Trojaner-Board - wie entferne ich diese drei Programme vollständig vom WIN11 PC ?

Hallo und Guten Morgen Matthias,

schön, dass Du mir helfen möchtest.

Ich habe mit FRST gescannt und hier sind die beiden Logfiles

Hier der erste (FRST.txt)

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25-06-2025

durchgeführt von Stumpf (Administrator) auf PETER-PC (Gigabyte Technology Co., Ltd. B360M-D3P) (28-06-2025 09:13:54)

Gestartet von C:\Users\Stumpf\Desktop\FRST64.exe

Geladene Profile: Stumpf

Plattform: Microsoft Windows 11 Pro Version 24H2 26100.4484 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>

(C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\ai.exe

(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe

(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe

(DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxEM.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>

(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_ba5b1813656e5c27\igfxCUIService.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_518f2921ba495409\IntelCpHDCPSvc.exe

(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_518f2921ba495409\IntelCpHeciSvc.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>

(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25052.36.0_x64__cw5n1h2txyewy\CrossDeviceService.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.51.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.15301.20.0_x64__cw5n1h2txyewy\WidgetBoard.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [856288 2019-10-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" [91045176 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)

HKLM\SYSTEM\...\Terminal Server: [fDenyTSConnections] = 0 <==== ACHTUNG

HKU\S-1-5-21-3130639177-79345489-2571554496-1002\...\Run: [MicrosoftEdgeAutoLaunch_F6920DF6D496D639D354EFD320F4AC18] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113448 2025-06-26] (Microsoft Corporation -> Microsoft Corporation)

HKU\S-1-5-21-3130639177-79345489-2571554496-1002\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4967736 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {6AAF0C8A-8A4B-4EE3-9B9D-3389E371C9E2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)

Task: {C4F3E21F-1B1D-467E-BC8A-DF9A73C9B375} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe  (Keine Datei)

Task: {B6834D66-6DA0-4CBA-973D-5D7A4B774B5A} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610648 2025-06-20] (Microsoft Corporation -> Microsoft Corporation)

Task: {BBF27F78-07C7-4FDC-B108-3B38963C7ED7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28610648 2025-06-20] (Microsoft Corporation -> Microsoft Corporation)

Task: {67FAD6A1-6E1D-4552-AE9F-84C295536E58} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313256 2025-06-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {C0CD69E1-A877-4C72-9004-7DF503BDF872} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [313256 2025-06-27] (Microsoft Corporation -> Microsoft Corporation)

Task: {E5024AD9-7FFC-46D9-B1FB-F223319428D0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {0C9BD863-107C-4C28-8B3D-70D099DC06ED} - System32\Tasks\Microsoft\Windows\Hotpatch\Monitoring => C:\WINDOWS\system32\cmd.exe [376832 2025-06-27] (Microsoft Windows -> Microsoft Corporation) -> /d /c %systemroot%\system32\hpatchmonTask.cmd

Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)

Task: {DCE5BF1A-5FD3-40E8-A756-C83348D32CFC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {33011EDD-6813-483A-B5BE-10F28B8C9417} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {BA0A8103-766E-43FF-B404-0DAA48C20E09} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {29D62668-A326-4CAC-B10E-4192AAFCCCF6} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {71B114C2-52DC-43D0-BDFE-EC3A08FCF11F} - System32\Tasks\Microsoft\Windows\WindowsAI\Settings\InitialConfiguration => {2886e5fb-4f01-4a89-9a0e-5d6a9c8048ac} C:\WINDOWS\system32\SettingsConfigTask.dll [200704 2025-06-27] (Microsoft Windows -> Microsoft Corporation)

Task: {4BB2D761-3B20-4918-8E89-88BCFC5A3CBA} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3130639177-79345489-2571554496-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [694848 2025-06-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).

Task: {21A04C0D-0BDC-4B7B-A09B-035AABA3ECFB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-06-28] (Mozilla Corporation -> Mozilla Foundation)

Task: {F4F2E1BA-7A17-4F0A-9EF4-D58C67976B40} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223800 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

Task: {E83A347E-EC44-4AF4-81F7-1D7BF1522CB3} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3130639177-79345489-2571554496-1001 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)

Task: {DAF1FBF0-313A-4658-9A7C-1EDB08A28F05} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3130639177-79345489-2571554496-1002 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223800 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

Task: {24CB880F-4F5A-48D6-9433-901FBEC60992} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3130639177-79345489-2571554496-1001 => C:\Users\User\AppData\Local\Microsoft\OneDrive\25.101.0526.0002\OneDriveLauncher.exe  /startInstances (Keine Datei)

Task: {E6796934-6F3A-4C6B-88B5-7FE437050E26} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3130639177-79345489-2571554496-1002 => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\OneDriveLauncher.exe [685352 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{44bc57ff-7a8e-4364-a1ea-86538698bf7b}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{44bc57ff-7a8e-4364-a1ea-86538698bf7b}: [DhcpDomain] speedport.ip

Tcpip\..\Interfaces\{c8ae46de-03e7-49c2-ad8c-7160d6836293}: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{c8ae46de-03e7-49c2-ad8c-7160d6836293}: [DhcpDomain] fritz.box
 

Edge: 

=======

Edge Profile: C:\Users\Stumpf\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-28]

Edge Extension: (Google Docs Offline) - C:\Users\Stumpf\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-21]

Edge Extension: (Edge relevant text changes) - C:\Users\Stumpf\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-06-21]
 

FireFox:

========

FF DefaultProfile: nok6tt95.default

FF ProfilePath: C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\nok6tt95.default [2025-06-25]

FF ProfilePath: C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\ga4a0rs1.default-release [2025-06-28]

FF Extension: (uBlock Origin) - C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\ga4a0rs1.default-release\Extensions\uBlock0@raymondhill.net.xpi [2025-06-26]

