| |
| |||||||
Log-Analyse und Auswertung: ESET Meldet TrojanerfundWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
 |
Gestern, 20:05
| #1 |
 |  ESET Meldet Trojanerfund Hallo, ich habe auf dem Laptop meiner Frau ESET ausgeführt und die folgenden Meldungen bekommen. Vielen Dank für eure Hilfe  Code:
ATTFilter 31.10.2026 18:36:21
Geprüfte Dateien: 493724
Erkannte Dateien: 2
Gesäuberte Dateien: 0
Scandauer gesamt 01:21:07
Scanstatus: Abgeschlossen
C:\Users\SillaZ\AppData\Roaming\Thunderbird\Profiles\6v3duov8.default-esr\ImapMail\imap.gmx.net\Trash multiple detections,Win32/TrojanDownloader.Wauchos.BD trojan,a variant of Win32/Kryptik.EKNK trojan unable to clean
C:\Users\SillaZ\AppData\Roaming\Thunderbird\Profiles\pues6cga.default\ImapMail\imap.gmx.net\Trash multiple detections,Win32/TrojanDownloader.Wauchos.BD trojan,a variant of Win32/Kryptik.EKNK trojan unable to clean
Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-10-2026
durchgeführt von NH (Administrator) auf XMG-2021 (SchenkerTechnologiesGmbH XMG NEO (CML/E20)) (31-10-2026 19:49:35)
Gestartet von C:\Users\NH\Downloads\FRST64.exe
Geladene Profile: NH
Plattform: Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(C:\Program Files (x86)\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files (x86)\Mozilla Firefox\crashhelper.exe
(C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\GCUService.exe
(C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\GCUService.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\OSDTpDetect.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxEM.exe
(explorer.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Intel Corporation -> Intel) C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag\KillerControlCenter_v2\KillerIntelligenceCenter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <13>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe <4>
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_401fde8782680631\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b260c545909302e9\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b260c545909302e9\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_19ebb84aa5e0e049\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) D:\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (THX Ltd -> VisiSonics) C:\Windows\System32\VSSrv.exe
(services.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe
(VSSrv.exe ->) (THX Ltd -> VisiSonics) C:\Windows\System32\VSHelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe [1647416 2023-02-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [122427152 2021-07-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2756368 2023-10-18] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [Steam] => D:\steam\steam.exe [4382056 2024-05-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [com.squirrel.Teams.Teams] => C:\Users\NH\AppData\Local\Microsoft\Teams\Update.exe [2454240 2022-11-27] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIVFE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON XP-7100 Series 64MonitorBE: C:\windows\system32\E_YLMBVFE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\windows\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {82A8B393-F036-4EF1-BAEB-162D8729F51D} - System32\Tasks\CorelUpdateHelperTask-481BAC4DFF1C74BD042FACE0A79FBB04 => C:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {0553B627-27AC-406F-A1F6-CEA73E62E9EB} - System32\Tasks\CorelUpdateHelperTask-AA0C585F1E6D8E61FCF0B3C229D36DEB => C:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {E850D97F-7186-4351-8049-0D508F58C8F1} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {C132EED0-32F9-493E-93D9-95C9EA02E261} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\SillaZ\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-25] (ESET, spol. s r.o. -> ESET)
Task: {A39A797D-DCC1-4E4B-86C1-ECF3282D1485} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\SillaZ\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-25] (ESET, spol. s r.o. -> ESET)
Task: {0748AEFC-1C29-4AC8-A3C4-D48127F29928} - System32\Tasks\EPSON XP-7100 Series Update {285704EB-3891-4B90-A560-B3FDCC62C30D} => C:\Windows\System32\spool\drivers\x64\3\E_YTSVFE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {FF25754F-DA91-4ADE-82AD-CC560666806F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9709BDC0-B7F1-40A0-A654-E8853245C213} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB966926-196C-4301-BC24-68BBDA0618A3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143648 2026-10-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {80376772-41E0-42C9-9179-5C5520A1808C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143648 2026-10-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Keine Datei)
Task: {97EF77E2-130C-4239-8A6F-1F0CE0286421} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Keine Datei)
Task: {FB3FF8AA-3501-413B-8556-22D41C16803C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {67C82ED5-FE70-4C48-ABA6-205C3D218477} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AA5B96CE-16A0-4D26-BB40-79BB8E18BE40} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B3D38BD3-EC11-4F73-817C-D6FDA86D9B9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A888D8E-33E5-4363-A2DB-44B57B11FCD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7089D6A0-EDC0-4DA2-8146-532A9CEAA8F3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3106650408-2670254964-1717926162-1006 E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [1081984 2026-10-31] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {42BED309-AD32-4A5B-8266-C6047A76CEBD} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [44160 2026-10-31] (Mozilla Corporation -> Mozilla Foundation)
