Windows 11: Öffnet plötzlich Programme, Kontextmenüs etc.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
durchgeführt von Admin (Administrator) auf BIGA (Dell Inc. XPS 17 9700) (04-11-2026 12:30:13)
Gestartet von C:\Users\Admin\Desktop\FRST64.exe
Geladene Profile: Admin
Plattform: Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.Update.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> ) C:\Program Files\Malwarebytes\Anti-Malware\MBAMCrashHandler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_b787c039819e9d91\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b787c039819e9d91\igfxEM.exe
(Emsisoft Limited -> Emsisoft Ltd) C:\EEK\bin64\a2emergencykit.exe
(explorer.exe ->) (IDRIX SARL -> AM Crypto) C:\Program Files\VeraCrypt\VeraCrypt.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_f278340cb1a37967\Display.NvContainer\NVDisplay.Container.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c607c18cb15933d8\RtkAudUService64.exe
(services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b787c039819e9d91\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_8a3f88e34f6b8385\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_a5f2152e4806694a\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bfe00100c347fdac\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_bfe00100c347fdac\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_2c17521ca0d3f79c\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_604198d932f43311\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\cAVS\IAS\IntelAudioService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_f278340cb1a37967\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c607c18cb15933d8\RtkAudUService64.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe OS Extension\AdobeNotificationClient.exe
(svchost.exe ->) (ASCOMP Software GmbH -> ASCOMP Software GmbH) C:\Program Files\ASCOMP Software\Synchredible\synchredible.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\wuaucltcore.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.9703_none_a5009b9d7769c1f5\TiWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo9de.inf_amd64_c6bfc5767fc0181c\WavesSvc64.exe [5083736 2023-02-22] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_c607c18cb15933d8\RtkAudUService64.exe [1958816 2023-10-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [9523624 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-07-08] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [I19C] => C:\WINDOWS\twain_32\Brimi19c\Common\TwDsUiLaunch.exe [94560 2021-01-28] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3591168 2022-10-09] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2539496 2026-10-21] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\Run: [KeePassXC] => C:\Program Files\KeePassXC\KeePassXC.exe [5700392 2026-03-09] (DroidMonkey Apps, LLC -> KeePassXC Team)
HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\Run: [VeraCrypt] => C:\Program Files\VeraCrypt\VeraCrypt.exe [8142112 2026-07-10] (IDRIX SARL -> AM Crypto)
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\...\Run: [MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45649368 2026-10-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\...\Run: [Mozilla-Firefox-308046B0AF4A39CB] => "C:\Program Files\Mozilla Firefox\firefox.exe" -os-autostart [1081984 2026-10-30] (Mozilla Corporation -> Mozilla Corporation)
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\Run: [MicrosoftEdgeAutoLaunch_98769996E24836F99EC8617644423B4C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\Run: [VeraCrypt] => C:\Program Files\VeraCrypt\VeraCrypt.exe [8142112 2026-07-10] (IDRIX SARL -> AM Crypto)
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\Run: [KeePassXC] => C:\Program Files\KeePassXC\KeePassXC.exe [5700392 2026-03-09] (DroidMonkey Apps, LLC -> KeePassXC Team)
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [45649368 2026-10-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKLM\...\Print\Monitors\HP 5912 Status Monitor: C:\WINDOWS\system32\hpinksts5912LM.dll [331664 2012-06-18] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Native Instruments Komplete Audio Control Panel Autostart.lnk [2023-12-06]
ShortcutTarget: Native Instruments Komplete Audio Control Panel Autostart.lnk -> C:\Program Files\Native Instruments\Komplete Audio Driver\W10_x64\NativeInstrumentsUsbAudioCpl.exe (Thesycon Software Solutions GmbH & Co. KG -> )
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0E58B9ED-16BA-4A97-9197-81F059882D57} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1617408 2026-08-03] (Adobe Inc. -> Adobe Inc.)
Task: {8D91ECAA-8AAC-49E4-9242-29FEBB28F2A3} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [9838504 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {61BE85E9-71AC-4AE7-9270-994CF4C2975C} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [1392792 2026-10-10] (Dell Technologies Inc. -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {F904F686-297B-46F5-9444-E1218996345D} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem124.0.6315.0{B2701284-7F54-48E3-BBF7-05C10C7504B7} => C:\Program Files (x86)\Google\GoogleUpdater\124.0.6315.0\updater.exe [4698400 2024-02-22] (Google LLC -> Google LLC)
Task: {A637E53C-BDD3-4632-BB43-F80E7040503A} - System32\Tasks\KpRm-quarantines\KpRm-quarantines-20250305082134 => \KPRM\tasks-quarantines\kprm-quarantines.exe [2363664 2025-03-05] (kernel-panik -> kernel-panik) [Datei ist nicht signiert]
Task: {45382B46-D433-4C21-8B0B-1942E1C9E845} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194112 2026-10-21] (Adobe Inc. -> Adobe Inc.)
Task: {9D9CCDB4-795E-4617-B43A-53EA3F9E9CEA} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [17017136 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {DA372CBB-AC0E-4B50-8D7D-9F3011F5C9A7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079360 2026-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {A1870812-8F2D-4821-ACA4-B24E51DCF1E0} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [70488 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {47D69780-3AE7-44DC-8A47-4D79573B5D84} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29079360 2026-10-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {97C1665D-6FE6-4E61-BA59-30FB60511B52} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313624 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {E7890F09-8E92-4E05-B19B-FE1C688C8C7C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313624 2026-10-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {F0774E5F-188C-478F-B9AD-6CF904CE56D5} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1365272 2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {35AEF386-4EFB-4420-A9CE-1CF610EB4E9C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {92649708-9BFB-4582-85C9-BD05ACC9B96F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {913B2EFC-BC09-45AD-A6C7-2603CC34E80D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F27DE7AC-43FE-4192-9542-974F54111F6C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {62DF27F7-E598-4CD8-A9F8-2B8031DCCFD9} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1081984 2026-10-30] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {80FE2AEF-DE71-407C-AEF7-ED30CB6366C1} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1348745657-3806938028-2291015601-1004 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1081984 2026-10-30] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {7B378DBC-A83F-40C1-B816-25615841FB1C} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1348745657-3806938028-2291015601-500 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1081984 2026-10-30] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {F65A4BD2-AD6D-4B7E-9E2C-D6A61BAA3BB1} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-10-30] (Mozilla Corporation -> Mozilla Foundation)
Task: {393E471C-2B1E-4D40-BCC4-7B173FF9D942} - System32\Tasks\NWC => C:\Program Files\ASCOMP Software\Synchredible\nwc.exe [1733672 2026-08-05] (ASCOMP Software GmbH -> )
Task: {26917ED3-82CE-4F53-B648-A0257EED143C} - System32\Tasks\SoftLanding\S-1-5-21-1348745657-3806938028-2291015601-1004\SoftLandingRefreshForExpirationTask-{5700acf0-462b-49ad-a692-661d389a9064} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {C6ED42E1-25A0-404E-A8B2-2E0CC24C7FB8} - System32\Tasks\SoftLanding\S-1-5-21-1348745657-3806938028-2291015601-1005\SoftLandingRefreshForExpirationTask-{93d171ab-4d6c-46ad-8b70-164b88b7a3e1} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {5A63552E-FCF3-489F-92B1-E8E486E46D01} - System32\Tasks\Synchredible-Admin => C:\Program Files\ASCOMP Software\Synchredible\synchredible.exe [24045608 2026-09-26] (ASCOMP Software GmbH -> ASCOMP Software GmbH)
Task: {8C4CF17C-D624-4126-AC6E-B5A84CCFFB26} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1348745657-3806938028-2291015601-1004 => C:\Users\USERNAME\AppData\Roaming\Zoom\bin\Zoom.exe [462768 2026-10-25] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\RNIdle Task.job => C:\Windows\System32\drivers\RivetNetworks\Killer\RNIdleTask.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{06473292-d9b3-4f07-ac04-68167729903e}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{06473292-d9b3-4f07-ac04-68167729903e}: [DhcpDomain] speedport.ip
Tcpip\..\Interfaces\{8395086b-f705-4520-92e6-52e22d0b198e}: [DhcpNameServer] 10.73.218.113

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: lxpslbp3.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\hqxbm8gy.default [2025-03-03]
FF ProfilePath: C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lxpslbp3.default-release [2026-11-04]
FF Extension: (Language: English (GB)) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lxpslbp3.default-release\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2026-11-04]
FF Extension: (New Tab) - C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\lxpslbp3.default-release\Extensions\newtab@mozilla.org.xpi [2026-11-04]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-10-13] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems Incorporated -> Adobe Systems)