FF Extension: (Startpage — Datenschutz-Suchmaschine) - C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\ga4a0rs1.default-release\Extensions\{20fc2e06-e3e4-4b2b-812b-ab431220cada}.xpi [2025-06-26]

FF Extension: (Startpage Privatsphäre-Schutz) - C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\ga4a0rs1.default-release\Extensions\{5b1a796b-231a-4ad1-84ff-918db0818207}.xpi [2025-06-26]

FF Extension: (Video DownloadHelper) - C:\Users\Stumpf\AppData\Roaming\Mozilla\Firefox\Profiles\ga4a0rs1.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2025-06-26]

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)

FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-06-06] (Adobe Inc. -> Adobe Systems Inc.)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14045784 2025-06-20] (Microsoft Corporation -> Microsoft Corporation)

S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncHelper.exe [3622720 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

S3 hpatchmon; C:\WINDOWS\system32\hpatchmon.dll [173472 2025-06-27] (Microsoft Windows -> Microsoft Corporation)

S3 McmSvc; C:\WINDOWS\System32\McmSvc.dll [258048 2025-06-27] (Microsoft Windows -> Microsoft Corporation)

R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe [2071592 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.110.0608.0001\OneDriveUpdaterService.exe [3876184 2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917472 2025-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe [4513624 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 whesvc; C:\WINDOWS\System32\whesvc.dll [188416 2025-06-27] (Microsoft Windows -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe [278328 2025-06-25] (Microsoft Windows Publisher -> Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [330112 2025-06-25] (Microsoft Windows -> Microsoft Corporation)

S3 PlutonHeci; C:\WINDOWS\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_1a94725c6dfd47df\pluton-heci.sys [79232 2025-06-27] (Microsoft Windows -> Microsoft Corporation)

S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [12435144 2024-10-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)

S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-05-27] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)

S3 usb-platformdetection; C:\WINDOWS\System32\DriverStore\FileRepository\usb-platformdetection.inf_amd64_0f001fe089215073\usb-platformdetection.sys [53248 2025-06-27] (Microsoft Windows -> )

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20032 2025-06-25] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [612768 2025-06-25] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-06-25] (Microsoft Windows -> Microsoft Corporation)

S3 MpKslaa682eb5; \??\C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{0FEA5BEA-BC8B-4CBE-A186-F3AF106DA4A9}\MpKslDrv.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\VLC media player.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\Trader's Little Helper.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\Firefox.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\Exact Audio Copy.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\desktop.ini"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\Audacity.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\AIMP.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\Adobe Acrobat.lnk"

Fehler beim Lesen der Datei: "C:\ProgramData\Desktop\µTorrent.lnk"

2025-06-28 09:13 - 2025-06-28 09:14 - 000018478 _____ C:\Users\Stumpf\Desktop\FRST.txt

2025-06-28 09:13 - 2025-06-28 09:14 - 000000000 ____D C:\FRST

2025-06-28 09:12 - 2025-06-28 09:12 - 002407936 _____ (Farbar) C:\Users\Stumpf\Desktop\FRST64.exe

2025-06-28 09:02 - 2025-06-28 09:02 - 000000162 ____H C:\Users\Stumpf\Desktop\~$terne festplatten.odt

2025-06-28 07:53 - 2025-06-28 07:53 - 000000000 ____D C:\Users\Stumpf\Desktop\Frank Zappa - 2025 - Cheaper Than Cheep_The Soundtrack [Live] (24bit-96kHz)

2025-06-28 06:51 - 2025-06-28 07:24 - 000000000 ____D C:\Users\Stumpf\Desktop\Cheaper Than Cheep; Live Concert Film (1974)

2025-06-28 06:29 - 2025-06-28 06:29 - 000002129 _____ C:\Users\Stumpf\Desktop\JDownloader 2.lnk

2025-06-28 06:29 - 2025-06-28 06:29 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader

2025-06-28 06:28 - 2025-06-28 07:25 - 000000000 ____D C:\Users\Stumpf\AppData\Local\JDownloader 2

2025-06-28 06:27 - 2025-06-28 06:27 - 000000000 ____D C:\Users\Stumpf\AppData\Local\install4j

2025-06-28 06:25 - 2025-06-28 06:25 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2025-06-28 06:24 - 2025-06-28 06:27 - 075185752 _____ (AppWork GmbH) C:\Users\Stumpf\Downloads\setup.exe

2025-06-28 05:32 - 2025-06-28 06:11 - 000000000 ____D C:\Users\Stumpf\dwhelper

2025-06-28 05:30 - 2025-06-28 05:30 - 000000000 ____D C:\Program Files\DownloadHelper CoApp

2025-06-28 05:15 - 2025-06-28 05:15 - 000000090 _____ C:\logUploaderSettings_temp.ini

2025-06-28 05:15 - 2025-06-28 05:15 - 000000090 _____ C:\logUploaderSettings.ini

2025-06-27 13:31 - 2025-06-27 13:45 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Malwarebytes

2025-06-27 13:21 - 2025-06-27 13:21 - 000745650 _____ C:\WINDOWS\system32\perfh007.dat

2025-06-27 13:21 - 2025-06-27 13:21 - 000158752 _____ C:\WINDOWS\system32\perfc007.dat

2025-06-27 12:59 - 2025-06-27 13:21 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\audacity

2025-06-27 12:59 - 2025-06-27 12:59 - 000000865 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk

2025-06-27 12:59 - 2025-06-27 12:59 - 000000853 _____ C:\Users\Public\Desktop\Audacity.lnk

2025-06-27 12:59 - 2025-06-27 12:59 - 000000000 ____D C:\Users\Stumpf\AppData\Local\audacity

2025-06-27 12:59 - 2025-06-27 12:59 - 000000000 ____D C:\Program Files\Audacity

2025-06-27 12:58 - 2025-06-27 12:58 - 000000000 ____D C:\Users\Stumpf\Muse Hub

2025-06-27 12:57 - 2025-06-27 12:57 - 000000000 ____D C:\ProgramData\boost_interprocess