Task: {00CD7172-D9C2-4A21-B440-544C0254231E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {A9D8EACC-4CA0-40A0-995F-A1BB16C11552} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F0FD59E6-4A72-4CFF-9CCB-62FD162D71F4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {00A27B97-5B97-41F6-82F1-164CF480074D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66FAEC0F-D27D-490C-B7FD-CFFF813B5867} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F82E3F7B-20B7-47EA-B07C-5AEFCF9DDD80} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D82C1EB0-1BCD-431C-807B-17CB44C85568} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FBB54CCD-D9EA-4C67-BD29-2C9D166F6C20} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BC0D140D-3430-4684-AE6D-0698ED88CB03} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {63B9739D-86AA-4032-B23D-28ED4FCB3278} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {54E8B929-6882-447F-9894-15DC461B7682} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1005 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C346B812-9454-4618-ADFC-AA4A7B72B44E} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1006 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FCBD36C-8A2C-456C-B575-66CA6D99EFF7} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1005 => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveLauncher.exe [877928 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {3CB22FB6-6CB0-4A9C-874E-905311DCC9F0} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1006 => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveLauncher.exe [877928 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {47D82DAC-618F-46EF-B9C5-D4E09EED0642} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [133905984 2023-03-10] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\/AUTOHIDE
Task: {1C3219BA-96E6-418B-87BF-674EA483888D} - System32\Tasks\SoftLanding\S-1-5-21-3106650408-2670254964-1717926162-1005\SoftLandingRefreshForExpirationTask-{b1ebde9e-e610-40b8-bb45-1e74079a581a} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {824CC96E-EFD2-4981-9D67-8EE83AF4978C} - System32\Tasks\SoftLanding\S-1-5-21-3106650408-2670254964-1717926162-1006\SoftLandingRefreshForExpirationTask-{cebcc811-6742-4909-a08e-66ef11c1193d} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {8A401FF6-E254-433E-8D6B-42B26BE89345} - System32\Tasks\THX Ltd\THX Update Service\THX-Restart-v0-33-0 => C:\windows\system32\shutdown.exe [57344 2025-11-25] (Microsoft Windows -> Microsoft Corporation) -> /r /d p:01:01
Task: {65D7860B-891C-4268-9A1C-D6488E03C887} - System32\Tasks\THX Ltd\THX Update Service\THX-Update-Service-v0-33-0 => C:\Program Files\THX\thx-update-svc.exe [12639448 2020-10-05] (THX Ltd -> THX Ltd)
Task: {388E5945-39D3-4F26-9509-27385E72222A} - System32\Tasks\THX Ltd\THX Update Service\THX-Upgrade-Install-v0-33-0 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [495616 2026-10-24] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass -File "%PROGRAMFILES%\thx\THX-Upgrade-Install.ps1"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\EPSON XP-7100 Series Update {285704EB-3891-4B90-A560-B3FDCC62C30D}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVFE.EXE:/EXE:{285704EB-3891-4B90-A560-B3FDCC62C30D} /F:UpdateWorkGroup\XMG-2021$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{389513b0-011e-404a-8b7c-464380414915}: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{b0f71a51-b0d4-4c5d-a072-a24c6b860a85}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{b0f71a51-b0d4-4c5d-a072-a24c6b860a85}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{e45839cc-84d5-4547-8c89-9725289fe8d7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e45839cc-84d5-4547-8c89-9725289fe8d7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{e5556801-3799-44e6-a5e6-0cd077708353}: [DhcpNameServer] 1.1.1.1 8.8.8.8
FireFox:
========
FF TaskBarID: E7CF176E110C211B -> C:\Program Files (x86)\Mozilla Firefox
FF DefaultProfile: dppga5ix.default -> E7CF176E110C211B
FF ProfilePath: C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default [2026-10-31]
FF DownloadDir: C:\Users\Nick\Downloads
FF Homepage: Mozilla\Firefox\Profiles\dppga5ix.default -> about:blank
FF NewTab: Mozilla\Firefox\Profiles\dppga5ix.default -> hxxp://www.bing.com/?pc=COS2&ptag=D091819-N0600A21ABFDD9D88F4162B1F&form=CONMHP&conlogo=CT3332016
FF Notifications: Mozilla\Firefox\Profiles\dppga5ix.default -> hxxps://community.postcrossing.com
FF Extension: (German Dictionary) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2022-11-23]
FF Extension: (Privacy Badger) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-10-25]
FF Extension: (Language: English (GB)) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2026-10-31]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\marcoagpinto@mail.telepac.pt.xpi [2026-10-25]
FF Extension: (cookie monster - C is for cookie -) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\{2415ce03-07a4-4923-a381-8f76f885b1aa}.xpi [2019-05-13]
FF Extension: (Tangled - Pascal Rapunzel) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\{8797666e-00c8-4efd-b902-28313405dcbe}.xpi [2019-05-13]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Keine Datei]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-22]
Edge Extension: (Google Docs Offline) - C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-22]
Edge Extension: (Edge relevant text changes) - C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-24]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9219392 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [761408 2023-03-10] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2018-04-09] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncHelper.exe [3812712 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
R2 GCUBridge; C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe [78912 2020-12-09] (Uniwill Technology Inc. -> )
