Trojaner-Board - Windows 11: Norton360 stoppt mein Suchdurchlauf bei W32.Downadup.B + Computer verhält sich teilweise Seltsam

Trojaner-Board (https://www.trojaner-board.de/)

- Alles rund um Windows (https://www.trojaner-board.de/alles-rund-um-windows/)

- - Windows 11: Norton360 stoppt mein Suchdurchlauf bei W32.Downadup.B + Computer verhält sich teilweise Seltsam (https://www.trojaner-board.de/203256-windows-11-norton360-stoppt-suchdurchlauf-w32-downadup-b-computer-verhaelt-teilweise-seltsam.html)

Windows 11: Norton360 stoppt mein Suchdurchlauf bei W32.Downadup.B + Computer verhält sich teilweise Seltsam

Hallo an alle,
Ich habe folgendes Problem:
Seit einiger Zeit macht mein Computer regelmäßig Probleme. SSD und HDD Festplatten werden manchmal langsam geladen, der Pc startet und nach Windows-Anmeldung habe ich nur einen Blackscreen oder jeder Browser hängt sich beim Download einer Datei auf. Zusätzlich kann ich mit meinem Norton360 Programm keinen schnellen oder vollständigen Suchdurchlauf durchführen. Der Scan hängt sich immer beim suchen nach "W32.Downadup.B" auf. Dieser Wurm ist mir bekannt aber schaffe es nicht ihn zu entfernen. Auch eine Neuinstallation von einem USB Stick hat nicht funktioniert. Nach einigen Wochen kamen die gleichen Probleme zurück. Die Probleme traten übrigens auch schon unter Nutzung der Windows 11 Version auf.
Anbei habe ich die Log-Dateien eingefügt und werde die anderen beiden in einen weiteren Beitrag schreiben (da alle 3 zu lang sind)
Ich bedanke mich im voraus für jede mögliche Hilfe die es gibt.
Viele Grüße

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 27-12-2021

durchgeführt von Lorenz (Administrator) auf DESKTOP-1O2S8S3 (CSL-Computer GmbH & Co. KG 5923) (03-01-2022 21:04:09)

Gestartet von C:\Users\Lorenz\Downloads

Geladene Profile: Lorenz

Plattform: Microsoft Windows 11 Pro Version 21H2 22000.376 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: Chrome

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\AsPowerBar.exe

(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe

(ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x64.exe

(ASUSTeK Computer Inc. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe

(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe

(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe

(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryWebBrowserEdge.exe <2>

(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe

(ASUSTeK Computer Inc. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe <2>

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe <4>

(ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.01.12\AsusFanControlService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe

(ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe

(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe

(ASUSTeK Computer Inc. -> TODO: <Company name>) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe

(ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe

(ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.UserSessionHelper.exe

(Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe

(Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\11.0.0.4854\AdskLicensingService\AdskLicensingService.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe

(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <23>

(LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe

(LogMeIn, Inc. -> LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe <7>

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileCoAuth.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\spaceman.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(NortonLifeLock Inc. -> Broadcom) C:\Program Files\Norton Security\Engine\22.21.11.46\NortonSecurity.exe <2>

(NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton Security\Engine\22.21.11.46\nsWscSvc.exe

(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>

(Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>

(Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe <2>

(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\SteelSeriesEngine.exe

(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [14824272 2021-12-15] (SteelSeries ApS -> SteelSeries ApS)

HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [668376 2021-05-11] (Autodesk, Inc. -> Autodesk, Inc.)

HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\ProgramData\Autodesk\Genuine Service\x64\GenuineService.exe [3390024 2021-11-03] (Autodesk, Inc. -> Autodesk)

HKLM-x32\...\Run: [Check Point VPN] => C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe [18117880 2019-07-28] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5890504 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2543992 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GoogleChromeAutoLaunch_4D44CE43493FF2DF7E6CF7B583FC0FB0] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Discord] => C:\Users\Lorenz\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114000240 2021-10-28] (Skype Software Sarl -> Skype Technologies S.A.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1087376 2021-12-17] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GalaxyClient] => [X]

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13926752 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267432 2021-12-16] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33618400 2021-12-17] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Policies\Explorer: [] 

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-16] (Google LLC -> Google LLC)

Startup: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-12-07]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

Startup: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk [2021-11-28]

ShortcutTarget: GenuineService.lnk -> C:\Users\Lorenz\Autodesk\Genuine Service\GenuineService.exe (Keine Datei)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {03E3E9D6-8CA7-4383-8633-365928220DF8} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {0A65E722-8EAE-4BE2-9A92-4D244BD6044C} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {0BF60189-BC77-4ECB-BB86-D15EE1C84E7B} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.62\Installer\setup.exe [2873728 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {16AB9073-2901-4089-8129-C8F03B3BF991} - System32\Tasks\ASUS\ArmouryAIOFanServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe [764152 2021-06-10] (ASUSTeK Computer Inc. -> TODO: <Company name>)

Task: {17747A2F-7E24-44B6-94FB-A624D32CE45B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {1B590B39-3B9C-4DB3-A04C-3231738953E6} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d7e491ff94d2ee => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

Task: {22FEF05F-A657-44D8-B91B-0054F78DE020} - System32\Tasks\Norton 360\Norton 360 Autofix => C:\Program Files\Norton Security\Engine\22.21.11.46\SymErr.exe [108752 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {257DDFFC-CAE5-482D-AB5A-BA9F29BCF430} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4074344 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

Task: {2FD800D2-EC4E-4BE1-8085-6B0D8F437CEA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647376 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {341E036B-82AD-474C-BED0-0374817BC442} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Keine Datei)

Task: {3B4F846C-0B37-480A-B480-651CDF8022D9} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2241392 2021-10-21] (ASUSTeK Computer Inc. -> ASUS)

Task: {42DF45C6-96E3-46F6-B34D-FB59F9C8512A} - System32\Tasks\Norton 360\Norton 360 Error Analyzer => C:\Program Files\Norton Security\Engine\22.21.11.46\SymErr.exe [108752 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {4DDC3A91-D760-4B64-AC96-B4DC4945ECF5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {5254E155-3600-4885-A65A-88DE4C261B45} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {637B017F-8895-4F81-9C02-276E3244D340} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {63E91D19-F387-460D-9213-6DA8F335C596} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {6860F71D-FBC0-416E-A64E-605E760E592C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {69205E2A-4CA6-412D-A55E-CD6FB50A7DC8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

Task: {6CF1DBD6-88ED-428A-A7B6-8A1C51FA0FA0} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [1509424 2020-03-31] (ASUSTeK Computer Inc. -> )

Task: {6F8EDC45-F7DD-4746-8905-906E3A529523} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1469568 2021-03-18] (ASUSTeK Computer Inc. -> )

Task: {71A23D49-5179-4A59-892A-D6AAC4774CA7} - System32\Tasks\Norton 360\Norton 360 Error Processor => C:\Program Files\Norton Security\Engine\22.21.11.46\SymErr.exe [108752 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc)

Task: {7C071E6F-BC3C-4C3C-842A-10E6397E7569} - System32\Tasks\Norton WSC Integration => C:\Program Files\Norton Security\Engine\22.21.11.46\WSCStub.exe [646520 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {8B18D1A9-1335-4F86-B986-92514AC0509E} - System32\Tasks\Remediation\AntimalwareMigrationTask => C:\Program Files\Common Files\AV\Norton 360\Upgrade.exe [2353000 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Task: {9850C3FA-89E5-4744-A09D-1364AD1E0308} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

Task: {993BF3F2-1086-4FE7-B4A7-463D7EBAAB42} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1241448 2021-10-13] (ASUSTeK Computer Inc. -> ASUS)

Task: {9E907D44-AB93-4B41-B601-AAFAF9908EF9} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [44588888 2021-08-18] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

Task: {A95E4BF4-3064-41E3-8E85-F34F6E963BE3} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [113376 2021-10-21] (ASUSTeK Computer Inc. -> ASUS)

Task: {AFD27696-9FC7-4DC9-8F57-C3CC6BCD464D} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {B406565A-EFB8-4FDC-ADA4-6A688AB595D7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3691910798-632038697-1117892477-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4074344 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

Task: {BF99ED25-9283-40C8-970B-D2B35FC9B22C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

Task: {DA33C90F-3491-4D4D-B4D8-D9A01F202587} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2122552 2021-01-06] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

Task: {EE7489EE-D76A-4390-93D0-C2138B67D21B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

Task: {FA24D7DC-C8BA-42FD-9F1B-2B173EF539BF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

Task: {FEED276D-B2C7-4B59-A511-0E117D4E4826} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339464 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{c8a9d62a-2be2-4635-ad2a-65f96a9680aa}: [DhcpNameServer] 141.57.1.94 141.57.1.6

Tcpip\..\Interfaces\{da6f347c-e98c-47e6-8e08-04858f0e919f}: [DhcpNameServer] 192.168.178.1
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\Lorenz\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-03]
 

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)
 

Chrome: 

=======

CHR Profile: C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default [2022-01-03]

CHR DownloadDir: D:\Downloads

CHR Extension: (Präsentationen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-28]

CHR Extension: (FUTBIN) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adicaaffkmhgnfheifkjhopmambgfihl [2021-11-28]

CHR Extension: (Norton Password Manager) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\admmjipmmciaobhojoghlmleefbicajg [2021-11-28]

CHR Extension: (BetterTTV) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-12-09]

CHR Extension: (Dunkles Theme für Google Chrome) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\annfbnbieaamhaimclajlajpijgkdblo [2021-11-28]

CHR Extension: (Docs) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-28]

CHR Extension: (Google Drive) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-28]

CHR Extension: (YouTube) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-28]

CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-11-28]

CHR Extension: (Adblock für Youtube™) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2021-11-28]

CHR Extension: (FrankerFaceZ) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2021-11-28]

CHR Extension: (Tabellen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-28]

CHR Extension: (Norton Safe Web) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnpbeacklnhmkkilekogeiekaglbmmka [2021-11-28]

CHR Extension: (Google Docs Offline) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-11-28]

CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2021-12-12]

CHR Extension: (Reload All Tabs) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\midkcinmplflbiflboepnahkboeonkam [2021-11-28]

CHR Extension: (Office) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndjpnladcallmjemlbaebfadecfhkepb [2021-12-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-28]

CHR Extension: (Netflix Party is now Teleparty) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2021-12-22]

CHR Extension: (Google Mail) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-28]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1050920 2021-05-11] (Autodesk, Inc. -> Autodesk Inc.)

R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [18673448 2020-11-17] (Autodesk, Inc. -> Autodesk)

R2 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [349928 2021-10-07] (ASUSTEK COMPUTER INCORPORATION -> ASUSTeK COMPUTER INC.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [313008 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)

R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.01.12\AsusFanControlService.exe [2203464 2021-09-10] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [838760 2022-01-03] (ASUSTeK Computer Inc. -> )

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-12-06] (BattlEye Innovations e.K. -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12129128 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [813032 2021-12-06] (EasyAntiCheat Oy -> Epic Games, Inc)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934368 2021-10-01] (Epic Games Inc. -> Epic Games, Inc.)

R2 EPWD; C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe [304376 2019-07-15] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncHelper.exe [3280760 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1990496 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6484832 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3361736 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.)

R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [3565600 2021-08-17] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc. -> LogMeIn, Inc.)

R2 NortonSecurity; C:\Program Files\Norton Security\Engine\22.21.11.46\NortonSecurity.exe [343336 2021-12-13] (NortonLifeLock Inc. -> Broadcom)

R2 nsWscSvc; C:\Program Files\Norton Security\Engine\22.21.11.46\nsWscSvc.exe [1059176 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.230.1107.0004\OneDriveUpdaterService.exe [3737976 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

R2 ROG Live Service; C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe [5941936 2021-10-21] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6078536 2021-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [31568 2021-12-15] (SteelSeries ApS -> )

R2 TracSrvWrapper; C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe [5960440 2019-07-28] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\NisSrv.exe [2872024 2021-11-28] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2110.6-0\MsMpEng.exe [128376 2021-11-28] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [34112 2019-07-02] (ASUSTeK Computer Inc. -> )

R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [34384 2021-10-21] (ASUSTeK Computer Inc. -> )

R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [43160 2021-10-21] (ASUSTeK Computer Inc. -> )

S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2355952 2021-12-17] (Activision Publishing Inc -> Activision Blizzard, Inc.)

R1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.21.10.40\Definitions\BASHDefs\20211227.011\BHDrvx64.sys [2018784 2021-11-23] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R1 ccSet_NGC; C:\Windows\System32\drivers\NGCx64\16150B0.02E\ccSetx64.sys [192256 2021-12-13] (Symantec Corporation -> Symantec Corporation)

R1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [509904 2021-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )

R3 EraserUtilRebootDrv; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys [145376 2021-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)

S3 Hsp; C:\Windows\System32\drivers\Hsp.sys [110904 2021-11-28] (Microsoft Windows -> Microsoft Corporation)

R1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.21.10.40\Definitions\IPSDefs\20211231.061\IDSvia64.sys [1480144 2021-11-26] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [46728 2021-06-28] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.)

R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)

S3 nsvst_NGC; C:\Windows\System32\drivers\NGCx64\16150B0.02E\nsvst.sys [56080 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)

R3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_d2a498d51a4f7bec\rtcx21x64.sys [409000 2021-06-01] (Realtek Semiconductor Corp. -> Realtek)

R3 SRTSP; C:\Windows\System32\drivers\NGCx64\16150B0.02E\SRTSP64.SYS [892600 2021-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R1 SRTSPX; C:\Windows\System32\drivers\NGCx64\16150B0.02E\SRTSPX64.SYS [48824 2021-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [47784 2021-09-03] (SteelSeries ApS -> SteelSeries ApS)

R3 sshid; C:\Windows\system32\DRIVERS\sshid.sys [47760 2021-09-01] (SteelSeries ApS -> SteelSeries ApS)

R3 SteelSeries_Sonar_VAD; C:\Windows\System32\DriverStore\FileRepository\steelseries.sonar.vad.inf_amd64_991d9c8eaf1c6f0e\SteelSeries.Sonar.VAD.sys [77200 2021-11-22] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)

R0 SymEFASI; C:\Windows\System32\drivers\NGCx64\16150B0.02E\SYMEFASI64.SYS [2030768 2021-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

S0 SymELAM; C:\Windows\System32\drivers\NGCx64\16150B0.02E\SymELAM.sys [31984 2021-12-13] (Microsoft Windows Early Launch Anti-malware Publisher -> Broadcom Corporation)

R3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [93120 2021-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R3 SymEvnt; C:\Program Files\Norton Security\NortonData\22.21.10.40\SymPlatform\SymEvnt.sys [712432 2021-06-16] (Symantec Corporation -> Symantec Corporation)

R1 SymIRON; C:\Windows\System32\drivers\NGCx64\16150B0.02E\Ironx64.SYS [319152 2021-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom)

R1 SymNetS; C:\Windows\System32\drivers\NGCx64\16150B0.02E\symnets.sys [575344 2021-12-13] (Symantec Corporation -> Symantec Corporation)

R3 vna_ap; C:\Windows\system32\DRIVERS\vnaap.sys [165392 2017-08-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [48520 2021-11-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [435424 2021-11-28] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86240 2021-11-28] (Microsoft Windows -> Microsoft Corporation)

R1 wpCtrlDrv_NGC; C:\Windows\System32\drivers\NGCx64\16150B0.02E\wpCtrlDrv.sys [1015760 2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

S3 cpuz152; \??\C:\Windows\temp\cpuz152\cpuz152_x64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-01-03 21:04 - 2022-01-03 21:04 - 000033878 _____ C:\Users\Lorenz\Downloads\FRST.txt

2022-01-03 21:03 - 2022-01-03 21:04 - 000000000 ____D C:\FRST

2022-01-03 21:03 - 2022-01-03 21:02 - 002311168 _____ (Farbar) C:\Users\Lorenz\Downloads\FRST64.exe

2022-01-03 14:14 - 2022-01-03 14:14 - 000000000 ____D C:\Windows\system32\Tasks\Remediation

2021-12-30 17:39 - 2021-12-30 17:39 - 000120348 _____ C:\Users\Public\Downloads\adskapp_minidump_dds.dmp

2021-12-30 15:08 - 2021-12-30 15:08 - 000000168 _____ C:\Users\Lorenz\BullseyeCoverageError.txt

2021-12-29 15:00 - 2021-12-29 15:00 - 000000000 ____D C:\Users\Lorenz\AppData\Local\mbam

2021-12-29 14:59 - 2021-12-29 14:59 - 000000000 ____D C:\Program Files\Malwarebytes

2021-12-29 13:00 - 2021-12-29 15:00 - 000412866 _____ C:\Windows\ntbtlog.txt

2021-12-28 17:20 - 2021-12-28 17:20 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job

2021-12-28 15:46 - 2021-12-28 15:46 - 000000000 _____ C:\Users\Lorenz\Downloads\einf21_u¨bung5-2.pdf

2021-12-28 13:49 - 2021-12-28 13:49 - 000002429 _____ C:\Users\Public\Desktop\Norton Security.lnk

2021-12-28 12:29 - 2021-12-29 14:55 - 000000000 ____D C:\Users\Lorenz\AppData\Local\NPE

2021-12-28 12:28 - 2021-12-28 12:28 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Norton

2021-12-28 12:26 - 2022-01-03 20:57 - 000000000 ____D C:\Windows\system32\Tasks\Norton 360

2021-12-28 12:26 - 2021-12-28 13:49 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security

2021-12-28 12:26 - 2021-12-28 12:26 - 000003378 _____ C:\Windows\system32\Tasks\Norton WSC Integration

2021-12-18 14:52 - 2021-12-18 14:52 - 000015000 _____ C:\Windows\system32\DrtmAuthTxt.wim