2025-06-27 09:14 - 2025-06-27 09:14 - 000000988 _____ C:\Users\Stumpf\Desktop\CD Wave Editor.lnk

2025-06-27 09:14 - 2025-06-27 09:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CD Wave

2025-06-27 09:14 - 2025-06-27 09:14 - 000000000 ____D C:\Program Files (x86)\CD Wave

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\WINDOWS\system32\ruxim

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\Program Files\Reference Assemblies

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\Program Files\MSBuild

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies

2025-06-27 07:42 - 2025-06-27 07:42 - 000000000 ____D C:\Program Files (x86)\MSBuild

2025-06-27 07:23 - 2025-06-27 07:23 - 000073956 _____ C:\WINDOWS\SysWOW64\ctac.json

2025-06-27 07:23 - 2025-06-27 07:23 - 000073956 _____ C:\WINDOWS\system32\ctac.json

2025-06-27 07:23 - 2025-06-27 07:23 - 000033519 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json

2025-06-27 07:23 - 2025-06-27 07:23 - 000033519 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json

2025-06-27 07:22 - 2025-06-28 07:13 - 000000000 ____D C:\WINDOWS\CbsTemp

2025-06-27 07:16 - 2025-06-27 08:36 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\avidemux

2025-06-27 07:16 - 2025-06-27 07:16 - 000001605 _____ C:\Users\Stumpf\Desktop\avidemux.lnk

2025-06-27 07:16 - 2025-06-27 07:16 - 000000000 ____D C:\Users\Stumpf\AppData\Local\avidemux

2025-06-27 07:13 - 2025-06-27 07:13 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Avidemux 2.8 VC++ 64bits

2025-06-27 07:13 - 2025-06-27 07:13 - 000000000 ____D C:\Program Files\Avidemux 2.8 VC++ 64bits

2025-06-27 07:09 - 2025-06-27 07:09 - 000001162 _____ C:\Users\Public\Desktop\Trader's Little Helper.lnk

2025-06-27 07:09 - 2025-06-27 07:09 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Trader's Little Helper

2025-06-27 07:09 - 2025-06-27 07:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trader's Little Helper

2025-06-27 07:09 - 2025-06-27 07:09 - 000000000 ____D C:\Program Files (x86)\Trader's Little Helper

2025-06-27 06:01 - 2025-06-27 06:01 - 000000000 ____D C:\Users\Stumpf\Desktop\Klassik vom Radio

2025-06-27 06:01 - 2025-06-27 06:01 - 000000000 ____D C:\Users\Stumpf\Desktop\27.6.2025 - abends

2025-06-27 05:33 - 2025-06-28 05:15 - 000000000 ____D C:\Users\Stumpf\Documents\Perry Rhodan MDI Zyklus

2025-06-27 05:32 - 2025-06-27 05:32 - 000000000 ____D C:\Users\Stumpf\Documents\Benutzerdefinierte Office-Vorlagen

2025-06-26 13:37 - 2025-06-26 13:37 - 000001139 _____ C:\Users\Public\Desktop\Exact Audio Copy.lnk

2025-06-26 13:37 - 2025-06-26 13:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Exact Audio Copy

2025-06-26 11:59 - 2025-06-26 11:59 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\EAC

2025-06-26 11:59 - 2025-06-26 11:59 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\AccurateRip

2025-06-26 11:57 - 2025-06-26 13:37 - 000000000 ____D C:\Program Files (x86)\Exact Audio Copy

2025-06-26 11:53 - 2025-04-03 07:43 - 000008386 _____ C:\Users\Stumpf\Desktop\Wie wandelt man eine Videodatei in ein anderes Format um.txt

2025-06-26 11:52 - 2025-04-08 11:57 - 000000227 _____ C:\Users\Stumpf\Desktop\Handy Hilfe Forum.txt

2025-06-26 11:52 - 2018-04-20 09:19 - 000002157 _____ C:\Users\Stumpf\Desktop\reifen.txt

2025-06-26 11:51 - 2025-06-12 09:07 - 000000018 _____ C:\Users\Stumpf\Desktop\BAT DATEI.txt

2025-06-26 11:51 - 2024-06-26 05:46 - 000004343 _____ C:\Users\Stumpf\Desktop\buchtipps und Reinhgard MEY alle LPS.txt

2025-06-26 11:51 - 2022-06-21 06:56 - 000010293 _____ C:\Users\Stumpf\Desktop\EBAY alles was ich suche.txt

2025-06-26 11:39 - 2025-06-26 11:39 - 000000000 ____D C:\Users\Stumpf\Desktop\16.08. BILDER

2025-06-26 11:38 - 2025-06-26 11:38 - 000000000 ____D C:\Users\Stumpf\Desktop\Brettspielnetz -  Ligen und KO Turniere

2025-06-26 07:45 - 2025-06-26 07:45 - 000000000 ____D C:\Users\Stumpf\AppData\Local\PeerDistRepub

2025-06-26 07:34 - 2025-06-26 07:34 - 000001012 _____ C:\Users\Public\Desktop\µTorrent.lnk

2025-06-26 07:34 - 2025-06-26 07:34 - 000000000 ____D C:\Program Files (x86)\uTorrent

2025-06-26 07:32 - 2025-06-27 07:41 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\uTorrent

2025-06-26 07:31 - 2025-06-26 07:32 - 000000000 ____D C:\Users\Stumpf\Desktop\DIME

2025-06-26 06:44 - 2025-06-26 06:44 - 000000000 ____D C:\Users\Stumpf\Desktop\--- alle bilder für alle Verkäufe ---

2025-06-26 06:43 - 2025-06-23 11:20 - 000021763 _____ C:\Users\Stumpf\Desktop\Externe festplatten.odt

