| LeqendFire | 05.11.2020 17:04 |
Die Frst.txt: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 0$-11-2020
durchgeführt von User (Administrator) auf DESKTOP-MSO0I32 (Micro-Star International Co., Ltd. MS-7A38) (05-11-2020 16:17:16)
Gestartet von C:\Users\User\Downloads
Geladene Profile: User
Platform: Windows 10 Pro Version 2004 19041.508 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Discord Inc. -> Discord Inc.) C:\Users\User\AppData\Local\Discord\app-0.0.308\Discord.exe <6>
(Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.2009.5.0_x64__8wekyb3d8bbwe\Time.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12010.1001.3.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20092.10311.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.504_none_e781e76525fb2269\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2010.7-0\NisSrv.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <8>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ba8c9c14f3d320cb\Display.NvContainer\NVDisplay.Container.exe <2>
(Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Realtek Semiconductor Corp. -> Realtek) C:\Windows\SwUSB.exe
(ROCCAT GmbH) [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(Spotify AB) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0\Spotify.exe <5>
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <7>
(Valve -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1138416 2020-07-23] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [353784 2020-10-07] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => "C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
HKLM-x32\...\Run: [Kraken0502Launcher] => C:\Program Files (x86)\Razer\Razer_Kraken0502_Driver\Drivers\SysAudio\Kraken0502Helper.exe [1598920 2017-06-30] (Razer USA Ltd. -> Razer Inc)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH) [Datei ist nicht signiert]
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [33092496 2020-10-29] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Run: [Discord] => C:\Users\User\AppData\Local\Discord\app-0.0.307\Discord.exe [91023672 2020-08-04] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3424032 2020-10-29] (Valve -> Valve Corporation)
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Run: [launchOnStartup] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [13971528 2020-05-06] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Run: [CCXProcess] => "C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe"
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0BF88841-0EC4-4723-8A92-8F933D2044BC} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {19BBB72D-0079-4E4B-A8A1-209B202E4A0C} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [65440 2020-10-16] (Microsoft Corporation -> Microsoft)
Task: {2BBDECDB-0D96-41F9-9463-B0D68DBAEA4C} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {33B4B7D1-DC81-4C10-A196-298F8DB1D6CE} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {381CEE89-5B7A-4B91-B366-4F465E16D5F7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4D7FA2D7-FE3E-49ED-8DC7-3FC20AB481C9} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {502A705C-0085-477A-8465-8C4CB18B1BF1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {52B4E68B-329D-4BA9-B225-F6B7E55EF9C9} - System32\Tasks\Opera scheduled assistant Autoupdate 1602685316 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\User\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {57E251DF-5D63-4077-A649-659F9D37979D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3292984 2020-06-25] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {662D1351-E60F-4AE2-858E-39B2BEE34EEF} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1126888 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {71F0EBC6-6F4E-4170-9490-C754757B3A6C} - System32\Tasks\Opera scheduled Autoupdate 1589534423 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe
Task: {75A1662E-5A4E-4AB4-A6DB-49AC09F248DE} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9524B2ED-99F7-4A3E-A088-7680BCCD6790} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B67E43BC-1706-4DBE-AA96-9E62004C706E} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [667856 2020-10-31] (Mozilla Corporation -> Mozilla Foundation)
Task: {B9C1A4C1-60FD-490A-9087-3D1B3CE474EB} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-05-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {BD308914-8232-40B6-9E85-A1140B30CC6C} - System32\Tasks\Opera GX scheduled Autoupdate 1586861914 => C:\Users\User\AppData\Local\Programs\Opera GX\launcher.exe [1654808 2020-10-30] (Opera Software AS -> Opera Software)
Task: {BF0F84FE-122A-4F26-A70F-3046FBDD6BD1} - System32\Tasks\Opera scheduled Autoupdate 1602685313 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe
Task: {CA98A9CC-EF03-4F3A-AE7D-73BE76D2F33E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DE560BD8-0122-429D-A4DC-5816AEFB339D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MpCmdRun.exe [541576 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E9607234-5C23-45B9-812B-78CCAB9FD7A6} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [647656 2020-06-23] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FCF2E7CF-72A6-4759-A824-9CFFB7474C5F} - System32\Tasks\Opera scheduled assistant Autoupdate 1589534428 => C:\Users\User\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\User\AppData\Local\Programs\Opera\assistant" $(Arg0)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{14fd3ef5-294a-44e2-aea4-754500596585}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{31a5c634-546e-4346-a279-c9da7c6c4320}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{c2028201-e637-4848-acf0-838234164b4f}: [DhcpNameServer] 192.168.178.1
FireFox:
========
FF DefaultProfile: 04yizkd5.default
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\04yizkd5.default [2020-11-05]
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\23n0h96e.default-release [2020-11-05]
Chrome:
=======
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2020-11-05]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Präsentationen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-10]
CHR Extension: (Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-10]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-10]
CHR Extension: (Tabellen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-10]
CHR Extension: (Google Docs Offline) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-24]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2020-10-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-10]
CHR Extension: (Google Mail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-24]
CHR Extension: (Chrome Media Router) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-12]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
OPR Extension: (Avira Safe Shopping) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2020-11-04]
OPR Extension: (Rich Hints Agent) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-11-04]
OPR Extension: (Avira Password Manager) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2020-11-04]
OPR Extension: (Free Avira Phantom VPN – Unblock Websites) - C:\Users\User\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2020-11-04]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8686928 2020-09-05] (BattlEye Innovations e.K. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2020-02-29] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2020-01-15] (FUTUREMARK INC -> Futuremark)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1748552 2020-05-06] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-05-06] (GOG Sp. z o.o. -> GOG.com)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2522424 2020-10-26] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3476288 2020-10-26] (Electronic Arts, Inc. -> Electronic Arts)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2020-04-20] (Realtek Semiconductor Corp -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5097896 2020-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [746504 2020-09-04] (Oracle Corporation -> Oracle Corporation)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [9912616 2020-10-07] (Riot Games, Inc. -> Riot Games, Inc.)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\NisSrv.exe [2467088 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2010.7-0\MsMpEng.exe [128376 2020-11-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ba8c9c14f3d320cb\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ba8c9c14f3d320cb\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R1 BadlionAnticheat; C:\Windows\system32\drivers\BadlionAnticheat.sys [2489368 2020-06-15] (Microsoft Windows Hardware Compatibility Publisher -> <Turtle Entertainment>)
S3 RtlWlanu; C:\WINDOWS\System32\drivers\rtwlanu.sys [7978296 2018-03-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corporation)
S3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [51776 2020-02-17] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_0221; C:\WINDOWS\System32\drivers\RzDev_0221.sys [52288 2020-02-17] (Razer USA Ltd. -> Razer Inc)
S3 RzDev_0306; C:\WINDOWS\System32\drivers\RzDev_0306.sys [52504 2020-02-17] (Razer USA Ltd. -> Razer Inc)
S3 rzendpt; C:\WINDOWS\System32\drivers\rzendpt.sys [52240 2017-07-19] (Razer USA Ltd. -> Razer Inc)