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78088 2023-07-13] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2480944 2023-07-13] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2981168 2023-07-13] (Intel Corporation -> Intel)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2023-07-13] (Intel Corporation -> Intel® Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe [1274888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveUpdaterService.exe [4112232 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [381504 2023-03-10] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-10-24] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256632 2022-09-16] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; d:\TeamViewer\TeamViewer_Service.exe [22548280 2024-10-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 VSSrv; C:\WINDOWS\system32\VSSrv.exe [212696 2020-06-18] (THX Ltd -> VisiSonics)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 avmaura; C:\WINDOWS\System32\drivers\avmaura.sys [116480 2021-05-01] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-02-09] (Microsoft Corporation) [Datei ist nicht signiert]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2021-04-19] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [209200 2023-07-13] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2023-11-10] (Nvidia Corporation -> NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; \??\C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_043a02d7d5d8270f\rt68cx21x64.sys [752496 2023-08-16] (Realtek Semiconductor Corp. -> Realtek)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [90704 2020-02-25] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\WINDOWS\System32\drivers\secnvmeF.sys [30512 2020-02-25] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SparkIO; \??\C:\windows\system32\SparkIO.sys [22128 2019-07-08] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 THXVAD; C:\WINDOWS\System32\drivers\THXVAD.sys [99552 2020-06-18] (THX Ltd -> Windows (R) Win 7 DDK provider)
R3 vhidmini; C:\WINDOWS\System32\drivers\vhidmini.sys [22944 2020-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-02-09] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_14dc9a213197a8b8\WSDScan.sys [61440 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-10-31 19:49 - 2026-10-31 19:50 - 000036450 _____ C:\Users\NH\Downloads\FRST.txt
2026-10-31 19:49 - 2026-10-31 19:49 - 000000000 ____D C:\FRST
2026-10-31 19:48 - 2026-10-31 19:48 - 002457088 _____ (Farbar) C:\Users\NH\Downloads\FRST64.exe
2026-10-31 19:48 - 2026-10-31 19:48 - 002457088 _____ (Farbar) C:\Users\NH\Downloads\FRST64(1).exe
2026-10-31 18:36 - 2026-10-31 18:36 - 000001168 _____ C:\Users\NH\Documents\ESET Scan.txt
2026-10-31 17:09 - 2026-10-31 17:09 - 000000000 ____D C:\Users\NH\AppData\Local\WindowsOobeAppHost
2026-10-31 16:11 - 2026-10-31 16:11 - 000746904 _____ C:\WINDOWS\system32\perfh007.dat
2026-10-31 16:11 - 2026-10-31 16:11 - 000158970 _____ C:\WINDOWS\system32\perfc007.dat
2026-10-26 15:16 - 2026-10-31 18:04 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-25 15:36 - 2026-10-25 15:36 - 000002190 _____ C:\Users\NH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-25 09:17 - 2026-10-25 16:10 - 000001431 _____ C:\Users\SillaZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-25 09:17 - 2026-10-25 16:10 - 000001325 _____ C:\Users\SillaZ\Desktop\ESET Online Scanner.lnk
2026-10-25 09:17 - 2026-10-25 09:17 - 008423856 _____ (ESET) C:\Users\SillaZ\Downloads\esetonlinescanner.exe
2026-10-25 09:17 - 2026-10-25 09:17 - 000000000 ____D C:\Users\SillaZ\AppData\Local\ESET
2026-10-24 19:56 - 2026-10-24 19:56 - 000000000 ____D C:\Users\SillaZ\AppData\Local\WindowsOobeAppHost
2026-10-24 19:48 - 2026-10-25 15:36 - 000002575 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 19:47 - 2026-10-24 19:47 - 000001714 _____ C:\Users\Public\Desktop\PDF24 Toolbox.lnk
2026-10-24 19:47 - 2026-10-24 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2026-10-24 19:47 - 2026-10-24 19:47 - 000000000 ____D C:\Program Files\PDF24
2026-10-24 16:30 - 2026-10-24 16:30 - 000155799 _____ C:\Users\SillaZ\Downloads\endres mama.pdf
2026-10-24 16:28 - 2026-10-24 16:28 - 000155799 _____ C:\Users\SillaZ\Downloads\Rechnung_1668323.pdf
2026-10-24 15:51 - 2026-10-24 15:51 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-10-24 15:51 - 2026-10-24 15:51 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-10-24 15:31 - 2026-10-24 15:31 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-10-31 19:47 - 2022-02-09 14:37 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-31 19:46 - 2023-12-13 14:18 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-31 19:46 - 2021-11-15 18:51 - 000000000 ____D C:\Users\NH\AppData\Roaming\Samsung Magician
2026-10-31 19:46 - 2021-04-23 14:46 - 000000000 __SHD C:\Users\NH\IntelGraphicsProfiles
2026-10-31 19:09 - 2026-08-27 07:31 - 000002190 _____ C:\Users\SillaZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-31 19:09 - 2021-04-25 15:55 - 000001299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-31 19:09 - 2021-04-25 15:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2026-10-31 19:05 - 2024-08-24 15:23 - 000000000 ____D C:\Users\SillaZ\AppData\Local\Packages
2026-10-31 19:04 - 2024-10-07 14:39 - 000000000 ____D C:\Users\SillaZ\AppData\Roaming\Microsoft\Excel
2026-10-31 18:46 - 2021-04-25 16:10 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-10-31 18:46 - 2021-04-25 16:10 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-31 18:41 - 2020-09-16 06:01 - 000000000 ____D C:\ProgramData\Package Cache
2026-10-31 18:39 - 2025-02-09 19:57 - 000003446 _____ C:\WINDOWS\system32\Tasks\CorelUpdateHelperTask-481BAC4DFF1C74BD042FACE0A79FBB04
2026-10-31 18:01 - 2025-02-09 19:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-31 17:10 - 2024-03-18 19:00 - 000001386 _____ C:\Users\NH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-31 17:10 - 2024-03-18 19:00 - 000001280 _____ C:\Users\NH\Desktop\ESET Online Scanner.lnk
2026-10-31 16:20 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-31 16:19 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-10-31 16:13 - 2025-02-09 19:57 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-10-31 16:13 - 2025-02-09 19:57 - 000003682 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-10-31 16:11 - 2025-02-09 19:55 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-31 16:11 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-31 16:04 - 2025-02-09 19:55 - 000014162 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-31 16:04 - 2024-08-24 15:24 - 000000000 ____D C:\Users\SillaZ\AppData\Local\SquirrelTemp
2026-10-31 16:04 - 2024-08-24 15:23 - 000000000 __SHD C:\Users\SillaZ\IntelGraphicsProfiles