Edge: 
=======
Edge Profile: C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-09]
Edge Extension: (Google Docs Offline) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-08]
Edge Extension: (Edge relevant text changes) - C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-01-15]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [182776 2026-08-03] (Adobe Inc. -> Adobe Inc.)
S2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [950752 2026-10-21] (Adobe Inc. -> Adobe Inc.)
S2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [9838504 2025-05-24] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [504320 2025-02-21] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13312824 2026-10-09] (Microsoft Corporation -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [101152 2026-09-15] (Dell Technologies Inc. -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [173256 2026-08-29] (Dell Technologies Inc. -> Dell)
S4 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-01-10] (HP Inc. -> HP Inc.)
S3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78240 2024-05-14] (Intel Corporation -> Intel® Corporation)
S4 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2354584 2024-05-14] (Intel Corporation -> Intel)
S4 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2629936 2024-05-14] (Intel Corporation -> Intel)
S4 Killer Provider Data Helper Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerProviderDataHelperService.exe [1088304 2024-05-14] (Intel Corporation -> Intel)
S3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2024-05-14] (Intel Corporation -> Intel® Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-21] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-06-12] (Malwarebytes Inc -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_f278340cb1a37967\Display.NvContainer\NVDisplay.Container.exe [1275016 2024-08-15] (NVIDIA Corporation -> NVIDIA Corporation)
S4 PDF24; C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
S4 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2024-10-18] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
S4 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [933432 2024-10-18] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [173208 2026-10-10] (Dell Technologies Inc. -> Dell Inc.)
S4 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256608 2022-06-29] (Intel Corporation -> Intel Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 LibreOfficeMaintenance; "C:\Program Files\LibreOffice\program\update_service.exe" (Keine Datei)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S1 aehd; C:\WINDOWS\system32\DRIVERS\aehd.sys [403080 2025-11-01] (Google LLC -> Google LLC)
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-09-24] (Microsoft Windows -> Microsoft Corporation)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [31816 2026-09-13] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-18] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 IntcSDW; C:\WINDOWS\System32\DriverStore\FileRepository\intcsdw.inf_amd64_6bb418e467fff79f\IntcSDW.sys [843248 2021-05-30] (Intel Corporation -> Intel(R) Corporation)
S3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [255792 2024-05-14] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-11-04] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-02-26] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-09-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 NativeInstrumentsUsbAudio; C:\WINDOWS\System32\drivers\NativeInstrumentsUsbAudio.sys [405056 2021-09-01] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 NativeInstrumentsUsbAudioks; C:\WINDOWS\System32\drivers\NativeInstrumentsUsbAudioks.sys [53800 2021-09-01] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 nika2dfu; C:\WINDOWS\System32\drivers\nika2dfu.sys [39672 2019-02-04] (Native Instruments GmbH -> Native Instruments GmbH)
R3 RTKSdWHwCodec; C:\WINDOWS\System32\DriverStore\FileRepository\rtksdwhwcodec_dell.inf_amd64_7337addfc194ab97\RTKSdWHwCodec.sys [514960 2023-05-22] (Realtek Semiconductor Corp. -> Realtek)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174416 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49024 2022-04-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [667840 2026-07-10] (Microsoft Windows Hardware Compatibility Publisher -> AM Crypto)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WiManH; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_ed5a224638687261\WiManH\WiManH.sys [184248 2024-08-12] (Intel Corporation -> Intel Corporation)
S1 epp; \??\C:\EEK\bin64\epp.sys (Keine Datei)

==================== SvcHost (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-11-04 12:30 - 2026-11-04 12:30 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-11-04 12:29 - 2026-11-04 12:29 - 002457088 _____ (Farbar) C:\Users\Admin\Desktop\FRST64.exe
2026-11-04 12:27 - 2026-11-04 12:30 - 000000000 ___HD C:\$WinREAgent
2026-11-04 12:26 - 2026-11-04 12:26 - 000710486 _____ C:\WINDOWS\system32\perfh007.dat
2026-11-04 12:26 - 2026-11-04 12:26 - 000151408 _____ C:\WINDOWS\system32\perfc007.dat
2026-11-04 12:25 - 2026-11-04 12:26 - 000026515 _____ C:\Users\Admin\Desktop\Addition.txt
2026-11-04 12:24 - 2026-11-04 12:31 - 000032287 _____ C:\Users\Admin\Desktop\FRST.txt
2026-10-25 15:39 - 2026-10-25 15:39 - 000004256 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1348745657-3806938028-2291015601-1004
2026-10-25 15:39 - 2026-10-25 15:39 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2026-10-24 08:27 - 2026-10-24 08:27 - 000003950 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2026-10-24 08:01 - 2026-10-24 08:01 - 000008580 _____ C:\WINDOWS\system32\SRUDB_932029ac00e94fc793c26896ce81b752.INTEG.RAW
2026-10-23 11:00 - 2026-10-23 11:00 - 000008425 _____ C:\WINDOWS\system32\SRUDB_59c86ab178124a2aa86768fc81ed6b3c.INTEG.RAW
2026-10-23 08:05 - 2026-10-23 08:05 - 000008581 _____ C:\WINDOWS\system32\SRUDB_8948357ce36548e6b9b301a639c30bd1.INTEG.RAW
2026-10-22 11:00 - 2026-10-22 11:00 - 000008581 _____ C:\WINDOWS\system32\SRUDB_f117b87a483b418eb0ede2281e5ec4c8.INTEG.RAW
2026-10-22 07:53 - 2026-10-22 07:53 - 000008580 _____ C:\WINDOWS\system32\SRUDB_f298a4f33f7c45f9b4fc989df625f933.INTEG.RAW
2026-10-21 13:20 - 2026-10-21 13:20 - 006500712 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-21 13:14 - 2026-10-21 13:14 - 001664082 _____ (Igor Pavlov) C:\Users\Admin\Downloads\7z2604-x64.exe
2026-10-21 13:12 - 2026-10-21 13:13 - 000000000 ___HD C:\adobeTemp
2026-10-21 13:12 - 2026-10-21 13:12 - 000001176 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SpywareBlaster.lnk
2026-10-21 13:11 - 2026-10-21 13:12 - 000000000 ____D C:\Program Files (x86)\SpywareBlaster
2026-10-21 13:11 - 2026-10-21 13:11 - 004432784 _____ (BrightFort LLC ) C:\Users\Admin\Downloads\spywareblastersetup60.exe
2026-10-21 13:11 - 2026-10-21 13:11 - 000001404 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2026-10-21 13:11 - 2026-10-21 13:11 - 000000000 ____D C:\Users\Admin\AppData\LocalLow\com.adobe.crashreporter
2026-10-21 13:11 - 2026-10-21 13:11 - 000000000 ____D C:\Users\Admin\AppData\Local\Programs\Common
2026-10-21 12:49 - 2026-10-21 12:49 - 000008549 _____ C:\WINDOWS\system32\SRUDB_0966b0f40f064f27958cf4ad94776219.INTEG.RAW
2026-10-21 07:28 - 2026-10-21 07:28 - 000008579 _____ C:\WINDOWS\system32\SRUDB_ca10bcb92d7a41c4933d6562edeb7842.INTEG.RAW
2026-10-20 11:00 - 2026-10-20 11:00 - 000008536 _____ C:\WINDOWS\system32\SRUDB_93429856482340109a070a265a75d995.INTEG.RAW
2026-10-20 08:07 - 2026-10-20 08:07 - 000008581 _____ C:\WINDOWS\system32\SRUDB_59e013e86bdc48698734e8a4d5a347ed.INTEG.RAW
2026-10-19 12:56 - 2026-10-19 12:56 - 000008580 _____ C:\WINDOWS\system32\SRUDB_75baede98a994c7d9cb1ab320977ecd3.INTEG.RAW
2026-10-18 11:00 - 2026-10-18 11:00 - 000008539 _____ C:\WINDOWS\system32\SRUDB_d577aa4fcdf54c28b175f4348faec74f.INTEG.RAW
2026-10-18 09:19 - 2026-10-18 09:19 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-10-18 09:19 - 2026-10-18 09:19 - 000002146 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-10-18 09:08 - 2026-10-18 09:08 - 000008581 _____ C:\WINDOWS\system32\SRUDB_96f8973be888441fbaedbc9d8fe08212.INTEG.RAW
2026-10-17 11:18 - 2026-10-17 11:19 - 000008581 _____ C:\WINDOWS\system32\SRUDB_2cfc5c3cb63445c496963938969432a7.INTEG.RAW
2026-10-17 07:38 - 2026-10-17 07:38 - 000008580 _____ C:\WINDOWS\system32\SRUDB_62c976e462164c4d8f6e9095e489fe93.INTEG.RAW
2026-10-16 11:00 - 2026-10-16 11:00 - 000025177 _____ C:\WINDOWS\system32\SRUDB_ae79fb73334d408287c6e5f1af6a1700.INTEG.RAW
2026-10-16 07:00 - 2026-10-16 07:00 - 000008581 _____ C:\WINDOWS\system32\SRUDB_0ce6a18f380045399a6b80f41c4a937c.INTEG.RAW
2026-10-15 11:00 - 2026-10-15 11:00 - 000008581 _____ C:\WINDOWS\system32\SRUDB_2491205122ff4631b0db7189bb3730f5.INTEG.RAW
2026-10-15 07:50 - 2026-10-15 07:50 - 000008503 _____ C:\WINDOWS\system32\SRUDB_f3731dfce4c04412902aa126f5c54589.INTEG.RAW
2026-10-14 12:30 - 2026-10-14 12:30 - 000057060 _____ C:\WINDOWS\system32\SRUDB_5254c461d2184f82b69cb1cf10ba941e.INTEG.RAW
2026-10-14 05:05 - 2026-10-14 05:05 - 000008580 _____ C:\WINDOWS\system32\SRUDB_3e7d40c8a37648e583d0be0213243f5b.INTEG.RAW
2026-10-13 11:00 - 2026-10-13 11:00 - 000027655 _____ C:\WINDOWS\system32\SRUDB_f282685c0e7c431f8d3b9f09c843d42c.INTEG.RAW
2026-10-13 08:00 - 2026-10-13 08:00 - 000008580 _____ C:\WINDOWS\system32\SRUDB_0d30cb53682a4dd98f7d309f4c305df1.INTEG.RAW
2026-10-12 14:03 - 2026-10-12 14:03 - 000008580 _____ C:\WINDOWS\system32\SRUDB_9761e563ed0148009ce55c369e9a2745.INTEG.RAW
2026-10-12 07:48 - 2026-10-12 07:48 - 000008504 _____ C:\WINDOWS\system32\SRUDB_d5ed3d75a5294e429b05770660e060f6.INTEG.RAW
2026-10-11 10:42 - 2026-10-11 10:42 - 000008581 _____ C:\WINDOWS\system32\SRUDB_db98bc63d3144b4b9436fd53c7887520.INTEG.RAW
2026-10-10 11:00 - 2026-10-10 11:00 - 000008472 _____ C:\WINDOWS\system32\SRUDB_14c41f07b9874dcdb27692f0fa8abc65.INTEG.RAW
2026-10-10 06:31 - 2026-10-10 06:31 - 000008581 _____ C:\WINDOWS\system32\SRUDB_50c3ef6f7db94ee589c3103c9c82a327.INTEG.RAW
2026-10-09 11:35 - 2026-10-09 11:35 - 000039406 _____ C:\WINDOWS\system32\SRUDB_40dfc88014a44982a2d643d0b24564d5.INTEG.RAW
2026-10-09 06:54 - 2026-10-09 06:54 - 000008504 _____ C:\WINDOWS\system32\SRUDB_aa8b718971df494f87492c701f273a7e.INTEG.RAW
2026-10-08 11:00 - 2026-10-08 11:00 - 000008581 _____ C:\WINDOWS\system32\SRUDB_3ca0c09f686f4c66b717ed6f1c7ecc3f.INTEG.RAW
2026-10-08 07:58 - 2026-10-08 07:58 - 000008580 _____ C:\WINDOWS\system32\SRUDB_11dd43c084bf40c19f96efdd783d108e.INTEG.RAW
2026-10-07 12:48 - 2026-10-07 12:48 - 000008504 _____ C:\WINDOWS\system32\SRUDB_302550eccefc489994ee5c8487aa3805.INTEG.RAW
2026-10-07 06:56 - 2026-10-07 06:56 - 000008581 _____ C:\WINDOWS\system32\SRUDB_fb3a404257994569b709542b8f35ac23.INTEG.RAW
2026-10-06 11:00 - 2026-10-06 11:00 - 000008581 _____ C:\WINDOWS\system32\SRUDB_3f848079129a4f62bf99390bf10996e3.INTEG.RAW
2026-10-06 07:41 - 2026-10-06 07:41 - 000008581 _____ C:\WINDOWS\system32\SRUDB_f2b4ca33d73d4bd1b7d50d0393810d19.INTEG.RAW
2026-10-05 13:53 - 2026-10-05 13:53 - 000008581 _____ C:\WINDOWS\system32\SRUDB_c757fb15583142ad89b18a95ba1b5850.INTEG.RAW