2021-12-18 14:50 - 2021-12-18 14:50 - 000000000 ___HD C:\$WinREAgent

2021-12-17 14:30 - 2021-12-17 14:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare

2021-12-17 13:36 - 2021-12-17 13:36 - 000000000 ____D C:\ProgramData\Battle.net_components

2021-12-17 13:20 - 2021-12-17 13:20 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Temp

2021-12-15 14:56 - 2021-12-15 14:56 - 001292433 _____ C:\Users\Lorenz\Downloads\WCST.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000449439 _____ C:\Users\Lorenz\Downloads\Stroop_Task.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000293825 _____ C:\Users\Lorenz\Downloads\corsi.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000231783 _____ C:\Users\Lorenz\Downloads\flanker.html

2021-12-14 12:52 - 2021-12-30 21:31 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Badlion Client

2021-12-14 12:52 - 2021-12-14 12:54 - 000000000 ____D C:\ProgramData\BadlionClient

2021-12-14 12:52 - 2021-12-14 12:52 - 000001942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Badlion Client.lnk

2021-12-14 12:52 - 2021-12-14 12:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\@badlionnative-desktop-updater

2021-12-14 12:51 - 2021-12-30 17:40 - 000000000 ____D C:\Program Files\Badlion Client

2021-12-12 21:01 - 2021-12-12 21:02 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher

2021-12-12 21:01 - 2021-12-12 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher

2021-12-12 20:39 - 2021-12-23 03:05 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\.minecraft

2021-12-12 20:39 - 2021-12-12 21:11 - 000000000 ____D C:\Minecraft.mrl

2021-12-12 20:34 - 2022-01-03 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\LogMeIn Hamachi

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\Users\Lorenz\AppData\Local\LogMeIn

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\ProgramData\LogMeIn

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2021-12-12 20:30 - 2021-12-12 20:30 - 000398809 _____ C:\Users\Lorenz\Downloads\HK_Einstellungsantrag_ab_2021_04_01_opt.pdf

2021-12-11 17:44 - 2021-12-11 17:44 - 000000000 ___SH C:\Users\Public\Shared Files

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\FortniteGame

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\CrashReportClient

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat

2021-12-11 13:56 - 2021-12-11 13:56 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3691910798-632038697-1117892477-1001

2021-12-09 07:16 - 2021-12-11 14:01 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2021-12-06 22:56 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\UnrealEngine

2021-12-06 22:56 - 2021-12-06 23:34 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Epic Games

2021-12-06 22:56 - 2021-12-06 22:56 - 000000000 ____D C:\Users\Lorenz\AppData\Local\UnrealEngineLauncher

2021-12-06 22:56 - 2021-12-06 22:56 - 000000000 ____D C:\Users\Lorenz\AppData\Local\EpicGamesLauncher

2021-12-06 22:55 - 2021-12-06 23:34 - 000000000 ____D C:\ProgramData\Epic

2021-12-06 22:55 - 2021-12-06 22:56 - 000000000 ____D C:\Program Files (x86)\Epic Games

2021-12-06 22:55 - 2021-12-06 22:55 - 000001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk

2021-12-06 21:34 - 2021-12-06 21:34 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Pixile Inc
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-01-03 21:02 - 2021-06-05 13:10 - 000000000 ___HD C:\Windows\ELAMBKUP

2022-01-03 21:02 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemTemp

2022-01-03 21:00 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-01-03 20:57 - 2021-11-28 20:57 - 001777232 _____ C:\Windows\system32\PerfStringBackup.INI

2022-01-03 20:57 - 2021-06-05 18:52 - 000768238 _____ C:\Windows\system32\perfh007.dat

2022-01-03 20:57 - 2021-06-05 18:52 - 000159814 _____ C:\Windows\system32\perfc007.dat

2022-01-03 20:57 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\AppReadiness

2022-01-03 20:57 - 2021-06-05 13:09 - 000000000 ____D C:\Windows\INF

2022-01-03 20:52 - 2021-11-28 21:27 - 000000000 ____D C:\Program Files (x86)\Google

2022-01-03 20:50 - 2021-11-29 00:40 - 000000000 ____D C:\Users\Lorenz\AppData\Local\CrashDumps

2022-01-03 20:50 - 2021-11-28 20:56 - 000000000 ____D C:\ProgramData\NVIDIA

2022-01-03 20:50 - 2021-11-28 20:49 - 000877320 _____ C:\Windows\system32\wpbbin.exe

2022-01-03 20:50 - 2021-11-28 20:49 - 000838760 _____ C:\Windows\system32\AsusUpdateCheck.exe

2022-01-03 20:50 - 2021-11-28 20:49 - 000012288 ___SH C:\DumpStack.log.tmp

2022-01-03 20:50 - 2021-11-28 20:49 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2022-01-03 20:50 - 2021-11-28 20:49 - 000000000 ____D C:\ProgramData\ASUS

2022-01-03 14:52 - 2021-11-28 21:50 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\discord

2022-01-03 14:52 - 2021-06-05 13:01 - 000786432 _____ C:\Windows\system32\config\BBI

2022-01-03 13:55 - 2021-11-28 21:50 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Discord

2022-01-03 13:55 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Packages

2022-01-03 13:55 - 2021-11-28 20:52 - 000000000 ____D C:\ProgramData\Packages

2022-01-03 13:55 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps

2021-12-30 16:21 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz

2021-12-30 13:13 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\D3DSCache

2021-12-30 13:13 - 2021-11-28 20:49 - 000000000 ____D C:\Windows\system32\SleepStudy

2021-12-30 11:24 - 2021-11-28 22:26 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Norton

2021-12-30 11:05 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\LiveKernelReports

2021-12-29 14:48 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\NDF

2021-12-28 21:30 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Sky Go

2021-12-28 13:27 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\ConnectedDevicesPlatform

2021-12-28 12:53 - 2021-11-28 22:47 - 000000000 ____D C:\Program Files\Common Files\AV

2021-12-28 12:29 - 2021-11-28 22:23 - 000000000 ____D C:\ProgramData\Norton

2021-12-28 12:26 - 2021-11-28 22:24 - 000000000 ____D C:\Windows\system32\Drivers\NGCx64

2021-12-28 12:26 - 2021-06-05 13:01 - 000032768 _____ C:\Windows\system32\config\ELAM

2021-12-28 10:27 - 2021-11-29 09:29 - 000000000 ____D C:\Users\Lorenz\Documents\Zoom

2021-12-23 03:06 - 2021-12-03 21:35 - 000000000 ____D C:\Program Files (x86)\Steam

2021-12-22 22:54 - 2021-11-29 21:24 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Battle.net

2021-12-22 17:20 - 2021-11-29 21:40 - 000000000 ____D C:\Program Files (x86)\Call of Duty Vanguard

2021-12-19 18:15 - 2021-11-28 21:55 - 000000000 ____D C:\Program Files\Microsoft Office

2021-12-19 18:09 - 2021-11-28 21:01 - 000004782 _____ C:\Windows\system32\Tasks\MicrosoftEdgeShadowStackRollbackTask

2021-12-19 18:09 - 2021-11-28 20:49 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-12-18 15:14 - 2021-06-05 19:00 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemResources

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\setup

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\oobe

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\bcastdvr

2021-12-18 14:54 - 2021-11-28 21:38 - 000000000 ____D C:\Windows\system32\MRT

2021-12-18 14:53 - 2021-11-28 21:38 - 137938848 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2021-12-18 14:53 - 2021-06-05 13:01 - 000000000 ____D C:\Windows\CbsTemp

2021-12-17 13:28 - 2021-11-29 21:23 - 000000000 ____D C:\Program Files (x86)\Battle.net

2021-12-17 13:05 - 2021-11-28 22:01 - 000000000 ____D C:\ProgramData\SteelSeries

2021-12-16 20:02 - 2021-11-28 21:28 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-12-15 17:13 - 2021-11-28 21:45 - 002225640 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000333288 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000217536 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000197048 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000116200 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000062952 _____ (Microsoft Corporation) C:\Windows\system32\gamemodcontrol.exe

2021-12-14 15:21 - 2021-12-02 18:19 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\obs-studio

2021-12-14 15:21 - 2021-06-05 13:10 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2021-12-12 23:36 - 2021-11-28 20:58 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2021-12-12 23:36 - 2021-11-28 20:58 - 000000000 ____D C:\Users\Lorenz\AppData\Local\AcSdkInsLog

2021-12-12 23:36 - 2021-11-28 20:56 - 000000000 ____D C:\Windows\system32\Tasks\ASUS

2021-12-12 20:39 - 2021-11-28 21:45 - 000000000 ____D C:\Users\Lorenz\AppData\Local\PlaceholderTileLogoFolder

2021-12-12 13:22 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Sky

2021-12-12 13:22 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky

2021-12-12 12:25 - 2021-06-05 18:59 - 000000000 ____D C:\Windows\system32\FxsTmp

2021-12-11 18:07 - 2021-11-28 22:02 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\steelseries-gg-client

2021-12-11 17:43 - 2021-06-05 13:10 - 000000000 __SHD C:\Users\Public\Libraries

2021-12-11 17:36 - 2021-11-28 21:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\NVIDIA Corporation

2021-12-09 07:16 - 2021-11-28 22:00 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2021-12-09 07:16 - 2021-11-28 22:00 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-12-09 07:15 - 2021-11-28 20:49 - 000003700 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-12-09 07:15 - 2021-11-28 20:49 - 000003576 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-12-08 13:28 - 2021-12-02 11:52 - 000000000 ____D C:\ProgramData\boost_interprocess

2021-12-06 22:57 - 2021-11-28 20:55 - 000000000 ____D C:\ProgramData\Package Cache

2021-12-06 20:47 - 2021-11-29 19:11 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2021-12-05 23:20 - 2021-11-28 21:54 - 000000000 ____D C:\ProgramData\Riot Games
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Addition + Shortcut Log

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 27-12-2021

durchgeführt von Lorenz (03-01-2022 21:04:37)

Gestartet von C:\Users\Lorenz\Downloads

Microsoft Windows 11 Pro Version 21H2 22000.376 (X64) (2021-11-28 19:50:29)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3691910798-632038697-1117892477-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3691910798-632038697-1117892477-503 - Limited - Disabled)

Gast (S-1-5-21-3691910798-632038697-1117892477-501 - Limited - Disabled)

Lorenz (S-1-5-21-3691910798-632038697-1117892477-1001 - Administrator - Enabled) => C:\Users\Lorenz

WDAGUtilityAccount (S-1-5-21-3691910798-632038697-1117892477-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Norton 360 (Enabled - Up to date) {AECE2126-F4E7-6909-11F2-1B69D1FBCBD0}

FW: Norton 360 (Enabled) {96F5A003-BE88-6851-3AAD-B25C2F288CAB}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

AI Suite 3 (HKLM-x32\...\{CD36E28B-6023-469A-91E7-049A2874EC13}) (Version: 3.00.78 - ASUSTeK Computer Inc.)

ARMOURY CRATE Lite Service (HKLM\...\{EF3944FF-2501-4568-B15C-5701E726719E}) (Version: 4.2.12 - ASUS)

ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden

ASUS AIOFan HAL (HKLM-x32\...\{10f6ee35-55c3-46eb-91a6-816ce9af34c7}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden

ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Extension Card HAL (HKLM-x32\...\{c398adfb-d090-4897-8845-baca53f7ecde}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.2.6.0 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Motherboard HAL (HKLM-x32\...\{84e91062-91cd-4caf-ab18-1805169f546d}) (Version: 1.2.6.0 - ASUSTeK COMPUTER INC.) Hidden

ASUS Aura SDK (HKLM\...\{CF8E6E00-9C03-4440-81C0-21FACB921A6B}) (Version: 3.04.07 - ASUSTek COMPUTER INC.) Hidden

ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden

ASUS AURA VGA Component (HKLM-x32\...\{412001c7-7535-4454-9531-ea12ec686ba9}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden

ASUS Framework Service (HKLM-x32\...\{8bf47d14-406b-49e8-8759-966757033aa0}) (Version: 2.1.1.3 - ASUSTek COMPUTER INC.)

ASUS Framework Service (HKLM-x32\...\{EA6A87BE-8AD3-40D2-944C-9DF5FBFF4332}) (Version: 2.1.1.3 - ASUSTek COMPUTER INC.) Hidden

ASUS Motherboard (HKLM-x32\...\{93795eb8-bd86-4d4d-ab27-ff80f9467b37}) (Version: 2.01.06 - ASUSTek Computer Inc.)

ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.65 - ASUSTeK Computer Inc.) Hidden

AURA DRAM Component (HKLM\...\{9AFE5429-866B-457D-A864-80BCF7672EE8}) (Version: 1.1.16 - ASUS) Hidden

AURA DRAM Component (HKLM-x32\...\{41a78792-5489-400c-a567-b78d40b8c878}) (Version: 1.1.16 - ASUS) Hidden

AURA lighting effect add-on (HKLM-x32\...\{1E2EA04B-FCA7-457E-B6F4-F33E1858E859}) (Version: 0.0.18 - ASUS)

AURA lighting effect add-on x64 (HKLM\...\{C5A4A164-4428-4931-B728-96EEF0FA3C44}) (Version: 0.0.18 - ASUS)

AURA Service (HKLM-x32\...\{0E536061-3B55-4D45-BF58-0BDA261C94B0}) (Version: 3.05.18 - ASUSTeK Computer Inc.) Hidden

AURA Service (HKLM-x32\...\{2f406341-f76d-47c9-a781-b6d186b55b00}) (Version: 3.05.18 - ASUSTeK Computer Inc.)

AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)

Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)

Autodesk AutoCAD 2022 – Deutsch (German) (HKLM\...\{CB47E76A-813A-3712-A6AC-D087F1C34F20}) (Version: 24.1.51.0 - Autodesk, Inc.)

Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 8.2.0.34 - Autodesk)

Autodesk Download Manager (HKLM-x32\...\{402BEAF1-A9F1-4D40-85B4-4F43D0D0EA27}) (Version: 6.3.181.0 - Autodesk, Inc.)

Autodesk Genuine Service (HKLM\...\{98537105-FCCB-4577-A839-2816FDE75B5D}) (Version: 4.5.0.119 - Autodesk)

Autodesk Material Library 2020 (HKLM-x32\...\{B9312A51-41B5-479D-9F72-E7448A2D89AF}) (Version: 18.11.1.0 - Autodesk)

Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2020 (HKLM-x32\...\{0E976988-E753-4C81-BD96-434CE305B176}) (Version: 18.11.1.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)

Autodesk Single Sign On Component (HKLM\...\{B9F5BDED-021C-4926-8518-4FA7114B7040}) (Version: 12.3.3.1803 - Autodesk)

Badlion Client (HKLM\...\1de14785-dd8c-5cd2-aae8-d4a376f81d78) (Version: 3.6.4 - Badlion)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Blackmagic RAW Common Components (HKLM\...\{94C42023-ECF5-46E6-ACB4-2AED536B205D}) (Version: 2.2 - Blackmagic Design)

Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)

Call of Duty Vanguard (HKLM-x32\...\Call of Duty Vanguard) (Version:  - Blizzard Entertainment)

Check Point VPN (HKLM-x32\...\{C06827D3-4EAC-448A-8CBF-1300E29AF28F}) (Version: 98.61.800 - Check Point Software Technologies Ltd.)

DaVinci Resolve (HKLM\...\{D407791D-9F95-4731-89BB-1BE70CB8A25F}) (Version: 17.4.20009 - Blackmagic Design)

DaVinci Resolve Control Panels (HKLM\...\{7667C543-084F-47F7-BC60-175FC25E9D6F}) (Version: 2.0.1.0 - Blackmagic Design)

Discord (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)

ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.37.0 - Ene Tech.) Hidden

ENE RGB HAL (HKLM-x32\...\{413fe4b8-1352-4234-a775-ff2f04ad9042}) (Version: 1.1.37.0 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.1 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{bf1d7028-d935-477f-b5b2-053062f9b527}) (Version: 1.0.9.1 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM-x32\...\{E0419FB0-0C46-4F07-9D5B-2FD78A8C45ED}) (Version: 1.3.0.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.110 - Google LLC)

In Autodesk Web & Mobile speichern (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden

Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden

Kingston AURA DRAM Component (HKLM-x32\...\{2237a879-7fa4-4e21-ae3b-00f6a649b9d9}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

League of Legends (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Riot Game league_of_legends.live) (Version:  - Riot Games, Inc)

Leica TruView 2021.0.1 (HKLM-x32\...\{AF33B28E-3C92-4C1B-A20B-12CB7E000790}) (Version: 21.0.1 - Leica Geosystems)

LogMeIn Hamachi (HKLM-x32\...\{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.)

Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM-x32\...\{4714dd0a-ebab-4f59-a708-f8d7a793b3f5}) (Version: 3.1.10.29419 - Microsoft Corporation)

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.14701.20262 - Microsoft Corporation)

Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 96.0.1054.62 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 96.0.1054.62 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 21.230.1107.0004 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30133 (HKLM-x32\...\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}) (Version: 14.29.30133.0 - Microsoft Corporation)

Minecraft Launcher (HKLM-x32\...\{E154B2C8-2F3E-4763-B3D5-E7D34AE39C6B}) (Version: 1.0.0.0 - Mojang)

Movavi Video Editor Plus 2022 (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Movavi Video Editor Plus 2022) (Version: 22.0.0 - Movavi)

Norton 360 (HKLM-x32\...\NGC) (Version: 22.21.11.46 - NortonLifeLock Inc)

NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.24.0.123 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.123 - NVIDIA Corporation)

NVIDIA Grafiktreiber 496.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 496.76 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.38.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.94 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.1.3 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden

Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.9.2 - Patriot Memory) Hidden

Patriot Viper DRAM RGB (HKLM-x32\...\{fdc098ce-d76c-4e2e-a0a6-01a24e9a1f7d}) (Version: 1.0.9.2 - Patriot Memory)

Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.4 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{3c403389-0bc5-4298-bebf-09de0c0b745d}) (Version: 1.0.6.4 - Patriot Memory)

PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden

PHISON HAL (HKLM-x32\...\{549da357-1b81-456b-83f2-dcc47c41dfff}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden

ROG FAN XPERT 4 (HKLM-x32\...\{2dfe216d-3481-4684-ad4d-2566bd7cfe4f}) (Version: 1.00.10 - ASUSTek Computer Inc.)