2026-10-31 16:03 - 2025-02-09 19:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-31 16:03 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-31 16:03 - 2022-11-29 19:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-10-31 16:03 - 2021-04-19 15:33 - 000000000 ____D C:\Intel
2026-10-31 16:03 - 2020-09-15 14:22 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-29 16:42 - 2024-04-01 08:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-10-29 13:33 - 2025-02-09 19:57 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1006
2026-10-29 13:33 - 2025-02-09 19:57 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1005
2026-10-29 13:33 - 2025-02-09 19:57 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1006
2026-10-29 13:33 - 2025-02-09 19:57 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1005
2026-10-29 13:33 - 2025-02-09 19:57 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-10-29 13:33 - 2022-11-27 14:10 - 000002046 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-28 13:57 - 2020-09-15 14:22 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-28 13:41 - 2024-08-24 15:25 - 000000000 ____D C:\Users\SillaZ\AppData\Local\D3DSCache
2026-10-25 16:14 - 2021-04-25 16:51 - 000000000 ____D C:\Program Files (x86)\MozBackup
2026-10-25 15:36 - 2021-04-23 14:46 - 000000000 ____D C:\Users\NH\AppData\Local\Packages
2026-10-25 15:35 - 2021-11-14 14:58 - 000000000 ____D C:\Users\NH\AppData\Local\D3DSCache
2026-10-25 15:35 - 2021-04-25 15:55 - 000000000 ____D C:\Users\NH\AppData\Roaming\Mozilla
2026-10-25 15:35 - 2021-04-23 14:48 - 000000000 ____D C:\Users\NH\AppData\Local\PlaceholderTileLogoFolder
2026-10-25 15:32 - 2025-02-09 19:57 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-25 15:32 - 2025-02-09 19:57 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-25 09:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-24 20:03 - 2025-02-09 19:53 - 000000000 ____D C:\Users\NH
2026-10-24 19:55 - 2025-02-09 19:53 - 000000000 ____D C:\Users\SillaZ
2026-10-24 19:53 - 2025-02-09 19:52 - 000533008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-24 19:52 - 2026-01-02 17:21 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-10-24 19:52 - 2025-07-15 15:05 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-10-24 19:52 - 2024-04-01 17:37 - 000000000 ____D C:\WINDOWS\InboxApps
2026-10-24 19:52 - 2024-04-01 17:37 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-10-24 19:52 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-24 19:52 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-24 19:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-10-24 17:09 - 2020-09-15 14:36 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-24 17:07 - 2020-09-15 14:35 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-24 15:51 - 2025-02-09 19:54 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-24 15:31 - 2021-11-14 14:28 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-24 15:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\appcompat
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-11-28 10:16 - 2023-12-14 10:58 - 001065984 _____ () C:\Users\NH\AppData\Local\file__0.localstorage
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-10-2026
durchgeführt von NH (31-10-2026 19:51:17)
Gestartet von C:\Users\NH\Downloads
Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) (2025-02-11 15:58:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-3106650408-2670254964-1717926162-500 - Administrators - Disabled) => C:\Users\Administrator (Orphaned Folder) <==== ACHTUNG
DefaultAccount (S-1-5-21-3106650408-2670254964-1717926162-503 - Limited - Disabled)
Gast (S-1-5-21-3106650408-2670254964-1717926162-501 - Limited - Disabled)
NH (S-1-5-21-3106650408-2670254964-1717926162-1005 - Administrators - Enabled) => C:\Users\NH
SillaZ (S-1-5-21-3106650408-2670254964-1717926162-1006 - Administrators - Enabled) => C:\Users\SillaZ
WDAGUtilityAccount (S-1-5-21-3106650408-2670254964-1717926162-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Control Center (HKLM\...\{6ea3ce12-b991-4b65-9f8d-b148eaaecd87}_is1) (Version: 1.1.0.51 - OEM)
Corel Painter Essentials 8 - Core (HKLM\...\{1D4D63BF-5E27-4D47-A23F-66E4B406D9B3}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - Content (HKLM\...\{334F8B75-D2CD-4DAE-931D-48118D313478}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - CT (HKLM\...\{CA834CD6-0363-422C-A6B5-DD0B85AC1A45}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - DE (HKLM\...\{55B21364-36FE-4172-8794-98CBC6984376}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - EN (HKLM\...\{BE36DCD3-299F-492F-89B6-D5DC051A1778}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - FR (HKLM\...\{056F7BDE-C2C0-4DBC-BB05-283178DE87FE}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - IPM (HKLM\...\{C45B69A6-7210-41B1-BEFB-7DBC66A228BE}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - IPM Content (HKLM\...\{E20BAA2A-03C4-41FA-9A12-743E58181E7E}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - JP (HKLM\...\{E73B9BAC-C186-46C8-8264-59439269A155}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - NNArtAssets (HKLM\...\{53CFBCA0-80C1-42FD-A037-9C6C45146E03}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 (HKLM\...\_{D3688764-0B0D-436E-BDF2-98752AB8E0CE}) (Version: 8.0.0.148 - Corel Corporation)
Corel Painter Essentials 8 (HKLM\...\{8522EF0F-BA35-4D78-94B4-309943C39F30}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Thumbnail Previewer (HKLM\...\{50139369-99B2-496A-8726-D3DC5D6D4235}) (Version: 18.0 - Corel Corporation)
Corel PaintShop Pro 2023 (HKLM-x32\...\_{9266F7AF-3AD8-4B80-9A16-AD8B4580C1C0}) (Version: 25.2.0.58 - Corel Corporation)
Corel Update Manager (HKLM\...\{1E7AD2D2-EDD9-4334-992D-7F7ED9769217}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{48F41881-D9E9-4208-9C7E-16F7A84CE851}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{AF3E1983-6B8F-4D66-81BD-1900FF5730E3}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{BDF05081-13FF-457E-A01E-3798506DE951}) (Version: 2.17.698 - Corel corporation) Hidden
CrystalDiskInfo 8.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.0.0 - Crystal Dew World)
