000000000 ____D C:\Users\sebas\AppData\Local\Programs\Common
2026-09-08 01:46 - 2026-09-08 01:46 - 006461445 _____ (Progdigy Software S.A.R.L. ) C:\Users\sebas\Downloads\CDXWin64v1.10.33.exe
2026-09-08 01:44 - 2026-09-08 01:44 - 000000000 ____D C:\Users\sebas\AppData\Roaming\MPC-HC
2026-09-08 01:41 - 2026-09-08 01:41 - 045948080 _____ C:\Users\sebas\Downloads\vlc-3.0.23-win64.exe
2026-09-08 01:41 - 2026-09-08 01:41 - 022946977 _____ (MPC-HC Team ) C:\Users\sebas\Downloads\MPC-HC.2.8.1.x64.exe
2026-09-08 01:41 - 2026-09-08 01:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-HC x64
2026-09-08 01:41 - 2026-09-08 01:41 - 000000000 ____D C:\Program Files\MPC-HC
2026-09-08 01:31 - 2026-09-08 01:31 - 000000158 _____ C:\Users\sebas\OneDrive\Dokumente\sc.txt
2026-09-08 01:04 - 2026-09-09 00:23 - 000000000 ____D C:\Users\sebas\AppData\Local\CrashDumps
2026-09-08 01:02 - 2026-08-20 22:56 - 000134376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2026-09-08 00:57 - 2026-09-10 01:16 - 000000000 ____D C:\Users\sebas\AppData\Local\NVIDIA Corporation
2026-09-08 00:57 - 2026-09-08 01:04 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-09-08 00:57 - 2026-09-08 00:57 - 183329600 _____ (NVIDIA Corporation) C:\Users\sebas\Downloads\NVIDIA_app_v11.0.9.251.exe
2026-09-08 00:57 - 2026-09-08 00:57 - 000003834 _____ C:\WINDOWS\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2026-09-08 00:57 - 2026-09-08 00:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2026-09-08 00:57 - 2026-08-31 12:39 - 001456752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-09-08 00:57 - 2026-08-31 12:39 - 001255024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-09-08 00:57 - 2026-08-31 12:39 - 000274032 _____ C:\WINDOWS\SysWOW64\FvSDK_x86.dll
2026-09-08 00:57 - 2026-08-31 12:37 - 000301168 _____ C:\WINDOWS\system32\FvSDK_x64.dll
2026-09-08 00:57 - 2026-08-31 12:16 - 000192232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-09-08 00:57 - 2026-08-31 12:16 - 000168680 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap32v.dll
2026-09-08 00:57 - 2026-08-31 12:16 - 000062696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2026-09-08 00:41 - 2026-09-08 00:41 - 000000000 ___RD C:\Users\sebas\OneDrive\Dokumente\Adobe
2026-09-08 00:40 - 2026-09-08 00:40 - 000000000 ____D C:\Users\sebas\AppData\Local\Backup
2026-09-08 00:39 - 2026-09-08 00:39 - 000000000 ____D C:\Users\sebas\AppData\Local\CEF
2026-09-08 00:38 - 2026-09-10 22:03 - 000000000 ____D C:\ProgramData\Adobe
2026-09-08 00:38 - 2026-09-08 00:41 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Adobe
2026-09-08 00:38 - 2026-09-08 00:38 - 000001382 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2026-09-08 00:38 - 2026-09-08 00:38 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Temp
2026-09-08 00:38 - 2026-09-08 00:38 - 000000000 ____D C:\Users\Public\NGL
2026-09-08 00:38 - 2026-09-08 00:38 - 000000000 ____D C:\Users\Public\Adobe
2026-09-08 00:37 - 2026-09-10 22:05 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-09-08 00:37 - 2026-09-10 22:03 - 000000000 ____D C:\Program Files\Adobe
2026-09-08 00:37 - 2026-09-08 01:05 - 000000000 ____D C:\Users\sebas\AppData\Local\Adobe
2026-09-08 00:37 - 2026-09-08 00:41 - 000000000 ____D C:\Users\sebas\AppData\Roaming\com.adobe.dunamis
2026-09-08 00:37 - 2026-09-08 00:38 - 000000000 ____D C:\Program Files (x86)\Adobe
2026-09-08 00:00 - 2026-09-08 02:24 - 000000000 ____D C:\Program Files\dotnet
2026-09-08 00:00 - 2026-09-08 00:02 - 000000000 ____D C:\Users\sebas\AppData\Roaming\DisplayFusion
2026-09-08 00:00 - 2026-09-08 00:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DisplayFusion
2026-09-08 00:00 - 2026-09-08 00:02 - 000000000 ____D C:\Program Files\DisplayFusion
2026-09-08 00:00 - 2026-09-08 00:00 - 000000000 ____D C:\Users\sebas\AppData\Local\DisplayFusion
2026-09-08 00:00 - 2026-09-08 00:00 - 000000000 ____D C:\ProgramData\Binary Fortress Software
2026-09-07 23:32 - 2026-09-13 18:15 - 000000000 ____D C:\EEK
2026-09-07 23:32 - 2026-09-07 23:32 - 000000000 ____D C:\ProgramData\Emsisoft
2026-09-07 23:31 - 2026-09-07 23:31 - 335136456 _____ C:\Users\sebas\Downloads\EmsisoftEmergencyKit.exe
2026-09-07 22:20 - 2026-09-07 22:20 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Toukana Interactive
2026-09-07 22:20 - 2026-09-07 22:20 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\G-Blood
2026-09-07 22:14 - 2026-09-07 22:14 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Godot
2026-09-07 22:14 - 2026-09-07 22:14 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Weird Kid Games
2026-09-07 22:14 - 2026-09-07 22:14 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\PolyGryph
2026-09-07 22:14 - 2026-09-07 22:14 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Nosebleed Interactive
2026-09-07 22:14 - 2026-09-07 22:14 - 000000000 ____D C:\Users\sebas\AppData\Local\Mountain_Eaters
2026-09-07 22:13 - 2026-09-07 22:13 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\RamenCatStudio
2026-09-07 22:13 - 2026-09-07 22:13 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Crux Games
2026-09-07 22:13 - 2026-09-07 22:13 - 000000000 ____D C:\Users\sebas\AppData\Local\SolCesto
2026-09-07 22:13 - 2026-09-07 22:13 - 000000000 ____D C:\Users\sebas\AppData\Local\dice_a_million
2026-09-07 21:48 - 2026-09-07 21:49 - 247132880 _____ C:\Users\sebas\Downloads\Live2D_Cubism_Setup_5.3.04.exe
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Live2D
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\ZAUM Studio
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\bolang
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Live2D Cubism 5.3
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\ProgramData\Live2D
2026-09-07 21:45 - 2026-09-07 21:45 - 000000000 ____D C:\Program Files\Live2D Cubism 5.3
2026-09-07 21:44 - 2026-09-07 21:44 - 000000000 ___RD C:\Users\sebas\OneDrive\Dokumente\DEATH STRANDING 2 - ON THE BEACH
2026-09-07 21:44 - 2026-09-07 21:44 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Realm Archive