ROG Live Service (HKLM-x32\...\{2D87BFB6-C184-4A59-9BBE-3E20CE797631}) (Version: 1.2.18.5 - ASUSTek COMPUTER INC.)

Shotcut (HKLM\...\Shotcut) (Version: 21.10.31 - Meltytech, LLC)

Sky Go 22.1.1.0 (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\com.bskyb.skygoplayer_is1) (Version: 22.1.1.0 - Sky)

Skype Version 8.78 (HKLM-x32\...\Skype_is1) (Version: 8.78 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

SteelSeries GG 12.2.0 (HKLM\...\SteelSeries GG) (Version: 12.2.0 - SteelSeries ApS)

Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.2 - PD) Hidden

Universal Holtek RGB DRAM (HKLM-x32\...\{6870588f-9f28-488b-a169-cf548ad6b393}) (Version: 1.0.0.2 - PD)

Verfügbare Autodesk-Apps (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)

VGA (HKLM-x32\...\{0f87ebb7-aabb-43e5-9c5d-28744f517468}) (Version: 1.01.42 - ASUSTek Computer Inc.)

WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden

WD_BLACK AN1500 (HKLM-x32\...\{e42c5874-37b0-4977-9e8d-70bf006e1f76}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden

WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Zoom (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\ZoomUMX) (Version: 5.8.4 (1736) - Zoom Video Communications, Inc.)
 

Packages:

=========

Age of Empires IV -> C:\Program Files\WindowsApps\Microsoft.Cardinal_5.0.9369.0_x64__8wekyb3d8bbwe [2021-12-11] (Microsoft Studios)

ARMOURY CRATE -> C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_4.2.12.0_x64__qmba6cd70vzyy [2021-11-28] (ASUSTeK COMPUTER INC.)

Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.22.2.0_x64__6rarf9sa4v8jt [2021-12-18] (Disney)

Grounded -> C:\Program Files\WindowsApps\Microsoft.Maine_1.11.13.0_x64__8wekyb3d8bbwe [2021-12-08] (Microsoft Studios)

Microsoft Minesweeper -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMinesweeper_3.1.9160.0_x86__8wekyb3d8bbwe [2021-12-05] (Microsoft Studios) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.11.12030.0_x64__8wekyb3d8bbwe [2021-12-12] (Microsoft Studios) [MS Ad]

Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.0.113.0_x64__8wekyb3d8bbwe [2021-12-22] (Microsoft Studios)

Norton Security -> C:\Program Files\Norton Security\Engine\22.21.11.46 [2022-01-03] (0)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-11-28] (NVIDIA Corp.)

Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0 [2021-12-12] (Spotify AB) [Startup Task]

Tetris® Effect: Connected -> C:\Program Files\WindowsApps\48710EnhanceIncorporated.TRIP2.0_1.2.71.0_x64__63vy8jfbpt4dt [2021-12-27] (Enhance Incorporated)

theHunter™: Call of the Wild - Windows 10 -> C:\Program Files\WindowsApps\AvalancheStudios.theHunterCalloftheWild-Windows10_1.0.9.0_x64__m0byj0nmrybdr [2021-12-17] (Fatalist Publishing AB)

WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2147.16.0_x64__cv1g1gvanyjgm [2021-12-18] (WhatsApp Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{D1DE6864-2236-48B7-99C3-D29C757903A4}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\de-DE\acadficn.dll (Autodesk Asia Pte. Ltd. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers: [  OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers-x32: [  OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OverlayExcluded] -> {4433A54A-1AC8-432F-90FC-85F045CF383C} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayPending] -> {F17C0B1E-EF8E-4AD4-8E1B-7D7E8CB23225} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ShellIconOverlayIdentifiers-x32: [  OverlayProtected] -> {476D0EA3-80F9-48B5-B70B-05E677C9C148} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)

ContextMenuHandlers1: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.11.46\NavShExt.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.11.46\NavShExt.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\nvshext.dll [2021-11-11] (Nvidia Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [BUContextMenu] -> {F7CAA2A1-67A2-44BB-B20F-202FD8EB1DAB} => C:\Program Files\Norton Security\Engine\22.21.11.46\buShell.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [NortonLifeLock.Norton.Antivirus.IEContextMenu] -> {FAD61B3D-699D-49B2-BE16-7F82CB4C59CA} => C:\Program Files\Norton Security\Engine\22.21.11.46\NavShExt.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2021-08-18 14:27 - 2021-08-18 14:27 - 000477696 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\ffi-napi\prebuilds\win32-ia32\node.napi.node

2021-08-18 14:27 - 2021-08-18 14:27 - 000471040 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\ref-napi\prebuilds\win32-ia32\node.napi.node

2021-08-18 14:27 - 2021-08-18 14:27 - 000454656 _____ () [Datei ist nicht signiert] \\?\C:\Program Files (x86)\ASUS\ArmouryDevice\node_modules\registry-js\prebuilds\win32-ia32\node.napi.node

2021-11-28 22:30 - 2020-12-23 10:03 - 000147456 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll

2021-11-28 22:30 - 2021-03-11 16:35 - 001667584 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\EPU.dll

2021-11-28 22:30 - 2021-03-11 16:35 - 001065472 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\FanInfofromProtocol.dll

2021-11-28 22:30 - 2020-03-31 09:32 - 001164800 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll

2021-11-28 22:30 - 2020-03-31 09:31 - 005844612 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll

2021-11-28 22:30 - 2019-05-13 16:44 - 000208896 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll

2021-11-28 22:30 - 2019-05-13 16:44 - 000681984 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\UIImprovmentHelper.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000085504 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\zlib1.dll

2021-12-12 23:36 - 2019-12-23 18:51 - 000093184 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\zlibwapi.dll

2021-08-18 14:27 - 2021-08-18 14:27 - 000081920 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\WindowID\WindowID.dll

2020-05-26 17:08 - 2020-05-26 17:08 - 002831360 _____ (Apache Software Foundation) [Datei ist nicht signiert] C:\Program Files (x86)\LightingService\log4cxx.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000108544 _____ (ASUS) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsAcpi.dll

2021-11-28 20:58 - 2022-01-03 20:50 - 000046336 _____ (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AXSP\4.02.12\PEbiosinterface32.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000676864 _____ (ASUSTeK Computer Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\asacpiEx.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000221184 _____ (ASUSTeK Computer Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsMultiLang.dll

2021-11-28 22:30 - 2021-03-11 16:35 - 000221184 _____ (ASUSTeK Computer Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\DIP4\AsMultiLang.dll

2021-07-27 16:54 - 2021-07-27 16:54 - 002146304 _____ (Holtek Semiconductor Inc.) [Datei ist nicht signiert] C:\Program Files\SteelSeries\GG\HIDDLL.dll

2021-07-27 16:54 - 2021-07-27 16:54 - 002284032 _____ (Holtek) [Datei ist nicht signiert] C:\Program Files\SteelSeries\GG\ISPDLL.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000287232 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libcurl.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 003394560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libcrypto-1_1-x64.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 002281984 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\LIBEAY32.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000679424 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libssl-1_1-x64.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000361472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\SSLEAY32.dll

2021-12-12 23:36 - 2019-06-26 16:07 - 003394560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\libcrypto-1_1-x64.dll

2021-12-12 23:36 - 2019-06-26 16:07 - 000679424 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\libssl-1_1-x64.dll

2021-11-28 20:59 - 2020-05-14 15:15 - 003394560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\libcrypto-1_1-x64.dll

2021-11-28 20:59 - 2020-05-14 15:15 - 000679424 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\libssl-1_1-x64.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000078336 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qgifd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000102400 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qicnsd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000079360 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qicod.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000668160 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qjpegd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000062976 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qsvgd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000062464 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qtgad.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000656384 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qtiffd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000060416 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qwbmpd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000936448 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\imageformats\qwebpd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 003425792 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\platforms\qwindowsd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 011002368 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\Qt5Cored.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 011547648 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\Qt5Guid.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000568832 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\Qt5Svgd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 009100288 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\Qt5Widgetsd.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000312832 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\Qt5Xmld.dll

2021-11-28 22:30 - 2020-12-23 10:03 - 000304128 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\styles\qwindowsvistastyled.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8020]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Norton Password Manager -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.21.11.46\coIEPlg.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.21.11.46\coIEPlg.dll [2021-12-13] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2021-06-05 13:08 - 2021-12-30 17:41 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run32: => "Autodesk Genuine Service "

HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\StartupFolder: => "GenuineService.lnk"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Battle.net"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "GogGalaxy"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Skype for Desktop"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{AD394725-9EDA-4494-B0DE-7FDEC7ADEAB0}] => (Allow) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)

FirewallRules: [{12729E9B-E71D-41BC-886A-63444856D5FF}] => (Allow) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)

FirewallRules: [{C611E6B0-69B0-4495-B954-3F3D19FD70EC}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

FirewallRules: [{6EF60863-DC80-46CE-8813-C830411A1F47}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{6EE6C028-EB59-4D64-8FD6-2849B9DC8F82}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{CFA4B936-D7B3-4B22-B5DC-47B9B326A65F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21302.202.1065.6968_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{947464A6-3D69-4A58-A736-B44480C16454}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21302.202.1065.6968_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{EAC64F77-D29E-45E8-9EE9-DF0C54DE5361}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{0DE6306A-3CD3-4D09-8D9C-EEAAE09B9501}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{0424B4A4-DA67-47CE-A47C-F4B39E2D98B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{94B9E1E4-03C8-436A-A812-5028F0575550}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{924CA816-8709-4892-9752-13ABF3B5AD08}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{2ED24E4B-3BE9-483B-BDD3-C25C96D751E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{908EE5F5-CD7A-49EA-95E6-B0CD622E8584}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{74FDF41A-4ACE-4D37-AE76-03B6EF5BA63F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{FB798263-D981-425B-BAC2-D3B9A0776994}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{6491365C-26DD-42CE-AF3F-5E67E6AAE91F}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{A9D703D8-177D-4CE2-9D5A-7694BAE13912}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{1F9F1897-0726-45EF-B549-FD073970AA95}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{60063FA3-0D89-4399-8A86-0217F09546F6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{75A024FA-7368-4ADD-8B7C-4EDC50E6D3ED}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{A902088F-634C-4B67-8A50-FE99B5E4F8E0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{EC34F37D-7E85-4C3F-9462-696F16525FE8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{1674010F-D772-4928-B4CA-1361ACA6C9A4}] => (Allow) D:\SteamLibrary\steamapps\common\Catan Universe\CatanUniverse.exe () [Datei ist nicht signiert]

FirewallRules: [{44E90B10-CF8C-461D-AA24-086909A1DABC}] => (Allow) D:\SteamLibrary\steamapps\common\Catan Universe\CatanUniverse.exe () [Datei ist nicht signiert]

FirewallRules: [{3554DCD3-5ACA-40B5-A8CE-40B127EE7C73}] => (Allow) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

FirewallRules: [{DCA49CB9-FEBE-4CEE-8AE3-38B81EA4B24A}] => (Allow) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

FirewallRules: [{BF1C14D1-8803-4B66-B277-355B5DAFCB5B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)

FirewallRules: [{3AA2B9A4-7EF9-45C2-A2F9-BA5A821F82A4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{3CDA3983-A9CC-4354-B4EE-2220AC480BD8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{5FDCE300-AE46-4826-9F92-A6EFBFE5CF6E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{EBBF65E7-D409-497D-9D1D-BEDA013F9F10}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{A02F67CE-877C-48C5-9E88-7F648560A94B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{AF8F6112-316F-4FD6-831B-1908B72C0A9B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei

FirewallRules: [{38E8418D-8863-4CD5-AA13-878673FDE637}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)

FirewallRules: [{DA2394A3-AE88-48B2-BE12-2187E4EF3A60}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )

FirewallRules: [{D9094D71-9B8D-42F6-B722-6BC18DBE1BEE}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )

FirewallRules: [{83F41C5D-101E-4B01-A8EF-187D07996342}] => (Allow) D:\SteamLibrary\steamapps\common\Super Animal Royale\Super Animal Royale.exe () [Datei ist nicht signiert]

FirewallRules: [{86B8B368-C5FA-4A01-A9D4-E953D174E7D0}] => (Allow) D:\SteamLibrary\steamapps\common\Super Animal Royale\Super Animal Royale.exe () [Datei ist nicht signiert]

FirewallRules: [{E4082FF3-A10B-43AF-9FE3-5DA6BFB32854}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{42F48B0F-85FE-4313-860B-691FEDCE1BA4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{DD6FA5BA-AC10-4256-95B2-837DF86FA7DE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{1A748B94-9758-459E-8117-E08E8C9B29D2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{F9CA67BF-6681-4D1F-8D40-B96ED41E68E1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{6FF48FC2-E5DC-43D3-ACDD-B3975A902B20}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{0C0AF6B0-0CE2-4C5F-9D2C-D74A4A6C74E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{187BA9E9-A934-44F0-AF73-09CC0980DF7E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{62C4CEC3-D0E4-4C4F-A3A2-F915309D3516}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{FBA01885-F507-48D7-80E9-9332CD303BFB}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{8DE3D557-D2A8-4439-BE32-FA7F628A6B3E}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)

FirewallRules: [{14CA8670-A19F-4F42-AF50-1327A0ED750E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{F4D49A8A-1AFE-4CC0-B27B-A10E427D16AD}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{4FE00A45-E446-47BC-BCAA-DB4795687FE7}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe

FirewallRules: [UDP Query User{9A6B1092-A574-4142-9C37-D21576A6D600}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe

FirewallRules: [TCP Query User{496BC239-34F6-42ED-92BB-759ED6DC0967}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [UDP Query User{19E979D4-81EF-494A-B995-1CC1A2AEA12B}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)
 

==================== Wiederherstellungspunkte =========================
 

03-01-2022 14:05:59 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: PCI-Ver-/Entschlüsselungscontroller

Description: PCI-Ver-/Entschlüsselungscontroller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (01/03/2022 08:51:11 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbamtray.exe, Version: 4.0.0.1190, Zeitstempel: 0x61aa6c91

Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.14.1.0, Zeitstempel: 0x603971ce

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000219dc5

ID des fehlerhaften Prozesses: 0x470c

Startzeit der fehlerhaften Anwendung: 0x01d800db3de71d07

Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

Pfad des fehlerhaften Moduls: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

Berichtskennung: b0cf427b-3b72-45b6-abf1-846d3e5aea2b

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/03/2022 08:50:52 PM) (Source: Application Error) (EventID: 1005) (User: )

Description: Aus einem der folgenden Gründe kann Windows*nicht auf die Datei "C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll" zugreifen:

Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten

Speichertreibern, oder der Datenträger fehlt.

Das Programm DipAwayMode.exe wurde von Windows wegen dieses Fehlers geschlossen.
 

Programm: DipAwayMode.exe

Datei: C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.

User action

1. Öffnen Sie die Datei erneut.

Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.

2.

Wenn Sie weiterhin nicht auf die Datei zugreifen können und

        - diese sich im Netzwerk befindet, 

dann sollte der Netzwerkadministrator sicherstellen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.

        - diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.

3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Startmenü auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.

4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.

5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 

Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
 

Zusätzliche Daten

Fehlerwert: C0000010

Datenträgertyp: 3
 

Error: (01/03/2022 08:50:52 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: DipAwayMode.exe, Version: 0.0.0.0, Zeitstempel: 0x00000000

Name des fehlerhaften Moduls: OneCoreUAPCommonProxyStub.dll, Version: 10.0.22000.348, Zeitstempel: 0x2340fb16

Ausnahmecode: 0xc0000006

Fehleroffset: 0x0014d0b8

ID des fehlerhaften Prozesses: 0x1270

Startzeit der fehlerhaften Anwendung: 0x01d800db3291b30a

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

Pfad des fehlerhaften Moduls: C:\Windows\System32\OneCoreUAPCommonProxyStub.dll

Berichtskennung: af72d444-a1c5-4014-aefa-4c460f8b7ff4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/03/2022 08:50:52 PM) (Source: Application Error) (EventID: 1005) (User: )

Description: Aus einem der folgenden Gründe kann Windows*nicht auf die Datei "C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll" zugreifen:

Es besteht ein Problem mit der Netzwerkverbindung, dem Datenträger mit der gespeicherten Datei bzw. den auf dem Computer installierten

Speichertreibern, oder der Datenträger fehlt.

Das Programm Malwarebytes Tray Application wurde von Windows wegen dieses Fehlers geschlossen.
 

Programm: Malwarebytes Tray Application

Datei: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
 

Der Fehlerwert ist im Abschnitt "Zusätzliche Dateien" aufgelistet.

User action

1. Öffnen Sie die Datei erneut.

Diese Situation ist eventuell ein temporäres Problem, das selbstständig behoben wird, wenn das Programm erneut ausgeführt wird.

2.

Wenn Sie weiterhin nicht auf die Datei zugreifen können und

        - diese sich im Netzwerk befindet, 

dann sollte der Netzwerkadministrator sicherstellen, dass kein Netzwerkproblem besteht und dass eine Verbindung mit dem Server hergestellt werden kann.