Dynamic Application Loader Host Interface Service (HKLM\...\{602631E2-0FA8-4BED-9EDB-E7CE9FDA437F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Easy Photo Scan (HKLM-x32\...\{99364024-626C-4BE1-89C8-2F207023497B}) (Version: 1.00.0018 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{39171CAA-4D3B-47D3-86BC-458D03510251}) (Version: 3.11.77 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{DE32F90E-1A29-4D74-BCF1-E7DDB25D713A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{3615C893-F844-4A5B-B949-8409EAB62271}) (Version: 3.00.05 - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{711E8536-AB71-4455-A6C4-357FDBBEBF91}) (Version: 4.6.7 - Seiko Epson Corporation)
EPSON XP-7100 Series Printer Uninstall (HKLM\...\EPSON XP-7100 Series) (Version: - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Highlight Reel (HKLM\...\{9D5DA75C-ECD2-4C51-A4F4-CDD821D84AE0}) (Version: 1.1.0.524 - Corel Corporation)
ICA (HKLM\...\{D3688764-0B0D-436E-BDF2-98752AB8E0CE}) (Version: 8.0 - Corel Corporation) Hidden
ICA (HKLM-x32\...\{9266F7AF-3AD8-4B80-9A16-AD8B4580C1C0}) (Version: 25.2.0.58 - Corel Corporation) Hidden
ICA (HKLM-x32\...\{FD799776-5758-48E4-8523-328AC68F3D7A}) (Version: 1.0.0.167 - Corel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM\...\{D666FBA1-39CE-48D2-9336-9256827EB308}) (Version: 10.1.19502.8391 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{e7892987-b2d0-4c0d-951c-86af011df195}) (Version: 10.1.19502.8391 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{AC2499C1-4700-4ECF-9581-08954D4DAE1F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2328.5.16.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{5B599B1E-BEE8-4493-85AD-0BC087AB2B88}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{DEAFF352-6F9F-45F4-916A-DF7A0C5A5B0C}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{74970E1F-42D7-443F-857F-A0A0C4E71604}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{0940A8E6-DBBC-4554-B07D-EBFB10627716}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000250-0220-1031-84C8-B8D95FA3C8C3}) (Version: 22.250.0.2 - Intel Corporation)
IPM_MIR_COM64 (HKLM\...\{30734396-FBD6-4B6D-83E1-5223C12778C5}) (Version: 1.0.0.167 - Corel Corporation) Hidden
IPM_PSP_COM64 (HKLM\...\{6D9980A5-6722-445F-8954-73871C3F12C6}) (Version: 25.2.0.58 - Corel Corporation) Hidden
Killer Performance Driver Suite UWD (HKLM\...\{13A28F12-CD32-44FB-B2E0-EE58BE4A398B}) (Version: 34.23.7168 - Rivet Networks)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.50 - Microsoft Corporation) Hidden
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14334.20974 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30135 (HKLM-x32\...\{b7a2b241-3f54-4d7d-94d1-8ce0146e03c7}) (Version: 14.29.30135.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.27.29016 (HKLM\...\{F07B1E25-5670-4556-9C7F-5A1966C83269}) (Version: 14.27.29016 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.27.29016 (HKLM\...\{E493B8F4-E300-43EC-95D0-BDF3711297EA}) (Version: 14.27.29016 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30135 (HKLM-x32\...\{77EB1EA9-8E1B-459D-8CDC-1984D0FF15B6}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30135 (HKLM-x32\...\{36A1E79B-581A-4FE5-843D-84C2D3C9431E}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
MIR64 (HKLM\...\{C50F1C9E-B410-4565-917A-EAD2BF2D350D}) (Version: 1.0.0.167 - Corel Corporation) Hidden
MIRContent (HKLM-x32\...\{68DE4372-501F-49E7-A293-305497686165}) (Version: 1.0.0.167 - Corel Corporation) Hidden
MIRHelp (HKLM-x32\...\{27A2EAF9-31BD-47FB-A676-754E8C2CF36E}) (Version: 1.0.0.167 - Corel Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 159.0 (x64 de)) (Version: 159.0 - Mozilla)
Mozilla Thunderbird ESR (x64 de) (HKLM\...\Mozilla Thunderbird 153.6.0 ESR (x64 de)) (Version: 153.6.0 - Mozilla)
MultiCam Capture 2.0 Lite (HKLM\...\{8F281193-9234-4F08-9624-42B1AF08B999}) (Version: 2.1.0.119 - Corel Corporation)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.3.6 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - Seiko Epson Corporation)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA Grafiktreiber 546.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.17 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
ParticleShop - Core (HKLM\...\{539A8441-261C-42DA-8B4B-FB512F61D33B}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop - IPM (HKLM\...\{9E99AA1D-F1DC-442D-B9D9-8DD3EE529AE9}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop - IPM Content (HKLM\...\{67BDB811-383B-4D2B-870E-F27D2511F200}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop (HKLM\...\_{6F224046-E164-4B78-9867-3AE494271D29}) (Version: 1.5.0.108 - Corel Corporation)
ParticleShop (HKLM\...\{6F224046-E164-4B78-9867-3AE494271D29}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop (HKLM\...\{D4F483F8-71F1-457F-AB1B-31C61529B658}) (Version: 1.5 - Corel Corporation) Hidden
PDF24 Creator 11.30.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.30.1 - Geek Software GmbH)
PhotoMirage (HKLM-x32\...\_{FD799776-5758-48E4-8523-328AC68F3D7A}) (Version: 1.0.0.167 - Corel Corporation)
PSPPContent (HKLM-x32\...\{5F7D4DF0-36C1-4217-BED8-49F8D55C9EE2}) (Version: 25.2.0.58 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{CC302687-F27F-4765-85FD-1DD35BE22B27}) (Version: 25.2.0.58 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{917DBDD3-CB61-4E51-AEAD-A1020D94D64D}) (Version: 25.2.0.58 - Corel Corporation) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9484.1 - Realtek Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.31279 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.15.0717.2023 - Realtek)
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 4.0.0.16 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 7.3.0.1100 - Samsung Electronics)
Setup (HKLM-x32\...\{A4D517DC-1201-499A-B344-3576C0C11698}) (Version: 1.0.0.167 - Ihr Firmenname) Hidden
Setup (HKLM-x32\...\{B5A35E57-2AC8-4BF1-A3C2-621AEC415DE9}) (Version: 25.2.0.58 - Ihr Firmenname) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.58.5 - TeamViewer)
THX Spatial Audio Driver (HKLM\...\THXSpatialAudio) (Version: 1.2.42 - THX Ltd.)