R3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [238352 2020-09-04] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [247744 2020-09-04] (Oracle Corporation -> Oracle Corporation)
S1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [5463560 2020-10-07] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-11-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429288 2020-11-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [71912 2020-11-04] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-11-05 15:47 - 2020-11-05 15:49 - 000011372 _____ C:\Users\User\Downloads\Fixlog.txt
2020-11-05 14:19 - 2020-11-05 14:20 - 000000000 ____D C:\AdwCleaner
2020-11-05 14:19 - 2020-11-05 14:19 - 000001509 _____ C:\Users\User\Desktop\adwcleaner_8.0.8.exe - Verknüpfung.lnk
2020-11-05 14:18 - 2020-11-05 15:49 - 000000008 __RSH C:\ProgramData\ntuser.pol
2020-11-05 14:18 - 2020-11-05 14:18 - 008447152 _____ (Malwarebytes) C:\Users\User\Downloads\adwcleaner_8.0.8.exe
2020-11-05 14:17 - 2020-07-23 04:41 - 000854120 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtkApi64U.dll
2020-11-05 14:17 - 2020-07-23 04:36 - 001145480 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtCOM64.dll
2020-11-05 14:17 - 2020-07-23 04:36 - 000468792 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\RtDataProc64.dll
2020-11-04 19:33 - 2020-11-05 15:05 - 000060271 _____ C:\Users\User\Downloads\Addition.txt
2020-11-04 19:27 - 2020-11-05 16:17 - 000020775 _____ C:\Users\User\Downloads\FRST.txt
2020-11-04 19:21 - 2020-11-05 16:17 - 000000000 ____D C:\FRST
2020-11-04 19:20 - 2020-11-04 19:20 - 002298368 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2020-11-04 15:25 - 2020-11-05 15:48 - 000000000 ____D C:\Users\User\AppData\LocalLow\Temp
2020-11-04 15:18 - 2020-11-04 15:18 - 019463448 _____ (Microsoft Corporation) C:\Users\User\Downloads\MediaCreationTool20H2.exe
2020-11-04 15:16 - 2020-11-04 15:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeyFinder
2020-11-04 15:16 - 2020-11-04 15:16 - 000000000 ____D C:\Program Files (x86)\Magical Jelly Bean
2020-11-04 15:02 - 2020-11-04 15:02 - 000062813 _____ C:\Users\User\Downloads\pkeyuibx_v1.5.1.zip
2020-11-01 17:31 - 2020-11-01 17:31 - 000901555 _____ C:\Users\User\Desktop\Jack The Ripper - ProbeKommunikationsprüfung.pdf
2020-11-01 13:11 - 2020-11-01 13:12 - 000000000 ____D C:\Users\User\AppData\Local\Hamachi_Main_Project
2020-11-01 10:22 - 2020-11-01 10:24 - 000000000 ____D C:\Users\User\Documents\GHOSTBUSTERS
2020-10-31 14:03 - 2020-10-31 14:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-10-31 11:05 - 2020-11-05 14:50 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-10-30 15:13 - 2020-10-30 15:21 - 000000447 _____ C:\Users\User\Desktop\Game_Ideas.txt
2020-10-28 18:16 - 2020-10-28 18:16 - 000016860 _____ C:\Users\User\Downloads\Sprites.zip
2020-10-28 17:58 - 2020-10-28 17:58 - 005388080 _____ C:\Users\User\Downloads\WormHoles-Open Source.zip
2020-10-28 17:51 - 2020-10-28 17:51 - 000000000 ____D C:\Users\User\AppData\LocalLow\Ryan
2020-10-28 15:51 - 2020-10-28 15:51 - 000000000 ____D C:\Users\User\AppData\Roaming\.mono
2020-10-28 15:50 - 2020-10-28 15:50 - 000000000 ____D C:\Users\User\AppData\LocalLow\miHoYo
2020-10-28 14:31 - 2020-10-28 16:20 - 000000000 ____D C:\Program Files\Genshin Impact
2020-10-28 14:31 - 2020-10-28 14:31 - 000000895 _____ C:\Users\Public\Desktop\Genshin Impact.lnk
2020-10-28 14:31 - 2020-10-28 14:31 - 000000895 _____ C:\ProgramData\Desktop\Genshin Impact.lnk
2020-10-28 14:31 - 2020-10-28 14:31 - 000000000 ____D C:\Users\User\AppData\Local\miHoYo
2020-10-28 14:31 - 2020-10-28 14:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Genshin Impact
2020-10-28 14:30 - 2020-10-28 14:30 - 102027032 _____ (miHoYo Co.,Ltd) C:\Users\User\Downloads\GenshinImpact_install_20201014173947.exe
2020-10-28 13:46 - 2020-10-28 13:46 - 000000000 ____D C:\Users\User\AppData\Local\HideandShriek
2020-10-28 13:38 - 2020-10-28 13:38 - 000000222 _____ C:\Users\User\Desktop\Hide and Shriek.url
2020-10-26 15:08 - 2020-10-26 15:08 - 000264536 _____ C:\Users\User\Downloads\UnityDownloadAssistant-2019.4.13f1.exe
2020-10-26 11:21 - 2010-06-02 04:55 - 000527192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_7.dll
2020-10-26 11:21 - 2010-06-02 04:55 - 000518488 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_7.dll
2020-10-26 11:21 - 2010-06-02 04:55 - 000239960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_7.dll
2020-10-26 11:21 - 2010-06-02 04:55 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_7.dll
2020-10-26 11:21 - 2010-06-02 04:55 - 000077656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_5.dll
2020-10-26 11:21 - 2010-06-02 04:55 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_5.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 002401112 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 002106216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 001998168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 001907552 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 001868128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 000511328 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 000470880 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 000276832 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_43.dll
2020-10-26 11:21 - 2010-05-26 11:41 - 000248672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_43.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000530776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_6.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000528216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_6.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_6.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000176984 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_6.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000078680 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_4.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000074072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_4.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_7.dll
2020-10-26 11:21 - 2010-02-04 10:01 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_7.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000517960 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_5.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000515416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_5.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000238936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_5.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000176968 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_5.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000073544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_3.dll
2020-10-26 11:21 - 2009-09-04 17:44 - 000069464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_3.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 005554512 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dcsx_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 005501792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dcsx_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 002582888 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 002475352 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 001974616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 000523088 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 000285024 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx11_42.dll
2020-10-26 11:21 - 2009-09-04 17:29 - 000235344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx11_42.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000521560 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_4.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_4.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_4.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000174936 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_4.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000024920 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_6.dll
2020-10-26 11:21 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_6.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 005425496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_41.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 004178264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_41.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 002430312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_41.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 001846632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_41.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 000520544 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_41.dll
2020-10-26 11:21 - 2009-03-09 15:27 - 000453456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_41.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000518480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_3.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000514384 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_3.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000235856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_3.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000175440 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_3.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000074576 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_2.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000070992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_2.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000025936 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_5.dll