2026-09-07 21:44 - 2026-09-07 21:44 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\Kenny Sun
2026-09-07 21:43 - 2026-09-07 21:43 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Balatro
2026-09-07 21:31 - 2026-09-07 22:20 - 000000000 ____D C:\Users\sebas\AppData\Local\Steam
2026-09-07 21:30 - 2026-09-13 03:06 - 000000000 ____D C:\Program Files (x86)\Steam
2026-09-07 21:30 - 2026-09-07 21:30 - 002380800 _____ C:\Users\sebas\Downloads\SteamSetup.exe
2026-09-07 21:30 - 2026-09-07 21:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2026-09-07 21:00 - 2026-09-07 21:00 - 072943000 _____ (MEGA) C:\Users\sebas\Downloads\MEGAsyncSetup64.exe
2026-09-07 21:00 - 2026-09-07 21:00 - 000000000 ___RD C:\Users\sebas\OneDrive\Dokumente\MEGA
2026-09-07 21:00 - 2026-09-07 21:00 - 000000000 ____D C:\WINDOWS\system32\Tasks\MEGA
2026-09-07 21:00 - 2026-09-07 21:00 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MEGAsync
2026-09-07 21:00 - 2026-09-07 21:00 - 000000000 ____D C:\Users\sebas\AppData\Local\MEGAsync
2026-09-07 21:00 - 2026-09-07 21:00 - 000000000 ____D C:\Users\sebas\AppData\Local\Mega Limited
2026-09-07 20:49 - 2026-09-07 20:49 - 000000000 ____D C:\Users\sebas\DaVinci Resolve Media
2026-09-07 20:48 - 2026-09-07 21:48 - 000000000 ____D C:\ProgramData\Reprise
2026-09-07 20:48 - 2026-09-07 20:48 - 000000000 ___RD C:\Users\sebas\OneDrive\Dokumente\Blackmagic Design
2026-09-07 20:46 - 2026-09-11 03:11 - 000000281 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-09-07 20:46 - 2026-09-07 20:46 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Blackmagic Design
2026-09-07 20:46 - 2026-09-07 20:46 - 000000000 ____D C:\Users\sebas\AppData\Local\DaVinci Resolve Welcome
2026-09-07 20:46 - 2026-09-07 20:46 - 000000000 ____D C:\Users\sebas\AppData\Local\cache
2026-09-07 20:45 - 2026-09-08 02:25 - 000000000 ____D C:\ProgramData\Package Cache
2026-09-07 20:45 - 2026-09-07 20:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2026-09-07 20:45 - 2026-09-07 20:45 - 000000000 ____D C:\ProgramData\Blackmagic Design
2026-09-07 20:45 - 2026-09-07 20:45 - 000000000 ____D C:\Program Files\Common Files\OFX
2026-09-07 20:45 - 2026-09-07 20:45 - 000000000 ____D C:\Program Files\Blackmagic Design
2026-09-07 20:45 - 2026-09-07 20:45 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2026-09-07 20:37 - 2026-09-07 20:37 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2026-09-07 20:37 - 2026-09-07 19:40 - 000000000 ___DC C:\WINDOWS\Panther
2026-09-07 20:07 - 2026-09-13 18:17 - 000000000 ____D C:\Users\sebas\AppData\Roaming\discord
2026-09-07 20:07 - 2026-09-13 18:15 - 000000000 ____D C:\Users\sebas\AppData\Local\Discord
2026-09-07 20:07 - 2026-09-11 04:09 - 000001450 _____ C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-09-07 20:07 - 2026-09-07 20:07 - 138694072 _____ (Discord Inc.) C:\Users\sebas\Downloads\DiscordSetup.exe
2026-09-07 20:07 - 2026-09-07 20:07 - 000000000 ____D C:\Users\sebas\AppData\Roaming\NVIDIA
2026-09-07 20:07 - 2026-09-07 20:07 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc
2026-09-07 20:07 - 2026-09-07 20:07 - 000000000 ____D C:\Users\sebas\AppData\Local\SquirrelTemp
2026-09-07 20:07 - 2026-09-07 20:07 - 000000000 ____D C:\Program Files\Common Files\Discord
2026-09-07 19:59 - 2026-09-07 19:59 - 012411832 _____ (Google LLC) C:\Users\sebas\Downloads\ChromeSetup.exe
2026-09-07 19:59 - 2026-09-07 19:59 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-09-07 19:59 - 2026-09-07 19:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-09-07 19:59 - 2026-09-07 19:59 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-09-07 19:59 - 2026-09-07 19:59 - 000000000 ____D C:\Users\sebas\AppData\Local\Google
2026-09-07 19:59 - 2026-09-07 19:59 - 000000000 ____D C:\Program Files\Google
2026-09-07 19:59 - 2026-09-07 19:59 - 000000000 ____D C:\Program Files (x86)\Google
2026-09-07 19:58 - 2026-09-07 19:58 - 000000000 ____D C:\Users\sebas\AppData\Local\Comms
2026-09-07 19:57 - 2026-09-08 00:02 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\DisplayFusion Backups
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\PoE-TradeMacro
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\Path of Building
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\Outlook-Dateien
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\My Games
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\My Cheat Tables
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\Black Desert
2026-09-07 19:57 - 2026-09-07 19:57 - 000000000 ____D C:\Users\sebas\OneDrive\Dokumente\Benutzerdefinierte Office-Vorlagen
2026-09-07 19:57 - 2024-11-17 20:03 - 000009676 _____ C:\Users\sebas\OneDrive\Dokumente\Mappe1.xlsx
2026-09-07 19:57 - 2021-12-30 15:46 - 000000177 ____R C:\Users\sebas\OneDrive\Dokumente\Notizbuch von Sebastian.url
2026-09-07 19:57 - 2020-02-15 05:27 - 000401003 _____ C:\Users\sebas\OneDrive\Dokumente\S_20200215_042717_Postfach-Uebersicht.ZIP
2026-09-07 19:56 - 2026-09-07 19:56 - 000000000 ___HD C:\OneDriveTemp
2026-09-07 19:54 - 2026-09-08 20:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-09-07 19:53 - 2026-09-13 18:13 - 000000000 ___RD C:\Users\sebas\OneDrive
2026-09-07 19:53 - 2026-09-11 20:34 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-862088497-1239916809-729996582-1001
2026-09-07 19:53 - 2026-09-11 20:34 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-862088497-1239916809-729996582-1001
2026-09-07 19:53 - 2026-09-11 20:34 - 000003360 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-862088497-1239916809-729996582-1001
2026-09-07 19:53 - 2026-09-11 20:34 - 000002379 _____ C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-09-07 19:53 - 2026-09-07 19:53 - 000000000 ____D C:\WINDOWS\system32\Tasks\SoftLanding
2026-09-07 19:53 - 2026-09-07 19:53 - 000000000 ____D C:\Users\sebas\AppData\Local\Publishers
2026-09-07 19:53 - 2026-09-07 19:53 - 000000000 ____D C:\ProgramData\Microsoft OneDrive
2026-09-07 19:52 - 2026-09-13 04:50 - 000000000 ____D C:\Users\sebas\AppData\Local\D3DSCache