Ultimate Creative Collection (HKLM-x32\...\_{C3AE9C80-873E-4516-9B68-538FFDD02F5F}) (Version: 1.0.0.222 - Corel Corporation)
Ultimate Creative Collection (HKLM-x32\...\{C3AE9C80-873E-4516-9B68-538FFDD02F5F}) (Version: 1.0.0.222 - Ihr Firmenname) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
Wargaming.net Game Center (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Wargaming.net Game Center) (Version: 24.4.0.6472 - Wargaming.net)
Windows Driver Package - Intel(R) Corporation System (01/25/2020 1.41.823.0) (HKLM\...\985C0D2A2D76D4C026B61D8EFCACD825B45279E6) (Version: 01/25/2020 1.41.823.0 - Intel(R) Corporation)
Windows Driver Package - Synaptics (SynTP) HIDClass (07/15/2019 19.5.32.68) (HKLM\...\B30A41DD17F4A0018A061E4B91C940B4AC22694B) (Version: 07/15/2019 19.5.32.68 - Synaptics)
Windows Driver Package - Synaptics (SynTP) Mouse (07/15/2019 19.5.32.68) (HKLM\...\903934C7B4ED70F81C2D3B6D6BBDB8C7E22B3B3A) (Version: 07/15/2019 19.5.32.68 - Synaptics)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
World_of_Warships (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\2562693762) (Version: - Wargaming.net)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-02-11] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.36.0_x64__8j3eq9eme6ctt [2023-12-13] (INTEL CORP)
Disney+ Das Streaming Zuhause von Disney, Pixar, Marvel, Star Wars, National Geographic und Star. -> C:\Program Files\WindowsApps\www.disneyplus.com-A696BC3_1.0.0.2_neutral__gcze62ayd7e3t [2026-10-25] (www.disneyplus.com)
Disney+ Das Streaming Zuhause von Disney, Pixar, Marvel, Star Wars, National Geographic und Star. -> C:\Program Files\WindowsApps\www.disneyplus.com-D3D50414_1.0.0.3_neutral__gcze62ayd7e3t [2025-01-07] (www.disneyplus.com)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag [2024-08-24] (INTEL CORP) [Startup Task]
Microsoft.Photos.MediaEngineDLC -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-01] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.8.204.0_x64__dt26b99r8h8gj [2023-12-13] (Realtek Semiconductor Corp)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2023-08-28] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005_Classes\CLSID\{317AEACB-3CF9-4CA6-B277-87CE91BC9F19}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005_Classes\CLSID\{9cd6216c-a299-47e5-ae1c-92d2bb456b1a}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\nvshext.dll [2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2024-05-04 14:48 - 2023-03-10 15:18 - 002521600 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\ffmpeg.dll
2024-05-04 14:48 - 2023-03-10 15:18 - 000375808 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libegl.dll
2024-05-04 14:48 - 2023-03-10 15:18 - 006533120 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libglesv2.dll
2024-05-04 14:48 - 2023-03-10 15:17 - 000097280 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magutils-napi.node
2024-05-04 14:48 - 2023-03-10 15:17 - 000087040 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magvibrancy-napi.node
2024-05-04 14:48 - 2023-03-10 15:17 - 000589824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\uimpewrapper-napi.node
2021-11-15 18:51 - 2023-03-10 15:18 - 004426752 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\vk_swiftshader.dll
2024-05-04 16:31 - 2024-05-04 16:31 - 000126976 ____N (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\SYSTEM32\UpdatePolicyScenarioReliabilityAggregator.dll
2023-10-18 16:43 - 2023-10-18 16:43 - 000242688 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll
2023-10-18 16:44 - 2023-10-18 16:44 - 000291328 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
2021-10-26 10:00 - 2021-10-26 10:00 - 000708608 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll
2020-04-17 10:15 - 2020-04-17 10:15 - 000577536 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll
2019-02-22 15:09 - 2019-02-22 15:09 - 000475136 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://bestware.com
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mysn.de/
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mysn.de
SearchScopes: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2022-09-17 06:51 - 2022-09-17 06:51 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.178.1
ist aktiviert.