2020-10-26 11:21 - 2008-10-27 10:04 - 000023376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_5.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 005631312 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_40.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 004379984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_40.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 002605920 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_40.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 002036576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_40.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 000519000 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_40.dll
2020-10-26 11:21 - 2008-10-15 06:22 - 000452440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_40.dll
2020-10-26 11:21 - 2008-07-31 10:41 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_2.dll
2020-10-26 11:21 - 2008-07-31 10:41 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_2.dll
2020-10-26 11:21 - 2008-07-31 10:41 - 000072200 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_1.dll
2020-10-26 11:21 - 2008-07-31 10:41 - 000068616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_1.dll
2020-10-26 11:21 - 2008-07-31 10:40 - 000513544 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_2.dll
2020-10-26 11:21 - 2008-07-31 10:40 - 000509448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_2.dll
2020-10-26 11:21 - 2008-07-10 11:00 - 004992520 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_39.dll
2020-10-26 11:21 - 2008-07-10 11:00 - 001942552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_39.dll
2020-10-26 11:21 - 2008-07-10 11:00 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_39.dll
2020-10-26 11:21 - 2008-05-30 14:19 - 000511496 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_1.dll
2020-10-26 11:21 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_1.dll
2020-10-26 11:21 - 2008-05-30 14:18 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_1.dll
2020-10-26 11:21 - 2008-05-30 14:18 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_1.dll
2020-10-26 11:21 - 2008-05-30 14:17 - 000068104 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAPOFX1_0.dll
2020-10-26 11:21 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAPOFX1_0.dll
2020-10-26 11:21 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_4.dll
2020-10-26 11:21 - 2008-05-30 14:16 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_4.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 004991496 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_38.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 003850760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_38.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 001941528 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_38.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 001491992 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_38.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 000540688 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_38.dll
2020-10-26 11:21 - 2008-05-30 14:11 - 000467984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_38.dll
2020-10-26 11:21 - 2008-03-05 16:04 - 000489480 _____ (Microsoft Corporation) C:\WINDOWS\system32\XAudio2_0.dll
2020-10-26 11:21 - 2008-03-05 16:03 - 000479752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XAudio2_0.dll
2020-10-26 11:21 - 2008-03-05 16:03 - 000238088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine3_0.dll
2020-10-26 11:21 - 2008-03-05 16:03 - 000177672 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine3_0.dll
2020-10-26 11:21 - 2008-03-05 16:00 - 000028168 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_3.dll
2020-10-26 11:21 - 2008-03-05 16:00 - 000025608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_3.dll
2020-10-26 11:21 - 2008-03-05 15:56 - 004910088 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DX9_37.dll
2020-10-26 11:21 - 2008-03-05 15:56 - 003786760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DX9_37.dll
2020-10-26 11:21 - 2008-03-05 15:56 - 001860120 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_37.dll
2020-10-26 11:21 - 2008-03-05 15:56 - 001420824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_37.dll
2020-10-26 11:21 - 2008-02-05 23:07 - 000529424 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_37.dll
2020-10-26 11:21 - 2008-02-05 23:07 - 000462864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_37.dll
2020-10-26 11:21 - 2007-10-22 03:40 - 000411656 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_10.dll
2020-10-26 11:21 - 2007-10-22 03:39 - 000267272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_10.dll
2020-10-26 11:21 - 2007-10-22 03:37 - 000021000 _____ (Microsoft Corporation) C:\WINDOWS\system32\X3DAudio1_2.dll
2020-10-26 11:21 - 2007-10-22 03:37 - 000017928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\X3DAudio1_2.dll
2020-10-26 11:21 - 2007-10-12 15:14 - 005081608 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_36.dll
2020-10-26 11:21 - 2007-10-12 15:14 - 003734536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_36.dll
2020-10-26 11:21 - 2007-10-12 15:14 - 002006552 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_36.dll
2020-10-26 11:21 - 2007-10-12 15:14 - 001374232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_36.dll
2020-10-26 11:21 - 2007-10-02 09:56 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_36.dll
2020-10-26 11:21 - 2007-10-02 09:56 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_36.dll
2020-10-26 11:21 - 2007-07-20 00:57 - 000411496 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_9.dll
2020-10-26 11:21 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_9.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 005073256 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_35.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 003727720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_35.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 001985904 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_35.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 001358192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_35.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 000508264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_35.dll
2020-10-26 11:21 - 2007-07-19 18:14 - 000444776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_35.dll
2020-10-26 11:21 - 2007-06-20 20:49 - 000409960 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_8.dll
2020-10-26 11:21 - 2007-06-20 20:46 - 000266088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_8.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 004496232 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_34.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 003497832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_34.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 001401200 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_34.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 001124720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_34.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_34.dll
2020-10-26 11:21 - 2007-05-16 16:45 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_34.dll
2020-10-26 11:21 - 2007-04-04 18:55 - 000403304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_7.dll
2020-10-26 11:21 - 2007-04-04 18:55 - 000261480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_7.dll
2020-10-26 11:21 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_3.dll
2020-10-26 11:21 - 2007-03-15 16:57 - 000506728 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10_33.dll
2020-10-26 11:21 - 2007-03-15 16:57 - 000443752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10_33.dll
2020-10-26 11:21 - 2007-03-12 16:42 - 004494184 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_33.dll
2020-10-26 11:21 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_33.dll
2020-10-26 11:21 - 2007-03-12 16:42 - 001400176 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_33.dll
2020-10-26 11:21 - 2007-03-12 16:42 - 001123696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_33.dll
2020-10-26 11:21 - 2007-03-05 12:42 - 000017688 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_1.dll
2020-10-26 11:21 - 2007-03-05 12:42 - 000015128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_1.dll
2020-10-26 11:21 - 2007-01-24 15:27 - 000393576 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_6.dll
2020-10-26 11:21 - 2007-01-24 15:27 - 000255848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_6.dll
2020-10-26 11:21 - 2006-12-08 12:02 - 000251672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_5.dll