        - diese sich auf einem Wechseldatenträger, wie z. B. einer Diskette oder einer CD, befindet, überprüfen Sie, ob der Datenträger richtig in den Computer eingelegt ist.

3. Überprüfen und reparieren Sie das Dateisystem, indem Sie CHKDSK ausführen. Klicken Sie dazu im Startmenü auf "Ausführen", geben Sie CMD ein, und klicken Sie auf "OK". Geben Sie an der Eingabeaufforderung CHKDSK /F ein, und drücken Sie die EINGABETASTE.

4. Stellen Sie die Datei von einer Sicherungskopie wieder her, wenn das Problem weiterhin besteht.

5. Überprüfen Sie, ob andere Dateien auf demselben Datenträger geöffnet werden können. Falls dies nicht möglich ist, ist der Datenträger eventuell beschädigt. 

Wenden Sie sich an den Administrator oder den Hersteller der Computerhardware, um weitere Unterstützung zu erhalten, wenn es sich um eine Festplatte handelt.
 

Zusätzliche Daten

Fehlerwert: C0000010

Datenträgertyp: 3
 

Error: (01/03/2022 08:50:52 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbamtray.exe, Version: 4.0.0.1190, Zeitstempel: 0x61aa6c91

Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.14.1.0, Zeitstempel: 0x603971ce

Ausnahmecode: 0xc0000006

Fehleroffset: 0x0000000000212a84

ID des fehlerhaften Prozesses: 0x28fc

Startzeit der fehlerhaften Anwendung: 0x01d800db3490fccf

Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

Pfad des fehlerhaften Moduls: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

Berichtskennung: 144de25f-ee77-4448-af2f-323b19356b62

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/03/2022 08:50:51 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-1O2S8S3$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Mon, 03 Jan 2022 19:50:43 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: bc3f9204-6b74-42bb-9691-1057cf74825e
 

Methode: GET(203ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/03/2022 08:50:51 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Mon, 03 Jan 2022 19:50:42 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: 2441d5c6-0dcf-40bb-895f-f44c83dbc215
 

Methode: GET(453ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/03/2022 02:34:18 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: mbamtray.exe, Version: 4.0.0.1190, Zeitstempel: 0x61aa6c91

Name des fehlerhaften Moduls: Qt5Core.dll, Version: 5.14.1.0, Zeitstempel: 0x603971ce

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000219dc5

ID des fehlerhaften Prozesses: 0x2768

Startzeit der fehlerhaften Anwendung: 0x01d800a12a828fef

Pfad der fehlerhaften Anwendung: C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

Pfad des fehlerhaften Moduls: C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll

Berichtskennung: c3ee51d8-996c-4b63-b92c-7eb453fa4e5f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (01/03/2022 08:51:25 PM) (Source: Service Control Manager) (EventID: 7023) (User: )

Description: Der Dienst "SysMain" wurde mit folgendem Fehler beendet: 

Falscher Parameter.
 

Error: (01/03/2022 02:52:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
 

Error: (01/03/2022 02:52:38 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "AdskLicensingService" konnte sich nicht als "NT Authority\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

Die Anforderung wird nicht unterstützt.
 
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/03/2022 02:52:37 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/30/2021 09:31:27 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
 

Error: (12/30/2021 09:31:27 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "AdskLicensingService" konnte sich nicht als "NT Authority\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

Die Anforderung wird nicht unterstützt.
 
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (12/30/2021 09:31:26 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (12/30/2021 05:39:23 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Autodesk Desktop App Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 
 

CodeIntegrity:

===============

Date: 2022-01-03 21:02:33

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.21.11.46\symamsi.dll that did not meet the Custom 3 / Antimalware signing level requirements. ਍
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. 1202 10/22/2020

Hauptplatine: ASUSTeK COMPUTER INC. TUF GAMING B550-PLUS (WI-FI)

Prozessor: AMD Ryzen 9 5900X 12-Core Processor 

Prozentuale Nutzung des RAM: 19%

Installierter physikalischer RAM: 32648.86 MB

Verfügbarer physikalischer RAM: 26330.61 MB

Summe virtueller Speicher: 37512.86 MB

Verfügbarer virtueller Speicher: 29046.09 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:930.79 GB) (Free:712.52 GB) NTFS

Drive d: (HDD) (Fixed) (Total:1862.73 GB) (Free:1370.58 GB) NTFS
 

\\?\Volume{43100c20-10a9-430f-976f-62c87e01fea4}\ () (Fixed) (Total:0.6 GB) (Free:0.08 GB) NTFS

\\?\Volume{9e8eab11-59d5-e36a-604c-67b56b5b7697}\ () (Fixed) (Total:5.59 GB) (Free:0 GB) NTFS

\\?\Volume{ec8cf840-c504-2383-47b5-12d05e12034b}\ () (Fixed) (Total:85.68 GB) (Free:0 GB) NTFS

\\?\Volume{89133eae-0ef4-3cd9-319e-b59c927f2fb4}\ () (Fixed) (Total:67.33 GB) (Free:0 GB) NTFS

\\?\Volume{accf2efd-eebc-d015-c312-8aa29d41c55f}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{2e71db62-b143-3bdb-7fef-23dcca8b18a0}\ () (Fixed) (Total:4 GB) (Free:0 GB) NTFS

\\?\Volume{6e1db05e-af51-4c4f-ac30-258319ddaeb5}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 2 (Protective MBR) (Size: 1862.8 GB) (Disk ID: 00000000)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 3.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 4.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 5.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 6.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 7.
 

==================== Ende von Addition.txt =======================

Code:

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 27-12-2021

durchgeführt von Lorenz (03-01-2022 21:05:08)

Gestartet von C:\Users\Lorenz\Downloads

Start-Modus: Normal
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\TruView.lnk -> C:\Program Files\Leica Geosystems\TruView\TruView.exe (Leica Geosystems, AG)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Badlion Client.lnk -> C:\Program Files\Badlion Client\Badlion Client.exe (Badlion)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk -> C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Program Files\Microsoft OneDrive\OneDrive.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games\Riot Client.lnk -> D:\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (64bit).lnk -> C:\Program Files\obs-studio\bin\64bit\obs64.exe (OBS)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\Uninstall.lnk -> C:\Program Files\obs-studio\uninstall.exe (obsproject.com)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher\Minecraft Launcher.lnk -> C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe (Mojang)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office-Spracheinstellungen.lnk -> C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk -> C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\GOG GALAXY\GOG GALAXY.lnk -> C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point\Check Point Mobile.lnk -> C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe (Check Point Software Technologies)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Vanguard\Call of Duty Vanguard.lnk -> C:\Program Files (x86)\Call of Duty Vanguard\Vanguard Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare\Call of Duty Modern Warfare.lnk -> D:\Neuer Ordner\Call of Duty Modern Warfare\Modern Warfare Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\DaVinci Control Panels.lnk -> C:\Program Files (x86)\Blackmagic Design\DaVinci Control Panels\Setup Utility\DaVinci Control Panels Setup.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\Fairlight Studio Utility.lnk -> C:\Program Files (x86)\Blackmagic Design\DaVinci Control Panels\Fairlight Studio Utility\Fairlight Studio Utility.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Player.lnk -> C:\Program Files (x86)\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Player\BlackmagicRAWPlayer.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Speed Test.lnk -> C:\Program Files (x86)\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Speed Test\BlackmagicRAWSpeedTest.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Download Manager.lnk -> C:\Windows\Installer\{402BEAF1-A9F1-4D40-85B4-4F43D0D0EA27}\AdDLMgr.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Uninstall Tool.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\Uninstall Tool\R1\UninstallTool.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Desktop-App\Autodesk Desktop-App.lnk -> C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Digitale Signaturen zuordnen.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AcSignApply.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Referenzmanager.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdRefMan.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Stapelweise Standardsprüfung.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\DwgCheckStandards.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\AI Suite 3\AI Suite 3.lnk -> C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe (ASUSTeK Computer Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\Links\Desktop.lnk -> C:\Users\Lorenz\Desktop ()

Shortcut: C:\Users\Lorenz\Links\Downloads.lnk -> C:\Users\Lorenz\Downloads ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Studium.lnk -> D:\OneDrive\Studium ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Zoom.lnk -> C:\Users\Lorenz\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk -> C:\Users\Lorenz\Autodesk\Genuine Service\GenuineService.exe (Keine Datei)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky\Sky Go.lnk -> C:\Users\Lorenz\AppData\Roaming\Sky\Sky Go\Sky Go.exe (Sky Deutschland AG)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022 deinstallieren.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\uninst.exe (Movavi)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\VideoEditorPlus.exe (Movavi)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Website Movavi Video Editor Plus 2022.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.url ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\DaVinci Resolve.lnk -> C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty. Ltd.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Autodesk\AutoCAD 2022\R24.1\deu\Plotters\Plot Styles\Assistent zum Hinzufügen einer Plotstiltabelle.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\styshwiz.exe (Autodesk, Inc.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\.minecraft\assets\blclient\objects\assets\minecraft\blc\textures\cosmetics\bandana\276\cosmetics - Shortcut.lnk -> D:\Badlion\mc17client\clientcommon\src\main\resources\assets\minecraft\blc\textures\cosmetics (Keine Datei)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
 
 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries GG\SteelSeries GG.lnk -> C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe (SteelSeries ApS) -> -dataPath="C:\ProgramData\SteelSeries\GG" -dbEnv=production

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games\League of Legends.lnk -> D:\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product=league_of_legends --launch-patchline=live

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security\Norton Security.lnk -> C:\Program Files\Norton Security\Engine\22.21.11.46\uiStub.exe (NortonLifeLock Inc.) -> /win8

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i {ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7} REMOVE=ALL

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\AutoCAD 2022 - Deutsch (German).lnk -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc.) ->  /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Dienstprogramm für Lizenzübertragung - AutoCAD 2022.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\Adlm\R23\LTU.exe (Autodesk, Inc.) -> 001N1 2022.0.0.F -d SA -l de-DE

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Einstellungen auf Vorgabe zurücksetzen.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /reset /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\AutoCAD 2022-Einstellungen exportieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /e /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\AutoCAD 2022-Einstellungen importieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /i /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\Von früherem Release migrieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS\AI Suite 3\Uninstall AI Suite 3.lnk -> C:\ProgramData\ASUS\AI Suite III\Setup.exe () -> -u

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAbout

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\Lorenz\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) -> /tsr

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\Lorenz\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) -> /recycle

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Autodesk\AutoCAD 2022\R24.1\deu\Plotters\Assistent zum Hinzufügen eines Plotters.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\addplwiz.exe (Autodesk, Inc.) -> /LANGUAGE de-DE

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAbout

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Public\Desktop\Norton Security.lnk -> C:\Program Files\Norton Security\Engine\22.21.11.46\uiStub.exe (NortonLifeLock Inc.) -> /win8
 
 

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/

InternetURL: C:\Users\Lorenz\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142

InternetURL: C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.url -> URL: hxxps://links.movavi.com/?asrc=start&app=videoeditorplus&module=installer&version=22-0-0&lang=de_de&isTrial=1&partner=&huid=74ae5d31d814f478d8f8c004fcc162237e2c5c08&utm_nooverride=1

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Catan Universe.url -> URL: steam://rungameid/544730

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Counter-Strike Global Offensive.url -> URL: steam://rungameid/730

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Super Animal Royale.url -> URL: steam://rungameid/843380
 

==================== Ende vom Shortcut.txt =============================

Bitte diesen unnötigen bis kontraproduktiven Schmarren von Norton deinstallieren.
Windows hat bereits seit Version 8 einen Virenschutz eingebaut.
Auch dieser gnaze Krempel von ASUS ist ziemlich unnötig.

Gib Bescheid wenn das erledigt ist.

neue Log Daten nach Deinstallation der Programme (FRST + Addition)

Habe besagte Programme runtergeschmissen.

Hier die neuen Log Daten

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 27-12-2021

durchgeführt von Lorenz (Administrator) auf DESKTOP-1O2S8S3 (CSL-Computer GmbH & Co. KG 5923) (04-01-2022 12:44:01)

Gestartet von C:\Users\Lorenz\Downloads

Geladene Profile: Lorenz

Plattform: Microsoft Windows 11 Pro Version 21H2 22000.376 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: Chrome

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

() [Datei ist nicht signiert] C:\FanControl\FanControl\FanControl.exe

(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe

(ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe

(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe

(ASUSTeK Computer Inc. -> TODO: <Company name>) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe

(Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe

(Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\11.0.0.4854\AdskLicensingService\AdskLicensingService.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.) C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe

(Check Point Software Technologies Ltd. -> Check Point Software Technologies) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe

(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler.exe

(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.112\GoogleCrashHandler64.exe

(Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <13>

(LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(LogMeIn, Inc. -> LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe

(LogMeIn, Inc. -> LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileCoAuth.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservices.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_3.60.12001.0_x64__8wekyb3d8bbwe\gamingservicesnet.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxOutlook.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20544.0_x64__8wekyb3d8bbwe\HxTsr.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SpaceAgent.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\spaceman.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Scans\MsMpEngCP.exe

(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>

(Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>

(Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe <2>

(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\SteelSeriesEngine.exe

(SteelSeries ApS -> SteelSeries ApS) C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [14824272 2021-12-15] (SteelSeries ApS -> SteelSeries ApS)

HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [668376 2021-05-11] (Autodesk, Inc. -> Autodesk, Inc.)

HKLM-x32\...\Run: [Autodesk Genuine Service ] => C:\ProgramData\Autodesk\Genuine Service\x64\GenuineService.exe [3390024 2021-11-03] (Autodesk, Inc. -> Autodesk)

HKLM-x32\...\Run: [Check Point VPN] => C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe [18117880 2019-07-28] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5890504 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2543992 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GoogleChromeAutoLaunch_4D44CE43493FF2DF7E6CF7B583FC0FB0] => "C:\Program Files\Google\Chrome\Application\chrome.exe" --no-startup-window /prefetch:5

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Discord] => C:\Users\Lorenz\AppData\Local\Discord\Update.exe [1512608 2021-09-21] (Discord Inc. -> GitHub)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114000240 2021-10-28] (Skype Software Sarl -> Skype Technologies S.A.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Battle.net] => C:\Program Files (x86)\Battle.net\Battle.net.exe [1087376 2021-12-17] (Blizzard Entertainment, Inc. -> Blizzard Entertainment)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GalaxyClient] => [X]

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13926752 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4267432 2021-12-16] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33618400 2021-12-17] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Policies\Explorer: [] 

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\96.0.4664.110\Installer\chrmstp.exe [2021-12-16] (Google LLC -> Google LLC)

Startup: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-12-07]

ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

Startup: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk [2021-11-28]

ShortcutTarget: GenuineService.lnk -> C:\Users\Lorenz\Autodesk\Genuine Service\GenuineService.exe (Keine Datei)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {03E3E9D6-8CA7-4383-8633-365928220DF8} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {0A65E722-8EAE-4BE2-9A92-4D244BD6044C} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {0BF60189-BC77-4ECB-BB86-D15EE1C84E7B} - System32\Tasks\MicrosoftEdgeShadowStackRollbackTask => C:\Program Files (x86)\Microsoft\Edge\Application\96.0.1054.62\Installer\setup.exe [2873728 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {16AB9073-2901-4089-8129-C8F03B3BF991} - System32\Tasks\ASUS\ArmouryAIOFanServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\ArmouryAIOFanServer.exe [764152 2021-06-10] (ASUSTeK Computer Inc. -> TODO: <Company name>)

Task: {16BB370D-ED0D-4A59-A2BC-E7BE02CD0825} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {17747A2F-7E24-44B6-94FB-A624D32CE45B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {1B590B39-3B9C-4DB3-A04C-3231738953E6} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore1d7e491ff94d2ee => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

Task: {257DDFFC-CAE5-482D-AB5A-BA9F29BCF430} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4074344 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

Task: {2FD800D2-EC4E-4BE1-8085-6B0D8F437CEA} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647376 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {341E036B-82AD-474C-BED0-0374817BC442} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Keine Datei)

Task: {3B4F846C-0B37-480A-B480-651CDF8022D9} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [2241392 2021-10-21] (ASUSTeK Computer Inc. -> ASUS)

Task: {4DDC3A91-D760-4B64-AC96-B4DC4945ECF5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [138584 2021-12-19] (Microsoft Corporation -> Microsoft Corporation)

Task: {5254E155-3600-4885-A65A-88DE4C261B45} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {637B017F-8895-4F81-9C02-276E3244D340} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {63E91D19-F387-460D-9213-6DA8F335C596} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [903024 2021-11-16] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {6860F71D-FBC0-416E-A64E-605E760E592C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [904904 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {69205E2A-4CA6-412D-A55E-CD6FB50A7DC8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

Task: {7DE79DF2-7F8A-4C06-9237-92E688DE0332} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {9850C3FA-89E5-4744-A09D-1364AD1E0308} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

Task: {993BF3F2-1086-4FE7-B4A7-463D7EBAAB42} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1241448 2021-10-13] (ASUSTeK Computer Inc. -> ASUS)

Task: {9EE280D4-AB8C-4700-8D61-F917457920F6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {A95E4BF4-3064-41E3-8E85-F34F6E963BE3} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [113376 2021-10-21] (ASUSTeK Computer Inc. -> ASUS)

Task: {AB4A7FEA-FB89-4CC6-A2B6-483FBD8D738C} - System32\Tasks\FanControl => cmd.exe /C start /B FanControl.exe

Task: {AD981360-30EE-42B6-B62B-BE620B079915} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MpCmdRun.exe [901048 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {AFD27696-9FC7-4DC9-8F57-C3CC6BCD464D} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1650384 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)

Task: {B406565A-EFB8-4FDC-ADA4-6A688AB595D7} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3691910798-632038697-1117892477-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4074344 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

Task: {BF99ED25-9283-40C8-970B-D2B35FC9B22C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

Task: {EE7489EE-D76A-4390-93D0-C2138B67D21B} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-11-28] (Google LLC -> Google LLC)

Task: {FA24D7DC-C8BA-42FD-9F1B-2B173EF539BF} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22797704 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

Task: {FEED276D-B2C7-4B59-A511-0E117D4E4826} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3339464 2021-11-24] (Nvidia Corporation -> NVIDIA Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{c8a9d62a-2be2-4635-ad2a-65f96a9680aa}: [DhcpNameServer] 141.57.1.94 141.57.1.6

Tcpip\..\Interfaces\{da6f347c-e98c-47e6-8e08-04858f0e919f}: [DhcpNameServer] 192.168.178.1
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\Lorenz\AppData\Local\Microsoft\Edge\User Data\Default [2022-01-03]
 

FireFox:

========

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)
 

Chrome: 

=======

CHR Profile: C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default [2022-01-04]

CHR DownloadDir: D:\Downloads

CHR Extension: (Präsentationen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2021-11-28]

CHR Extension: (FUTBIN) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\adicaaffkmhgnfheifkjhopmambgfihl [2021-11-28]

CHR Extension: (Norton Password Manager) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\admmjipmmciaobhojoghlmleefbicajg [2021-11-28]

CHR Extension: (BetterTTV) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-12-09]

CHR Extension: (Dunkles Theme für Google Chrome) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\annfbnbieaamhaimclajlajpijgkdblo [2021-11-28]

CHR Extension: (Docs) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2021-11-28]

CHR Extension: (Google Drive) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2021-11-28]

CHR Extension: (YouTube) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2021-11-28]

CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-11-28]

CHR Extension: (Adblock für Youtube™) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2021-11-28]

CHR Extension: (FrankerFaceZ) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2021-11-28]

CHR Extension: (Tabellen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2021-11-28]

CHR Extension: (Norton Safe Web) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnpbeacklnhmkkilekogeiekaglbmmka [2021-11-28]

CHR Extension: (Google Docs Offline) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-11-28]

CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2022-01-04]

CHR Extension: (Reload All Tabs) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\midkcinmplflbiflboepnahkboeonkam [2021-11-28]

CHR Extension: (Office) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndjpnladcallmjemlbaebfadecfhkepb [2021-12-16]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-11-28]

CHR Extension: (Netflix Party is now Teleparty) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\oocalimimngaihdkbihfgmpkcpnmlaoa [2021-12-22]

CHR Extension: (Google Mail) - C:\Users\Lorenz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2021-11-28]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1050920 2021-05-11] (Autodesk, Inc. -> Autodesk Inc.)