2026-09-07 19:52 - 2026-09-11 20:35 - 000000000 ____D C:\Users\sebas\AppData\Local\Packages
2026-09-07 19:52 - 2026-09-10 01:29 - 000000000 ____D C:\Users\sebas\AppData\Local\NVIDIA
2026-09-07 19:52 - 2026-09-08 01:05 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Adobe
2026-09-07 19:52 - 2026-09-07 21:56 - 000000000 ____D C:\Users\sebas\AppData\Local\PlaceholderTileLogoFolder
2026-09-07 19:52 - 2026-09-07 21:31 - 000000000 ____D C:\Users\sebas\AppData\Local\AMD
2026-09-07 19:52 - 2026-09-07 19:53 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-09-07 19:52 - 2026-09-07 19:52 - 000338040 _____ () C:\WINDOWS\system32\AsusDownLoadLicense.exe
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ___SD C:\Users\sebas\AppData\Roaming\Microsoft\Crypto
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Vault
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Network
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ____D C:\Users\sebas\AppData\LocalLow\NVIDIA
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ____D C:\Users\sebas\AppData\Local\VirtualStore
2026-09-07 19:52 - 2026-09-07 19:52 - 000000000 ____D C:\Users\sebas\AppData\Local\ConnectedDevicesPlatform
2026-09-07 19:49 - 2026-09-13 18:22 - 000000000 ___SD C:\Users\sebas\AppData\Roaming\Microsoft\Credentials
2026-09-07 19:49 - 2026-09-13 03:09 - 000000000 ____D C:\Users\sebas
2026-09-07 19:49 - 2026-09-08 20:51 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Windows
2026-09-07 19:49 - 2026-09-07 21:38 - 000000000 ____D C:\Users\sebas\AppData\Roaming\Microsoft\Spelling
2026-09-07 19:49 - 2026-09-07 19:49 - 000000020 ___SH C:\Users\sebas\ntuser.ini
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Vorlagen
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Startmenü
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Netzwerkumgebung
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Lokale Einstellungen
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Eigene Dateien
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Druckumgebung
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\AppData\Local\Verlauf
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\AppData\Local\Anwendungsdaten
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 _SHDL C:\Users\sebas\Anwendungsdaten
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 ___SD C:\Users\sebas\AppData\Roaming\Microsoft\SystemCertificates
2026-09-07 19:49 - 2026-09-07 19:49 - 000000000 ___SD C:\Users\sebas\AppData\Roaming\Microsoft\Protect
2026-09-07 19:45 - 2026-09-13 18:20 - 001637736 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-09-07 19:45 - 2026-09-13 18:13 - 000000000 ____D C:\ProgramData\NVIDIA
2026-09-07 19:45 - 2026-09-08 01:03 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2026-09-07 19:45 - 2026-09-08 01:00 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-09-07 19:45 - 2026-09-08 00:57 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2026-09-07 19:45 - 2026-09-07 19:45 - 000000000 ____D C:\WINDOWS\SysWOW64\NV
2026-09-07 19:45 - 2026-09-07 19:45 - 000000000 ____D C:\WINDOWS\system32\NV
2026-09-07 19:44 - 2026-09-07 19:44 - 000000000 ____D C:\WINDOWS\system32\AMD
2026-09-07 19:44 - 2026-03-17 01:44 - 005221904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 005008400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 003639312 _____ C:\WINDOWS\system32\amd-smi.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 002194960 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 001832464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 001832464 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 001329168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 001184272 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 001069584 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000998416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000801808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000678928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000657544 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendrsr.etz
2026-09-07 19:44 - 2026-03-17 01:44 - 000631312 _____ C:\WINDOWS\system32\GameManager64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000606472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000592400 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000559632 _____ C:\WINDOWS\system32\atieah64.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000549392 _____ C:\WINDOWS\system32\dgtrayicon.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000543248 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000526352 _____ C:\WINDOWS\system32\EEURestart.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000479248 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000473616 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000471560 _____ C:\WINDOWS\system32\amdlogum.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000450064 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000422416 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2026-09-07 19:44 - 2026-03-17 01:44 - 000200712 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000190992 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000158968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000158960 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000150536 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000147472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000142728 _____ C:\WINDOWS\system32\amdxc64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000131256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000131256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000122384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000118744 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000051728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2026-09-07 19:44 - 2026-03-17 01:44 - 000048656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 121661968 _____ C:\WINDOWS\system32\amd_comgr_2.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 103836176 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 017906704 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64_6.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000787984 _____ C:\WINDOWS\system32\hiprt0200064.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000541248 _____ C:\WINDOWS\system32\amdmiracast.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000396416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendr.stz