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-11-04 12:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-04 12:31 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-04 12:30 - 2025-01-14 13:20 - 000000000 ____D C:\FRST
2026-11-04 12:29 - 2025-01-15 09:45 - 000000000 ____D C:\Users\Admin\AppData\Local\KeePassXC
2026-11-04 12:29 - 2025-01-15 09:41 - 000000000 ____D C:\Users\Admin\AppData\Local\Malwarebytes
2026-11-04 12:29 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-04 12:26 - 2024-12-05 18:45 - 001637736 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-04 12:26 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-11-04 12:22 - 2025-03-04 11:40 - 000000000 ____D C:\EEK
2026-11-04 12:22 - 2022-06-04 09:04 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-11-04 12:19 - 2025-01-15 09:41 - 000000000 __SHD C:\Users\Admin\IntelGraphicsProfiles
2026-11-04 12:19 - 2024-12-05 18:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-04 12:19 - 2024-12-05 18:40 - 000182062 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-11-04 12:19 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-04 12:19 - 2022-06-04 09:01 - 000000000 ____D C:\Intel
2026-11-04 12:19 - 2022-06-04 08:58 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-04 12:19 - 2022-06-04 08:58 - 000000000 ____D C:\ProgramData\Goodix
2026-11-04 12:19 - 2022-06-04 06:14 - 000012288 ___SH C:\DumpStack.log.tmp
2026-11-04 12:18 - 2024-04-01 08:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-11-04 12:12 - 2025-01-14 19:39 - 000000000 ____D C:\Users\USERNAME\AppData\Local\Malwarebytes
2026-11-04 12:07 - 2025-01-15 12:22 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\Microsoft\Excel
2026-11-04 12:06 - 2025-01-14 20:00 - 000000000 ____D C:\Users\USERNAME\AppData\Local\KeePassXC
2026-11-04 11:12 - 2022-08-13 15:25 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2026-11-04 08:57 - 2025-07-01 13:21 - 000006505 _____ C:\WINDOWS\BRRBCOM.INI
2026-11-04 08:41 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-04 08:26 - 2025-09-04 15:24 - 000003832 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{0EBC4909-43D9-495A-A86E-80A1A8DE950B}
2026-11-04 08:26 - 2025-09-04 15:24 - 000003760 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{957457CF-B085-4A56-8F9E-DCCA19106150}
2026-11-04 08:17 - 2025-01-14 19:39 - 000000000 __SHD C:\Users\USERNAME\IntelGraphicsProfiles
2026-11-02 06:57 - 2022-06-04 06:15 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-11-02 06:51 - 2024-12-05 18:37 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-02 06:41 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-10-31 20:31 - 2022-06-04 09:06 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-31 20:31 - 2022-06-04 09:04 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-10-31 08:13 - 2022-06-04 09:06 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-10-31 08:10 - 2022-06-10 19:14 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-10-30 07:24 - 2026-08-23 08:23 - 000002129 _____ C:\Users\USERNAME\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-30 07:24 - 2024-12-05 18:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-10-30 07:24 - 2022-06-04 09:04 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-29 08:38 - 2024-12-05 18:37 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-10-28 12:41 - 2025-01-14 19:39 - 000000000 ____D C:\Users\USERNAME\AppData\Local\D3DSCache
2026-10-28 11:59 - 2022-06-04 06:15 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-26 18:01 - 2025-01-14 19:39 - 000000000 ____D C:\Users\USERNAME\AppData\Local\Packages
2026-10-26 07:12 - 2025-07-01 16:40 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\NAPS2
2026-10-25 15:39 - 2025-06-03 12:22 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\Zoom
2026-10-25 10:15 - 2025-01-14 20:00 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\KeePassXC
2026-10-24 19:25 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-10-24 08:26 - 2025-10-26 18:12 - 000000000 ____D C:\Program Files (x86)\Dell
2026-10-21 16:50 - 2025-01-15 12:22 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\Microsoft\Office
2026-10-21 13:26 - 2025-01-14 19:39 - 000000000 ____D C:\Users\USERNAME
2026-10-21 13:20 - 2024-12-05 16:56 - 000000000 ___DC C:\WINDOWS\Panther
2026-10-21 13:18 - 2026-08-06 11:25 - 000005405 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-21 13:18 - 2026-03-02 10:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASCOMP Software
2026-10-21 13:17 - 2022-06-05 10:04 - 000000000 ____D C:\ProgramData\Package Cache
2026-10-21 13:15 - 2022-06-04 09:10 - 000000000 ____D C:\Program Files\LibreOffice
2026-10-21 13:14 - 2025-05-06 16:19 - 000000000 ____D C:\Users\Admin\AppData\Roaming\FileZilla
2026-10-21 13:14 - 2025-03-03 15:14 - 000000000 ____D C:\Users\Admin\AppData\Local\Adobe
2026-10-21 13:13 - 2025-10-28 09:17 - 000000000 ____D C:\ProgramData\TEMP
2026-10-21 13:13 - 2025-08-08 11:35 - 000000000 ____D C:\Users\Admin\AppData\Roaming\NAPS2
2026-10-21 13:13 - 2025-07-01 16:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NAPS2
2026-10-21 13:13 - 2025-07-01 16:40 - 000000000 ____D C:\Program Files\NAPS2
2026-10-21 13:12 - 2026-09-03 13:38 - 000000000 ____D C:\Users\Admin\AppData\Roaming\vlc
2026-10-21 13:12 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2026-10-21 13:12 - 2022-06-04 09:08 - 000000000 ____D C:\Program Files\Adobe
2026-10-21 13:11 - 2025-01-15 09:41 - 000000000 ____D C:\Users\Admin\AppData\Local\D3DSCache
2026-10-21 13:11 - 2022-07-09 07:15 - 000000000 ____D C:\Program Files (x86)\Adobe
2026-10-21 13:11 - 2022-06-04 09:08 - 000000000 ____D C:\Program Files\Common Files\Adobe
2026-10-21 13:10 - 2026-09-03 13:33 - 000002129 _____ C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-21 13:09 - 2025-03-03 15:14 - 000000000 ____D C:\Users\Admin\AppData\Roaming\com.adobe.dunamis
2026-10-21 13:09 - 2025-01-15 09:41 - 000000000 ____D C:\Users\Admin\AppData\Local\Packages
2026-10-21 13:09 - 2022-06-04 08:58 - 000000000 ____D C:\ProgramData\Packages
2026-10-18 09:31 - 2025-01-14 19:51 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\com.adobe.dunamis
2026-10-16 19:13 - 2022-06-05 09:49 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-16 14:50 - 2025-01-21 11:15 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\Microsoft\Word
2026-10-15 08:03 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-14 19:16 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-14 19:16 - 2024-04-01 17:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-14 19:16 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-14 09:21 - 2026-05-10 09:22 - 000000000 ____D C:\Users\USERNAME\AppData\Roaming\TIPP10
2026-10-14 08:15 - 2022-06-05 16:27 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 08:12 - 2022-06-05 16:27 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-14 05:24 - 2024-12-05 18:42 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-05 14:06 - 2025-10-08 15:09 - 000000000 ____D C:\Users\USERNAME\AppData\Local\Spotware