2020-10-26 11:21 - 2006-12-08 12:00 - 000390424 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_5.dll
2020-10-26 11:21 - 2006-11-29 13:06 - 004398360 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_32.dll
2020-10-26 11:21 - 2006-11-29 13:06 - 003426072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_32.dll
2020-10-26 11:21 - 2006-11-29 13:06 - 000469264 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx10.dll
2020-10-26 11:21 - 2006-11-29 13:06 - 000440080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx10.dll
2020-10-26 11:21 - 2006-09-28 16:05 - 003977496 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_31.dll
2020-10-26 11:21 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_31.dll
2020-10-26 11:21 - 2006-09-28 16:05 - 000237848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_4.dll
2020-10-26 11:21 - 2006-09-28 16:04 - 000364824 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_4.dll
2020-10-26 11:21 - 2006-07-28 09:31 - 000083736 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_2.dll
2020-10-26 11:21 - 2006-07-28 09:30 - 000363288 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_3.dll
2020-10-26 11:21 - 2006-07-28 09:30 - 000236824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_3.dll
2020-10-26 11:21 - 2006-07-28 09:30 - 000062744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_2.dll
2020-10-26 11:21 - 2006-05-31 07:24 - 000230168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_2.dll
2020-10-26 11:21 - 2006-05-31 07:22 - 000354072 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_2.dll
2020-10-26 11:21 - 2006-03-31 12:41 - 003927248 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_30.dll
2020-10-26 11:21 - 2006-03-31 12:40 - 002388176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_30.dll
2020-10-26 11:21 - 2006-03-31 12:40 - 000352464 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_1.dll
2020-10-26 11:21 - 2006-03-31 12:39 - 000229584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_1.dll
2020-10-26 11:21 - 2006-03-31 12:39 - 000083664 _____ (Microsoft Corporation) C:\WINDOWS\system32\xinput1_1.dll
2020-10-26 11:21 - 2006-03-31 12:39 - 000062672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xinput1_1.dll
2020-10-26 11:21 - 2006-02-03 08:43 - 003830992 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_29.dll
2020-10-26 11:21 - 2006-02-03 08:43 - 002332368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_29.dll
2020-10-26 11:21 - 2006-02-03 08:42 - 000355536 _____ (Microsoft Corporation) C:\WINDOWS\system32\xactengine2_0.dll
2020-10-26 11:21 - 2006-02-03 08:42 - 000230096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\xactengine2_0.dll
2020-10-26 11:21 - 2006-02-03 08:41 - 000016592 _____ (Microsoft Corporation) C:\WINDOWS\system32\x3daudio1_0.dll
2020-10-26 11:21 - 2006-02-03 08:41 - 000014032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\x3daudio1_0.dll
2020-10-26 11:21 - 2005-12-05 18:09 - 003815120 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_28.dll
2020-10-26 11:21 - 2005-12-05 18:09 - 002323664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_28.dll
2020-10-26 11:21 - 2005-07-22 19:59 - 003807440 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_27.dll
2020-10-26 11:21 - 2005-07-22 19:59 - 002319568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_27.dll
2020-10-26 11:21 - 2005-05-26 15:34 - 003767504 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_26.dll
2020-10-26 11:21 - 2005-05-26 15:34 - 002297552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_26.dll
2020-10-26 11:21 - 2005-03-18 17:19 - 003823312 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_25.dll
2020-10-26 11:21 - 2005-03-18 17:19 - 002337488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_25.dll
2020-10-26 11:21 - 2005-02-05 19:45 - 003544272 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3dx9_24.dll
2020-10-26 11:21 - 2005-02-05 19:45 - 002222800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3dx9_24.dll
2020-10-24 10:29 - 2020-10-24 10:29 - 002068950 _____ C:\Users\User\Downloads\Action RPG Resources.zip
2020-10-24 10:21 - 2020-10-24 10:21 - 000000000 ____D C:\Users\User\Downloads\Sprites
2020-10-24 10:08 - 2020-10-24 10:08 - 028784854 _____ C:\Users\User\Downloads\Godot_v3.2.3-stable_win64.exe.zip
2020-10-23 18:50 - 2020-10-23 18:50 - 000000000 ____D C:\Users\User\AppData\Local\mbam
2020-10-23 18:50 - 2020-10-23 18:50 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-10-23 18:47 - 2020-10-23 18:47 - 002062144 _____ (Malwarebytes) C:\Users\User\Downloads\MBSetup.exe
2020-10-22 15:07 - 2020-10-22 15:08 - 192365968 _____ (YoYo Games Ltd) C:\Users\User\Downloads\gamemaker-studio-2-2-5-481.exe
2020-10-19 16:31 - 2020-10-19 16:31 - 000000000 ___HD C:\Users\User\Downloads\.opera
2020-10-17 12:56 - 2020-10-17 12:56 - 000002808 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Milanote.lnk
2020-10-17 11:57 - 2020-10-17 11:57 - 000000000 ____D C:\Users\User\AppData\Roaming\NuGet
2020-10-17 11:57 - 2020-10-17 11:57 - 000000000 ____D C:\Users\User\.templateengine
2020-10-17 11:52 - 2020-10-17 11:52 - 132235840 _____ (Microsoft Corporation) C:\Users\User\Downloads\dotnet-sdk-3.1.403-win-x64.exe
2020-10-16 15:11 - 2020-10-16 15:11 - 000000000 ____D C:\Users\User\.omnisharp
2020-10-16 14:34 - 2020-10-16 14:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Visual Studio 2019 Tools for Unity
2020-10-16 14:34 - 2020-10-16 14:34 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio Tools for Unity
2020-10-16 14:33 - 2020-10-16 14:33 - 000001792 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Blend for Visual Studio 2019.lnk
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\3082
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\2052
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1055
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1049
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1046
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1045
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1042
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1041
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1040
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1036
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1033
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1031
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1029
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\SysWOW64\1028
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\3082
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\2052
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1055
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1049
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1046
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1045
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1042
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1041
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1040
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1036
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1033
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1031
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1029
2020-10-16 14:33 - 2020-10-16 14:33 - 000000000 ____D C:\WINDOWS\system32\1028
2020-10-16 14:32 - 2020-10-16 14:32 - 000000000 ____D C:\Program Files\Microsoft SQL Server
2020-10-16 14:32 - 2020-10-16 14:32 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2020-10-16 14:32 - 2020-10-16 14:32 - 000000000 ____D C:\Program Files (x86)\NuGet
2020-10-16 14:32 - 2020-10-16 14:32 - 000000000 ____D C:\Program Files (x86)\Microsoft SQL Server
2020-10-16 14:32 - 2020-10-16 14:32 - 000000000 ____D C:\Program Files (x86)\Microsoft SDKs
2020-10-16 14:31 - 2020-10-17 11:53 - 000000000 ____D C:\Program Files\dotnet
2020-10-16 14:31 - 2020-10-16 15:16 - 000000000 ____D C:\Users\User\.dotnet
2020-10-16 14:31 - 2020-10-16 14:31 - 000001791 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio 2019.lnk
2020-10-16 14:31 - 2020-10-16 14:31 - 000000000 ____D C:\Program Files (x86)\dotnet
2020-10-16 14:28 - 2020-10-16 14:28 - 001397824 _____ (Microsoft Corporation) C:\Users\User\Downloads\vs_community__151751110.1602854855.exe
2020-10-14 15:21 - 2020-11-04 18:43 - 000004454 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1602685316
2020-10-14 15:21 - 2020-11-02 13:38 - 000004224 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1602685313
2020-10-14 14:57 - 2020-10-14 14:57 - 002527040 _____ (Wiper Software, UAB) C:\Users\User\Downloads\WiperSoft-installer (2).exe
2020-10-12 17:02 - 2020-10-12 17:02 - 002527040 _____ (Wiper Software, UAB) C:\Users\User\Downloads\WiperSoft-installer (1).exe
2020-10-12 16:46 - 2020-10-12 16:46 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-10-12 16:45 - 2020-10-12 16:48 - 000381112 _____ C:\WINDOWS\ntbtlog.txt
2020-10-12 13:11 - 2020-10-16 17:25 - 000000000 ____D C:\Users\User\Desktop\Loool
2020-10-11 09:37 - 2020-10-11 09:37 - 006774295 _____ C:\Users\User\Downloads\VID_20201011_095708(0).mp4
2020-10-07 13:02 - 2020-10-07 14:20 - 000000000 ___HD C:\Users\User\.git
2020-10-07 13:00 - 2020-10-07 13:00 - 000000099 _____ C:\Users\User\.gitconfig
2020-10-07 13:00 - 2020-10-07 13:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Git