2026-09-07 19:44 - 2026-03-17 01:43 - 000347152 _____ C:\WINDOWS\system32\clinfo.exe
2026-09-07 19:44 - 2026-03-17 01:43 - 000177168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000169344 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000145936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000144704 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2026-09-07 19:44 - 2026-03-17 01:43 - 000056968 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendrmgr.stz
2026-09-07 19:44 - 2026-03-17 01:17 - 126241728 _____ C:\WINDOWS\system32\amdxc64.so
2026-09-07 19:44 - 2026-03-17 01:17 - 009979672 _____ C:\WINDOWS\system32\hiprt02000_amd.hipfb
2026-09-07 19:44 - 2026-03-17 01:17 - 002459536 _____ C:\WINDOWS\system32\oro_compiled_kernels.hipfb
2026-09-07 19:40 - 2026-09-13 18:13 - 000002774 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-09-07 19:40 - 2026-09-11 20:35 - 000000000 ____D C:\ProgramData\Packages
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Vorlagen
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Startmenü
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Netzwerkumgebung
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Lokale Einstellungen
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Eigene Dateien
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Druckumgebung
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Users\Default\Anwendungsdaten
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Programme
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\ProgramData\Vorlagen
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\ProgramData\Startmenü
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\ProgramData\Dokumente
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\ProgramData\Anwendungsdaten
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Program Files\Gemeinsame Dateien
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 _SHDL C:\Dokumente und Einstellungen
2026-09-07 19:39 - 2026-09-07 19:39 - 000000000 ____D C:\WINDOWS\CSC
2026-09-07 19:38 - 2026-09-13 18:13 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-09-07 19:38 - 2026-09-12 15:37 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-09-07 19:38 - 2026-09-10 14:53 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-09-07 19:38 - 2026-09-08 20:39 - 000296992 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-09-07 19:38 - 2026-09-07 19:55 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-09-07 19:38 - 2026-09-07 19:40 - 000003830 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{FFB20B10-C591-470F-B58F-6641733174E6}
2026-09-07 19:38 - 2026-09-07 19:40 - 000003704 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{45D3B8ED-B068-43AF-9CA6-0D588581E01E}
2026-09-07 19:38 - 2026-09-07 19:38 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf
2026-09-07 19:38 - 2026-09-07 19:38 - 000000000 ____D C:\WINDOWS\system32\config\BFS
2026-09-07 19:38 - 2026-09-07 19:38 - 000000000 ____D C:\ProgramData\ASUS
2026-09-07 19:37 - 2026-09-13 18:13 - 000901328 _____ () C:\WINDOWS\system32\wpbbin.exe
2026-09-07 19:37 - 2026-09-13 18:13 - 000845256 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2026-09-07 19:37 - 2026-09-13 18:13 - 000012288 ___SH C:\DumpStack.log.tmp
2026-09-07 19:37 - 2026-09-08 22:52 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-09-13 18:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-09-13 18:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-09-13 18:20 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-09-13 18:13 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-13 18:12 - 2024-04-01 09:21 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-09-13 03:50 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2026-09-12 21:22 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-09-10 01:30 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-09-08 20:56 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-09-08 20:38 - 2026-08-09 09:38 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-09-08 20:38 - 2026-08-09 09:38 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-09-08 20:38 - 2024-04-01 18:37 - 000000000 ____D C:\WINDOWS\InboxApps
2026-09-08 20:38 - 2024-04-01 18:37 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-09-08 20:38 - 2024-04-01 18:36 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-09-08 20:38 - 2024-04-01 18:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-09-08 20:38 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-09-08 20:38 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-09-08 17:15 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-09-08 04:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-09-07 20:37 - 2024-04-01 09:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2026-09-07 20:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\OCR
2026-09-07 20:07 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2026-09-07 20:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-09-07 19:54 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-09-07 19:41 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker
2026-09-07 19:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2026-09-07 19:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-09-07 19:39 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Windows NT
2026-09-07 19:38 - 2026-08-09 09:38 - 000000000 ____D C:\WINDOWS\ServiceProfiles