2025-06-26 06:42 - 2025-06-26 13:34 - 000044864 _____ C:\Users\Stumpf\Desktop\Neu Textdokument (2).txt

2025-06-25 15:41 - 2025-06-27 07:43 - 000001887 _____ C:\Users\Stumpf\Desktop\msedge.lnk

2025-06-25 15:17 - 2025-06-28 09:03 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2025-06-25 15:17 - 2025-06-28 05:30 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2025-06-25 15:17 - 2025-06-28 05:30 - 000000000 ____D C:\Program Files\Mozilla Firefox

2025-06-25 15:17 - 2025-06-28 05:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2025-06-25 15:17 - 2025-06-25 15:17 - 000002034 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk

2025-06-25 15:17 - 2025-06-25 15:17 - 000001053 _____ C:\Users\Public\Desktop\Firefox.lnk

2025-06-25 15:17 - 2025-06-25 15:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2025-06-25 15:17 - 2025-06-25 15:17 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Mozilla

2025-06-25 15:17 - 2025-06-25 15:17 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Mozilla

2025-06-21 16:08 - 2025-06-21 16:08 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Comms

2025-06-21 16:07 - 2025-06-28 09:09 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Word

2025-06-21 16:07 - 2025-06-28 09:09 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Excel

2025-06-21 16:07 - 2025-06-27 05:30 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\UProof

2025-06-21 16:07 - 2025-06-21 16:07 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Proof

2025-06-21 16:07 - 2025-06-21 16:07 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Office

2025-06-21 16:07 - 2025-06-21 16:07 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\AddIns

2025-06-21 16:06 - 2025-06-27 06:47 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\vlc

2025-06-21 16:06 - 2025-06-27 06:45 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\AIMP

2025-06-21 16:05 - 2025-06-21 16:06 - 000000000 ____D C:\Users\Stumpf\AppData\LocalLow\Adobe

2025-06-21 16:05 - 2025-06-21 16:06 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Adobe

2025-06-21 16:05 - 2025-06-21 16:05 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\com.adobe.dunamis

2025-06-21 16:05 - 2025-06-21 16:05 - 000000000 ____D C:\Users\Stumpf\AppData\Local\SolidDocuments

2025-06-21 16:05 - 2025-06-21 16:05 - 000000000 ____D C:\Users\Stumpf\.ms-ad

2025-06-21 16:05 - 2025-06-21 16:05 - 000000000 ____D C:\ProgramData\Adobe

2025-06-21 16:05 - 2025-06-15 00:29 - 000002541 _____ C:\Users\Stumpf\Desktop\Word.lnk

2025-06-21 16:05 - 2025-06-15 00:29 - 000002537 _____ C:\Users\Stumpf\Desktop\Excel.lnk

2025-06-21 16:03 - 2025-06-28 05:15 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3130639177-79345489-2571554496-1002

2025-06-21 16:03 - 2025-06-28 05:15 - 000003540 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3130639177-79345489-2571554496-1002

2025-06-21 16:03 - 2025-06-28 05:15 - 000000000 ____D C:\Program Files\Microsoft OneDrive

2025-06-21 16:03 - 2025-06-27 05:23 - 000000000 ____D C:\Users\Stumpf\AppData\Local\PlaceholderTileLogoFolder

2025-06-21 16:03 - 2025-06-25 15:06 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Publishers

2025-06-21 16:03 - 2025-06-21 16:03 - 000000000 ____D C:\WINDOWS\system32\%userprofile%

2025-06-21 16:03 - 2025-06-21 16:03 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\MMC

2025-06-21 16:02 - 2025-06-28 06:31 - 000000000 ____D C:\Users\Stumpf\AppData\Local\D3DSCache

2025-06-21 16:02 - 2025-06-28 05:32 - 000000000 ____D C:\Users\Stumpf

2025-06-21 16:02 - 2025-06-28 05:13 - 000000000 __SHD C:\Users\Stumpf\IntelGraphicsProfiles

2025-06-21 16:02 - 2025-06-27 13:31 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Packages

2025-06-21 16:02 - 2025-06-21 16:05 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Adobe

2025-06-21 16:02 - 2025-06-21 16:04 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Spelling

2025-06-21 16:02 - 2025-06-21 16:03 - 000000000 ____D C:\Users\Stumpf\AppData\Local\Intel

2025-06-21 16:02 - 2025-06-21 16:02 - 000000020 ___SH C:\Users\Stumpf\ntuser.ini

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Vorlagen

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Startmenü

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Netzwerkumgebung

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Lokale Einstellungen

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Eigene Dateien

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Druckumgebung

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Documents\Eigene Videos

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Documents\Eigene Musik

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Documents\Eigene Bilder

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\AppData\Local\Verlauf

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\AppData\Local\Anwendungsdaten

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 _SHDL C:\Users\Stumpf\Anwendungsdaten

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ___SD C:\Users\Stumpf\AppData\Roaming\Microsoft\SystemCertificates

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ___SD C:\Users\Stumpf\AppData\Roaming\Microsoft\Protect

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ___SD C:\Users\Stumpf\AppData\Roaming\Microsoft\Crypto

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ___SD C:\Users\Stumpf\AppData\Roaming\Microsoft\Credentials

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Windows

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Vault

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\Roaming\Microsoft\Network

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\LocalLow\Intel

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\Local\VirtualStore

2025-06-21 16:02 - 2025-06-21 16:02 - 000000000 ____D C:\Users\Stumpf\AppData\Local\ConnectedDevicesPlatform

2025-06-21 16:02 - 2025-06-15 00:30 - 000000000 ___RD C:\Users\Stumpf\OneDrive

2025-06-15 11:51 - 2025-06-27 06:55 - 000000000 ____D C:\Program Files (x86)\Google