2020-10-07 13:00 - 2020-10-07 13:00 - 000000000 ____D C:\Program Files\Git
2020-10-07 12:59 - 2020-10-07 12:59 - 051110112 _____ (The Git Development Community ) C:\Users\User\Downloads\Git-2.28.0-64-bit.exe
2020-10-07 12:55 - 2020-10-07 13:05 - 000000202 _____ C:\Users\User\_netrc
2020-10-07 12:55 - 2020-10-07 12:55 - 000000000 ____D C:\Users\User\AppData\Local\heroku
2020-10-07 12:54 - 2020-10-07 12:55 - 000000000 ____D C:\Program Files\heroku
2020-10-07 12:54 - 2020-10-07 12:54 - 022840776 _____ (Heroku) C:\Users\User\Downloads\heroku-x64.exe
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-11-05 16:17 - 2020-04-11 15:20 - 000000000 ____D C:\Users\User\AppData\Roaming\discord
2020-11-05 16:15 - 2020-04-09 15:55 - 000000000 ____D C:\Users\User\AppData\Local\D3DSCache
2020-11-05 16:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-11-05 15:56 - 2020-09-14 17:34 - 001722788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-11-05 15:56 - 2019-12-07 15:51 - 000743672 _____ C:\WINDOWS\system32\perfh007.dat
2020-11-05 15:56 - 2019-12-07 15:51 - 000150094 _____ C:\WINDOWS\system32\perfc007.dat
2020-11-05 15:56 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-11-05 15:51 - 2020-04-09 15:20 - 000000000 ____D C:\ProgramData\NVIDIA
2020-11-05 15:50 - 2020-09-16 16:35 - 000000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
2020-11-05 15:50 - 2020-05-28 17:18 - 000000000 ____D C:\Program Files (x86)\Steam
2020-11-05 15:49 - 2020-09-14 17:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-11-05 15:49 - 2020-09-14 17:24 - 000008192 ___SH C:\DumpStack.log.tmp
2020-11-05 15:49 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2020-11-05 15:48 - 2020-04-09 15:20 - 000000000 ____D C:\ProgramData\Package Cache
2020-11-05 15:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2020-11-05 15:48 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2020-11-05 15:47 - 2020-05-05 13:12 - 000000000 ____D C:\Users\User\AppData\Roaming\Origin
2020-11-05 14:56 - 2020-05-05 13:14 - 000000000 ____D C:\Program Files (x86)\Origin Games
2020-11-05 14:56 - 2020-05-05 13:12 - 000000000 ____D C:\Users\User\AppData\Local\Origin
2020-11-05 14:56 - 2020-05-05 13:12 - 000000000 ____D C:\ProgramData\Origin
2020-11-05 14:17 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-11-05 14:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-11-05 14:12 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-11-05 14:12 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2020-11-05 13:54 - 2020-05-16 12:03 - 000000000 ____D C:\Users\User\AppData\Roaming\obs-studio
2020-11-05 13:50 - 2020-05-20 18:23 - 000000000 ____D C:\Users\User\AppData\Local\CrashDumps
2020-11-04 19:09 - 2020-07-12 09:30 - 000000000 ____D C:\Program Files\Common Files\Adobe
2020-11-04 19:09 - 2020-05-17 12:09 - 000000000 ____D C:\ProgramData\Adobe
2020-11-04 19:09 - 2020-04-08 16:20 - 000000000 ____D C:\Users\User\AppData\Roaming\Adobe
2020-11-04 19:00 - 2020-04-10 11:14 - 000000000 ____D C:\Program Files (x86)\Google
2020-11-04 18:54 - 2020-04-08 16:28 - 000795000 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2020-11-04 18:54 - 2020-04-08 15:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-11-04 16:28 - 2020-09-14 17:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-11-03 19:11 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-11-02 15:34 - 2020-08-18 07:57 - 000000000 ____D C:\Users\User\AppData\Roaming\Godot
2020-11-01 17:40 - 2020-05-10 11:12 - 000000000 ____D C:\ProgramData\Riot Games
2020-10-31 16:21 - 2020-09-16 16:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-10-31 14:03 - 2020-09-16 16:35 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-10-30 13:20 - 2020-05-05 13:13 - 000000000 ____D C:\Program Files (x86)\Origin
2020-10-30 09:21 - 2020-09-14 17:30 - 000004232 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1586861914
2020-10-30 09:21 - 2020-04-14 11:58 - 000001427 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2020-10-29 17:58 - 2020-09-14 17:30 - 000003372 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-576477333-797060333-926106444-1001
2020-10-29 17:58 - 2020-09-14 16:08 - 000002372 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-10-29 17:58 - 2020-04-08 16:22 - 000000000 ___RD C:\Users\User\OneDrive
2020-10-29 09:37 - 2020-04-09 15:21 - 000000000 ____D C:\Users\User\AppData\Local\NVIDIA Corporation
2020-10-28 13:46 - 2020-04-09 16:16 - 000000000 ____D C:\Users\User\AppData\Local\UnrealEngine
2020-10-27 18:35 - 2020-06-18 14:21 - 000000000 ____D C:\Users\User\AppData\Roaming\UnityHub
2020-10-27 17:41 - 2020-08-23 12:59 - 000000000 ____D C:\Users\User\AppData\Roaming\Code
2020-10-27 17:39 - 2020-08-23 12:42 - 000000000 ____D C:\Users\User\AppData\Local\.IdentityService
2020-10-26 15:09 - 2020-06-18 14:21 - 000001870 _____ C:\Users\Public\Desktop\Unity Hub.lnk
2020-10-26 15:09 - 2020-06-18 14:21 - 000001870 _____ C:\ProgramData\Desktop\Unity Hub.lnk
2020-10-26 15:09 - 2020-06-18 14:21 - 000000000 ____D C:\Program Files\Unity Hub
2020-10-26 15:06 - 2020-06-18 14:31 - 000000000 ____D C:\Users\User\AppData\LocalLow\DefaultCompany
2020-10-26 15:04 - 2020-06-18 14:21 - 000000000 ____D C:\Users\User\AppData\Local\unityhub-updater
2020-10-26 11:22 - 2020-05-05 13:46 - 000000660 _____ C:\Users\Public\Desktop\Apex Legends.lnk
2020-10-26 11:22 - 2020-05-05 13:46 - 000000660 _____ C:\ProgramData\Desktop\Apex Legends.lnk
2020-10-25 17:45 - 2020-09-13 10:12 - 000000000 ____D C:\Users\User\Desktop\Python Discord Erklärungen
2020-10-25 13:48 - 2020-09-16 16:35 - 000000000 ____D C:\ProgramData\Mozilla
2020-10-24 09:51 - 2020-04-08 16:20 - 000000000 ____D C:\Users\User\AppData\Local\Packages
2020-10-23 12:30 - 2020-08-17 15:29 - 000000000 ____D C:\Users\User\AppData\Roaming\GameMakerStudio2
2020-10-23 12:30 - 2020-08-17 15:29 - 000000000 ____D C:\ProgramData\GameMakerStudio2
2020-10-23 12:29 - 2020-08-17 15:29 - 000000000 ____D C:\Users\User\Documents\GameMakerStudio2
2020-10-23 12:29 - 2020-08-17 15:29 - 000000000 ____D C:\Users\User\AppData\Local\GameMakerStudio2
2020-10-23 12:28 - 2020-08-17 15:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameMaker Studio 2
2020-10-21 17:45 - 2020-07-13 10:52 - 000000000 ____D C:\Users\User\Desktop\Photoshop Stuff
2020-10-19 16:36 - 2020-05-17 08:45 - 000000000 ____D C:\Users\User\AppData\Roaming\slobs-client
2020-10-19 12:39 - 2020-06-03 10:28 - 000000000 ____D C:\Program Files\Riot Vanguard
2020-10-16 17:28 - 2020-09-14 15:35 - 000000000 ___DC C:\WINDOWS\Panther
2020-10-16 14:34 - 2020-08-23 12:39 - 000000000 ____D C:\Users\User\AppData\Roaming\Visual Studio Setup
2020-10-16 14:31 - 2020-09-14 15:58 - 000000000 ____D C:\Program Files (x86)\MSBuild
2020-10-16 14:28 - 2020-08-23 12:39 - 000001351 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2020-10-16 14:28 - 2020-08-23 12:39 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2020-10-15 16:51 - 2020-08-23 12:58 - 000000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2020-10-15 16:10 - 2020-05-15 10:20 - 000000000 ____D C:\Users\User\AppData\Roaming\audacity
2020-10-12 17:00 - 2020-04-10 11:14 - 000000000 ____D C:\Users\User\AppData\Local\Google
2020-10-11 16:18 - 2020-06-15 14:18 - 000000000 ____D C:\Users\User\AppData\Roaming\Badlion Client
2020-10-11 15:34 - 2020-06-15 14:16 - 000000000 ____D C:\Users\User\AppData\Roaming\.minecraft
2020-10-11 15:33 - 2020-06-15 14:18 - 000000000 ____D C:\ProgramData\BadlionClient
2020-10-11 15:32 - 2020-06-15 14:18 - 000001930 _____ C:\Users\Public\Desktop\Badlion Client.lnk
2020-10-11 15:32 - 2020-06-15 14:18 - 000001930 _____ C:\ProgramData\Desktop\Badlion Client.lnk
2020-10-11 15:32 - 2020-06-15 14:17 - 000000000 ____D C:\Program Files\Badlion Client
2020-10-11 15:30 - 2020-07-14 15:20 - 000000000 ____D C:\Users\User\AppData\Local\Vivox
2020-10-11 15:27 - 2020-04-10 08:34 - 000000000 ____D C:\Users\User\AppData\Local\Ubisoft Game Launcher
2020-10-11 08:55 - 2020-06-03 11:52 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2020-10-10 13:22 - 2020-05-15 09:51 - 000000000 ____D C:\Users\User\Desktop\Hitfilm
2020-10-07 17:20 - 2020-04-11 15:27 - 000000000 ____D C:\Users\User\AppData\Local\Battle.net
2020-10-07 14:05 - 2020-08-23 13:05 - 000000000 ____D C:\Users\User\.pylint.d
2020-10-07 13:01 - 2020-10-01 14:55 - 000000000 ____D C:\Users\User\.VirtualBox
2020-10-07 13:01 - 2020-10-01 14:55 - 000000000 ____D C:\ProgramData\VirtualBox
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Die Addition.txt Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 0$-11-2020
durchgeführt von User (05-11-2020 16:18:13)
Gestartet von C:\Users\User\Downloads
Windows 10 Pro Version 2004 19041.508 (X64) (2020-09-14 16:30:14)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-576477333-797060333-926106444-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-576477333-797060333-926106444-503 - Limited - Disabled)
Gast (S-1-5-21-576477333-797060333-926106444-501 - Limited - Disabled)
User (S-1-5-21-576477333-797060333-926106444-1001 - Administrator - Enabled) => C:\Users\User
WDAGUtilityAccount (S-1-5-21-576477333-797060333-926106444-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Anaconda3 2020.07 (Python 3.8.3 64-bit) (HKLM\...\Anaconda3 2020.07 (Python 3.8.3 64-bit)) (Version: 2020.07 - Anaconda, Inc.)