Network Binding:
=============
Ethernet 4: Realtek PCIe GbE Family Controller #3 -> rt68cx21x64.sys
WLAN: Killer(R) Wi-Fi 6 AX1650i 160MHz Wireless Network Adapter (201NGW) -> Netwtw10.sys
Bluetooth-Netzwerkverbindung 3: Bluetooth Device (Personal Area Network) #3 -> bthpan.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\NH\Pictures\XMG_Wallpaper_3D-grunge_1920x1200.jpg
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\SillaZ\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\2451440431525976.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6FF68D6DF02CC3C8AB7EFED63FD83047"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{C6A611BA-865C-4ADF-8B99-92EB42BA5C39}] => (Allow) D:\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{70CABCAB-EAC7-49C9-97E1-41E52F88692E}] => (Allow) D:\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C9377B36-FFEC-43C4-9678-696A6FFC27A0}] => (Allow) D:\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9AB0382D-BC2F-4CA0-825B-F5555EDC4101}] => (Allow) D:\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{71F91F57-1591-4D3F-ACE0-50F625F372BB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8BFD2D2-8D65-4FBB-A338-4259CCDF618D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B09AC52-7E77-48F2-8DF9-D8A42DB76E42}] => (Allow) D:\World_of_Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{DC93FC0D-982D-4FC1-BB39-3B7949430384}] => (Allow) D:\World_of_Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{108928B8-3861-4B33-A61F-EB00DEF5AF66}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{B946FE67-2B6B-4F8F-873C-B4D560330F95}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{94D3DAFC-7AAA-4AFC-82C1-0F772CF41074}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer_Service.exe => Keine Datei
FirewallRules: [{824F748E-D085-4761-AF7C-B351EA8D581F}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer_Service.exe => Keine Datei
FirewallRules: [{36C539DF-AA47-4DBA-B18F-C65164966756}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer.exe => Keine Datei
FirewallRules: [{30E76763-4B31-46C8-B17F-0DEF700140F2}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer.exe => Keine Datei
FirewallRules: [{4B007729-F7FD-4739-964D-329275ECDD2E}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{C76A4F9F-666D-4122-83A5-C7609EB16722}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{2AC97C2C-15BC-4A13-931E-48F8826AEA97}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{BDA70C06-7DA1-4DBE-9A51-24E1F780983F}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{0C2DFF0F-FDC4-44AA-B91E-CC8E65831952}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{43814E90-8E3E-4FA8-84AC-9CF8E4839CA5}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{84894C7C-64F2-4A7E-B18E-B28ED6A6E3AD}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{EC00C50F-28FF-46F7-A779-605913906802}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{C5EA682B-B439-48AE-B21A-A76CECEA3EE5}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{678CB66C-4356-47DD-BD41-A96DC1960144}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{DA8625D8-83F1-4D43-8669-A1640AA675FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0BA6F86E-DD00-4577-8CD2-7751C43B4A0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{300CBEEF-CF33-433E-BC0C-2E316B396E5C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CAC39172-FBDA-48BA-BFC2-C9F10B893EE9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{96C0C179-C22A-4E6F-829C-16BABA7B1776}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C13AC275-C12C-445D-977F-F95E3DC87B3E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{62E9D32E-B6C9-4D06-80A9-47E2E89356C4}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{7B73BFA0-89D7-47BA-B0E3-3503FC762D8B}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{28968F4F-308B-4718-9EEC-9C838CDBDD0B}] => (Allow) C:\Users\NH\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{22CC17A9-6FB0-450A-896F-4DAA78DED4D2}] => (Allow) C:\Users\NH\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{63A3A3A4-9DF9-474E-BC00-EBA272AE4648}] => (Allow) D:\steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{22A218DE-50DF-44D7-8498-273715886B33}] => (Allow) D:\steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2D69F248-FD01-430C-A362-F3C8E3F66565}] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5F71AD91-8349-4361-88A6-62B972A558C9}] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E66A00B8-A66B-4DB9-ACBA-BF169C582A76}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{2268DFB5-3C42-47F2-9F97-ABF9D291A9D4}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{7C5AAB2A-8B00-4388-84B7-991E71860B91}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{48635A1C-68B6-4FE3-974C-9D2210347DC7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7C792C4D-EE5D-4D34-82FD-A286F0E4E389}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CD901CC3-C87A-4690-9E34-8794F27F5047}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{D9272524-52FF-43C2-A172-E2C230FA3FEA}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD108862-AA73-4E7F-BC00-9D286917603E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D4DDDA13-B651-44FB-AD6F-28534B8AB44F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E084F23-8EAC-4A9E-A465-95F063681FCC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B2FF53F7-8580-4E4A-BE65-A4B3C04485BE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
28-10-2026 13:57:47 Windows Update
31-10-2026 16:20:08 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (10/31/2026 07:09:49 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (10/31/2026 06:42:37 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: NVDisplay.Container.exe, Version: 1.39.3323.1171, Zeitstempel: 0x64e85748
Fehlerhafter Modulname: nvxdsyncplugin.dll, Version: 8.17.15.4617, Zeitstempel: 0x654d45ce
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000095f05
Fehlerhafte Prozess-ID: 0x4bf8
Fehlerhafte Anwendungsstartzeit: 0x1dd69523dbbf447
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\plugins\Session\nvxdsyncplugin.dll
Berichts-ID: 5f237da8-aa61-42c1-bab8-9e87d7b9f30e
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (10/31/2026 05:24:46 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: TR98ZNZZN3E95DV7, host id: Wl4xUf6SJVW7oTP4Xdj40+qCyY6I7jLBQq9BYwiAysREnNSIgNK38uxzw3YH7wXyzR2gF4D8lJeOfvYPOzwb7zVWUDYa+9PL
Error: (10/31/2026 05:24:45 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: ERROR: getManifest : attempting fallback to ap-southeast-1
Error: (10/31/2026 05:09:38 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: NVDisplay.Container.exe, Version: 1.39.3323.1171, Zeitstempel: 0x64e85748
Fehlerhafter Modulname: nvxdapix.dll, Version: 8.17.15.4617, Zeitstempel: 0x654d4801
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000042576d
Fehlerhafte Prozess-ID: 0x15b8
Fehlerhafte Anwendungsstartzeit: 0x1dd69490e12ca4d
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\nvxdapix.dll
Berichts-ID: 4998c644-798a-4032-86fb-66768e058223
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (10/31/2026 04:19:12 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: Y4TZAQZ2GZCG2YZA, host id: 8zyOkVHR0oE2HCF2Tls4w3DmArSzMWzi1bwrK98uzsNUlk4UPY+KKkRJOItazVa1d3nVWXjcmPbkflhAIb4yKb7m85/zzQjp
Error: (10/31/2026 04:19:11 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: ERROR: getManifest : attempting fallback to ap-southeast-1
Error: (10/29/2026 01:47:46 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: YJ025BB16W9V076V, host id: AUUG+qsUAS9HG6/ZB2dv3NdIB2/+wedld02Xcp/JEHKi/R9H0QygUEg8JuPH2I+VNo9fswmRkHXQNz0CQaaPAcZbLq+/0D3W
Systemfehler:
=============
Error: (10/31/2026 07:46:00 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/29/2026 04:42:36 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Background Intelligent Transfer Service" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%(2147943515 = Der Computer wird heruntergefahren.)