R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [18673448 2020-11-17] (Autodesk, Inc. -> Autodesk)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [313008 2021-10-21] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.)

S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [167384 2021-11-28] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)

S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [838760 2022-01-04] (ASUSTeK Computer Inc. -> )

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901968 2021-12-06] (BattlEye Innovations e.K. -> )

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12129128 2021-12-10] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [813032 2021-12-06] (EasyAntiCheat Oy -> Epic Games, Inc)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934368 2021-10-01] (Epic Games Inc. -> Epic Games, Inc.)

R2 EPWD; C:\Program Files (x86)\CheckPoint\Endpoint Connect\Watchdog\EPWD.exe [304376 2019-07-15] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncHelper.exe [3280760 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1990496 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6484832 2021-09-30] (GOG Sp. z o.o. -> GOG.com)

R2 Hamachi2Svc; C:\Program Files (x86)\LogMeIn Hamachi\x64\hamachi-2.exe [3361736 2019-04-02] (LogMeIn, Inc. -> LogMeIn Inc.)

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\x64\LMIGuardianSvc.exe [419248 2016-05-27] (LogMeIn, Inc. -> LogMeIn, Inc.)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\21.230.1107.0004\OneDriveUpdaterService.exe [3737976 2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6078536 2021-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [31568 2021-12-15] (SteelSeries ApS -> )

R2 TracSrvWrapper; C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe [5960440 2019-07-28] (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\NisSrv.exe [2876152 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2111.5-0\MsMpEng.exe [128360 2022-01-04] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [34112 2019-07-02] (ASUSTeK Computer Inc. -> )

R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [34384 2021-10-21] (ASUSTeK Computer Inc. -> )

R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [43160 2021-10-21] (ASUSTeK Computer Inc. -> )

S3 atvi-brynhildr; C:\ProgramData\Battle.net_components\brynhildr_odin\brynhildr.sys [2355952 2021-12-17] (Activision Publishing Inc -> Activision Blizzard, Inc.)

R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )

R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2019-04-02] (Microsoft Windows Hardware Compatibility Publisher -> LogMeIn Inc.)

S3 Hsp; C:\Windows\System32\drivers\Hsp.sys [110904 2021-11-28] (Microsoft Windows -> Microsoft Corporation)

R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)

R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [48552 2021-11-01] (Microsoft Windows Hardware Compatibility Publisher -> NVIDIA Corporation)

R3 R0FanControl; C:\FanControl\FanControl\FanControl.sys [14544 2022-01-04] (Noriyuki MIYAZAKI -> OpenLibSys.org)

R3 rtcx21; C:\Windows\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_d2a498d51a4f7bec\rtcx21x64.sys [409000 2021-06-01] (Realtek Semiconductor Corp. -> Realtek)

R3 ssdevfactory; C:\Windows\System32\drivers\ssdevfactory.sys [47784 2021-09-03] (SteelSeries ApS -> SteelSeries ApS)

R3 sshid; C:\Windows\system32\DRIVERS\sshid.sys [47760 2021-09-01] (SteelSeries ApS -> SteelSeries ApS)

R3 SteelSeries_Sonar_VAD; C:\Windows\System32\DriverStore\FileRepository\steelseries.sonar.vad.inf_amd64_991d9c8eaf1c6f0e\SteelSeries.Sonar.VAD.sys [77200 2021-11-22] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)

R3 vna_ap; C:\Windows\system32\DRIVERS\vnaap.sys [165392 2017-08-01] (Check Point Software Technologies Ltd. -> Check Point Software Technologies Ltd.)

S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [48536 2022-01-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [435432 2022-01-04] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [86248 2022-01-04] (Microsoft Windows -> Microsoft Corporation)

S3 cpuz152; \??\C:\Windows\temp\cpuz152\cpuz152_x64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-01-04 12:44 - 2022-01-04 12:44 - 000028188 _____ C:\Users\Lorenz\Downloads\FRST.txt

2022-01-04 12:34 - 2022-01-04 12:34 - 000003464 _____ C:\Windows\system32\Tasks\FanControl

2022-01-04 11:50 - 2022-01-04 11:50 - 000000000 ____D C:\FanControl

2022-01-04 11:39 - 2022-01-04 11:39 - 000000000 ____D C:\Users\Lorenz\AppData\Local\DBG

2022-01-03 21:14 - 2022-01-04 11:39 - 000000000 ____D C:\Windows\system32\Tasks\Remediation

2022-01-03 21:03 - 2022-01-04 12:44 - 000000000 ____D C:\FRST

2022-01-03 21:03 - 2022-01-03 21:02 - 002311168 _____ (Farbar) C:\Users\Lorenz\Downloads\FRST64.exe

2021-12-30 17:39 - 2021-12-30 17:39 - 000120348 _____ C:\Users\Public\Downloads\adskapp_minidump_dds.dmp

2021-12-30 15:08 - 2021-12-30 15:08 - 000000168 _____ C:\Users\Lorenz\BullseyeCoverageError.txt

2021-12-29 15:00 - 2021-12-29 15:00 - 000000000 ____D C:\Users\Lorenz\AppData\Local\mbam

2021-12-29 13:00 - 2021-12-29 15:00 - 000412866 _____ C:\Windows\ntbtlog.txt

2021-12-28 17:20 - 2021-12-28 17:20 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job

2021-12-28 15:46 - 2021-12-28 15:46 - 000000000 _____ C:\Users\Lorenz\Downloads\einf21_u¨bung5-2.pdf

2021-12-28 12:29 - 2021-12-29 14:55 - 000000000 ____D C:\Users\Lorenz\AppData\Local\NPE

2021-12-28 12:28 - 2021-12-28 12:28 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Norton

2021-12-18 14:52 - 2021-12-18 14:52 - 000015000 _____ C:\Windows\system32\DrtmAuthTxt.wim

2021-12-18 14:50 - 2021-12-18 14:50 - 000000000 ___HD C:\$WinREAgent

2021-12-17 14:30 - 2021-12-17 14:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare

2021-12-17 13:36 - 2021-12-17 13:36 - 000000000 ____D C:\ProgramData\Battle.net_components

2021-12-17 13:20 - 2021-12-17 13:20 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Temp

2021-12-15 14:56 - 2021-12-15 14:56 - 001292433 _____ C:\Users\Lorenz\Downloads\WCST.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000449439 _____ C:\Users\Lorenz\Downloads\Stroop_Task.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000293825 _____ C:\Users\Lorenz\Downloads\corsi.html

2021-12-15 14:56 - 2021-12-15 14:56 - 000231783 _____ C:\Users\Lorenz\Downloads\flanker.html

2021-12-14 12:52 - 2021-12-30 21:31 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Badlion Client

2021-12-14 12:52 - 2021-12-14 12:54 - 000000000 ____D C:\ProgramData\BadlionClient

2021-12-14 12:52 - 2021-12-14 12:52 - 000001942 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Badlion Client.lnk

2021-12-14 12:52 - 2021-12-14 12:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\@badlionnative-desktop-updater

2021-12-14 12:51 - 2021-12-30 17:40 - 000000000 ____D C:\Program Files\Badlion Client

2021-12-12 21:01 - 2021-12-12 21:02 - 000000000 ____D C:\Program Files (x86)\Minecraft Launcher

2021-12-12 21:01 - 2021-12-12 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher

2021-12-12 20:39 - 2021-12-23 03:05 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\.minecraft

2021-12-12 20:39 - 2021-12-12 21:11 - 000000000 ____D C:\Minecraft.mrl

2021-12-12 20:34 - 2022-01-04 12:39 - 000000000 ____D C:\Users\Lorenz\AppData\Local\LogMeIn Hamachi

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\Users\Lorenz\AppData\Local\LogMeIn

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\ProgramData\LogMeIn

2021-12-12 20:34 - 2021-12-12 20:34 - 000000000 ____D C:\Program Files (x86)\LogMeIn Hamachi

2021-12-12 20:30 - 2021-12-12 20:30 - 000398809 _____ C:\Users\Lorenz\Downloads\HK_Einstellungsantrag_ab_2021_04_01_opt.pdf

2021-12-11 17:44 - 2021-12-11 17:44 - 000000000 ___SH C:\Users\Public\Shared Files

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\FortniteGame

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\CrashReportClient

2021-12-11 17:35 - 2021-12-11 17:35 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat

2021-12-11 13:56 - 2021-12-11 13:56 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3691910798-632038697-1117892477-1001

2021-12-09 07:16 - 2021-12-11 14:01 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2021-12-06 22:56 - 2021-12-11 17:35 - 000000000 ____D C:\Users\Lorenz\AppData\Local\UnrealEngine

2021-12-06 22:56 - 2021-12-06 23:34 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Epic Games

2021-12-06 22:56 - 2021-12-06 22:56 - 000000000 ____D C:\Users\Lorenz\AppData\Local\UnrealEngineLauncher

2021-12-06 22:56 - 2021-12-06 22:56 - 000000000 ____D C:\Users\Lorenz\AppData\Local\EpicGamesLauncher

2021-12-06 22:55 - 2021-12-06 23:34 - 000000000 ____D C:\ProgramData\Epic

2021-12-06 22:55 - 2021-12-06 22:56 - 000000000 ____D C:\Program Files (x86)\Epic Games

2021-12-06 22:55 - 2021-12-06 22:55 - 000001272 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk

2021-12-06 21:34 - 2021-12-06 21:34 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Pixile Inc
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2022-01-04 12:41 - 2021-11-28 21:27 - 000000000 ____D C:\Program Files (x86)\Google

2022-01-04 12:39 - 2021-11-29 00:40 - 000000000 ____D C:\Users\Lorenz\AppData\Local\CrashDumps

2022-01-04 12:39 - 2021-11-28 20:56 - 000000000 ____D C:\ProgramData\NVIDIA

2022-01-04 12:39 - 2021-11-28 20:49 - 000877320 _____ C:\Windows\system32\wpbbin.exe

2022-01-04 12:39 - 2021-11-28 20:49 - 000838760 _____ C:\Windows\system32\AsusUpdateCheck.exe

2022-01-04 12:39 - 2021-11-28 20:49 - 000012288 ___SH C:\DumpStack.log.tmp

2022-01-04 12:39 - 2021-11-28 20:49 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2022-01-04 12:39 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemTemp

2022-01-04 12:39 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\AppReadiness

2022-01-04 12:39 - 2021-06-05 13:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2022-01-04 12:39 - 2021-06-05 13:01 - 000786432 _____ C:\Windows\system32\config\BBI

2022-01-04 11:49 - 2021-11-28 20:58 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information

2022-01-04 11:49 - 2021-11-28 20:54 - 000000000 ____D C:\Program Files (x86)\ASUS

2022-01-04 11:49 - 2021-11-28 20:49 - 000000000 ____D C:\ProgramData\ASUS

2022-01-04 11:48 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Packages

2022-01-04 11:48 - 2021-11-28 20:52 - 000000000 ____D C:\ProgramData\Packages

2022-01-04 11:48 - 2021-06-05 13:10 - 000000000 ___HD C:\Program Files\WindowsApps

2022-01-04 11:47 - 2021-11-28 20:58 - 000000000 ____D C:\Program Files\ASUS

2022-01-04 11:47 - 2021-11-28 20:57 - 001777232 _____ C:\Windows\system32\PerfStringBackup.INI

2022-01-04 11:47 - 2021-11-28 20:56 - 000000000 ____D C:\Windows\system32\Tasks\ASUS

2022-01-04 11:47 - 2021-11-28 20:55 - 000000000 ____D C:\ProgramData\Package Cache

2022-01-04 11:47 - 2021-06-05 18:52 - 000768238 _____ C:\Windows\system32\perfh007.dat

2022-01-04 11:47 - 2021-06-05 18:52 - 000159814 _____ C:\Windows\system32\perfc007.dat

2022-01-04 11:47 - 2021-06-05 13:09 - 000000000 ____D C:\Windows\INF

2022-01-04 11:40 - 2021-11-28 22:23 - 000000000 ____D C:\ProgramData\Norton

2022-01-04 11:39 - 2021-11-28 20:49 - 000000000 ____D C:\Windows\system32\Drivers\wd

2022-01-04 11:39 - 2021-06-05 13:10 - 000000000 ___HD C:\Windows\ELAMBKUP

2022-01-04 11:39 - 2021-06-05 13:01 - 000032768 _____ C:\Windows\system32\config\ELAM

2022-01-04 11:38 - 2021-11-28 21:00 - 000000000 ____D C:\Program Files (x86)\LightingService

2022-01-04 11:37 - 2021-11-28 20:49 - 000000000 ____D C:\Windows\system32\SleepStudy

2022-01-03 14:52 - 2021-11-28 21:50 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\discord

2022-01-03 13:55 - 2021-11-28 21:50 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Discord

2021-12-30 16:21 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz

2021-12-30 13:13 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\D3DSCache

2021-12-30 11:24 - 2021-11-28 22:26 - 000000000 ____D C:\Users\Lorenz\AppData\LocalLow\Norton

2021-12-30 11:05 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\LiveKernelReports

2021-12-29 14:48 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\NDF

2021-12-28 21:30 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Sky Go

2021-12-28 13:27 - 2021-11-28 20:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\ConnectedDevicesPlatform

2021-12-28 12:53 - 2021-11-28 22:47 - 000000000 ____D C:\Program Files\Common Files\AV

2021-12-28 10:27 - 2021-11-29 09:29 - 000000000 ____D C:\Users\Lorenz\Documents\Zoom

2021-12-23 03:06 - 2021-12-03 21:35 - 000000000 ____D C:\Program Files (x86)\Steam

2021-12-22 22:54 - 2021-11-29 21:24 - 000000000 ____D C:\Users\Lorenz\AppData\Local\Battle.net

2021-12-22 17:20 - 2021-11-29 21:40 - 000000000 ____D C:\Program Files (x86)\Call of Duty Vanguard

2021-12-19 18:15 - 2021-11-28 21:55 - 000000000 ____D C:\Program Files\Microsoft Office

2021-12-19 18:09 - 2021-11-28 21:01 - 000004782 _____ C:\Windows\system32\Tasks\MicrosoftEdgeShadowStackRollbackTask

2021-12-19 18:09 - 2021-11-28 20:49 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2021-12-18 15:14 - 2021-06-05 19:00 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\SystemResources

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\setup

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\system32\oobe

2021-12-18 15:14 - 2021-06-05 13:10 - 000000000 ____D C:\Windows\bcastdvr

2021-12-18 14:54 - 2021-11-28 21:38 - 000000000 ____D C:\Windows\system32\MRT

2021-12-18 14:53 - 2021-11-28 21:38 - 137938848 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

2021-12-18 14:53 - 2021-06-05 13:01 - 000000000 ____D C:\Windows\CbsTemp

2021-12-17 13:28 - 2021-11-29 21:23 - 000000000 ____D C:\Program Files (x86)\Battle.net