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-09-2026
durchgeführt von sebas (13-09-2026 18:32:07)
Gestartet von C:\Users\sebas\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.9445 (X64) (2026-09-07 17:40:00)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-862088497-1239916809-729996582-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-862088497-1239916809-729996582-503 - Limited - Disabled)
Gast (S-1-5-21-862088497-1239916809-729996582-501 - Limited - Disabled)
sebas (DisplayName: S******** ****z)  (S-1-5-21-862088497-1239916809-729996582-1001 - Administrators - Enabled) [MS Account] => C:\Users\sebas
WDAGUtilityAccount (S-1-5-21-862088497-1239916809-729996582-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.10.0.252.41 - Adobe Inc.)
Adobe Photoshop 2026 (HKLM-x32\...\PHSP_27_10) (Version: 27.10.0.26 - Adobe Inc.)
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 8.03.25.247 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.136 - Advanced Micro Devices, Inc.) Hidden
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.59 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.40.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden
AMD_Chipset_Drivers (HKLM-x32\...\{3a8e985c-afba-4063-bfe4-463a869fb00d}) (Version: 8.03.25.247 - Advanced Micro Devices, Inc.) Hidden
Bitwarden (HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\173a9bac-6f0d-50c4-8202-4744c69d091a) (Version: 2026.8.0 - Bitwarden Inc.)
Blackmagic RAW Common Components (HKLM\...\{FCDBA071-A602-43E6-BFD4-4A6AC43D3556}) (Version: 5.1 - Blackmagic Design)
CDisplayEx 1.10.33 (HKLM\...\CDisplayEx_is1) (Version:  - Progdigy Software S.A.R.L.)
CLIP STUDIO 4.0.10 (HKLM-x32\...\{49274EB8-4598-47E6-8039-9BB7CE07627E}) (Version: 4.0.10 - CELSYS)
CLIP STUDIO PAINT 4.0.10 (HKLM-x32\...\{1E4572D2-28BC-4BC9-B743-13DC6CFD71DB}) (Version: 4.0.10 - CELSYS)
DaVinci Resolve (HKLM\...\{B304CB42-340D-45FA-9769-2F229011B682}) (Version: 21.0.40005 - Blackmagic Design)
DaVinci Resolve Control Panels (HKLM\...\{EDA8A73C-05DC-49ED-9DF5-D29F9317307A}) (Version: 2.3.5.0 - Blackmagic Design)
DaVinci Resolve Renderer (HKLM\...\{B0B6FB2A-50C0-4EE7-86E4-568D69644466}) (Version: 21.0.40005 - Blackmagic Design)
Discord (HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\Discord) (Version: 1.0.9257 - Discord Inc.)
DisplayFusion (HKLM\...\B076073A-5527-4f4f-B46B-B10692277DA2_is1) (Version: 12.1.1.0 - Binary Fortress Software)
Dropbox (HKLM-x32\...\Dropbox) (Version: 270.4.3246 - Dropbox, Inc.)
Fairlight Audio Accelerator Utility (HKLM\...\FairlightAudioAccelerator_is1) (Version: 1.0.15 - Blackmagic Design)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 152.0.7977.83 - Google LLC)
HandBrake 1.11.2 (HKLM-x32\...\HandBrake) (Version: 1.11.2 - )
Live2D Cubism 5.3.04 (HKLM-x32\...\Live2D Cubism) (Version: 5.3.04 - Live2D Inc.)
Malwarebytes version 5.7.0.328 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.0.328 - Malwarebytes)
MEGAsync (HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\MEGAsync) (Version: 6.6.1 - Mega Limited)
Microsoft .NET Host - 10.0.11 (x64) (HKLM\...\{E1510730-5A34-4EF3-B865-84351D8BF1BA}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.11 (x64) (HKLM\...\{B92B890A-04F2-4880-BA20-20D4364FB263}) (Version: 48.47.50420 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.30 (x64) (HKLM\...\{01FD5326-81BD-4DEA-9F01-3D69BBDDA75E}) (Version: 64.120.56788 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.11 (x64) (HKLM\...\{208D3FC0-B592-4221-8E53-6B21621E9951}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.11 (x64) (HKLM\...\{5E63E49B-C88C-46C5-855C-A7B07C11CDC8}) (Version: 48.47.50420 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.30 (x64) (HKLM\...\{563AD235-9445-4075-8F11-C4D08A8E639B}) (Version: 64.120.56788 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.11 (x64) (HKLM\...\{0B4F3EF1-06F1-46E4-B662-A33DECC02141}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.11 (x64) (HKLM\...\{C3DD1448-513A-4DB8-978D-6991562EA63D}) (Version: 48.47.50420 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.30 (x64) (HKLM\...\{D629906C-1E1C-4728-AB21-81690B4F435C}) (Version: 64.120.56788 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 153.0.4234.32 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 152.0.4191.66 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\OneDriveSetup.exe) (Version: 26.158.0816.0003 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version:  - )
Microsoft Windows Desktop Runtime - 10.0.11 (x64) (HKLM\...\{042FE0BF-0E19-47E0-8864-22F483C784E6}) (Version: 80.44.56884 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.11 (x64) (HKLM\...\{A39D4115-3A27-4245-AE92-3214B8B21932}) (Version: 48.47.50419 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.11 (x64) (HKLM-x32\...\{c4846f79-a633-4ae4-92a3-92fdbeb33da2}) (Version: 6.0.11.31823 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.30 (x64) (HKLM\...\{6784D4C7-0D5A-468F-A27D-4B687DC16EFF}) (Version: 64.120.56881 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.30 (x64) (HKLM-x32\...\{d374321a-d08b-4207-8ef4-6953f782a26c}) (Version: 8.0.30.36323 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.11 (x64) (HKLM-x32\...\{96749152-C361-49E0-BAC6-818F491B9276}) (Version: 10.0.11.50000 - Microsoft Corporation)
MPC-HC 2.8.1 (64-bit) (HKLM\...\{2ACBF1FA-F5C3-4B19-A774-B22A31F231B9}_is1) (Version: 2.8.1 - MPC-HC Team)
NVIDIA App 11.0.9.251 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.9.251 - NVIDIA Corporation)
NVIDIA FrameView SDK 1.9.12728.38614306 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.9.12728.38614306 - NVIDIA Corporation)
NVIDIA Grafiktreiber 616.92 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 616.92 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.4.6.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.6.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.5.0 - Advanced Micro Devices, Inc.) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9888.1 - Realtek Semiconductor Corp.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
UXP WebView Support (HKLM-x32\...\UXPW_1_6_1) (Version: 1.6.1 - Adobe Inc.)
Windows-PC-Integritätsprüfung (HKLM\...\{E06F96B5-4369-4BDC-B64D-2A8A02FE069B}) (Version: 4.0.2410.23001 - Microsoft Corporation)