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2025-05-06 16:18 - 2025-08-08 12:58 - 000000205 _____ () C:\Users\Admin\AppData\Local\oobelibMkey.log
2025-10-26 15:38 - 2025-10-26 15:38 - 000007640 _____ () C:\Users\Admin\AppData\Local\Resmon.ResmonCfg
2025-08-08 11:45 - 2025-08-08 11:45 - 000000000 _____ () C:\Users\Admin\AppData\Local\settingData.dat

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-11-2026
durchgeführt von Admin (04-11-2026 12:32:22)
Gestartet von C:\Users\Admin\Desktop
Microsoft Windows 11 Home Version 26H2 26300.9711 (X64) (2024-12-05 17:42:51)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Admin (S-1-5-21-1348745657-3806938028-2291015601-1005 - Administrators - Enabled) => C:\Users\Admin
Administrator (S-1-5-21-1348745657-3806938028-2291015601-500 - Administrators - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-1348745657-3806938028-2291015601-503 - Limited - Disabled)
Gast (S-1-5-21-1348745657-3806938028-2291015601-501 - Limited - Disabled)
NAME (S-1-5-21-1348745657-3806938028-2291015601-1004 - Limited - Enabled) => C:\Users\NAME
WDAGUtilityAccount (S-1-5-21-1348745657-3806938028-2291015601-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 26.04 (x64) (HKLM\...\7-Zip) (Version: 26.04 - Igor Pavlov)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 26.002.22031 - Adobe)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 6.11.0.478.6 - Adobe Inc.)
Adobe Genuine Service (HKLM-x32\...\AdobeGenuineService) (Version: 9.0.0.29 - Adobe Inc.)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601180}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
AppLogLibSetup (HKLM-x32\...\{52FB0C8F-DF05-4C61-AEB6-18C55F8C385F}) (Version: 1.0.3.0 - Brother Industries Ltd.) Hidden
BrLauncher (HKLM-x32\...\{9D02508E-D7FF-4DC4-B423-B4C2AD42FAC5}) (Version: 2.0.27.0 - Brother Industries Ltd.) Hidden
BrLogRx (HKLM-x32\...\{190861E7-09C5-42D8-BB4B-0AFB234BCFC1}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother PCFax Driver (HKLM-x32\...\{79262B43-9E15-4732-A034-BFD29D9BD077}) (Version: 1.4.1.0 - Brother Industries Ltd.) Hidden
Brother Port Driver (HKLM-x32\...\{1BBD4E3E-6FF5-4F20-81C7-B31247CD8C61}) (Version: 1.0.3.1 - Brother Industries Ltd.) Hidden
Brother Printer Driver (HKLM-x32\...\{3D44B9C0-A8DB-44EA-8116-2C9175761AB9}) (Version: 1.1.0.0 - Brother Industries Ltd.) Hidden
Brother Scanner Driver (HKLM-x32\...\{0ADE92BE-F42E-4F37-9578-595291FA18E4}) (Version: 1.0.11.1 - Brother Industries Ltd.) Hidden
BrSupportTools (HKLM-x32\...\{8B58D1A2-DFAD-4069-A0C0-7FD272B68BB3}) (Version: 1.0.30.0 - Brother Industries Ltd.) Hidden
Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 156.0.4314.58 - Microsoft Corporation)
cTrader 5.10.20.54346 (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\abb70432efbee65d18af69e79fe8efe1) (Version: 5.10.20.54346 - Spotware Systems Ltd.)
Dell SupportAssist (HKLM\...\{5F4C0C58-2D8D-4119-B378-CCC6BC2F9B68}) (Version: 5.2.5.2983 - Dell Inc.)
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM\...\{EA329386-9680-4518-B93D-1A5654C67F47}) (Version: 5.5.16.3 - Dell Inc.) Hidden
Dell SupportAssist OS Recovery Plugin for Dell Update (HKLM-x32\...\{454ee07e-5b78-4cbe-ada0-ca0733b60af8}) (Version: 5.5.16.3 - Dell Inc.)
Dynamic Application Loader Host Interface Service (HKLM\...\{AAA4B93F-43C9-405F-8599-4BD85504D9F6}) (Version: 1.0.0.0 - Intel Corporation) Hidden
FFmpeg (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\Gyan.FFmpeg_Microsoft.Winget.Source_8wekyb3d8bbwe) (Version: 7.1 - Gyan)
FileZilla 3.71.1 (HKLM-x32\...\FileZilla Client) (Version: 3.71.1 - Tim Kosse)
Goodix Fingerprint Driver (HKLM\...\{60FAB781-18F2-4D2B-A8E7-B3AADD327955}_is1) (Version: 3.0.37.300 - Goodix, Inc.)
HowToGuide (HKLM-x32\...\{36580EEB-4EDF-4880-BBD4-097E2C645ECD}) (Version: 1.0.1.0 - Brother Industries Ltd.) Hidden
HttpToUsbBridge (HKLM-x32\...\{F7DF0BDA-B809-49B5-BE37-227098F717C1}) (Version: 2.6.121.1 - Brother Industries Ltd.)
Intel(R) Arc Software & Drivers (HKLM\...\Intel(R) Arc Software & Drivers) (Version: 1.0.916.8 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{31A96CE0-F2B5-4541-BFD7-054791D3A0A1}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2514.7.16.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{73914B9D-2CC5-433B-83DE-FCE8A06C3F1C}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{FC097512-87B3-4601-95CA-2D3A7BBC9349}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{7D1D9DBF-5D4F-4A0F-8F75-0F08AB938331}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel® Integrated Sensor Solution (HKLM-x32\...\{bbf34494-d6d8-4f06-a7e2-cc62f92c9e1c}) (Version: 3.10.100.4140 - Intel Corporation)
ISS_Drivers_x64 (HKLM\...\{C5C7D23C-EF82-4EA8-8D77-D4E5346E5A61}) (Version: 3.10.100.4140 - Intel Corporation) Hidden
KeePassXC (HKLM\...\{638CBFF8-D709-4E43-8B2B-AB97A8E0F2ED}) (Version: 2.7.12 - KeePassXC Team)
LibreOffice 26.2.6.3 (HKLM\...\{107D2912-2D84-43A9-BA30-C441CEA02E27}) (Version: 26.2.6.3 - The Document Foundation)
Malwarebytes version 5.7.3.376 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.7.3.376 - Malwarebytes)
Microsoft .NET 8.0.12 - Windows Server Hosting (HKLM-x32\...\{218673b6-7337-4d49-bc41-b4ccb7e34802}) (Version: 8.0.12.24603 - Microsoft Corporation)
Microsoft .NET Host - 10.0.10 (x64) (HKLM\...\{8A8CC49F-7D1E-45DC-B7B5-35FF61A2C25E}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Host - 6.0.13 (x64) (HKLM\...\{9511601E-12FF-4972-BF9C-2992F2CA5A32}) (Version: 48.55.52137 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.12 (x86) (HKLM-x32\...\{874D52B8-B1F4-4D04-8249-8AC6E698CCF5}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host - 8.0.19 (x64) (HKLM\...\{B84443A1-BE1B-4C5E-B834-E12133604B12}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.10 (x64) (HKLM\...\{DA493AF2-5A21-4D85-BB57-757D7525EB73}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 6.0.13 (x64) (HKLM\...\{8CDACE3C-0064-4A17-A02C-49F831D5F73A}) (Version: 48.55.52137 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x64) (HKLM\...\{C9C872D5-3CA9-4E0E-AF90-1B85325F9243}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.12 (x86) (HKLM-x32\...\{9EC250F3-BC02-4B35-8395-E03A02CD9255}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.19 (x64) (HKLM\...\{69A17DA9-300A-49B9-97F1-1EB7424570DE}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 8.0.3 (x64) (HKLM\...\{E79D3B29-C9A2-42D5-8703-85B73C452D8B}) (Version: 64.12.10343 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.10 (x64) (HKLM\...\{441FCDB0-A03A-4130-A1D5-FFD8C53CFF6B}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 6.0.13 (x64) (HKLM\...\{5F0DB006-2AE3-4D36-8077-65247FD687D4}) (Version: 48.55.52137 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x64) (HKLM\...\{1E606649-7E56-452F-8AC4-495C70D1E341}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.12 (x86) (HKLM-x32\...\{272C9AEF-D02F-4955-8C11-D9F9198A58EC}) (Version: 64.48.26165 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.19 (x64) (HKLM\...\{B9F7A454-0CCD-410C-A3E0-D1AAC300F150}) (Version: 64.76.37566 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 8.0.3 (x64) (HKLM\...\{D98088DE-EDA4-4E1A-BF0F-ED9A9145CC70}) (Version: 64.12.10343 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 6.0.13 - Shared Framework (x64) (HKLM-x32\...\{373915e3-2fa6-41a5-80e3-49fe1115263d}) (Version: 6.0.13.22580 - Microsoft Corporation)