2025-06-15 11:51 - 2025-06-27 06:37 - 000000000 ____D C:\Program Files\TeamViewer

2025-06-15 11:51 - 2025-06-15 11:51 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk

2025-06-15 11:51 - 2025-06-15 11:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2025-06-15 11:51 - 2025-06-15 11:51 - 000000000 ____D C:\Program Files\VideoLAN

2025-06-15 11:50 - 2025-06-15 11:50 - 000000934 _____ C:\Users\Public\Desktop\AIMP.lnk

2025-06-15 11:50 - 2025-06-15 11:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP

2025-06-15 11:50 - 2025-06-15 11:50 - 000000000 ____D C:\Program Files\AIMP

2025-06-15 11:49 - 2025-06-25 15:23 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2025-06-15 11:49 - 2025-06-25 15:23 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk

2025-06-15 11:49 - 2025-06-25 15:23 - 000002061 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk

2025-06-15 11:49 - 2025-06-15 11:49 - 000000000 ____D C:\Program Files\Adobe

2025-06-15 11:47 - 2025-06-15 11:49 - 000000000 ____D C:\Program Files\Common Files\Adobe

2025-06-15 11:46 - 2025-06-15 11:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip

2025-06-15 11:46 - 2025-06-15 11:46 - 000000000 ____D C:\Program Files\7-Zip

2025-06-15 00:30 - 2025-06-28 05:15 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task

2025-06-15 00:30 - 2025-06-28 05:15 - 000002148 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2025-06-15 00:30 - 2025-06-21 16:03 - 000000000 ___RD C:\Users\Default\OneDrive

2025-06-15 00:30 - 2025-06-15 00:30 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2025-06-15 00:29 - 2025-06-15 00:29 - 000002541 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000002537 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000002516 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000002458 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000002427 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook (classic).lnk

2025-06-15 00:29 - 2025-06-15 00:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2025-06-15 00:28 - 2025-06-27 05:36 - 000000000 ____D C:\Program Files\Microsoft Office

2025-06-15 00:28 - 2025-06-15 00:28 - 000000000 ____D C:\Program Files\Microsoft Office 15

2025-06-15 00:27 - 2025-06-15 11:54 - 000000000 ____D C:\Software

2025-06-14 13:01 - 2025-06-14 13:01 - 000008192 _____ C:\WINDOWS\system32\config\userdiff

2025-06-14 13:01 - 2025-06-14 12:04 - 000000000 ___DC C:\WINDOWS\Panther

2025-06-14 12:33 - 2025-06-14 12:33 - 000000000 ____D C:\ProgramData\Intel

2025-06-14 12:17 - 2019-10-30 02:20 - 001126344 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll

2025-06-14 12:17 - 2019-10-30 02:20 - 000481888 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll

2025-06-14 12:17 - 2019-10-29 23:20 - 000856288 _____ (Realtek Semiconductor) C:\WINDOWS\system32\RtkAudUService64.exe

2025-06-14 12:17 - 2019-10-29 23:20 - 000821336 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll

2025-06-14 12:17 - 2019-10-29 23:20 - 000215032 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkCfg64.dll

2025-06-14 12:14 - 2025-06-27 13:16 - 000000000 ____D C:\Intel

2025-06-14 12:14 - 2025-06-14 12:14 - 000000000 _____ C:\WINDOWS\system32\GfxValDisplayLog.bin

2025-06-14 12:14 - 2019-10-30 02:20 - 005623256 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RltkAPOU64.dll

2025-06-14 12:13 - 2020-07-08 23:49 - 001087304 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2025-06-14 12:13 - 2020-07-08 23:49 - 000944968 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2025-06-14 12:13 - 2020-07-08 23:49 - 000862264 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2025-06-14 12:13 - 2020-07-08 23:49 - 000862264 _____ C:\WINDOWS\system32\vulkaninfo.exe

2025-06-14 12:13 - 2020-07-08 23:49 - 000720440 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2025-06-14 12:13 - 2020-07-08 23:49 - 000720440 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2025-06-14 12:13 - 2020-07-08 23:48 - 021448784 _____ (Intel Corporation) C:\WINDOWS\system32\libmfxhw64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 020346704 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\libmfxhw32.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 003218248 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_h265ve_64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 003212424 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_vp9ve_64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 003198824 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_h264ve_64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 002996072 _____ (Intel Corporation) C:\WINDOWS\system32\mfx_mft_encrypt_64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 002606112 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_h265ve_32.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 002600992 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_vp9ve_32.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 002591904 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_h264ve_32.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 002435360 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfx_mft_encrypt_32.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 000212480 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll

2025-06-14 12:13 - 2020-07-08 23:48 - 000184160 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll

2025-06-14 12:13 - 2020-07-08 22:27 - 000072329 _____ C:\WINDOWS\SysWOW64\h265e_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000071888 _____ C:\WINDOWS\SysWOW64\vp9e_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000070661 _____ C:\WINDOWS\SysWOW64\he_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000066157 _____ C:\WINDOWS\SysWOW64\mj_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000057143 _____ C:\WINDOWS\SysWOW64\dev_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000056359 _____ C:\WINDOWS\system32\dev_64.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000014145 _____ C:\WINDOWS\system32\h265e_64.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000013996 _____ C:\WINDOWS\system32\vp9e_64.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000013581 _____ C:\WINDOWS\system32\he_64.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000013309 _____ C:\WINDOWS\system32\mj_64.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000001125 _____ C:\WINDOWS\SysWOW64\cpa_32.vp

2025-06-14 12:13 - 2020-07-08 22:27 - 000001125 _____ C:\WINDOWS\system32\cpa_64.vp

2025-06-14 12:12 - 2025-06-14 12:12 - 000000000 ____D C:\WINDOWS\system32\MRT

2025-06-14 12:09 - 2025-06-27 13:21 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2025-06-14 12:07 - 2025-06-27 13:16 - 000001022 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