Error: (10/29/2026 04:42:36 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147943515.
Error: (10/29/2026 04:42:32 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/29/2026 02:46:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice
Error: (10/29/2026 02:07:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice
Error: (10/28/2026 04:00:06 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/26/2026 03:58:09 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Background Intelligent Transfer Service" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%(2147943515 = Der Computer wird heruntergefahren.)
Windows Defender:
================
TimeCreated : 28.10.2026 15:58:37
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{9C649B9D-6FBA-410A-B82F-289E9510CB20}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŜčĥέδυŀěð şçąη ẁąŝ
şκíφφэδ вз¢àџѕ℮ тĥ℮ ŀάśτ ѕџςčėšѕƒúŀ šĉǻʼn ẃäѕ ώīτђίŋ τћє ļăśτ 7 δаγѕ
TimeCreated : 26.10.2026 15:47:58
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{D788BE0E-465D-46D4-823E-1DD3AD8E73E2}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃΡĆ ćőŋńèċťīόŋ řΰñδθщņ
TimeCreated : 25.10.2026 15:44:14
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{B53855DD-1C4F-4E8C-8BFB-062A45297C6B}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃΡĆ ćőŋńèċťīόŋ řΰñδθщņ
TimeCreated : 24.10.2026 16:37:27
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{0C5A66DC-47EF-4315-8BCB-228EA06C3EB4}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\Netzwerkdienst%п %ťŚτōρ Гēǻśǿл:%вŮήĸñôẁπ
CodeIntegrity:
===============
Date: 2026-10-31 16:04:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
Date: 2025-06-13 17:06:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. N.1.06 10/28/2020
Hauptplatine: NB02 GMxMPxS
Prozessor: Intel(R) Core(TM) i7-10875H CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 48%
Installierter physikalischer RAM: 16216.33 MB
Verfügbarer physikalischer RAM: 8294.58 MB
Summe virtueller Speicher: 17240.33 MB
Verfügbarer virtueller Speicher: 9750.11 MB
==================== Laufwerke ================================
Disk 0 - Drive c: (Windows) (Fixed) (Total:434.47 GB) (Free:282.15 GB) (Model: NVMe Samsung SSD 970 SCSI Disk Device) NTFS
Disk 0 - Drive d: (Programme) (Fixed) (Total:490.63 GB) (Free:360.41 GB) (Model: NVMe Samsung SSD 970 SCSI Disk Device) NTFS
Disk 1 - Drive e: (Save) (Fixed) (Total:465.76 GB) (Free:236.39 GB) (Model: KINGSTON SA2000M8500G) NTFS
Disk 0 - \\?\Volume{6b0c9fb9-a9a9-11eb-abab-ccf9e4c542bf}\ (Recovery) (Fixed) (Total:1.95 GB) (Free:1.36 GB) NTFS
Disk 0 - \\?\Volume{e388ff75-963d-4a7e-a600-d6a0fbdd32c1}\ () (Fixed) (Total:1.04 GB) (Free:114.96 MB) NTFS
Disk 0 - \\?\Volume{60c2d148-aa8b-11eb-abba-ccf9e4c542bf}\ (BOOT) (Fixed) (Total:1.46 GB) (Free:1.43 GB) FAT32
==================== MBR & Partitionstabelle ====================
============================================================
Disk: 0 (Size: 931.51 GB) (Disk ID: 3C43A428)
Partitions:
===========
Partition Style : GPT
Partition Count : 6
Disk ID : {6B0C9FB8-A9A9-11EB-ABAB-CCF9E4C542BF}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128
Partition 1
Type : Windows Recovery
Size : 1.95 GB
Offset : 1 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {6B0C9FB9-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : EFI System Partition
Size : 1.46 GB
Offset : 2001 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {60C2D148-AA8B-11EB-ABBA-CCF9E4C542BF}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Microsoft Reserved (MSR)
Size : 1.95 GB
Offset : 3501.01 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {6B0C9FBB-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Basic Data Partition
Size : 434.47 GB
Offset : 5501.01 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {6B0C9FBC-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 1.04 GB
Offset : 450400 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {E388FF75-963D-4A7E-A600-D6A0FBDD32C1}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 6
Type : Basic Data Partition
Size : 490.63 GB
Offset : 451466 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {BADE7F10-BFAD-4C6C-BF82-F804BB14D011}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {8865871F-7BA5-48DD-9005-70910B7B782D}
Usable Offset : 0.02 MB
Usable Length : 465.76 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 465.76 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {ABD61B81-F76B-4A87-B750-535D4EA58663}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
==================== Ende vom Addition.txt =======================
|
|
Gestern, 20:24
| #2 | |
| /// Winkelfunktion /// TB-Süch-Tiger™   | ESET Meldet TrojanerfundZitat:
Das ist nur ein Fund im Mülleimer des Mailpostfaches.
__________________ |
|
Gestern, 20:37
| #3 |
| | ESET Meldet Trojanerfund Hallo,
__________________vielen Dank für die schnelle Antwort und nein den Pfad hatte ich mir nicht angeschaut  Also alles leer machen und gut ist es ? |
|
Gestern, 20:58
| #4 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | ESET Meldet Trojanerfund Papierkorb leeren und alle Ordner kompaktieren.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
| Themen zu ESET Meldet Trojanerfund |
| administrator, antivirus, cpu, defender, desktop, firefox, firewall, google, homepage, internet, internet explorer, mozilla, nvidia, performance, prozesse, realtek, registry, services.exe, software, starten, svchost.exe, system, udp, updates, windows |
Linear-Darstellung