Microsoft ASP.NET Core 6.0.13 Shared Framework (x64) (HKLM\...\{A6500837-F3BE-357E-9A21-6A78D098659F}) (Version: 6.0.13.22580 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Hosting Bundle Options (HKLM-x32\...\{8C069910-4E69-349B-8840-56F774C92B87}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x64) (HKLM\...\{2B76FF3A-309D-3050-9C41-C98FB593258D}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft ASP.NET Core 8.0.12 Shared Framework (x86) (HKLM-x32\...\{0770B9E3-CA2C-37B8-AD77-7336654A2466}) (Version: 8.0.12.24603 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft Office Home and Student 2019 - de-de (HKLM\...\HomeStudent2019Retail - de-de) (Version: 16.0.19127.20860 - Microsoft Corporation)
Microsoft Office Home and Student 2019 - en-gb (HKLM\...\HomeStudent2019Retail - en-gb) (Version: 16.0.19127.20860 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.40664 (HKLM-x32\...\{D401961D-3A20-3AC7-943B-6139D5BD490A}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.40664 (HKLM-x32\...\{8122DAB1-ED4D-3676-BB0A-CA368196543E}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.51.36247 (HKLM-x32\...\{582BA719-E6F1-4651-A873-049E6A0DDDAF}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.51.36247 (HKLM-x32\...\{4BF7CE18-E151-449F-9190-6CDBED0BB4A2}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual C++ v14 Redistributable (x86) - 14.51.36247 (HKLM-x32\...\{9a6ce18d-11c0-4452-aa35-9f2b8437c686}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version:  - )
Microsoft Windows Desktop Runtime - 10.0.10 (x64) (HKLM\...\{F0BCFB2E-4878-4F6E-BD5D-3ABFF264829E}) (Version: 80.40.55332 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.13 (x64) (HKLM\...\{8484730A-68A4-4C63-93B4-52628D3B488D}) (Version: 48.55.53270 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 6.0.13 (x64) (HKLM-x32\...\{96cf40b0-81d6-43ed-ad0e-611e67899196}) (Version: 6.0.13.32001 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{71e8d0d2-fc5e-4344-b556-0110ef50b6b9}) (Version: 8.0.12.34404 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.12 (x86) (HKLM-x32\...\{CF203BF4-13DE-4A81-8BC8-31B3F4A2CB32}) (Version: 64.48.26178 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM\...\{A6EA542C-884C-4FE7-89E4-8C28E14B601C}) (Version: 64.76.37602 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.19 (x64) (HKLM-x32\...\{6b2575e2-0248-44c3-93f3-2eba040331ed}) (Version: 8.0.19.35118 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 8.0.3 (x64) (HKLM\...\{CE0906F2-6C11-4A2B-880B-AFB92474B13E}) (Version: 64.12.10377 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 8.0.3 (x64) (HKLM-x32\...\{fb8f4657-2b60-4298-b83e-aaccb07ef793}) (Version: 8.0.3.33416 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.10 (x64) (HKLM-x32\...\{866BECDA-F284-473A-9E84-0CCE816BF06F}) (Version: 10.0.10.50000 - Microsoft Corporation)
Microsoft_VC80_CRT_x86 (HKLM-x32\...\{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}) (Version: 8.0.50727.4053 - Adobe) Hidden
Microsoft_VC90_CRT_x86 (HKLM-x32\...\{08D2E121-7F6A-43EB-97FD-629B44903403}) (Version: 1.00.0000 - Adobe) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 159.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 91.10.0 - Mozilla)
Mozilla Thunderbird ESR (x64 de) (HKLM\...\Mozilla Thunderbird 153.6.0 ESR (x64 de)) (Version: 153.6.0 - Mozilla)
NAPS2 (HKLM\...\NAPS2 - Not Another PDF Scanner_is1) (Version: 8.5.1 - NAPS2 Software)
Native Instruments Komplete Audio Driver v5.22.0 (HKLM-x32\...\Software_NativeInstruments_NativeInstruments_UsbAudio_Driver_Setup) (Version: 5.22.0 - Native Instruments)
NetworkRepairTool (HKLM-x32\...\{A195CE5F-17C2-4BC1-AFE1-665695F8FF2E}) (Version: 1.2.23.0 - Brother Industries, Ltd.) Hidden
NVIDIA Grafiktreiber 556.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 556.12 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19127.20800 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.19029.20208 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.19127.20800 - Microsoft Corporation) Hidden
PC-FAXReceive (HKLM-x32\...\{56D227E7-9A8E-4EFC-8401-1FFFF7DBA13B}) (Version: 1.8.421.0 - Brother Industries, Ltd.) Hidden
PCFaxTx (HKLM-x32\...\{4A924D32-17F1-4EFC-B2D8-BBCF1BC6E26C}) (Version: 3.7.15.1 - Brother Industries Ltd.) Hidden
PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden
PDF24 Creator 11.30.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.30.1 - Geek Software GmbH)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 10.0.220.1 - Realtek Semiconductor Corp.)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.9.0.0 - Samsung Electronics Co., Ltd.)
ScannerUtilityInstaller (HKLM-x32\...\{D94DD953-F38C-4220-A17C-9217106510A6}) (Version: 1.20.0.1 - Brother) Hidden
Smart Switch Service (HKLM\...\{E838D58B-DD5D-43C8-B5E5-716F1F830A6E}) (Version: 5.0.33.0 - Samsung Electronics Co., Ltd.)
SoftwareUpdateNotification (HKLM-x32\...\{3D1AD910-B82B-4635-B1C3-0CEF9F6F3D34}) (Version: 1.0.21.0 - Brother Industries, Ltd.) Hidden
SpywareBlaster 6.0 (HKLM-x32\...\SpywareBlaster_is1) (Version: 6.0.0 - BrightFort LLC)
Stacher7 (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\Stacher7) (Version: 7.1.8 - Stacher)
StatusMonitor (HKLM-x32\...\{DA6177CF-6DA8-4182-A649-BA63892B1FBC}) (Version: 1.43.0.0 - Brother Industries, Ltd.) Hidden
Synchredible (HKLM\...\Synchredible_is1) (Version: 9.1.1.9 - ASCOMP Software GmbH)
Taxpool-Buchhalter EÜR/2026/20.080000 (HKLM\...\Taxpool-Buchhalter EÜR) (Version: 2026/20.080000 - psynetic Software)
TIPP10 Version 2.1.0 (HKLM-x32\...\TIPP10_is1) (Version:  - (c) 2006-2011, Tom Thielicke IT Solutions)
UsbRepairTool (HKLM-x32\...\{F8762A81-32B5-4144-9F3C-9274F515A651}) (Version: 1.4.0.0 - Brother Industries, Ltd.) Hidden
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.26.29 - AM Crypto)
vibe (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\vibe) (Version: 3.0.5 - com)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.24 - VideoLAN)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
yt-dlp (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\yt-dlp.yt-dlp_Microsoft.Winget.Source_8wekyb3d8bbwe) (Version: 2025.01.26 - yt-dlp)
Zoom Workplace (HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\ZoomUMX) (Version: 6.6.6 (19875) - Zoom Communications, Inc.)
Zoom Workplace (HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\ZoomUMX) (Version: 6.3.5 (54827) - Zoom Communications, Inc.)

Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-10] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-10] ()
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2026-10-18] ()
Adobe Native Client -> C:\Program Files\Common Files\Adobe\Adobe OS Extension [2026-09-24] ()
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-13] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.37.0_x64__8j3eq9eme6ctt [2023-10-14] (INTEL CORP)
Dell SupportAssist for PCs -> C:\Program Files\WindowsApps\DellInc.DellSupportAssistforPCs_5.2.5.0_x64__htrsf667h5kn2 [2026-10-24] (Dell Inc)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-11] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1377.316.0_x86__8wekyb3d8bbwe [2026-10-11] (Microsoft Corporation)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1524.510.0_x64__rh07ty8m5nkag [2024-09-12] (INTEL CORP) [Startup Task]
Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-10-16] ()
 Malwarebytes Anti-Malware  -> C:\Program Files\Malwarebytes\Anti-Malware [2026-10-21] ()
Microsoft Ink Handwriting Recognition (de-DE) -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.1377.316.0_x64__8wekyb3d8bbwe [2026-10-14] (Microsoft Corporation)
Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-10-21] ()
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-07] (NVIDIA Corp.)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-10-21] ()
Waves MaxxAudio Pro for Dell 2020 -> C:\Program Files\WindowsApps\WavesAudio.MaxxAudioProforDell2020_3.0.98.0_x64__fh4rh281wavaa [2022-10-25] (Waves Audio)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.5.1.0_x64__8wekyb3d8bbwe [2026-09-25] (Microsoft Corp.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1348745657-3806938028-2291015601-1005_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-1348745657-3806938028-2291015601-1005_Classes\CLSID\{2F81B25E-7507-4844-BFF2-77D2CC24CED4}\localserver32 -> C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe (Adobe Inc. -> Adobe Inc.)
CustomCLSID: HKU\S-1-5-21-1348745657-3806938028-2291015601-1005_Classes\CLSID\{378F4D34-BB8C-4755-B8D6-42029E9C65A3}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-1348745657-3806938028-2291015601-1005_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
ShellIconOverlayIdentifiers: [   AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-10-21] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-10-21] (Adobe Inc. -> )
ShellIconOverlayIdentifiers: [   AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-10-21] (Adobe Inc. -> )
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-10-21] (Adobe Inc. -> )
ContextMenuHandlers1: [Adobe.Acrobat.ContextMenu] -> {A6595CD1-BF77-430A-A452-18696685F7C7} => C:\Program Files\Adobe\Acrobat DC\Acrobat Elements\ContextMenuShim64.dll [2026-06-08] (Adobe Inc. -> Adobe Systems Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-09] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_f278340cb1a37967\nvshext.dll [2024-08-15] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-05] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [AccExt] -> {2A118EB5-5797-4F5E-8B3D-F4ECBA3C98E4} => C:\Program Files (x86)\Common Files\Adobe\CoreSyncExtension\CoreSync_x64.dll [2026-10-21] (Adobe Inc. -> )
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-06-09] (Malwarebytes Inc -> Malwarebytes)

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2025-07-01 13:24 - 2019-09-26 15:19 - 000121344 _____ () [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll
2025-09-29 22:10 - 2025-09-29 22:10 - 000030720 _____ (Adobe Systems Inc.) [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\locale\de_de\Acrobat Elements\ContextMenuShim64.deu
2024-12-28 08:00 - 2026-10-05 15:00 - 000101888 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:535FBEA2 [254]
AlternateDataStreams: C:\ProgramData\TEMP:5C321E34 [136]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-09-15] (Microsoft Corporation -> Microsoft Corporation)

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

==================== Network ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

DNS Servers: 192.168.2.1
 ist aktiviert.

Network Binding:
=============
WLAN: Killer(R) Wi-Fi 6 AX1650s 160MHz Wireless Network Adapter (201D2W) -> Netwtw10.sys

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\Control Panel\Desktop\\Wallpaper -> 
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)