Apex Legends (HKLM-x32\...\{D7FBF176-382D-484E-863A-DFD1124A2A1C}) (Version: 1.0.4.8 - Electronic Arts, Inc.)
Assassin's Creed Odyssey (HKLM-x32\...\Uplay Install 5059) (Version: - Ubisoft)
Badlion Client 2.17.0 (HKLM\...\{1de14785-dd8c-5cd2-aae8-d4a376f81d78}) (Version: 2.17.0 - Badlion)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Blender (HKLM\...\{EDFAE2A8-E73B-4CD1-9648-46A7E4434BDA}) (Version: 2.82.1 - Blender Foundation)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{AF312B06-5C5C-468E-89B3-BE6DE2645722}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{0A4EF0E6-A912-4CDE-A7F3-6E56E7C13A2F}) (Version: 1.1.6 - Cisco Systems, Inc.)
ClickOnce Bootstrapper Package for Microsoft .NET Framework (HKLM-x32\...\{0243F145-076D-423A-8F77-218DC8840261}) (Version: 4.8.04119 - Microsoft Corporation) Hidden
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
CrystalDiskInfo 8.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.0.0 - Crystal Dew World)
DiagnosticsHub_CollectionService (HKLM\...\{1F3C3AAC-9F7A-47DA-A082-0ACE770041BE}) (Version: 16.1.28901 - Microsoft Corporation) Hidden
Discord (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Discord) (Version: 0.0.308 - Discord Inc.)
Documentation Manager (HKLM\...\{3EF18AD4-8F08-42FE-B2A4-F2DDB1DFB5D0}) (Version: 21.50.1.1 - Intel Corporation) Hidden
Entity Framework 6.2.0 Tools for Visual Studio 2019 (HKLM-x32\...\{7C2070BF-8E07-4B5F-A182-FADB0B95AB39}) (Version: 6.2.0.0 - Microsoft Corporation) Hidden
Epic Games Launcher (HKLM-x32\...\{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}) (Version: 1.1.267.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Far Cry New Dawn (HKLM-x32\...\Uplay Install 5210) (Version: - Ubisoft)
Futuremark SystemInfo (HKLM-x32\...\{A93C08EF-FEB5-49B0-BA5C-2149018683B5}) (Version: 5.26.809.0 - Futuremark)
Genshin Impact (HKLM\...\Genshin Impact) (Version: 2.3.4.0 - miHoYo Co.,Ltd)
Git version 2.28.0 (HKLM\...\Git_is1) (Version: 2.28.0 - The Git Development Community)
GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
heroku (HKLM-x32\...\heroku) (Version: - Heroku)
HitFilm Express (HKLM\...\{9878FC34-063A-4B70-BAC5-2D188AC11678}) (Version: 14.3.9931.38452 - FXHOME)
Hyper Scape (HKLM-x32\...\Uplay Install 11957) (Version: - Ubisoft)
icecap_collection_neutral (HKLM-x32\...\{EEF3770F-1EEF-4AA4-94E7-4B1DEBEED8B6}) (Version: 16.7.30310 - Microsoft Corporation) Hidden
icecap_collection_x64 (HKLM\...\{1E36C98F-0653-495C-B28E-433A6740ADB0}) (Version: 16.7.30310 - Microsoft Corporation) Hidden
icecap_collectionresources (HKLM-x32\...\{4E04BB8E-BA89-439A-8BDB-2CD5B22B3583}) (Version: 16.7.30310 - Microsoft Corporation) Hidden
icecap_collectionresourcesx64 (HKLM-x32\...\{682582F2-4D13-4B71-9C1E-29C76CBC76B5}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{3DAC4F8C-80E6-4204-8A58-747FA4CBAA03}) (Version: 16.0.246 - Intel Corporation)
Intel® Software Installer (HKLM-x32\...\{80b1fe4e-d0bb-443d-9235-8154a58cb4e6}) (Version: 21.50.1.1 - Intel Corporation) Hidden
IntelliTraceProfilerProxy (HKLM-x32\...\{7D94CF67-6666-4111-B027-D7AB7F189F70}) (Version: 15.0.18198.01 - Microsoft Corporation) Hidden
Kumulatives Microsoft .NET Framework Intellisense Pack für Visual Studio (Deutsch) (HKLM-x32\...\{E1F68FC9-F23C-4F44-8092-CAC55E43A80B}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
League of Legends (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Riot Game league_of_legends.live) (Version: - Riot Games, Inc)
Magical Jelly Bean KeyFinder (HKLM-x32\...\KeyFinder_is1) (Version: 2.0.10.13 - Magical Jelly Bean)
Microsoft .NET Core SDK 3.1.403 (x64) (HKLM-x32\...\{d348ff5e-791d-4655-a073-dd572024fb44}) (Version: 3.1.403.15556 - Microsoft Corporation)
Microsoft .NET Core SDK 3.1.403 (x64) from Visual Studio (HKLM\...\{3863962D-2DDA-4188-996A-070F54EE5F3C}) (Version: 3.1.403.015556 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{406C9ADB-1325-4FD0-9D13-C119CFF64E0A}) (Version: 2.65.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{ef6b00ec-13e1-4c25-9064-b2f383cb8412}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{61087a79-ac85-455c-934d-1fa22cc64f36}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.27.29016 (HKLM-x32\...\{1aaa01ad-3069-4288-9c6f-37a140a8f6c7}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.50.1 - Microsoft Corporation)
Microsoft Visual Studio Installer (HKLM\...\{6F320B93-EE3C-4826-85E0-ADF79F8D4C61}) (Version: 2.7.3068.929 - Microsoft Corporation)
Microsoft Web Deploy 4.0 (HKLM\...\{2EC26D34-FB67-4C58-AC20-235697551222}) (Version: 10.0.3802 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2019 CTP2.2 (HKLM\...\{0AF3B52A-F38D-4D63-9F72-73623C601CD9}) (Version: 15.0.1200.24 - Microsoft Corporation)
Microsoft-System-CLR-Typen für SQL Server 2019 CTP2.2 (HKLM-x32\...\{BF16A1DB-06A6-4A8E-B7A8-61F1F9C9FBA3}) (Version: 15.0.1200.24 - Microsoft Corporation)
Milanote (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\a8c41b6579a1c41c7db5871982c446f6) (Version: 1.0 - Milanote)
Minecraft Launcher (HKLM-x32\...\{F6678473-0198-46D0-A88F-2A247E6FA03C}) (Version: 1.0.0.0 - Mojang)
Mozilla Firefox 82.0.2 (x64 de) (HKLM\...\Mozilla Firefox 82.0.2 (x64 de)) (Version: 82.0.2 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 80.0.1 - Mozilla)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.8.9 - Notepad++ Team)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.4.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.4.14 - NVIDIA Corporation)
NVIDIA Grafiktreiber 452.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 452.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.34 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 25.0.8 - OBS Project)
Opera GX Stable 71.0.3770.310 (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Opera GX 71.0.3770.310) (Version: 71.0.3770.310 - Opera Software)
Oracle VM VirtualBox 6.1.14 (HKLM\...\{F54088F3-18F9-4953-A0AA-0D3E788E33E4}) (Version: 6.1.14 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.87.45080 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Paket zur Festlegung von "Doc Redirected"-Zielversionen von Microsoft .NET Framework 4.7.1 (Deutsch) (HKLM-x32\...\{5B970BE4-A2F2-41BD-8B91-FEA8DAA1DB9B}) (Version: 4.7.02558 - Microsoft Corporation) Hidden
Paket zur Festlegung von Zielversionen von Microsoft .NET Framework 4.7.2 (Deutsch) (HKLM-x32\...\{98FE7C2A-22A4-401A-B45B-2AA107C06DD7}) (Version: 4.7.03062 - Microsoft Corporation) Hidden
Python 3.8.5 (32-bit) (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\{44a59e57-34e2-4d86-93ba-a2588bfac760}) (Version: 3.8.5150.0 - Python Software Foundation)
Python 3.8.5 Core Interpreter (32-bit) (HKLM-x32\...\{31F7FCA7-1F15-48FD-BFB9-91FE58FC2F07}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Development Libraries (32-bit) (HKLM-x32\...\{657AEF25-7BC3-4E93-A08C-ECD14E8A74AE}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Documentation (32-bit) (HKLM-x32\...\{F7A293EB-21B8-45DE-85A5-8ADEB68B9EFB}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Executables (32-bit) (HKLM-x32\...\{F6156224-C882-453A-9046-EFCD31982E68}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 pip Bootstrap (32-bit) (HKLM-x32\...\{71C0D67F-EF42-4C5C-A2AE-04FD8B38AB1C}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Standard Library (32-bit) (HKLM-x32\...\{4D147A72-5C01-47B2-8789-1D1969F6AC32}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Tcl/Tk Support (32-bit) (HKLM-x32\...\{653FBD26-2D1A-48C1-AAB1-0AB6F2A3749B}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Test Suite (32-bit) (HKLM-x32\...\{DE45C740-8250-4A49-8B81-FE347C70E6BA}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python 3.8.5 Utility Scripts (32-bit) (HKLM-x32\...\{9450D936-1E4F-44EF-A0D4-92C471229B98}) (Version: 3.8.5150.0 - Python Software Foundation) Hidden
Python Launcher (HKLM-x32\...\{CEEAEA02-2472-4BF6-8994-52D6783F5575}) (Version: 3.8.7140.0 - Python Software Foundation)
Realtek USB Wireless LAN Driver (HKLM-x32\...\InstallShield_{DBCC4C27-F949-482b-B786-7B3B67587CD2}) (Version: Drv_3.00.0019 - REALTEK Semiconductor Corp.)