Packages:
=========
Adobe Native Client -> C:\Program Files\Common Files\Adobe\Adobe OS Extension [2026-09-08] ()
Dropbox -> C:\Program Files (x86)\Dropbox\Client\PackageAssets [2026-09-10] (Dropbox Inc.)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1248.2215.0_x64__8wekyb3d8bbwe [2026-09-07] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1248.2215.0_x86__8wekyb3d8bbwe [2026-09-07] (Microsoft Corporation)
Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.1248.2215.0_x64__8wekyb3d8bbwe [2026-09-07] (Microsoft Corporation)
 Malwarebytes Anti-Malware  -> C:\Program Files\Malwarebytes\Anti-Malware [2026-09-08] ()
MEGAsync -> C:\Users\sebas\AppData\Local\MEGAsync [2026-09-07] (MEGAsync)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-09-07] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.53.376.0_x64__dt26b99r8h8gj [2026-09-08] (Realtek Semiconductor Corp)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{1a46400f-4c81-802a-c2c1-1e9a687a9340}\localserver32 -> C:\Program Files\HandBrake\HandBrake.exe (HandBrake Team) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{34EF78F6-6011-4B9E-9B83-93F0E6B163E8}\localserver32 -> C:\Users\sebas\AppData\Local\Discord\app-1.0.9257\Discord.exe (Discord Inc. -> Discord Inc.)
CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{48FCEF0E-9EA6-4DED-B63C-F3D99ED3C352} -> [Dropbox] => C:\Users\sebas\Dropbox [2026-09-10 02:27]
CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{CDC41C54-6CF9-4FEE-A9A1-47438FA8FCF0} -> [Work] => F:\Work [2025-10-01 16:14]
CustomCLSID: HKU\S-1-5-21-862088497-1239916809-729996582-1001_Classes\CLSID\{e8c77137-e224-5791-b6e9-ff0305797a13}\InprocServer32 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Inc. -> Adobe Systems)
ShellIconOverlayIdentifiers: [
 MEGA (NotFound)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890635} => C:\Users\sebas\AppData\Local\MEGAsync\ShellExtX64.dll [2026-09-01] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\sebas\AppData\Local\MEGAsync\ShellExtX64.dll [2026-09-01] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\sebas\AppData\Local\MEGAsync\ShellExtX64.dll [2026-09-01] (Mega Limited -> )
ShellIconOverlayIdentifiers: [
 MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\sebas\AppData\Local\MEGAsync\ShellExtX64.dll [2026-09-01] (Mega Limited -> )
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-09-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-09-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-09-07] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [   DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-09-07] (Adobe Inc. -> )
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-08] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.96.0.dll [2026-08-30] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-08-31] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispsi.inf_amd64_b8459fc8f905f657\nvshext.dll [2026-09-06] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-09-07] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-09-08] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\Users\sebas\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\og - Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC) -> --profile-directory="Default"