2025-06-14 12:07 - 2025-06-15 00:30 - 000003600 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3130639177-79345489-2571554496-1001

2025-06-14 12:07 - 2025-06-14 12:07 - 000003562 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3130639177-79345489-2571554496-1001

2025-06-14 12:06 - 2025-06-14 12:06 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2025-06-14 12:05 - 2025-06-21 16:02 - 000000000 __RHD C:\Users\Public\AccountPictures

2025-06-14 12:04 - 2025-06-27 13:31 - 000000000 ____D C:\ProgramData\Packages

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Videos

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Vorlagen

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Startmenü

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Netzwerkumgebung

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Lokale Einstellungen

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Eigene Dateien

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Druckumgebung

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Videos

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Users\Default\Anwendungsdaten

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Programme

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\ProgramData\Vorlagen

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\ProgramData\Startmenü

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\ProgramData\Dokumente

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\ProgramData\Anwendungsdaten

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Program Files\Gemeinsame Dateien

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 _SHDL C:\Dokumente und Einstellungen

2025-06-14 12:04 - 2025-06-14 12:04 - 000000000 ____D C:\WINDOWS\CSC

2025-06-14 12:03 - 2025-06-28 05:14 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2025-06-14 12:03 - 2025-06-14 12:08 - 000003832 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{2323C4B0-D9CD-4F78-AA77-5E483C0B29EB}

2025-06-14 12:03 - 2025-06-14 12:08 - 000003706 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{67DC1905-08E9-4A25-80CA-BAC554EF3FD3}

2025-06-14 12:03 - 2025-06-14 12:03 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2025-06-14 12:02 - 2025-06-27 14:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2025-06-14 12:02 - 2025-06-27 13:16 - 000012288 ___SH C:\DumpStack.log.tmp

2025-06-14 12:02 - 2025-06-27 13:16 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK

2025-06-14 12:02 - 2025-06-27 13:16 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2025-06-14 12:02 - 2025-06-27 07:43 - 000344248 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2025-06-14 12:02 - 2025-06-25 15:16 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2025-06-14 12:02 - 2025-06-14 12:02 - 000000000 ____D C:\WINDOWS\system32\config\BFS

2025-06-14 12:02 - 2025-06-14 12:02 - 000000000 ____D C:\WINDOWS\ServiceProfiles
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2025-06-28 09:01 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2025-06-28 06:30 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF

2025-06-28 05:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness

2025-06-28 05:15 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps

2025-06-28 05:14 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp

2025-06-27 13:45 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2025-06-27 13:16 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\MUI

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2025-06-27 07:42 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr

2025-06-27 07:42 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing

2025-06-27 07:27 - 2025-05-28 00:04 - 001175072 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll

2025-06-27 07:26 - 2025-05-28 00:04 - 000780720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll

2025-06-15 00:30 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\microsoft shared

2025-06-15 00:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\spool

2025-06-15 00:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat

2025-06-14 13:02 - 2024-04-01 09:26 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template

2025-06-14 12:37 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender

2025-06-14 12:33 - 2024-04-01 18:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView

2025-06-14 12:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2025-06-14 12:33 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData

2025-06-14 12:25 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate

2025-06-14 12:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth

2025-06-14 12:13 - 2024-04-01 09:21 - 000032768 _____ C:\WINDOWS\system32\config\ELAM

2025-06-14 12:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AppLocker

2025-06-14 12:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase

2025-06-14 12:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState

2025-06-14 12:04 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Windows NT
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

und hier ist der zweite logfile (FRST Addition.txt)

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25-06-2025

durchgeführt von Stumpf (28-06-2025 09:15:10)

Gestartet von C:\Users\Stumpf\Desktop

Microsoft Windows 11 Pro Version 24H2 26100.4484 (X64) (2025-06-14 10:04:46)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3130639177-79345489-2571554496-500 - Administrator - Disabled)

DefaultAccount (S-1-5-21-3130639177-79345489-2571554496-503 - Limited - Disabled)

Gast (S-1-5-21-3130639177-79345489-2571554496-501 - Limited - Disabled)

Stumpf (S-1-5-21-3130639177-79345489-2571554496-1002 - Administrator - Enabled) => C:\Users\Stumpf

WDAGUtilityAccount (S-1-5-21-3130639177-79345489-2571554496-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

µTorrent (HKLM-x32\...\uTorrent) (Version: 2.2.0 - )

7-Zip 24.08 (x64) (HKLM\...\7-Zip) (Version: 24.08 - Igor Pavlov)

Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 25.001.20531 - Adobe)

AIMP (HKLM\...\AIMP) (Version: 5.40.2655 - Artem Izmaylov)

Audacity 3.7.4 (HKLM\...\Audacity_is1) (Version: 3.7.4 - Audacity Team)

Avidemux VC++ 64bits (HKU\S-1-5-21-3130639177-79345489-2571554496-1002\...\{6e32ac01-9a68-4a41-b162-26680a2b0d36}) (Version: 2.8.1 - Mean)

CD Wave Editor 1.98 (HKLM-x32\...\CD Wave Editor_is1) (Version: 1.9.8.1 - MiLo Software)

DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)

Exact Audio Copy 1.8 (HKLM-x32\...\Exact Audio Copy) (Version: 1.8 - Andre Wiethoff)

JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0.250317 - AppWork GmbH)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 138.0.3351.55 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 137.0.3296.93 - Microsoft Corporation) Hidden

Microsoft Office LTSC Professional Plus 2024 - de-de (HKLM\...\ProPlus2024Volume - de-de) (Version: 16.0.17932.20408 - Microsoft Corporation)

Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 25.110.0608.0001 - Microsoft Corporation)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 140.0.2 (x64 de)) (Version: 140.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 140.0 - Mozilla)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17928.20216 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17932.20408 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17928.20216 - Microsoft Corporation) Hidden