2021-12-17 13:05 - 2021-11-28 22:01 - 000000000 ____D C:\ProgramData\SteelSeries

2021-12-16 20:02 - 2021-11-28 21:28 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2021-12-15 17:13 - 2021-11-28 21:45 - 002225640 _____ (Microsoft Corporation) C:\Windows\system32\xgameruntime.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000333288 _____ (Microsoft Corporation) C:\Windows\system32\gameplatformservices.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000217536 _____ (Microsoft Corporation) C:\Windows\system32\gamingservicesproxy.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000197048 _____ (Microsoft Corporation) C:\Windows\system32\gameconfighelper.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000131072 _____ (Microsoft Corporation) C:\Windows\system32\gamingtcuihelpers.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000116200 _____ (Microsoft Corporation) C:\Windows\system32\gamelaunchhelper.dll

2021-12-15 17:13 - 2021-11-28 21:45 - 000062952 _____ (Microsoft Corporation) C:\Windows\system32\gamemodcontrol.exe

2021-12-14 15:21 - 2021-12-02 18:19 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\obs-studio

2021-12-14 15:21 - 2021-06-05 13:10 - 000000000 ___RD C:\Windows\ImmersiveControlPanel

2021-12-12 23:36 - 2021-11-28 20:58 - 000000000 ____D C:\Users\Lorenz\AppData\Local\AcSdkInsLog

2021-12-12 20:39 - 2021-11-28 21:45 - 000000000 ____D C:\Users\Lorenz\AppData\Local\PlaceholderTileLogoFolder

2021-12-12 13:22 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Sky

2021-12-12 13:22 - 2021-11-28 21:56 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky

2021-12-12 12:25 - 2021-06-05 18:59 - 000000000 ____D C:\Windows\system32\FxsTmp

2021-12-11 18:07 - 2021-11-28 22:02 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\steelseries-gg-client

2021-12-11 17:43 - 2021-06-05 13:10 - 000000000 __SHD C:\Users\Public\Libraries

2021-12-11 17:36 - 2021-11-28 21:52 - 000000000 ____D C:\Users\Lorenz\AppData\Local\NVIDIA Corporation

2021-12-09 07:16 - 2021-11-28 22:00 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2021-12-09 07:16 - 2021-11-28 22:00 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2021-12-09 07:15 - 2021-11-28 20:49 - 000003700 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2021-12-09 07:15 - 2021-11-28 20:49 - 000003576 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2021-12-08 13:28 - 2021-12-02 11:52 - 000000000 ____D C:\ProgramData\boost_interprocess

2021-12-06 20:47 - 2021-11-29 19:11 - 000000000 ____D C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2021-12-05 23:20 - 2021-11-28 21:54 - 000000000 ____D C:\ProgramData\Riot Games
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 27-12-2021

durchgeführt von Lorenz (04-01-2022 12:44:35)

Gestartet von C:\Users\Lorenz\Downloads

Microsoft Windows 11 Pro Version 21H2 22000.376 (X64) (2021-11-28 19:50:29)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3691910798-632038697-1117892477-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3691910798-632038697-1117892477-503 - Limited - Disabled)

Gast (S-1-5-21-3691910798-632038697-1117892477-501 - Limited - Disabled)

Lorenz (S-1-5-21-3691910798-632038697-1117892477-1001 - Administrator - Enabled) => C:\Users\Lorenz

WDAGUtilityAccount (S-1-5-21-3691910798-632038697-1117892477-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

ASUS AIOFan HAL (HKLM\...\{EAE80DED-1A39-41C5-9F60-87CC947F6454}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden

ASUS AIOFan HAL (HKLM-x32\...\{10f6ee35-55c3-46eb-91a6-816ce9af34c7}) (Version: 1.1.40.0 - ASUSTek COMPUTER INC.) Hidden

ASUS AURA Extension Card HAL (HKLM\...\{237E1CAC-1708-4940-AC34-DF15C079AB70}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Extension Card HAL (HKLM-x32\...\{c398adfb-d090-4897-8845-baca53f7ecde}) (Version: 1.1.0.13 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Motherboard HAL (HKLM\...\{4EBEAC95-76BC-46A8-8644-6E2F1C87CF70}) (Version: 1.2.6.0 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA Motherboard HAL (HKLM-x32\...\{84e91062-91cd-4caf-ab18-1805169f546d}) (Version: 1.2.6.0 - ASUSTeK COMPUTER INC.) Hidden

ASUS AURA VGA Component (HKLM\...\{71BB96A6-EAC4-45AE-A17D-D3ED43FF1D14}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden

ASUS AURA VGA Component (HKLM-x32\...\{412001c7-7535-4454-9531-ea12ec686ba9}) (Version: 0.0.4.6 - ASUSTek COMPUTER INC. ) Hidden

ASUS Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.107.65 - ASUSTeK Computer Inc.) Hidden

AURA DRAM Component (HKLM\...\{9AFE5429-866B-457D-A864-80BCF7672EE8}) (Version: 1.1.16 - ASUS) Hidden

AURA DRAM Component (HKLM-x32\...\{41a78792-5489-400c-a567-b78d40b8c878}) (Version: 1.1.16 - ASUS) Hidden

AutoCAD Open in Desktop (HKLM\...\{1C66A0B0-784E-4777-97B3-93F843D1C8CF}) (Version: 1.0.20.0 - Autodesk)

Autodesk App Manager (HKLM-x32\...\{9C2E49CB-F671-47EC-8093-CC1A8749A92A}) (Version: 3.2.1 - Autodesk)

Autodesk AutoCAD 2022 – Deutsch (German) (HKLM\...\{CB47E76A-813A-3712-A6AC-D087F1C34F20}) (Version: 24.1.51.0 - Autodesk, Inc.)

Autodesk Desktop-App (HKLM-x32\...\Autodesk Desktop App) (Version: 8.2.0.34 - Autodesk)

Autodesk Download Manager (HKLM-x32\...\{402BEAF1-A9F1-4D40-85B4-4F43D0D0EA27}) (Version: 6.3.181.0 - Autodesk, Inc.)

Autodesk Genuine Service (HKLM\...\{98537105-FCCB-4577-A839-2816FDE75B5D}) (Version: 4.5.0.119 - Autodesk)

Autodesk Material Library 2020 (HKLM-x32\...\{B9312A51-41B5-479D-9F72-E7448A2D89AF}) (Version: 18.11.1.0 - Autodesk)

Autodesk Material Library 2022 (HKLM-x32\...\{A9221A68-5AD0-4215-B54F-CB5DBA4FB27C}) (Version: 20.3.7.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2020 (HKLM-x32\...\{0E976988-E753-4C81-BD96-434CE305B176}) (Version: 18.11.1.0 - Autodesk)

Autodesk Material Library Base Resolution Image Library 2022 (HKLM-x32\...\{6256584F-B04B-41D4-8A59-44E70940C473}) (Version: 20.3.7.0 - Autodesk)

Autodesk Single Sign On Component (HKLM\...\{B9F5BDED-021C-4926-8518-4FA7114B7040}) (Version: 12.3.3.1803 - Autodesk)

Badlion Client (HKLM\...\1de14785-dd8c-5cd2-aae8-d4a376f81d78) (Version: 3.6.4 - Badlion)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

Blackmagic RAW Common Components (HKLM\...\{94C42023-ECF5-46E6-ACB4-2AED536B205D}) (Version: 2.2 - Blackmagic Design)

Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version:  - Blizzard Entertainment)

Call of Duty Vanguard (HKLM-x32\...\Call of Duty Vanguard) (Version:  - Blizzard Entertainment)

Check Point VPN (HKLM-x32\...\{C06827D3-4EAC-448A-8CBF-1300E29AF28F}) (Version: 98.61.800 - Check Point Software Technologies Ltd.)

DaVinci Resolve (HKLM\...\{D407791D-9F95-4731-89BB-1BE70CB8A25F}) (Version: 17.4.20009 - Blackmagic Design)

DaVinci Resolve Control Panels (HKLM\...\{7667C543-084F-47F7-BC60-175FC25E9D6F}) (Version: 2.0.1.0 - Blackmagic Design)

Discord (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Discord) (Version: 1.0.9003 - Discord Inc.)

ENE RGB HAL (HKLM\...\{E050E98C-5524-4AFB-9E53-97700BEF2C02}) (Version: 1.1.37.0 - Ene Tech.) Hidden

ENE RGB HAL (HKLM-x32\...\{413fe4b8-1352-4234-a775-ff2f04ad9042}) (Version: 1.1.37.0 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.9.1 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{bf1d7028-d935-477f-b5b2-053062f9b527}) (Version: 1.0.9.1 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM-x32\...\{E0419FB0-0C46-4F07-9D5B-2FD78A8C45ED}) (Version: 1.3.0.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Epic Online Services (HKLM-x32\...\{32C68D93-D32F-4B01-8250-61642BFC22F8}) (Version: 2.0.28.0 - Epic Games, Inc.)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 96.0.4664.110 - Google LLC)

In Autodesk Web & Mobile speichern (HKLM\...\{192B349F-C3F7-4BBE-B49E-00DD4BD28373}) (Version: 3.0.29 - Autodesk) Hidden

Kingston AURA DRAM Component (HKLM\...\{965CDF5F-901C-476F-B3A8-7396701B1129}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden

Kingston AURA DRAM Component (HKLM-x32\...\{2237a879-7fa4-4e21-ae3b-00f6a649b9d9}) (Version: 1.1.12 - KINGSTON COMPONENTS INC.) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

League of Legends (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Riot Game league_of_legends.live) (Version:  - Riot Games, Inc)

Leica TruView 2021.0.1 (HKLM-x32\...\{AF33B28E-3C92-4C1B-A20B-12CB7E000790}) (Version: 21.0.1 - Leica Geosystems)

LogMeIn Hamachi (HKLM-x32\...\{ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7}) (Version: 2.2.0.633 - LogMeIn, Inc.) Hidden

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.633 - LogMeIn, Inc.)

Microsoft .NET Core Runtime - 3.1.10 (x64) (HKLM-x32\...\{4714dd0a-ebab-4f59-a708-f8d7a793b3f5}) (Version: 3.1.10.29419 - Microsoft Corporation)

Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.14701.20262 - Microsoft Corporation)

Microsoft ASP.NET Core 3.1.10 - Shared Framework (HKLM-x32\...\{6efe3294-03d8-4977-9c67-9f57ab075130}) (Version: 3.1.10.20520 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 96.0.1054.62 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 96.0.1054.62 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 21.230.1107.0004 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{2FA9DAAC-895B-4E99-99D9-DC2965FBE79C}) (Version: 2.87.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{9dff3540-fc85-4ed5-ac84-9e3c7fd8bece}) (Version: 12.0.40664.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.29.30133 (HKLM-x32\...\{295d1583-fdb9-414b-a4c8-da539362a26b}) (Version: 14.29.30133.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30133 (HKLM-x32\...\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}) (Version: 14.29.30133.0 - Microsoft Corporation)

Minecraft Launcher (HKLM-x32\...\{E154B2C8-2F3E-4763-B3D5-E7D34AE39C6B}) (Version: 1.0.0.0 - Mojang)

Movavi Video Editor Plus 2022 (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\Movavi Video Editor Plus 2022) (Version: 22.0.0 - Movavi)

NVIDIA FrameView SDK 1.2.4999.30397803 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.2.4999.30397803 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.24.0.123 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.24.0.123 - NVIDIA Corporation)

NVIDIA Grafiktreiber 496.76 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 496.76 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.38.94 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.94 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 27.1.3 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14701.20262 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14701.20248 - Microsoft Corporation) Hidden

Patriot Viper DRAM RGB (HKLM\...\{1F9C282E-CCB4-4D8E-A5CB-7B74DFCD8C95}) (Version: 1.0.9.2 - Patriot Memory) Hidden

Patriot Viper DRAM RGB (HKLM-x32\...\{fdc098ce-d76c-4e2e-a0a6-01a24e9a1f7d}) (Version: 1.0.9.2 - Patriot Memory)

Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.0.6.4 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{3c403389-0bc5-4298-bebf-09de0c0b745d}) (Version: 1.0.6.4 - Patriot Memory)

PHISON HAL (HKLM\...\{966E33F0-6786-4B38-AA29-C1B3F6C1955D}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden

PHISON HAL (HKLM-x32\...\{549da357-1b81-456b-83f2-dcc47c41dfff}) (Version: 1.0.9.0 - PHISON Electronics Corp.) Hidden

ROG FAN XPERT 4 (HKLM-x32\...\{2dfe216d-3481-4684-ad4d-2566bd7cfe4f}) (Version: 1.00.10 - ASUSTek Computer Inc.)

Shotcut (HKLM\...\Shotcut) (Version: 21.10.31 - Meltytech, LLC)

Sky Go 22.1.1.0 (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\com.bskyb.skygoplayer_is1) (Version: 22.1.1.0 - Sky)

Skype Version 8.78 (HKLM-x32\...\Skype_is1) (Version: 8.78 - Skype Technologies S.A.)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

SteelSeries GG 12.2.0 (HKLM\...\SteelSeries GG) (Version: 12.2.0 - SteelSeries ApS)

Universal Holtek RGB DRAM (HKLM\...\{826388E4-E31F-4514-948B-3BB954FB3EAF}) (Version: 1.0.0.2 - PD) Hidden

Universal Holtek RGB DRAM (HKLM-x32\...\{6870588f-9f28-488b-a169-cf548ad6b393}) (Version: 1.0.0.2 - PD)

Verfügbare Autodesk-Apps (HKLM-x32\...\{46EA8955-D629-4B3E-AAF0-D136031D7C95}) (Version: 3.2.1 - Autodesk)

WD_BLACK AN1500 (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden

WD_BLACK AN1500 (HKLM-x32\...\{e42c5874-37b0-4977-9e8d-70bf006e1f76}) (Version: 1.0.14.0 - ENE TECHNOLOGY INC.) Hidden

WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Zoom (HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\ZoomUMX) (Version: 5.8.4 (1736) - Zoom Video Communications, Inc.)
 

Packages:

=========

Age of Empires IV -> C:\Program Files\WindowsApps\Microsoft.Cardinal_5.0.9369.0_x64__8wekyb3d8bbwe [2021-12-11] (Microsoft Studios)

Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_1.22.2.0_x64__6rarf9sa4v8jt [2021-12-18] (Disney)

Grounded -> C:\Program Files\WindowsApps\Microsoft.Maine_1.11.13.0_x64__8wekyb3d8bbwe [2021-12-08] (Microsoft Studios)

Microsoft Minesweeper -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMinesweeper_3.1.9160.0_x86__8wekyb3d8bbwe [2021-12-05] (Microsoft Studios) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.11.12030.0_x64__8wekyb3d8bbwe [2021-12-12] (Microsoft Studios) [MS Ad]

Minecraft Launcher -> C:\Program Files\WindowsApps\Microsoft.4297127D64EC6_1.0.113.0_x64__8wekyb3d8bbwe [2021-12-22] (Microsoft Studios)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.961.0_x64__56jybvy8sckqj [2021-11-28] (NVIDIA Corp.)

Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0 [2021-12-12] (Spotify AB) [Startup Task]

Tetris® Effect: Connected -> C:\Program Files\WindowsApps\48710EnhanceIncorporated.TRIP2.0_1.2.71.0_x64__63vy8jfbpt4dt [2021-12-27] (Enhance Incorporated)

theHunter™: Call of the Wild - Windows 10 -> C:\Program Files\WindowsApps\AvalancheStudios.theHunterCalloftheWild-Windows10_1.0.9.0_x64__m0byj0nmrybdr [2021-12-17] (Fatalist Publishing AB)

WhatsApp Desktop -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2147.16.0_x64__cv1g1gvanyjgm [2021-12-18] (WhatsApp Inc.)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{345D3165-3889-4694-AB75-A91A27B217E8}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{4AC6DFE1-607B-45B2-B289-D7FBCD44169C}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{74D0CE91-F931-4FAC-BEA9-EE32E43EAD37}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{8B4929F8-076F-4AEC-AFEE-8928747B7AE3}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{AA46BA8A-9825-40FD-8493-0BA3C4D5CEB5}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc. -> Autodesk, Inc.)

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{D1DE6864-2236-48B7-99C3-D29C757903A4}\localserver32 -> C:\Program Files\Autodesk\AutoCAD 2020\acad.exe /Automation => Keine Datei

CustomCLSID: HKU\S-1-5-21-3691910798-632038697-1117892477-1001_Classes\CLSID\{E2C40589-DE61-11ce-BAE0-0020AF6D7005}\InprocServer32 -> C:\Program Files\Autodesk\AutoCAD 2022\de-DE\acadficn.dll (Autodesk Asia Pte. Ltd. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers: [  OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [  OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2021-01-29] (Autodesk, Inc. -> Autodesk, Inc.)