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2026-09-08 00:57 - 2026-09-08 00:57 - 000000000 ____L () [symlink -> C:\Program Files\NVIDIA Corporation\NVIDIA App\MessageBus\NvMessageBusBroadcast.dll] C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\NvMessageBusBroadcast.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============


==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

DNS Servers: 192.168.178.1
 ist aktiviert.

Network Binding:
=============
Ethernet: Realtek Gaming 2.5GbE Family Controller -> rt25cx21x64.sys

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-862088497-1239916809-729996582-1001\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\themea\img20.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 1) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKU\S-1-5-21-862088497-1239916809-729996582-1001\...\StartupApproved\Run: => "Steam"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [AllJoyn-Router-In-UDP] => (Block) C:\WINDOWS\system32\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [AllJoyn-Router-In-TCP] => (Block) C:\WINDOWS\system32\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [AllJoyn-Router-Out-TCP] => (Block) C:\WINDOWS\system32\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [AllJoyn-Router-Out-UDP] => (Block) C:\WINDOWS\system32\svchost.exe (Microsoft Windows Publisher -> Microsoft Corporation)
FirewallRules: [WirelessDisplay-Out-UDP] => (Block) C:\WINDOWS\system32\WUDFHost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [WirelessDisplay-Out-TCP] => (Block) C:\WINDOWS\system32\WUDFHost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [TCP Query User{530B7351-E109-4552-BE4C-E5BD19A351F9}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [UDP Query User{9BD60914-E82C-4521-85A1-DFBE50A4A12E}C:\program files\google\chrome\application\chrome.exe] => (Block) C:\program files\google\chrome\application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{4427457E-CF26-42ED-B1C5-EF0E798D9E1B}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{3A0D1CB4-1764-461A-8C51-D5461167435D}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{80CF867C-BEED-4D4F-844E-F8694B0D6586}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{8A302E52-FB98-4C09-832D-386957721BCD}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{9CC4D92D-FCE6-44F6-B664-03D099BAFCAE}] => (Block) C:\WINDOWS\system32\WUDFHost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{4E64E714-2E22-4027-839E-B94A262DBADA}] => (Block) C:\WINDOWS\system32\WUDFHost.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{050D7BF8-F0CD-4BF3-B835-3374F5E2A592}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{DF1A4448-4B47-49E0-BC1A-8102AFDE1923}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{B7E5E769-E7AE-42B8-B2E6-B7FE805ADA71}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]
FirewallRules: [{B289184E-C295-4FBE-830B-473EDF13960F}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]
FirewallRules: [{36DADA93-8BD3-4BC6-91D6-557826251E95}] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{64F81EE0-A083-4A86-89FC-5A447E25B349}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]
FirewallRules: [{2B11FCF7-84F7-4017-833B-BE0046D9585E}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]
FirewallRules: [{ECD54239-AC72-4F0E-93F4-247D0A8DF2EC}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]
FirewallRules: [{41B189D2-6A38-4E8E-A339-E2106A3BF6E4}] => (Block) E:\Games\Steam\steamapps\common\Shroom and Gloom\Shroom and Gloom.exe () [Datei ist nicht signiert]

==================== Wiederherstellungspunkte =========================

09-09-2026 23:07:15 Windows Update
09-09-2026 23:07:15 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============

==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (09/13/2026 03:47:31 AM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm SystemSettings.exe Version 10.0.26100.9278 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (09/13/2026 03:10:07 AM) (Source: DbxSvc) (EventID: 322) (User: )
Description: Failed to get driver message: (-2147024890) Das Handle ist ungültig.

Error: (09/13/2026 03:09:07 AM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm SystemSettings.exe Version 10.0.26100.9278 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (09/13/2026 03:06:59 AM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm SystemSettings.exe Version 10.0.26100.9278 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (09/11/2026 08:35:57 PM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm dllhost.exe Version 10.0.26100.9278 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (09/10/2026 03:19:19 AM) (Source: DbxSvc) (EventID: 322) (User: )
Description: Failed to get driver message: (-2147024890) Das Handle ist ungültig.

Error: (09/10/2026 02:27:52 AM) (Source: DbxSvc) (EventID: 322) (User: )
Description: Failed to get driver message: (-2147024890) Das Handle ist ungültig.

Error: (09/09/2026 03:26:42 AM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm SystemSettings.exe Version 10.0.26100.9278 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.


Systemfehler:
=============
Error: (09/13/2026 06:12:48 PM) (Source: DCOM) (EventID: 10010) (User: OASIS11)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/13/2026 04:00:39 AM) (Source: DCOM) (EventID: 10010) (User: OASIS11)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (09/12/2026 05:33:33 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9MSMLRH6LZF3-Microsoft.WindowsNotepad

Error: (09/12/2026 05:15:32 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9MSMLRH6LZF3-Microsoft.WindowsNotepad

Error: (09/11/2026 05:03:10 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9MSMLRH6LZF3-Microsoft.WindowsNotepad

Error: (09/11/2026 04:17:45 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9MSMLRH6LZF3-Microsoft.WindowsNotepad

Error: (09/10/2026 02:53:40 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎10.‎09.‎2026 um 04:59:22 unerwartet heruntergefahren.

Error: (09/10/2026 02:51:24 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9PC1H9VN18CM-Microsoft.StartExperiencesApp


Windows Defender:
================
TimeCreated : 13.09.2026 18:08:30
Message     : C:\Users\sebas\AppData\Local\Discord\app-1.0.9257\Discord.exe wurde durch den überwachten Ordnerzugriff 
daran gehindert, %userprofile%\Pictures\Capys\ zu ändern.
Erkennungszeit: 2026-09-13T16:08:30.715Z
Benutzer: Oasis11\sebas
Pfad: %userprofile%\Pictures\Capys\
Prozessname: C:\Users\sebas\AppData\Local\Discord\app-1.0.9257\Discord.exe
Sicherheitsversion: 1.459.182.0
Modulversion: 1.1.26080.3
Produktversion: 4.18.26080.3


CodeIntegrity:
===============
Date: 2026-09-13 18:31:54
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Google\Chrome\Application\chrome.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Microsoft signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: American Megatrends Inc. 1811 10/07/2023
Hauptplatine: ASUSTeK COMPUTER INC. PRIME B650-PLUS
Prozessor: AMD Ryzen 5 7600X 6-Core Processor 
Prozentuale Nutzung des RAM: 20%
Installierter physikalischer RAM: 64735.04 MB
Verfügbarer physikalischer RAM: 51744.38 MB
Summe virtueller Speicher: 68831.04 MB
Verfügbarer virtueller Speicher: 54820.97 MB

==================== Laufwerke ================================

Disk 2 - Drive c: () (Fixed) (Total:930.35 GB GB) (Free:783.55 GB GB) (Model: Samsung SSD 980 PRO 1TB) NTFS
Disk 0 - Drive d: (Privat 2) (Fixed) (Total:1863.01 GB GB) (Free:45.84 GB GB) (Model: CT2000MX500SSD1) NTFS
Disk 1 - Drive e: (Privat) (Fixed) (Total:1863 GB GB) (Free:93.7 GB GB) (Model: CT2000MX500SSD1) NTFS
Disk 3 - Drive f: (Privat 3) (Fixed) (Total:1863 GB GB) (Free:102.69 GB GB) (Model: Samsung SSD 990 EVO Plus 2TB) NTFS