Trader's Little Helper 2.8.4 (HKLM-x32\...\TradersLittleHelper_is1) (Version: 2.8.4 - Robert Hoffmann)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.21 - VideoLAN)
 

Packages:

=========

@{MicrosoftWindows.54792954.Filons_1000.26100.4351.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.54792954.Filons/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.54792954.Filons_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

@{MicrosoftWindows.56978801.Voiess_1000.26100.4351.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.56978801.Voiess/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.56978801.Voiess_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

@{MicrosoftWindows.57058570.Speion_1000.26100.4351.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57058570.Speion/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57058570.Speion_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

@{MicrosoftWindows.57074914.Livtop_1000.26100.4351.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074914.Livtop/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074914.Livtop_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

@{MicrosoftWindows.Client.CoreAI_1000.26100.4351.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

Aktion per Mausklick (Vorschau) -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-06-14] (INTEL CORP) [Startup Task]

Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2025-06-26] (Microsoft Corp.)

Microsoft.Edge.GameAssist -> C:\Program Files\WindowsApps\Microsoft.Edge.GameAssist_1.0.3336.0_x64__8wekyb3d8bbwe [2025-06-14] (Microsoft Corporation)

Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.51.3.0_x64__8wekyb3d8bbwe [2025-06-26] (Microsoft Corporation)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2025-06-14] (Realtek Semiconductor Corp)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.54792954.Filons_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.56978801.Voiess_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57058570.Speion_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074904.InpApp_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)

Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074914.Livtop_cw5n1h2txyewy [2025-06-27] (Microsoft Windows)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3130639177-79345489-2571554496-1002_Classes\CLSID\{04271989-C4D2-12E8-75EC-C7FE9B1430B7} -> [OneDrive] => {a52bba46-e9e1-435f-b3d9-28daa648c0f6}

CustomCLSID: HKU\S-1-5-21-3130639177-79345489-2571554496-1002_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)

CustomCLSID: HKU\S-1-5-21-3130639177-79345489-2571554496-1002_Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32 ->  => Keine Datei

CustomCLSID: HKU\S-1-5-21-3130639177-79345489-2571554496-1002_Classes\CLSID\{A46B3126-4008-43B4-8788-64CBDCDBE997}\localserver32 -> "c:\program files\musehub\current\musehub.exe" ----AppNotificationActivated: => Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-11] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers1: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2025-06-15] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)

ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-11] (Igor Pavlov) [Datei ist nicht signiert]

ContextMenuHandlers4: [AIMP] -> {1F77B17B-F531-44DB-ACA4-76ABB5010A28} => C:\Program Files\AIMP\System\aimp_menu64.dll [2025-06-15] (IP Izmaylov Artem Andreevich -> AIMP DevTeam)

ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\25.110.0608.0001\FileSyncShell64.dll [2025-06-28] (Microsoft Corporation -> Microsoft Corporation)

ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2024-08-11] (Igor Pavlov) [Datei ist nicht signiert]
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2025-06-06 13:15 - 2025-06-06 13:15 - 000255488 _____ () [Datei ist nicht signiert] C:\Program Files\Adobe\Acrobat DC\Acrobat\Locale\de_de\PDFMaker\PDFMOfficeAddin.DEU

2025-06-15 11:46 - 2024-08-11 15:00 - 000101376 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll

2025-06-15 00:29 - 2025-06-15 00:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Client\AppVIsvSubsystems64.dll

2025-06-15 00:29 - 2025-06-15 00:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\Root\Office16\AppVIsvSubsystems64.dll

2025-06-15 00:29 - 2025-06-15 00:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Client\C2R64.dll

2025-06-15 00:29 - 2025-06-15 00:29 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\Root\Office16\c2r64.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
 

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-14] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2024-04-01 09:26 - 2024-04-01 09:24 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 

==================== Network ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

DNS Servers: 192.168.2.1

 ist aktiviert.
 

Network Binding:

=============

Ethernet: Intel(R) Ethernet Connection (7) I219-V -> e1d68x64.sys
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3130639177-79345489-2571554496-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)

HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{82DDCB7D-8C66-4CCE-A0B9-FC78D7B80ECE}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{88FC3A5A-463D-4EED-A9BD-9EEEA053354A}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{D65A3906-DFCF-4E90-959A-77020172B6D0}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{C73E863A-17DC-49D2-A5D8-0E7D7DE2C43B}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{6B5B6451-3A0C-4BA3-892C-3F2072C6B958}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{423DBF73-98C7-4C33-B2D8-26DBE38F9209}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{71D114C2-4332-432B-9AB3-1D2195BC2784}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{C56E4317-E0D3-427E-BC0E-D60A7FF27156}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{953E874A-ADF5-493C-8052-1440E6478022}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{5E0C0DDD-EADD-4E6C-A0FD-A2E304A08532}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{CA396EAC-56DF-463A-BFE2-DB0186BA7675}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{C9D01EF0-96EF-446D-89FE-720B39459A97}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{E9FC7BCF-976A-4BF2-8CDD-0C4490DD0039}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{0E744C00-B11D-4D6B-8142-1E7E8FB5DC6A}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{4EB71D6B-A5B7-4A5E-B0A8-FA5A009BD015}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{7F744AAF-9337-4FDD-B63A-200D458828ED}] => (Allow) C:\Windows\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{05CE9C4E-A9B2-441F-816A-86D064171F59}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25122.1415.3698.6812_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{5B64F80F-67FC-4038-A005-40D4F0F9081A}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25122.1415.3698.6812_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{448AAC30-60D2-4E5D-9F27-857CC892F11B}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\137.0.3296.83\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{3DE6AFDB-4E52-4A8A-8BF1-31EBBC60CE68}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{5C92F60E-8A3B-4AF9-B664-E8C715B5D937}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\137.0.3296.93\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{D067E1A5-B3EF-4612-8792-C248B1C5784F}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{2EB91ECA-6603-4B3F-AB53-5EAC25076890}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{11F23915-7D22-4BC1-B0EE-D9F30EF91B58}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)

FirewallRules: [{B628DB0F-AD58-4AB3-ACCA-E3A7641F3B5B}] => (Allow) C:\Program Files (x86)\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent, Inc.)