ShellIconOverlayIdentifiers-x32: [  OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [  OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2021-01-29] (Autodesk, Inc. -> Autodesk)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\21.230.1107.0004\FileSyncShell64.dll [2021-12-09] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_b7184c0e1c94c102\nvshext.dll [2021-11-11] (Nvidia Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-08-26] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2021-11-28 20:59 - 2021-02-18 12:07 - 000085504 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\zlib1.dll

2021-12-12 23:36 - 2019-12-23 18:51 - 000093184 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\zlibwapi.dll

2021-11-28 20:58 - 2022-01-04 12:39 - 000046336 _____ (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AXSP\4.02.12\PEbiosinterface32.dll

2021-07-27 16:54 - 2021-07-27 16:54 - 002146304 _____ (Holtek Semiconductor Inc.) [Datei ist nicht signiert] C:\Program Files\SteelSeries\GG\HIDDLL.dll

2021-07-27 16:54 - 2021-07-27 16:54 - 002284032 _____ (Holtek) [Datei ist nicht signiert] C:\Program Files\SteelSeries\GG\ISPDLL.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000287232 _____ (The curl library, hxxps://curl.haxx.se/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libcurl.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 003394560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libcrypto-1_1-x64.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 002281984 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\LIBEAY32.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000679424 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\libssl-1_1-x64.dll

2021-11-28 20:59 - 2021-02-18 12:07 - 000361472 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AIOFanSDK\SSLEAY32.dll

2021-12-12 23:36 - 2019-06-26 16:07 - 003394560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\libcrypto-1_1-x64.dll

2021-12-12 23:36 - 2019-06-26 16:07 - 000679424 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\libssl-1_1-x64.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\Public\Shared Files:VersionCache [8020]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\Software\Classes\.scr: AutoCADScriptFile => C:\Windows\system32\notepad.exe "%1"
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2021-12-08] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2021-11-28] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2021-06-05 13:08 - 2021-12-30 17:41 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run32: => "Autodesk Genuine Service "

HKLM\...\StartupApproved\Run32: => "Autodesk Desktop App"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\StartupFolder: => "GenuineService.lnk"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\StartupFolder: => "An OneNote senden.lnk"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Battle.net"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "GogGalaxy"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "Skype for Desktop"

HKU\S-1-5-21-3691910798-632038697-1117892477-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{C611E6B0-69B0-4495-B954-3F3D19FD70EC}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe => Keine Datei

FirewallRules: [{6EF60863-DC80-46CE-8813-C830411A1F47}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{6EE6C028-EB59-4D64-8FD6-2849B9DC8F82}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{CFA4B936-D7B3-4B22-B5DC-47B9B326A65F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21302.202.1065.6968_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{947464A6-3D69-4A58-A736-B44480C16454}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_21302.202.1065.6968_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{EAC64F77-D29E-45E8-9EE9-DF0C54DE5361}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{0DE6306A-3CD3-4D09-8D9C-EEAAE09B9501}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{0424B4A4-DA67-47CE-A47C-F4B39E2D98B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{94B9E1E4-03C8-436A-A812-5028F0575550}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{924CA816-8709-4892-9752-13ABF3B5AD08}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{2ED24E4B-3BE9-483B-BDD3-C25C96D751E7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (Nvidia Corporation -> NVIDIA Corporation)

FirewallRules: [{908EE5F5-CD7A-49EA-95E6-B0CD622E8584}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{74FDF41A-4ACE-4D37-AE76-03B6EF5BA63F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{FB798263-D981-425B-BAC2-D3B9A0776994}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{6491365C-26DD-42CE-AF3F-5E67E6AAE91F}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{A9D703D8-177D-4CE2-9D5A-7694BAE13912}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{1F9F1897-0726-45EF-B549-FD073970AA95}] => (Allow) C:\Users\Lorenz\AppData\Roaming\Zoom\bin\airhost.exe => Keine Datei

FirewallRules: [{60063FA3-0D89-4399-8A86-0217F09546F6}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{75A024FA-7368-4ADD-8B7C-4EDC50E6D3ED}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{A902088F-634C-4B67-8A50-FE99B5E4F8E0}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{EC34F37D-7E85-4C3F-9462-696F16525FE8}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{1674010F-D772-4928-B4CA-1361ACA6C9A4}] => (Allow) D:\SteamLibrary\steamapps\common\Catan Universe\CatanUniverse.exe () [Datei ist nicht signiert]

FirewallRules: [{44E90B10-CF8C-461D-AA24-086909A1DABC}] => (Allow) D:\SteamLibrary\steamapps\common\Catan Universe\CatanUniverse.exe () [Datei ist nicht signiert]

FirewallRules: [{3554DCD3-5ACA-40B5-A8CE-40B127EE7C73}] => (Allow) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

FirewallRules: [{DCA49CB9-FEBE-4CEE-8AE3-38B81EA4B24A}] => (Allow) C:\Program Files (x86)\CheckPoint\Endpoint Connect\TracSrvWrapper.exe (Check Point Software Technologies Ltd. -> Check Point Software Technologies)

FirewallRules: [{BF1C14D1-8803-4B66-B277-355B5DAFCB5B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)

FirewallRules: [{3AA2B9A4-7EF9-45C2-A2F9-BA5A821F82A4}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\bmdpaneld.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{3CDA3983-A9CC-4354-B4EE-2220AC480BD8}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\DaVinciPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{5FDCE300-AE46-4826-9F92-A6EFBFE5CF6E}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\JLCooperPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{EBBF65E7-D409-497D-9D1D-BEDA013F9F10}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\EuphonixPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{A02F67CE-877C-48C5-9E88-7F648560A94B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\TangentPanelDaemon.exe (Blackmagic Design Pty Ltd -> )

FirewallRules: [{AF8F6112-316F-4FD6-831B-1908B72C0A9B}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\ElementsPanelDaemon.exe => Keine Datei

FirewallRules: [{38E8418D-8863-4CD5-AA13-878673FDE637}] => (Allow) C:\Program Files\Blackmagic Design\DaVinci Resolve\fuscript.exe (Blackmagic Design Pty Ltd -> Blackmagic Design Pty. Ltd.)

FirewallRules: [{DA2394A3-AE88-48B2-BE12-2187E4EF3A60}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )

FirewallRules: [{D9094D71-9B8D-42F6-B722-6BC18DBE1BEE}] => (Allow) D:\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve Corp. -> )

FirewallRules: [{83F41C5D-101E-4B01-A8EF-187D07996342}] => (Allow) D:\SteamLibrary\steamapps\common\Super Animal Royale\Super Animal Royale.exe () [Datei ist nicht signiert]

FirewallRules: [{86B8B368-C5FA-4A01-A9D4-E953D174E7D0}] => (Allow) D:\SteamLibrary\steamapps\common\Super Animal Royale\Super Animal Royale.exe () [Datei ist nicht signiert]

FirewallRules: [{E4082FF3-A10B-43AF-9FE3-5DA6BFB32854}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{42F48B0F-85FE-4313-860B-691FEDCE1BA4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{DD6FA5BA-AC10-4256-95B2-837DF86FA7DE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{1A748B94-9758-459E-8117-E08E8C9B29D2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{F9CA67BF-6681-4D1F-8D40-B96ED41E68E1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{6FF48FC2-E5DC-43D3-ACDD-B3975A902B20}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{0C0AF6B0-0CE2-4C5F-9D2C-D74A4A6C74E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{187BA9E9-A934-44F0-AF73-09CC0980DF7E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.174.631.0_x86__zpdnekdrzrea0\Spotify.exe (Spotify AB -> Spotify Ltd)

FirewallRules: [{62C4CEC3-D0E4-4C4F-A3A2-F915309D3516}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{FBA01885-F507-48D7-80E9-9332CD303BFB}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (ASUSTeK Computer Inc. -> ASUS)

FirewallRules: [{8DE3D557-D2A8-4439-BE32-FA7F628A6B3E}] => (Allow) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe => Keine Datei

FirewallRules: [{14CA8670-A19F-4F42-AF50-1327A0ED750E}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{F4D49A8A-1AFE-4CC0-B27B-A10E427D16AD}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\96.0.1054.62\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{4FE00A45-E446-47BC-BCAA-DB4795687FE7}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe

FirewallRules: [UDP Query User{9A6B1092-A574-4142-9C37-D21576A6D600}C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe] => (Allow) C:\program files (x86)\minecraft launcher\runtime\java-runtime-beta\windows-x64\java-runtime-beta\bin\java.exe

FirewallRules: [TCP Query User{496BC239-34F6-42ED-92BB-759ED6DC0967}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)

FirewallRules: [UDP Query User{19E979D4-81EF-494A-B995-1CC1A2AEA12B}C:\program files\badlion client\badlion client.exe] => (Allow) C:\program files\badlion client\badlion client.exe (Turtle Entertainment Online, Inc. -> Badlion)
 

==================== Wiederherstellungspunkte =========================
 

03-01-2022 14:05:59 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: PCI-Ver-/Entschlüsselungscontroller

Description: PCI-Ver-/Entschlüsselungscontroller

Class Guid: 

Manufacturer: 

Service: 

Problem: : The drivers for this device are not installed. (Code 28)

Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (01/04/2022 12:39:31 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AcPowerNotification.exe, Version: 1.0.2.17, Zeitstempel: 0xb2142777

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.22000.348, Zeitstempel: 0x71e3e134

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0013eb22

ID des fehlerhaften Prozesses: 0x1370

Startzeit der fehlerhaften Anwendung: 0x01d8015fb94d8cba

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe

Pfad des fehlerhaften Moduls: C:\Windows\System32\KERNELBASE.dll

Berichtskennung: 3c230ae7-2673-46d5-b9ad-0375ccd45cde

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/04/2022 12:39:31 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: AcPowerNotification.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.FormatException

   bei System.Number.StringToNumber(System.String, System.Globalization.NumberStyles, NumberBuffer ByRef, System.Globalization.NumberFormatInfo, Boolean)

   bei System.Number.ParseInt32(System.String, System.Globalization.NumberStyles, System.Globalization.NumberFormatInfo)

   bei AcPowerNotification.MultiLang.getLanguageCode()

   bei AcPowerNotification.MultiLang.getLanguageString(System.String)

   bei AcPowerNotification.MainWindow.InitNotifyIcon()

   bei AcPowerNotification.MainWindow..ctor()

   bei AcPowerNotification.App.Application_Startup(System.Object, System.Windows.StartupEventArgs)

   bei System.Windows.Application.OnStartup(System.Windows.StartupEventArgs)

   bei System.Windows.Application.<.ctor>b__1_0(System.Object)

   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()

   bei System.Windows.Threading.DispatcherOperation.InvokeInSecurityContext(System.Object)

   bei MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)

   bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)

   bei System.Windows.Threading.DispatcherOperation.Invoke()

   bei System.Windows.Threading.Dispatcher.ProcessQueue()

   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)

   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)

   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)

   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)

   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)

   bei System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)

   bei System.Windows.Application.RunDispatcher(System.Object)

   bei System.Windows.Application.RunInternal(System.Windows.Window)

   bei System.Windows.Application.Run(System.Windows.Window)

   bei AcPowerNotification.App.Main()
 

Error: (01/04/2022 12:39:30 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-1O2S8S3$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Tue, 04 Jan 2022 11:39:22 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: af4ecb79-d776-4dcc-bede-d987591b9e67
 

Methode: GET(188ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/04/2022 12:39:30 PM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Tue, 04 Jan 2022 11:39:21 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: 6e922c5d-35c5-4499-a950-7db4b5b20f66
 

Methode: GET(266ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/04/2022 12:39:27 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: NoiseCancelingEngine.exe, Version: 1.0.0.14, Zeitstempel: 0x616684f0

Name des fehlerhaften Moduls: unknown, Version: 0.0.0.0, Zeitstempel: 0x00000000

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000000000

ID des fehlerhaften Prozesses: 0x1354

Startzeit der fehlerhaften Anwendung: 0x01d8015fb94d4c50

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe

Pfad des fehlerhaften Moduls: unknown

Berichtskennung: 58fd1222-889c-4f02-80ef-968b113ac40f

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (01/04/2022 11:40:25 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-1O2S8S3$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Tue, 04 Jan 2022 10:40:16 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: 4b966edf-e880-41d4-8d73-be587ef611b1
 

Methode: GET(172ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/04/2022 11:40:25 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für Lokales System über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Tue, 04 Jan 2022 10:40:16 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: dc33b50f-2c2c-4051-abc6-afde3c944519
 

Methode: GET(281ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 

Error: (01/04/2022 11:37:02 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)

Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\DESKTOP-1O2S8S3$ über https://AMD-KeyId-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net/templates/Aik/scep:
 

GetCACaps

GetCACaps: Not Found

{"Message":"The authority \"amd-keyid-578c545f796951421221a4a578acdb5f682f89c8.microsoftaik.azure.net\" does not exist."}

HTTP/1.1 404 Not Found

Date: Tue, 04 Jan 2022 10:36:53 GMT

Content-Length: 121

Content-Type: application/json; charset=utf-8

X-Content-Type-Options: nosniff

Strict-Transport-Security: max-age=31536000;includeSubDomains

x-ms-request-id: 60781ba1-f7e7-4cf9-87af-2b2ba7b46452
 

Methode: GET(188ms)

Phase: GetCACaps

Nicht gefunden (404). 0x80190194 (-2145844844 HTTP_E_STATUS_NOT_FOUND)
 
 

Systemfehler:

=============

Error: (01/04/2022 12:38:59 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
 

Error: (01/04/2022 12:38:59 PM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "AdskLicensingService" konnte sich nicht als "NT Authority\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

Die Anforderung wird nicht unterstützt.
 
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/04/2022 12:38:58 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/04/2022 11:39:57 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
 

Error: (01/04/2022 11:39:57 AM) (Source: Service Control Manager) (EventID: 7038) (User: )

Description: Der Dienst "AdskLicensingService" konnte sich nicht als "NT Authority\LocalService" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden: 

Die Anforderung wird nicht unterstützt.
 
 

Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
 

Error: (01/04/2022 11:39:56 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Autodesk Desktop Licensing Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/04/2022 11:37:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "UserDataSvc_4db21" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (01/04/2022 11:37:04 AM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "UnistoreSvc_4db21" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.
 
 

CodeIntegrity:

===============

Date: 2022-01-04 11:39:26

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume3\Program Files\Norton Security\Engine\22.21.11.46\symamsi.dll that did not meet the Windows signing level requirements. ਍
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. 1202 10/22/2020

Hauptplatine: ASUSTeK COMPUTER INC. TUF GAMING B550-PLUS (WI-FI)

Prozessor: AMD Ryzen 9 5900X 12-Core Processor 

Prozentuale Nutzung des RAM: 14%

Installierter physikalischer RAM: 32648.86 MB

Verfügbarer physikalischer RAM: 27791.94 MB

Summe virtueller Speicher: 37512.86 MB

Verfügbarer virtueller Speicher: 30615.11 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:930.79 GB) (Free:716.09 GB) NTFS

Drive d: (HDD) (Fixed) (Total:1862.73 GB) (Free:1370.58 GB) NTFS
 

\\?\Volume{43100c20-10a9-430f-976f-62c87e01fea4}\ () (Fixed) (Total:0.6 GB) (Free:0.08 GB) NTFS

\\?\Volume{9e8eab11-59d5-e36a-604c-67b56b5b7697}\ () (Fixed) (Total:5.59 GB) (Free:0 GB) NTFS

\\?\Volume{ec8cf840-c504-2383-47b5-12d05e12034b}\ () (Fixed) (Total:85.68 GB) (Free:0 GB) NTFS

\\?\Volume{89133eae-0ef4-3cd9-319e-b59c927f2fb4}\ () (Fixed) (Total:67.33 GB) (Free:0 GB) NTFS

\\?\Volume{accf2efd-eebc-d015-c312-8aa29d41c55f}\ () (Fixed) (Total:0.01 GB) (Free:0 GB) NTFS

\\?\Volume{2e71db62-b143-3bdb-7fef-23dcca8b18a0}\ () (Fixed) (Total:4 GB) (Free:0 GB) NTFS

\\?\Volume{6e1db05e-af51-4c4f-ac30-258319ddaeb5}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 2 (Protective MBR) (Size: 1862.8 GB) (Disk ID: 00000000)
 

Partition: GPT.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 3.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 4.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 5.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 6.

Attempted reading MBR returned 0 bytes.

 Could not read MBR for disk 7.
 