Riot Vanguard (HKLM\...\Riot Vanguard) (Version: - Riot Games, Inc.)
ROCCAT KoneXTD Driver (HKLM\...\{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.21.001 - Roccat GmbH) Hidden
ROCCAT KoneXTD Driver (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.21.001 - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version: - Roccat GmbH)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 20.3.22.613 - StreamElements)
Streamlabs OBS (HKLM\...\029c4619-0385-5543-9426-46f9987161d9) (Version: 0.21.2 - General Workings, Inc.)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.5.2 - TeamSpeak Systems GmbH)
The Witcher 3: Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.32 - GOG.com)
Unigine Superposition Benchmark 1.1 (HKLM\...\Superposition_is1) (Version: 1.1 - UNIGINE)
Unity (HKLM-x32\...\Unity) (Version: 2019.4.0f1 - Unity Technologies ApS)
Unity Hub 2.4.2 (HKLM\...\{Unity Technologies - Hub}) (Version: 2.4.2 - Unity Technologies Inc.)
Update for (KB2504637) (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}.KB2504637) (Version: 1 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 104.1 - Ubisoft)
VALORANT (HKU\S-1-5-21-576477333-797060333-926106444-1001\...\Riot Game valorant.live) (Version: - Riot Games, Inc)
vcpp_crt.redist.clickonce (HKLM-x32\...\{72B437B6-5512-4AF5-B499-A58ACA468A74}) (Version: 14.27.29112 - Microsoft Corporation) Hidden
Visual Studio Community 2019 (HKLM-x32\...\0ab5e17f) (Version: 16.7.30611.23 - Microsoft Corporation)
VS Immersive Activate Helper (HKLM-x32\...\{A71406B5-E487-4B01-8E59-D466841350F5}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
VS JIT Debugger (HKLM\...\{C7E8A4F2-EF09-42A8-B892-69D5ED99D965}) (Version: 16.0.102.0 - Microsoft Corporation) Hidden
vs_BlendMsi (HKLM-x32\...\{B5E3A3E1-1529-4D5A-9E95-34971FA07825}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsi (HKLM-x32\...\{BAF91847-0A64-405E-98EC-A0BA6FB4BC4E}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncebootstrappermsires (HKLM-x32\...\{271F1F42-B547-4498-825F-590DBB1774F7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_clickoncesigntoolmsi (HKLM-x32\...\{30D97A69-3C0F-4552-9A72-60E591B210C7}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_communitymsi (HKLM-x32\...\{CC46F5AE-F0CA-400C-A557-A95D742D4EE0}) (Version: 16.7.30310 - Microsoft Corporation) Hidden
vs_communitymsires (HKLM-x32\...\{A90E107F-D024-4EEC-A6F4-9E2858B4E506}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_devenvmsi (HKLM-x32\...\{AD0C92A4-1514-4BC1-A723-A272A8343924}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_filehandler_amd64 (HKLM-x32\...\{804E218D-A59D-48B9-AD2A-13BF6F1C9DA0}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
vs_filehandler_x86 (HKLM-x32\...\{3A735826-F946-4348-8DE2-0B9FF750F77D}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
vs_FileTracker_Singleton (HKLM-x32\...\{EF1AD9BC-8273-4B78-ACB6-A35DF4CE4447}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
vs_minshellinteropmsi (HKLM-x32\...\{27B16914-BC5D-4018-8074-071262A27F6D}) (Version: 16.2.28917 - Microsoft Corporation) Hidden
vs_minshellmsi (HKLM-x32\...\{760FF3F5-A7F3-4079-92DD-9AEB0344D13E}) (Version: 16.7.30310 - Microsoft Corporation) Hidden
vs_minshellmsires (HKLM-x32\...\{6691EA7F-A585-4A9A-A6A9-160CEB236393}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_SQLClickOnceBootstrappermsi (HKLM-x32\...\{937CD512-3142-4F3E-93CD-5F86203ED24B}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
vs_tipsmsi (HKLM-x32\...\{E208E682-50EE-4F2F-9860-C91B906B8A03}) (Version: 16.0.28329 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsi (HKLM-x32\...\{178ED1EA-BAFA-489D-873D-F5FB72EA69B9}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
vs_vswebprotocolselectormsires (HKLM-x32\...\{4B502A46-943B-4D09-98A9-3A2446614A8E}) (Version: 16.7.30309 - Microsoft Corporation) Hidden
WATCH_DOGS2 (HKLM-x32\...\Uplay Install 2688) (Version: - Ubisoft)
WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Packages:
=========
Candy Crush Friends -> C:\Program Files\WindowsApps\king.com.CandyCrushFriends_1.45.4.0_x86__kgqvnymyfvs32 [2020-10-25] (king.com)
Farm Heroes Saga -> C:\Program Files\WindowsApps\king.com.FarmHeroesSaga_5.47.3.0_x86__kgqvnymyfvs32 [2020-11-05] (king.com)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-04-13] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-04-13] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-10-25] (Microsoft Studios) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-08-30] (Netflix, Inc.)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.958.0_x64__56jybvy8sckqj [2020-06-24] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.14.225.0_x64__dt26b99r8h8gj [2020-11-05] (Realtek Semiconductor Corp)
Spotify Music -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.145.621.0_x86__zpdnekdrzrea0 [2020-11-05] (Spotify AB) [Startup Task]
Xbox Zubehör -> C:\Program Files\WindowsApps\Microsoft.XboxDevices_300.1911.1001.0_x64__8wekyb3d8bbwe [2020-05-29] (Microsoft Corporation)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.6.0_x86__xpfg3f7e9an52 [2020-10-29] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2020-07-15] (Notepad++ -> )
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_ba8c9c14f3d320cb\nvshext.dll [2020-08-14] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\system32\frapsv64.dll [105984 2019-08-30] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [94208 2019-08-30] (Beepa P/L) [Datei ist nicht signiert]
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2020-06-03 16:27 - 2012-06-17 10:20 - 000061440 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2020-11-05 14:18 - 2020-11-05 14:50 - 000228352 _____ () [Datei ist nicht signiert] C:\Program Files\Mozilla Firefox\zlib1.dll
2020-04-09 15:12 - 2020-04-09 15:12 - 000710656 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\XINGAG.XING_4.0.6.0_x86__xpfg3f7e9an52\e_sqlite3.dll
2020-10-29 19:12 - 2020-10-29 19:12 - 038110208 _____ () [Datei ist nicht signiert] C:\Program Files\WindowsApps\XINGAG.XING_4.0.6.0_x86__xpfg3f7e9an52\Xing.UWP.dll
2020-05-05 13:13 - 2020-05-05 13:12 - 001282048 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\LIBEAY32.dll
2020-05-05 13:13 - 2020-05-05 13:12 - 000279040 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\ssleay32.dll
2020-05-05 13:13 - 2020-05-05 13:12 - 001611264 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\platforms\qwindows.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 005487104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Core.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 005841920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Gui.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 001179136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Network.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 000146432 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5WebSockets.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 005089792 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Widgets.dll
2020-10-30 13:20 - 2020-05-05 13:12 - 000184832 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Origin\Qt5Xml.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-03-19 05:49 - 2020-09-04 10:06 - 000001097 _____ C:\WINDOWS\system32\drivers\etc\hosts
0.0.0.0 pubads.g.doubleclick.net
0.0.0.0 securepubads.g.doubleclick.net
0.0.0.0 www.googletagservices.com
0.0.0.0 gads.pubmatic.com
0.0.0.0 ads.pubmatic.com
0.0.0.0 tpc.googlesyndication.com
0.0.0.0 pagead2.googlesyndication.com
0.0.0.0 googleads.g.doubleclick.net
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> %INTEL_DEV_REDIST%redist\intel64_win\compiler;C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;C:\Program Files (x86)\nodejs\;C:\FFMPEG\bin;C:\Users\User\AppData\Local\Programs\Python\Python38-32;C:\Python\get-pip.py;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Git\cmd;C:\Program Files\dotnet\
HKU\S-1-5-21-576477333-797060333-926106444-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\User\Pictures\C# wallpaper.png
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
ist aktiviert.