Disk 2 - \\?\Volume{3749ba66-9282-4900-85ec-0b775bfc2ce5}\ () (Fixed) (Total:0.85 GB) (Free:0.08 GB) NTFS
Disk 2 - \\?\Volume{a217b1a2-0c53-4e32-a672-fc16a19ab104}\ () (Fixed) (Total:0.19 GB) (Free:0.16 GB) FAT32

==================== MBR & Partitionstabelle ====================

============================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 1863.02 GB) (Disk ID: 34A64F14)

Partitions: 
===========
Partition Style : MBR
Partition Count : 4
Disk Signature   : 0x34A64F14

Partition 1
  Type             : MBR 0x07 (NTFS / exFAT / HPFS)
  Size             : 1863.01 GB
  Offset           : 1 MB
  Partition GUID   : {34A64F14-0000-0000-0000-100000000000}
  Bootable         : No
  Recognized       : Yes
  Hidden Sectors   : 2048
------------------------------------------------------------
Partition Entries : 4
Actual Partitions  : 1


============================================================
Disk: 1 (Protective MBR) (Size: 1863.02 GB)

Partitions: 
===========
Partition Style : GPT
Partition Count : 2
Disk ID          : {1D1315A6-60FE-4405-A854-BB1E99C8FFB6}
Usable Offset    : 0.02 MB
Usable Length    : 1863.02 GB
Max Partitions   : 128

Partition 1
  Type             : Microsoft Reserved (MSR)
  Size             : 15.98 MB
  Offset           : 0.02 MB
  Type GUID        : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
  Partition GUID   : {B6B3029D-66FB-4A26-BB01-ECEC53CB8299}
  GPT Name         : Microsoft reserved partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 2
  Type             : Basic Data Partition
  Size             : 1863 GB
  Offset           : 16 MB
  Type GUID        : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
  Partition GUID   : {1BD87991-3061-4D6B-8749-5747D2C3DEC8}
  GPT Name         : Basic data partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : No
  Platform Required: No
------------------------------------------------------------


============================================================
Disk: 2 (Protective MBR) (Size: 931.51 GB)

Partitions: 
===========
Partition Style : GPT
Partition Count : 4
Disk ID          : {F053D705-EC64-49F2-B25D-894B7D204645}
Usable Offset    : 0.02 MB
Usable Length    : 931.51 GB
Max Partitions   : 128

Partition 1
  Type             : Microsoft Reserved (MSR)
  Size             : 16 MB
  Offset           : 101 MB
  Type GUID        : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
  Partition GUID   : {288D39C5-E589-4A24-852E-1BED8E052058}
  GPT Name         : Microsoft reserved partition
  Attributes       : 0x8000000000000000
  Attribute Flags  : No Default Drive Letter
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 2
  Type             : EFI System Partition
  Size             : 200 MB
  Offset           : 117 MB
  Type GUID        : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
  Partition GUID   : {A217B1A2-0C53-4E32-A672-FC16A19AB104}
  GPT Name         : Basic data partition
  Attributes       : 0x8000000000000000
  Attribute Flags  : No Default Drive Letter
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 3
  Type             : Basic Data Partition
  Size             : 930.35 GB
  Offset           : 317 MB
  Type GUID        : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
  Partition GUID   : {A8B0AA0B-A342-45E2-8E92-5048329AEBFA}
  GPT Name         : Basic data partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : No
  Platform Required: No
------------------------------------------------------------
Partition 4
  Type             : Windows Recovery
  Size             : 874 MB
  Offset           : 952994 MB
  Type GUID        : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
  Partition GUID   : {3749BA66-9282-4900-85EC-0B775BFC2CE5}
  Attributes       : 0x8000000000000001
  Attribute Flags  : Platform Required, No Default Drive Letter
  Hidden           : Yes
  Platform Required: Yes
------------------------------------------------------------


============================================================
Disk: 3 (Protective MBR) (Size: 1863.02 GB)

Partitions: 
===========
Partition Style : GPT
Partition Count : 2
Disk ID          : {2ED7EA22-019B-48EC-B48B-253D01929BA7}
Usable Offset    : 0.02 MB
Usable Length    : 1863.02 GB
Max Partitions   : 128

Partition 1
  Type             : Microsoft Reserved (MSR)
  Size             : 15.98 MB
  Offset           : 0.02 MB
  Type GUID        : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
  Partition GUID   : {D94622FD-BCE5-45C6-8F0F-4A7137217BB1}
  GPT Name         : Microsoft reserved partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 2
  Type             : Basic Data Partition
  Size             : 1863 GB
  Offset           : 16 MB
  Type GUID        : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
  Partition GUID   : {EEC8FB8D-BC94-4A18-B937-40B2CBB2E9C2}
  GPT Name         : Basic data partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : No
  Platform Required: No
------------------------------------------------------------

============================================================

==================== Ende vom Addition.txt =======================
         

Emsisoft Emergency Kit - Version 2025.7

Last update: 29/08/2026 21:55:10

Scan settings:

Scan type: Malware Scan

Objects: Memory, Traces, Files

Detect PUPs: On

Scan archives: Off

Scan mail archives: Off

ADS Scan: On

Scan start:      29/08/2026 21:55:13C:\Users\xxxx\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg\5.5.2.9_0\filters\local_script_rules.js -> (INFECTED_JS)     detected: JS:Trojan.Cryxos.14010 (B) [krnl.xmd]

Scanned 98597
Found 1
Scanning memory...
Scanning traces...
Scanning files...
Scan end:        29/08/2026 21:58:08
Scan time:       0:02:55
         

Malicious sites blocked
URL N/A
IP 94.228.209.182
Connection Type Outbound
Port 49083
C:\Program Files\Google\Chrome\Application\chrome.exe