==================== Ende von Addition.txt =======================

Code:

Untersuchungsergebnis der Verknüpfungen des Benutzers (x64) Version: 27-12-2021

durchgeführt von Lorenz (04-01-2022 12:45:11)

Gestartet von C:\Users\Lorenz\Downloads

Start-Modus: Normal
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 
 

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\TruView.lnk -> C:\Program Files\Leica Geosystems\TruView\TruView.exe (Leica Geosystems, AG)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSACCESS.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Badlion Client.lnk -> C:\Program Files\Badlion Client\Badlion Client.exe (Badlion)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk -> C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win32\EpicGamesLauncher.exe (Epic Games, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk -> C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk -> C:\Program Files\Microsoft OneDrive\OneDrive.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTE.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk -> C:\Program Files\Microsoft Office\root\Office16\POWERPNT.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk -> C:\Program Files\Microsoft Office\root\Office16\MSPUB.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk -> C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell ISE.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\PowerShell_ISE.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype\Skype.lnk -> C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Technologies S.A.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games\Riot Client.lnk -> D:\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\OBS Studio (64bit).lnk -> C:\Program Files\obs-studio\bin\64bit\obs64.exe (OBS)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio\Uninstall.lnk -> C:\Program Files\obs-studio\uninstall.exe (obsproject.com)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation\GeForce Experience.lnk -> C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe (NVIDIA Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft Launcher\Minecraft Launcher.lnk -> C:\Program Files (x86)\Minecraft Launcher\MinecraftLauncher.exe (Mojang)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools\Office-Spracheinstellungen.lnk -> C:\Program Files\Microsoft Office\root\Office16\SETLANG.EXE (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\LogMeIn Hamachi.lnk -> C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com\GOG GALAXY\GOG GALAXY.lnk -> C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Check Point\Check Point Mobile.lnk -> C:\Program Files (x86)\CheckPoint\Endpoint Connect\TrGUI.exe (Check Point Software Technologies)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Vanguard\Call of Duty Vanguard.lnk -> C:\Program Files (x86)\Call of Duty Vanguard\Vanguard Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Call of Duty Modern Warfare\Call of Duty Modern Warfare.lnk -> D:\Neuer Ordner\Call of Duty Modern Warfare\Modern Warfare Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\DaVinci Control Panels.lnk -> C:\Program Files (x86)\Blackmagic Design\DaVinci Control Panels\Setup Utility\DaVinci Control Panels Setup.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\Fairlight Studio Utility.lnk -> C:\Program Files (x86)\Blackmagic Design\DaVinci Control Panels\Fairlight Studio Utility\Fairlight Studio Utility.exe ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Player.lnk -> C:\Program Files (x86)\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Player\BlackmagicRAWPlayer.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Speed Test.lnk -> C:\Program Files (x86)\Blackmagic Design\Blackmagic RAW\Blackmagic RAW Speed Test\BlackmagicRAWSpeedTest.exe (Blackmagic Design)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net\Battle.net.lnk -> C:\Program Files (x86)\Battle.net\Battle.net Launcher.exe (Blizzard Entertainment)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Download Manager.lnk -> C:\Windows\Installer\{402BEAF1-A9F1-4D40-85B4-4F43D0D0EA27}\AdDLMgr.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Uninstall Tool.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\Uninstall Tool\R1\UninstallTool.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk\Autodesk Desktop-App\Autodesk Desktop-App.lnk -> C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Digitale Signaturen zuordnen.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AcSignApply.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Referenzmanager.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdRefMan.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Stapelweise Standardsprüfung.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\DwgCheckStandards.exe (Autodesk, Inc.)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Component Services.lnk -> C:\Windows\System32\comexp.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\dfrgui.lnk -> C:\Windows\System32\dfrgui.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Disk Cleanup.lnk -> C:\Windows\System32\cleanmgr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\iSCSI Initiator.lnk -> C:\Windows\System32\iscsicpl.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Memory Diagnostics Tool.lnk -> C:\Windows\System32\MdSched.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (32-bit).lnk -> C:\Windows\SysWOW64\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\ODBC Data Sources (64-bit).lnk -> C:\Windows\System32\odbcad32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Print Management.lnk -> C:\Windows\System32\printmanagement.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\RecoveryDrive.lnk -> C:\Windows\System32\RecoveryDrive.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Registry Editor.lnk -> C:\Windows\regedit.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\services.lnk -> C:\Windows\System32\services.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Configuration.lnk -> C:\Windows\System32\msconfig.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\System Information.lnk -> C:\Windows\System32\msinfo32.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows Defender Firewall with Advanced Security.lnk -> C:\Windows\System32\WF.msc ()

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Quick Assist.lnk -> C:\Windows\System32\quickassist.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Remote Desktop Connection.lnk -> C:\Windows\System32\mstsc.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Steps Recorder.lnk -> C:\Windows\System32\psr.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Fax and Scan.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Wordpad.lnk -> C:\Program Files\Windows NT\Accessories\wordpad.exe (Microsoft Corporation)

Shortcut: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Character Map.lnk -> C:\Windows\System32\charmap.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\Links\Desktop.lnk -> C:\Users\Lorenz\Desktop ()

Shortcut: C:\Users\Lorenz\Links\Downloads.lnk -> C:\Users\Lorenz\Downloads ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Studium.lnk -> D:\OneDrive\Studium ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Zoom.lnk -> C:\Users\Lorenz\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Benutzerhandbuch für die Konsolenversion von RAR.lnk -> C:\Program Files\WinRAR\Rar.txt ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Hilfe zu WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.chm ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\Was ist neu in dieser Version.lnk -> C:\Program Files\WinRAR\WhatsNew.txt ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR\WinRAR.lnk -> C:\Program Files\WinRAR\WinRAR.exe (Alexander Roshal)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell (x86).lnk -> C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell\Windows PowerShell.lnk -> C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Command Prompt.lnk -> C:\Windows\System32\cmd.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Control Panel.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools\Run.lnk -> C:\Windows\System32\shell32.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Steam.lnk -> C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GenuineService.lnk -> C:\Users\Lorenz\Autodesk\Genuine Service\GenuineService.exe (Keine Datei)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky\Sky Go.lnk -> C:\Users\Lorenz\AppData\Roaming\Sky\Sky Go\Sky Go.exe (Sky Deutschland AG)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022 deinstallieren.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\uninst.exe (Movavi)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\VideoEditorPlus.exe (Movavi)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Movavi Video Editor Plus 2022\Website Movavi Video Editor Plus 2022.lnk -> C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.url ()

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design\DaVinci Resolve\DaVinci Resolve.lnk -> C:\Program Files\Blackmagic Design\DaVinci Resolve\Resolve.exe (Blackmagic Design Pty. Ltd.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Magnify.lnk -> C:\Windows\System32\Magnify.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\Narrator.lnk -> C:\Windows\System32\Narrator.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility\On-Screen Keyboard.lnk -> C:\Windows\System32\osk.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Bluetooth-Dateiübertragung.LNK -> C:\Windows\System32\fsquirt.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk -> C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Shows Desktop.lnk -> C:\Windows\System32\imageres.dll (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Window Switcher.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\File Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC)

Shortcut: C:\Users\Lorenz\AppData\Roaming\Autodesk\AutoCAD 2022\R24.1\deu\Plotters\Plot Styles\Assistent zum Hinzufügen einer Plotstiltabelle.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\styshwiz.exe (Autodesk, Inc.)

Shortcut: C:\Users\Lorenz\AppData\Roaming\.minecraft\assets\blclient\objects\assets\minecraft\blc\textures\cosmetics\bandana\276\cosmetics - Shortcut.lnk -> D:\Badlion\mc17client\clientcommon\src\main\resources\assets\minecraft\blc\textures\cosmetics (Keine Datei)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\01 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\02 - Windows Terminal.lnk -> Tile and icon assets

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\03 - Computer Management.lnk -> C:\Windows\System32\compmgmt.msc ()

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\04 - Disk Management.lnk -> C:\Windows\System32\diskmgmt.msc ()

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\07 - Event Viewer.lnk -> C:\Windows\System32\eventvwr.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\09 - Mobility Center.lnk -> C:\Windows\System32\mblctr.exe (Microsoft Corporation)

Shortcut: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\4 - Control Panel.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation)
 
 

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /7

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SteelSeries\SteelSeries GG\SteelSeries GG.lnk -> C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe (SteelSeries ApS) -> -dataPath="C:\ProgramData\SteelSeries\GG" -dbEnv=production

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Riot Games\League of Legends.lnk -> D:\Riot Games\Riot Client\RiotClientServices.exe (Riot Games, Inc.) -> --launch-product=league_of_legends --launch-patchline=live

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi\Uninstall.lnk -> C:\Windows\SysWOW64\msiexec.exe (Microsoft Corporation) -> /i {ECC0FA07-863E-44BC-8B1D-DA22F96E5FB7} REMOVE=ALL

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\AutoCAD 2022 - Deutsch (German).lnk -> C:\Program Files\Autodesk\AutoCAD 2022\acad.exe (Autodesk, Inc.) ->  /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Dienstprogramm für Lizenzübertragung - AutoCAD 2022.lnk -> C:\Program Files (x86)\Common Files\Autodesk Shared\Adlm\R23\LTU.exe (Autodesk, Inc.) -> 001N1 2022.0.0.F -d SA -l de-DE

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Einstellungen auf Vorgabe zurücksetzen.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /reset /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\AutoCAD 2022-Einstellungen exportieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /e /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\AutoCAD 2022-Einstellungen importieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /i /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoCAD 2022 - Deutsch (German)\Benutzerdefinierte Einstellungen migrieren\Von früherem Release migrieren.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\AdMigrator.exe (Autodesk, Inc.) -> /product ACAD /language "de-DE"

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Computer Management.lnk -> C:\Windows\System32\compmgmt.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Event Viewer.lnk -> C:\Windows\System32\eventvwr.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Performance Monitor.lnk -> C:\Windows\System32\perfmon.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Resource Monitor.lnk -> C:\Windows\System32\perfmon.exe (Microsoft Corporation) -> /res

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Security Configuration Management.lnk -> C:\Windows\System32\secpol.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Task Scheduler.lnk -> C:\Windows\System32\taskschd.msc () -> /s

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows Media Player.lnk -> C:\Program Files (x86)\Windows Media Player\wmplayer.exe (Microsoft Corporation) -> /prefetch:1

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessibility\Speech Recognition.lnk -> C:\Windows\Speech\Common\sapisvr.exe (Microsoft Corporation) -> -SpeechUX

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools

ShortcutWithArgument: C:\Users\Default\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAbout

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.AdministrativeTools

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom\Uninstall Zoom.lnk -> C:\Users\Lorenz\AppData\Roaming\Zoom\uninstall\Installer.exe (Zoom Video Communications, Inc.) -> /uninstall

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation) -> /tsr

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc\Discord.lnk -> C:\Users\Lorenz\AppData\Local\Discord\Update.exe (GitHub) -> --processStart Discord.exe

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Fax Recipient.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\SendTo\Faxempfänger.lnk -> C:\Windows\System32\WFS.exe (Microsoft Corporation) -> /SendTo

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Microsoft Outlook.lnk -> C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE (Microsoft Corporation) -> /recycle

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Microsoft\Excel\Verbrauchsdaten_PHD_Beleg-bearbeitet309332263156754504\Verbrauchsdaten_PHD_Beleg-bearbeitet.xlsx.lnk -> D:\Downloads\Verbrauchsdaten_PHD_Beleg-bearbeitet.xlsx () -> 50

ShortcutWithArgument: C:\Users\Lorenz\AppData\Roaming\Autodesk\AutoCAD 2022\R24.1\deu\Plotters\Assistent zum Hinzufügen eines Plotters.lnk -> C:\Program Files\Autodesk\AutoCAD 2022\addplwiz.exe (Autodesk, Inc.) -> /LANGUAGE de-DE

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\04-1 - NetworkStatus.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageNetworkStatus

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\05 - Device Manager.lnk -> C:\Windows\System32\control.exe (Microsoft Corporation) -> /name Microsoft.DeviceManager

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\06 - SystemAbout.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAbout

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\08 - PowerAndSleep.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageScreenPowerAndSleep

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group3\10 - AppsAndFeatures.lnk -> C:\Windows\ImmersiveControlPanel\systemsettings.exe (Microsoft Corporation) -> page=SettingsPageAppsSizes

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\1 - Run.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f3-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\2 - Search.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{2559a1f8-21d7-11d4-bdaf-00c04f60b9f0}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\3 - Windows Explorer.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{52205fd8-5dfb-447d-801a-d0b52f2e83e1}

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group2\5 - Task Manager.lnk -> C:\Windows\System32\Taskmgr.exe (Microsoft Corporation) -> /0

ShortcutWithArgument: C:\Users\Lorenz\AppData\Local\Microsoft\Windows\WinX\Group1\1 - Desktop.lnk -> C:\Windows\explorer.exe (Microsoft Corporation) -> shell:::{3080F90D-D7AD-11D9-BD98-0000947B0257}
 
 

InternetURL: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam\Steam Support Center.url -> URL: hxxp://support.steampowered.com/

InternetURL: C:\Users\Lorenz\Favorites\Bing.url -> URL: hxxp://go.microsoft.com/fwlink/p/?LinkId=255142

InternetURL: C:\Users\Lorenz\AppData\Roaming\Movavi Video Editor Plus 2022\Movavi Video Editor Plus 2022.url -> URL: hxxps://links.movavi.com/?asrc=start&app=videoeditorplus&module=installer&version=22-0-0&lang=de_de&isTrial=1&partner=&huid=74ae5d31d814f478d8f8c004fcc162237e2c5c08&utm_nooverride=1

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Catan Universe.url -> URL: steam://rungameid/544730

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Counter-Strike Global Offensive.url -> URL: steam://rungameid/730

InternetURL: C:\Users\Lorenz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam\Super Animal Royale.url -> URL: steam://rungameid/843380
 

==================== Ende vom Shortcut.txt =============================

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner bitte wiederholen falls es Funde gab.

LogDatei AdwCleaner

Laut Scan wurde nichts gefunden

Code:

# -------------------------------

# Malwarebytes AdwCleaner 8.3.1.0

# -------------------------------

# Build:    11-18-2021

# Database: 2021-12-02.1 (Cloud)

# Support:  https://www.malwarebytes.com/support

#

# -------------------------------

# Mode: Scan

# -------------------------------

# Start:    01-04-2022

# Duration: 00:00:02

# OS:       Windows 10 Pro

# Scanned:  32025

# Detected: 0
 
 

***** [ Services ] *****
 

No malicious services found.
 

***** [ Folders ] *****
 

No malicious folders found.
 

***** [ Files ] *****
 

No malicious files found.
 

***** [ DLL ] *****
 

No malicious DLLs found.
 

***** [ WMI ] *****
 

No malicious WMI found.
 

***** [ Shortcuts ] *****
 

No malicious shortcuts found.
 

***** [ Tasks ] *****
 

No malicious tasks found.
 

***** [ Registry ] *****
 

No malicious registry entries found.
 

***** [ Chromium (and derivatives) ] *****
 

No malicious Chromium entries found.
 

***** [ Chromium URLs ] *****
 

No malicious Chromium URLs found.
 

***** [ Firefox (and derivatives) ] *****
 

No malicious Firefox entries found.
 

***** [ Firefox URLs ] *****
 

No malicious Firefox URLs found.
 

***** [ Hosts File Entries ] *****
 

No malicious hosts file entries found.
 

***** [ Preinstalled Software ] *****
 

No Preinstalled Software found.
 
 
 

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########

Kontrollscans mit MBAM und RK

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.

MBAM + Rouge Killer

Rouge Killer jedoch einmal abgestürzt und konnte erst nach Neustart wieder geöffnet werden.

Code:

Program            : RogueKiller Anti-Malware

Version            : 15.1.5.0

x64                : Yes

Program Date       : Dec 15 2021

Location           : C:\Users\Lorenz\Desktop\RogueKiller_portable64.exe

Premium            : No

Company            : Adlice Software

Website            : https://www.adlice.com/

Contact            : https://adlice.com/contact/

Website            : https://adlice.com/download/roguekiller/

Operating System   : Windows 10 (10.0.22000) 64-bit

64-bit OS          : Yes

Startup            : 0

WindowsPE          : No

User               : Lorenz

User is Admin      : Yes

Date               : 2022/01/04 13:39:19

Type               : Scan

Aborted            : No

Scan Mode          : Standard

Duration           : 100

Found items        : 0

Total scanned      : 65265

Signatures Version : 20220103_133653

Truesight Driver   : Yes

Updates Count      : 3
 

************************* Warnings *************************
 

************************* Updates *************************

WinRAR 5.91 (64-Bit) (64-bit), version 5.91.0

  [+] Available Version        : 6.02

  [+] Wow6432                  : No

  [+] Portable                 : No

  [+] update_location          : C:\Program Files\WinRAR\
 

Skype Version 8.78 (32-bit), version 8.78.0.159

  [+] Available Version        : 8.79.0.95

  [+] Size                     : 253 MB

  [+] Wow6432                  : Yes

  [+] Portable                 : No

  [+] update_location          : C:\Program Files (x86)\Microsoft\Skype for Desktop\
 

Zoom (64-bit), version 5.8.4 (1736)

  [+] Available Version        : 5.9.1

  [+] Size                     : 9,76 MB

  [+] Wow6432                  : No

  [+] Portable                 : No

  [+] update_location          : C:\Users\Lorenz\AppData\Roaming\Zoom\bin
 
 

************************* Processes *************************
 

************************* Modules *************************
 

************************* Services *************************
 

************************* Scheduled Tasks *************************
 

************************* Registry *************************
 

************************* WMI *************************
 

************************* Hosts File *************************

is_too_big      : No

hosts_file_path : C:\Windows\System32\drivers\etc\hosts
 
 

************************* Filesystem *************************
 

************************* Web Browsers *************************
 

************************* Antirootkit *************************

Code:

Malwarebytes

www.malwarebytes.com
 

-Protokolldetails-

Scan-Datum: 04.01.22

Scan-Zeit: 14:09

Protokolldatei: 8a94399c-6d5f-11ec-b195-f02f741ea6ee.json
 

-Softwaredaten-

Version: 4.5.0.152

Komponentenversion: 1.0.1538

Version des Aktualisierungspakets: 1.0.49388

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 11 (Build 22000.376)

CPU: x64

Dateisystem: NTFS

Benutzer: DESKTOP-1O2S8S3\Lorenz
 

-Scan-Übersicht-

Scan-Typ: Bedrohungs-Scan

Scan gestartet von: Manuell

Ergebnis: Abgeschlossen

Gescannte Objekte: 324350

Erkannte Bedrohungen: 0

In die Quarantäne verschobene Bedrohungen: 0

Abgelaufene Zeit: 1 Min., 37 Sek.
 

-Scan-Optionen-

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Aktiviert

Heuristik: Aktiviert

PUP: Erkennung

PUM: Erkennung
 

-Scan-Details-

Prozess: 0

(keine bösartigen Elemente erkannt)
 

Modul: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswert: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Daten-Stream: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Datei: 0

(keine bösartigen Elemente erkannt)
 

Physischer Sektor: 0

(keine bösartigen Elemente erkannt)
 

WMI: 0

(keine bösartigen Elemente erkannt)
 
 

(end)

Da ist/war nix. entweder war das besch... Norton alles verhunzt oder Norton war selbst der Fehler.
Ich verschiebe nach Windows.

Was du noch versuchen kannst, waere entsprechend die fehlenden Treiber installieren.
Insbesondere die Chipsatztreiber von AMD und aktualisiere das BIOS. Es sind einige Fehler beseitigt worden, was Ryzen5000 und Speicherkompatibilitaet angeht.

Falls irgendwas im BIOS in Bezug auf Geschwindigkeit "optimiert" wurde, koennte man dort auch ansetzen.

Ja, in der Tat:

Zitat:

BIOS: American Megatrends Inc. 1202 10/22/2020
Hauptplatine: ASUSTeK COMPUTER INC. TUF GAMING B550-PLUS (WI-FI)

Das Ding hängt noch auf der drittältesten verfügbaren UEFI-Version fest. Die Aktualisierung sollte aus dem UEFI heraus erfolgen, nicht via Windows:
-> https://www.asus.com/de/Motherboards...HelpDesk_BIOS/