==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

MSCONFIG\Services: AdobeARMservice => 2
MSCONFIG\Services: AdobeUpdateService => 2
MSCONFIG\Services: AGMService => 2
MSCONFIG\Services: AGSService => 2
MSCONFIG\Services: BrYNSvc => 2
MSCONFIG\Services: DellClientManagementService => 2
MSCONFIG\Services: DellTechHub => 2
MSCONFIG\Services: GoogleChromeElevationService => 3
MSCONFIG\Services: GoogleUpdaterInternalService124.0.6315.0 => 2
MSCONFIG\Services: GoogleUpdaterService124.0.6315.0 => 2
MSCONFIG\Services: gupdate => 2
MSCONFIG\Services: gupdatem => 3
MSCONFIG\Services: HPPrintScanDoctorService => 2
MSCONFIG\Services: Killer Analytics Service => 2
MSCONFIG\Services: Killer Network Service => 2
MSCONFIG\Services: Killer Provider Data Helper Service => 2
MSCONFIG\Services: Lexware API Service => 2
MSCONFIG\Services: Lexware internal API Service => 2
MSCONFIG\Services: Lexware WebApps Service => 2
MSCONFIG\Services: Lexware_Update_Service => 2
MSCONFIG\Services: LibreOfficeMaintenance => 3
MSCONFIG\Services: MozillaMaintenance => 3
MSCONFIG\Services: PDF24 => 2
MSCONFIG\Services: ProtonVPN Service => 3
MSCONFIG\Services: ProtonVPN Update Service => 3
MSCONFIG\Services: ProtonVPN WireGuard => 3
MSCONFIG\Services: SessionSvc => 2
MSCONFIG\Services: ss_conn_service => 2
MSCONFIG\Services: ss_conn_service2 => 2
MSCONFIG\Services: SupportAssistAgent => 2
MSCONFIG\Services: SwitchBoard => 3
MSCONFIG\Services: TeamViewer => 2
MSCONFIG\Services: WavesSysSvc => 2
MSCONFIG\Services: XblAuthManager => 3
MSCONFIG\Services: XblGameSave => 3
MSCONFIG\Services: XboxGipSvc => 3
MSCONFIG\Services: XboxNetApiSvc => 3
HKLM\...\StartupApproved\StartupFolder: => "Avid Application Manager.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Native Instruments Komplete Audio Control Panel Autostart.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Brother iPSMonitor.lnk"
HKLM\...\StartupApproved\Run: => "PDF24"
HKLM\...\StartupApproved\Run: => "RtkAudUService"
HKLM\...\StartupApproved\Run: => "WavesSvc"
HKLM\...\StartupApproved\Run: => "AdobeGCInvoker-1.0"
HKLM\...\StartupApproved\Run: => "AdobeAAMUpdater-1.0"
HKLM\...\StartupApproved\Run32: => "HP Software Update"
HKLM\...\StartupApproved\Run32: => "Adobe Creative Cloud"
HKLM\...\StartupApproved\Run32: => "AdobeCS6ServiceManager"
HKLM\...\StartupApproved\Run32: => "SwitchBoard"
HKLM\...\StartupApproved\Run32: => "Adobe CCXProcess"
HKLM\...\StartupApproved\Run32: => "BrotherSoftwareUpdateNotification"
HKLM\...\StartupApproved\Run32: => "BrStsMon00"
HKLM\...\StartupApproved\Run32: => "LexwareInfoService"
HKU\S-1-5-21-1348745657-3806938028-2291015601-1004\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_02F0DAD153DE7A2C80244076ADEEEDFF"
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_5EFC0ECB77A7585FE9DCDD0B2E946A2B"
HKU\S-1-5-21-1348745657-3806938028-2291015601-1005\...\StartupApproved\Run: => "Adobe Acrobat Synchronizer"
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_98769996E24836F99EC8617644423B4C"
HKU\S-1-5-21-1348745657-3806938028-2291015601-500\...\StartupApproved\Run: => "ProtonVPN"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{5DD7685B-B249-49F7-A357-23D56900456A}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22287.702.1670.9453_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DA246311-CA8C-4A15-BA9D-E678B3EAA7A9}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_22287.702.1670.9453_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CC577F88-AE01-4370-817E-19D2CBD21F26}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{5F8096ED-EB74-47A5-9C40-CD4694B7E193}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{230E15A5-3911-4E3A-AB82-61769B104138}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{3E5BC9FB-8D76-40E7-BE98-A496B5400419}C:\program files\mozilla firefox\firefox.exe] => (Block) C:\program files\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{18851934-4AD4-42AA-B0FC-E4A6E3A6BAE4}] => (Allow) C:\Users\Administrator\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{D1E74F13-02DB-4007-A3D0-5C14DF925636}] => (Allow) C:\Users\Administrator\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{446EBAAC-D8EC-4199-A509-9F8260762E97}] => (Allow) C:\Users\Administrator\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [TCP Query User{8999DBCB-923D-42E5-968A-DE1ABC479D56}C:\users\USERNAME\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\USERNAME\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [UDP Query User{F8AB799D-5DA1-4BA1-8BE5-D1DF3DF69056}C:\users\USERNAME\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\USERNAME\appdata\roaming\zoom\bin\zoom.exe (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [{DCBD39ED-B2DA-4DAC-8EEB-68E93272390E}] => (Allow) LPort=54925
FirewallRules: [{F0A76013-2950-42DF-BF0F-9C46243B214A}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [{1B2BC74B-B6F0-400C-8BF1-96368A181A05}] => (Allow) c:\program files (x86)\pc-faxreceive\brengineprocess.exe (Brother Industries, Ltd. -> Brother Industries, Ltd.)
FirewallRules: [TCP Query User{A88EA6FD-102A-41A7-9E95-F2CCA6939401}C:\program files\adobe\adobe creative cloud\acc\creative cloud ui helper.exe] => (Block) C:\program files\adobe\adobe creative cloud\acc\creative cloud ui helper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [UDP Query User{7F8B2106-3E25-48C8-B72E-DB5FA03F94D3}C:\program files\adobe\adobe creative cloud\acc\creative cloud ui helper.exe] => (Block) C:\program files\adobe\adobe creative cloud\acc\creative cloud ui helper.exe (Adobe Inc. -> Adobe Inc.)
FirewallRules: [TCP Query User{B157FD3C-B9FE-4893-9997-1B6FB797910C}C:\users\USERNAME\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\USERNAME\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{BC5020AB-0396-47CE-823D-E7357E9DC8E5}C:\users\USERNAME\appdata\local\android\sdk\platform-tools\adb.exe] => (Allow) C:\users\NAME\appdata\local\android\sdk\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{18B17B90-2AA7-4AAF-8E9D-E2FA58A4FA40}C:\program files\naps2\naps2.exe] => (Block) C:\program files\naps2\naps2.exe (NAPS2 Software -> NAPS2)
FirewallRules: [UDP Query User{4923D152-D941-4E1C-98F2-7ABB752D0B19}C:\program files\naps2\naps2.exe] => (Block) C:\program files\naps2\naps2.exe (NAPS2 Software -> NAPS2)
FirewallRules: [{C2FA1A4D-EFC5-493A-BDF3-DB86881C5E99}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{25769B37-C24A-4661-86C3-CF194F0C5211}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1F4DBF43-EF0E-4A27-B720-E6C7C35AEC70}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{346CD186-7A5B-46C0-BBE9-2AF854C4BB7F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{1DCC0127-F620-41CD-9FC8-9C2B81620948}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{DDF52A29-DFAD-4E2B-A940-FF8FA059333B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{4FA3A22A-BDC9-49E2-9059-1079A393B172}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{427E0CB6-8302-4568-8925-4E7B51C03469}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{63226881-4EDD-4B0D-A1A5-F593CC05A591}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EB0C4386-182C-4C50-AE25-BAE61B5B394D}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{8239601F-DB46-4C0E-B41C-63CF4C5BCD6F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{EF87CB89-C0FE-4C65-ABA4-817B59ABF30B}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{214040E6-3216-4727-B055-A74B00718E4A}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{3F8AEF34-4DB3-4126-B113-FBA3D00E6037}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\copilotapp.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

28-10-2026 11:53:31 Windows Update
02-11-2026 06:47:27 Windows Update
02-11-2026 06:47:34 Windows Update
04-11-2026 12:20:23 Windows Modules Installer

==================== Fehlerhafte Geräte im Gerätemanager ============

==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (11/04/2026 12:22:23 PM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm KillerIntelligenceCenter.exe Version 3.1524.510.1 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (11/04/2026 08:58:53 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: combase.dll, Version: 10.0.26100.9711, Zeitstempel: 0x15b851a4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000c1f41
Fehlerhafte Prozess-ID: 0xb38
Fehlerhafte Anwendungsstartzeit: 0x1dd6c321fa4b4c4
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\combase.dll
Berichts-ID: 0406b3a0-9616-4b58-9aa8-d21454c2e296
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/30/2026 08:50:37 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: BRENI19C.DLL, Version: 1.1.0.0, Zeitstempel: 0x5ff51bc2
Ausnahmecode: 0xc000041d
Fehleroffset: 0x000000000004cef0
Fehlerhafte Prozess-ID: 0x392c
Fehlerhafte Anwendungsstartzeit: 0x1dd684357dfee39
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\system32\spool\DRIVERS\x64\3\BRENI19C.DLL
Berichts-ID: 3ec4b2f6-5419-4c43-ad00-e568c72fdd0c
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/30/2026 08:50:34 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: BRENI19C.DLL, Version: 1.1.0.0, Zeitstempel: 0x5ff51bc2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000004cef0
Fehlerhafte Prozess-ID: 0x392c
Fehlerhafte Anwendungsstartzeit: 0x1dd684357dfee39
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\system32\spool\DRIVERS\x64\3\BRENI19C.DLL
Berichts-ID: 095e6325-6318-49a5-92ae-ead836fa67d6
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/28/2026 04:42:21 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000
Ausnahmecode: 0xc0000409
Fehleroffset: 0x00007ff9454e828f
Fehlerhafte Prozess-ID: 0x4768
Fehlerhafte Anwendungsstartzeit: 0x1dd66f2b5393444
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: unknown
Berichts-ID: 9bbeb9ce-464a-4999-9fa1-35108f151f54
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/28/2026 03:21:34 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: combase.dll, Version: 10.0.26100.9711, Zeitstempel: 0x15b851a4
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000007af57
Fehlerhafte Prozess-ID: 0x5164
Fehlerhafte Anwendungsstartzeit: 0x1dd66e78f6c1d60
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\combase.dll
Berichts-ID: 457eb461-0cc1-4ca0-a659-166dc7877b12
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/27/2026 10:55:06 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.9711, Zeitstempel: 0x5fd39a05
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000027381
Fehlerhafte Prozess-ID: 0x3128
Fehlerhafte Anwendungsstartzeit: 0x1dd65f9088b82f9
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 13da8f80-8bec-45f9-af9b-7461c885e979
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:

Error: (10/21/2026 04:08:27 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: PrintIsolationHost.exe, Version: 10.0.26100.8115, Zeitstempel: 0x01cefa28
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.9711, Zeitstempel: 0x5fd39a05
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000027381
Fehlerhafte Prozess-ID: 0x42e4
Fehlerhafte Anwendungsstartzeit: 0x1dd616dd01f4a26
Fehlerhafter Anwendungspfad: C:\WINDOWS\system32\PrintIsolationHost.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 4d15e17e-1198-47f2-b231-53a2569274e4
Vollständiger Name des fehlerhaften Pakets: 
Fehlerhafte paketbezogene Anwendungs-ID:


Systemfehler:
=============
Error: (11/04/2026 12:22:32 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "AdobeUpdateService" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/04/2026 12:22:26 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Adobe Acrobat Update Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (11/02/2026 08:08:58 AM) (Source: Service Control Manager) (EventID: 7043) (User: )
Description: Der Dienst Dell Client Management Service konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.