FirewallRules: [{C7CD1E75-3873-4F14-A6FB-6AB591A32375}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{3B29C6F0-6F1A-4C12-BF18-5010032039EB}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{20378156-480D-4D35-9BF7-21A4FE9C9A60}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{BB22F7E5-7793-4F51-ABC6-4F3D835F7B5C}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{808FDC5C-2F3C-417F-ABEB-C6919CCB7E37}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{8B2A1276-E43F-4BE1-A8B8-5B333ACA18BC}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{51E18999-0C86-4FEC-92BE-EE1A2A738DFC}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{52FA90CB-209A-49B0-8A5C-657D8AAC5F02}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{7600A3FD-A154-46A6-8524-A1CF833A9E63}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{68DDD17C-7C00-48E5-B0B4-764717DEED8C}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{2246E4F3-B6A3-46A9-83F3-DBCCAE457A09}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{DE241C78-3D1C-4E41-9B38-C85C782AFE52}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{FE22EDE9-2D0B-4830-844D-2C71249189BA}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{F6332E84-B9AA-41BE-B813-5F96796D2B80}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{F05F51E8-4D04-4A1C-A0B3-5582A7D36CBF}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)

FirewallRules: [{B36C7661-1C0B-4DC1-BC4A-EEACEFD7E962}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
 

==================== Wiederherstellungspunkte =========================
 

27-06-2025 05:42:51 Windows Modules Installer
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (06/28/2025 05:30:53 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 

Error: (06/27/2025 06:30:30 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 

Error: (06/26/2025 06:35:33 AM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (06/26/2025 06:35:33 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 

Error: (06/25/2025 03:34:31 PM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (06/25/2025 03:34:31 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 

Error: (06/25/2025 03:21:51 PM) (Source: Firefox Default Browser Agent) (EventID: 0) (User: )

Description: Event-ID 0
 

Error: (06/25/2025 03:21:51 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 
 

Systemfehler:

=============

Error: (06/28/2025 06:40:49 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "CCleaner Performance Optimizer Service" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
 

Error: (06/28/2025 06:32:02 AM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "CCleaner Performance Optimizer Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (06/28/2025 05:13:23 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)

Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: (-2147020471 = Sicheres Starten ist auf diesem Computer nicht aktiviert.). Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931
 

Error: (06/28/2025 05:13:23 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)

Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: (-2147020471 = Sicheres Starten ist auf diesem Computer nicht aktiviert.). Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931
 

Error: (06/27/2025 01:21:20 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)

Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: (-2147020471 = Sicheres Starten ist auf diesem Computer nicht aktiviert.). Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931
 

Error: (06/27/2025 01:21:20 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)

Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: (-2147020471 = Sicheres Starten ist auf diesem Computer nicht aktiviert.). Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931
 

Error: (06/27/2025 01:16:21 PM) (Source: Microsoft-Windows-Windows Firewall With Advanced Security) (EventID: 2042) (User: NT-AUTORITÄT)

Description: 18-2147024662
 

Error: (06/27/2025 07:50:42 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1796) (User: NT-AUTORITÄT)

Description: Beim Update für den sicheren Start konnte eine Variable für den sicheren Start nicht aktualisiert werden. Fehler: (-2147020471 = Sicheres Starten ist auf diesem Computer nicht aktiviert.). Weitere Informationen finden Sie unter https://go.microsoft.com/fwlink/?linkid=2169931
 
 

Windows Defender:

================

Date: 2025-06-26 13:44:34

Description: 

Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόŉ.%л %ťЅсăй ІĐ:%ъ{D73DD522-CF35-4527-AD95-25BC4095DB38}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ  %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŔР€ ĉσпйëćтΐοй řúиðοωи 
 

Date: 2025-06-26 11:29:47

Description: 

Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόŉ.%л %ťЅсăй ІĐ:%ъ{417835B0-293E-407C-AFC7-B11D3B9924C6}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ  %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŔР€ ĉσпйëćтΐοй řúиðοωи 
 

Date: 2025-06-26 07:48:09

Description: 

Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόŉ.%л %ťЅсăй ІĐ:%ъ{CA61FBA6-DAF8-4E64-873C-472C60A30F01}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ  %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŔР€ ĉσпйëćтΐοй řúиðοωи 



CodeIntegrity:

===============

Date: 2025-06-28 09:01:47

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_518f2921ba495409\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements. 
 

Date: 2025-06-27 13:44:51

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Microsoft signing level requirements. 
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. F16 WG 03/01/2024

Hauptplatine: Gigabyte Technology Co., Ltd. B360M-D3P-WG-CF

Prozessor: Intel(R) Core(TM) i5-8500 CPU @ 3.00GHz

Prozentuale Nutzung des RAM: 37%

Installierter physikalischer RAM: 16231.69 MB

Verfügbarer physikalischer RAM: 10088.91 MB

Summe virtueller Speicher: 19175.69 MB

Verfügbarer virtueller Speicher: 13110.2 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:476.04 GB) (Free:313.11 GB) (Model: INTEL SSDPEKNW512G8H) NTFS
 

\\?\Volume{f36b730c-abd6-42a3-a80e-7b119e86b988}\ () (Fixed) (Total:0.69 GB) (Free:0.11 GB) NTFS

\\?\Volume{53a9d555-84f2-4734-a49f-b43f7c6306e2}\ () (Fixed) (Total:0.19 GB) (Free:0.16 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 476.9 GB) (Disk ID: FFFFFFFF)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================