Error: (11/02/2026 07:30:33 AM) (Source: DCOM) (EventID: 10010) (User: BIGA)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/02/2026 06:47:45 AM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9WZDNCRFJBMP-MICROSOFT.WINDOWSSTORE

Error: (11/01/2026 07:26:39 PM) (Source: DCOM) (EventID: 10010) (User: BIGA)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/31/2026 09:42:49 PM) (Source: DCOM) (EventID: 10010) (User: BIGA)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (10/31/2026 10:51:57 AM) (Source: DCOM) (EventID: 10010) (User: BIGA)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================

TimeCreated : 04.11.2026 12:27:00
Message     : Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bearfoos.B!ml&threatid=2147731849&enterpr
ise=0
Name: Trojan:Win32/Bearfoos.B!ml
ID: 2147731849
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Admin\Desktop\FRST64(3).exe; file:_C:\Users\Admin\Downloads\FRST64(1).exe; 
file:_C:\Users\Admin\Downloads\FRST64(2).exe; file:_C:\Users\Admin\Downloads\FRST64.exe; 
process:_pid:18992,ProcessStart:134382650424733543
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: BIGA\Admin
Prozessname: C:\Users\Admin\Desktop\FRST64(3).exe
Sicherheitsversion: AV: 1.463.117.0, AS: 1.463.117.0, NIS: 1.463.117.0
Modulversion: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 04.11.2026 12:25:42
Message     : Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bearfoos.B!ml&threatid=2147731849&enterpr
ise=0
Name: Trojan:Win32/Bearfoos.B!ml
ID: 2147731849
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Admin\Desktop\FRST64(3).exe; file:_C:\Users\Admin\Downloads\FRST64(1).exe; 
file:_C:\Users\Admin\Downloads\FRST64(2).exe; file:_C:\Users\Admin\Downloads\FRST64.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: BIGA\Admin
Prozessname: C:\Users\Admin\Desktop\FRST64(3).exe
Sicherheitsversion: AV: 1.463.117.0, AS: 1.463.117.0, NIS: 1.463.117.0
Modulversion: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 04.11.2026 12:25:41
Message     : Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bearfoos.B!ml&threatid=2147731849&enterpr
ise=0
Name: Trojan:Win32/Bearfoos.B!ml
ID: 2147731849
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Admin\Desktop\FRST64(3).exe; file:_C:\Users\Admin\Downloads\FRST64(1).exe; 
file:_C:\Users\Admin\Downloads\FRST64(2).exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: BIGA\Admin
Prozessname: C:\Users\Admin\Desktop\FRST64(3).exe
Sicherheitsversion: AV: 1.463.117.0, AS: 1.463.117.0, NIS: 1.463.117.0
Modulversion: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 04.11.2026 12:25:41
Message     : Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bearfoos.B!ml&threatid=2147731849&enterpr
ise=0
Name: Trojan:Win32/Bearfoos.B!ml
ID: 2147731849
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Admin\Desktop\FRST64(3).exe; file:_C:\Users\Admin\Downloads\FRST64(1).exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: BIGA\Admin
Prozessname: C:\Users\Admin\Desktop\FRST64(3).exe
Sicherheitsversion: AV: 1.463.117.0, AS: 1.463.117.0, NIS: 1.463.117.0
Modulversion: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 04.11.2026 12:25:41
Message     : Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Win32/Bearfoos.B!ml&threatid=2147731849&enterpr
ise=0
Name: Trojan:Win32/Bearfoos.B!ml
ID: 2147731849
Schweregrad: Schwerwiegend
Kategorie: Trojaner
Pfad: file:_C:\Users\Admin\Desktop\FRST64(3).exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: BIGA\Admin
Prozessname: C:\Users\Admin\Desktop\FRST64(3).exe
Sicherheitsversion: AV: 1.463.117.0, AS: 1.463.117.0, NIS: 1.463.117.0
Modulversion: AM: 1.1.26100.4, NIS: 1.1.26100.4

TimeCreated : 02.11.2026 07:27:41
Message     : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn 
ΪĐ:%в{2093870B-7CD4-4CC1-BA4A-3A0414CF203D}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп 
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn  %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃРĈ ςσпŋéćтϊòη ŕµπðŏẃη

TimeCreated : 31.10.2026 08:39:56
Message     : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn 
ΪĐ:%в{4204D85E-D0A6-4638-9C84-996B7AEBC4C4}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп 
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn  %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃРĈ ςσпŋéćтϊòη ŕµπðŏẃη

TimeCreated : 30.10.2026 08:24:33
Message     : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn 
ΪĐ:%в{19790B3F-E2AF-4A34-B182-5266878B574B}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп 
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn  %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃРĈ ςσпŋéćтϊòη ŕµπðŏẃη


CodeIntegrity:
===============
Date: 2026-10-14 06:03:04
Description: 
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source. 


==================== Speicherinformationen =========================== 

BIOS: Dell Inc. 1.40.0 06/29/2026
Hauptplatine: Dell Inc. 0H7HN7
Prozessor: Intel(R) Core(TM) i7-10750H CPU @ 2.60GHz
Prozentuale Nutzung des RAM: 66%
Installierter physikalischer RAM: 16129.69 MB
Verfügbarer physikalischer RAM: 5468.84 MB
Summe virtueller Speicher: 19585.69 MB
Verfügbarer virtueller Speicher: 8893.75 MB

==================== Laufwerke ================================

Disk 0 - Drive c: () (Fixed) (Total:198.63 GB) (Free:20.7 GB) (Model: PC611 NVMe SK hynix 1TB) NTFS
Disk 0 - Drive d: () (Fixed) (Total:753.87 GB) (Free:603.66 GB) (Model: PC611 NVMe SK hynix 1TB) NTFS
Drive f: (DATA) (Fixed) (Total:149.98 GB) (Free:86.97 GB) FAT32

Disk 0 - \\?\Volume{7bd6d30e-df25-4815-ab2d-d02f6af8d1a9}\ () (Fixed) (Total:1.25 GB) (Free:85.06 MB) NTFS
Disk 0 - \\?\Volume{9ff4f0b9-4add-4cf3-8d4f-6508f05932f0}\ () (Fixed) (Total:96 MB) (Free:17.99 MB) FAT32

==================== MBR & Partitionstabelle ====================

============================================================
Disk: 0 (Protective MBR) (Size: 953.87 GB)

Partitions: 
===========
Partition Style : GPT
Partition Count : 5
Disk ID          : {D3B6D2AB-9444-4F11-A430-472A50E74A0A}
Usable Offset    : 0.02 MB
Usable Length    : 953.87 GB
Max Partitions   : 128

Partition 1
  Type             : EFI System Partition
  Size             : 100 MB
  Offset           : 1 MB
  Type GUID        : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
  Partition GUID   : {9FF4F0B9-4ADD-4CF3-8D4F-6508F05932F0}
  GPT Name         : EFI system partition
  Attributes       : 0x8000000000000000
  Attribute Flags  : No Default Drive Letter
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 2
  Type             : Microsoft Reserved (MSR)
  Size             : 16 MB
  Offset           : 101 MB
  Type GUID        : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
  Partition GUID   : {64055D7F-B8BB-4FA7-9959-61FB3EF94193}
  GPT Name         : Microsoft reserved partition
  Attributes       : 0x8000000000000000
  Attribute Flags  : No Default Drive Letter
  Hidden           : Yes
  Platform Required: No
------------------------------------------------------------
Partition 3
  Type             : Basic Data Partition
  Size             : 198.63 GB
  Offset           : 117 MB
  Type GUID        : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
  Partition GUID   : {FFD1C28D-B6FB-431A-9A8C-2F5BAA003C56}
  GPT Name         : Basic data partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : No
  Platform Required: No
------------------------------------------------------------
Partition 4
  Type             : Windows Recovery
  Size             : 1.25 GB
  Offset           : 203517 MB
  Type GUID        : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
  Partition GUID   : {7BD6D30E-DF25-4815-AB2D-D02F6AF8D1A9}
  Attributes       : 0x8000000000000001
  Attribute Flags  : Platform Required, No Default Drive Letter
  Hidden           : Yes
  Platform Required: Yes
------------------------------------------------------------
Partition 5
  Type             : Basic Data Partition
  Size             : 753.87 GB
  Offset           : 204801 MB
  Type GUID        : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
  Partition GUID   : {325A7081-A9F0-4D82-9B1D-864B364A425A}
  GPT Name         : Basic data partition
  Attributes       : 0x0000000000000000
  Attribute Flags  : None
  Hidden           : No
  Platform Required: No
------------------------------------------------------------

============================================================

==================== Ende vom Addition.txt =======================