Network Binding:
=============
VirtualBox Host-Only Network: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
Ethernet: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
WLAN 2: VirtualBox NDIS6 Bridged Networking Driver -> oracle_VBoxNetLwf (enabled)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run: => "Riot Vanguard"
HKLM\...\StartupApproved\Run32: => "Kraken0502Launcher"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "launchOnStartup"
HKU\S-1-5-21-576477333-797060333-926106444-1001\...\StartupApproved\Run: => "CCXProcess"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [TCP Query User{F08F279B-F95D-4C81-92F3-31E8D07D883B}C:\program files\windowsapps\spotifyab.spotifymusic_1.145.621.0_x86__zpdnekdrzrea0\spotify.exe] => (Block) C:\program files\windowsapps\spotifyab.spotifymusic_1.145.621.0_x86__zpdnekdrzrea0\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{F3AC3BE1-986F-4F3D-B988-A3073F0BA25D}C:\program files\windowsapps\spotifyab.spotifymusic_1.145.621.0_x86__zpdnekdrzrea0\spotify.exe] => (Block) C:\program files\windowsapps\spotifyab.spotifymusic_1.145.621.0_x86__zpdnekdrzrea0\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{88B063BD-904B-4C28-8732-E96CD6BA7944}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)
FirewallRules: [{996BA0D4-F519-412A-96F3-16D0B378A105}] => (Allow) C:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)
FirewallRules: [{B91FE4C4-FF3C-4284-B9E5-1A0F3020CBB1}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{F29C49B3-3ED2-4024-B04E-E0F2F6F40416}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
==================== Wiederherstellungspunkte =========================
26-10-2020 11:21:31 DirectX wurde installiert
28-10-2020 14:57:18 DirectX wurde installiert
04-11-2020 16:25:17 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (11/05/2020 01:50:55 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.19041.1, Zeitstempel: 0x415fabe9
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.19041.508, Zeitstempel: 0xb891cb14
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000aaf12
ID des fehlerhaften Prozesses: 0x13a4
Startzeit der fehlerhaften Anwendung: 0x01d6b37199ba64e5
Pfad der fehlerhaften Anwendung: C:\WINDOWS\SysWOW64\DllHost.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll
Berichtskennung: 9159cee8-3e16-47de-8e2b-cc5c6779c78f
Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
Error: (11/05/2020 01:36:46 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
Error: (11/04/2020 04:22:02 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf Volume (D:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/04/2020 01:25:45 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
Error: (11/02/2020 07:44:27 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
Error: (11/01/2020 04:23:29 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1023) (User: NT-AUTORITÄT)
Description: Windows kann die erweiterbare Leistungsindikator-DLL "C:\WINDOWS\system32\sysmain.dll" nicht laden (Win32-Fehlercode 126).
Error: (11/01/2020 01:13:01 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: DllHost.exe, Version: 10.0.19041.1, Zeitstempel: 0x415fabe9
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.19041.508, Zeitstempel: 0xb891cb14
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000aaf12
ID des fehlerhaften Prozesses: 0x4554
Startzeit der fehlerhaften Anwendung: 0x01d6b047a4a33d54
Pfad der fehlerhaften Anwendung: C:\WINDOWS\SysWOW64\DllHost.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\combase.dll
Berichtskennung: 58a1c27e-a26b-49fc-9a43-dab960b53114
Vollständiger Name des fehlerhaften Pakets: Microsoft.SkypeApp_15.65.78.0_x86__kzf8qxf38zg5c
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: App
Error: (10/31/2020 07:12:17 PM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Systemfehler:
=============
Error: (11/05/2020 03:49:35 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.
Error: (11/05/2020 03:49:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (11/05/2020 03:49:02 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (11/05/2020 03:49:01 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10003) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul wurde unerwartet beendet.
Modulpfad: C:\WINDOWS\system32\IntelIHVRouter08.dll
Error: (11/05/2020 03:48:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MSO0I32)
Description: Der Server "{3EB3C877-1F16-487C-9050-104DBCD66683}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/05/2020 03:48:00 PM) (Source: DCOM) (EventID: 10010) (User: DESKTOP-MSO0I32)
Description: Der Server "{F9717507-6651-4EDB-BFF7-AE615179BCCF}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (11/05/2020 03:47:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Origin Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (11/05/2020 03:47:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Windows Defender:
===================================
Date: 2020-11-04 18:54:35.7440000Z
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {C8A5763E-F336-466D-8127-09D030E5598B}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: DESKTOP-MSO0I32\User
Date: 2020-10-14 16:19:48.0850000Z
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {AD669672-23BD-43CE-B541-F36E6F9691B7}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: DESKTOP-MSO0I32\User
CodeIntegrity:
===================================
Date: 2020-11-05 14:12:45.2030000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\libcurl.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-10-23 19:48:16.0860000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\libcurl.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-10-23 19:33:47.0020000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\libcurl.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-10-14 16:17:31.5850000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\libcurl.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-10-01 14:04:37.1780000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\avirasecuritycenteragent.exe) attempted to load \Device\HarddiskVolume4\Program Files (x86)\Avira\Antivirus\libcurl.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-09-26 09:33:59.7380000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.
Date: 2020-09-26 09:33:57.8270000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.
Date: 2020-09-26 09:33:57.7700000Z
Description:
Code Integrity determined that a process (\Device\HarddiskVolume4\Program Files (x86)\Microsoft\Edge\Application\msedge.exe) attempted to load \Device\HarddiskVolume4\Program Files\Avast Software\Avast\snxhk.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. 9.80 11/11/2019
Hauptplatine: Micro-Star International Co., Ltd. B450M PRO-VDH PLUS (MS-7A38)
Prozessor: AMD Ryzen 5 2600X Six-Core Processor
Prozentuale Nutzung des RAM: 34%
Installierter physikalischer RAM: 16335.04 MB
Verfügbarer physikalischer RAM: 10720.11 MB
Summe virtueller Speicher: 18767.04 MB
Verfügbarer virtueller Speicher: 11051.48 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:237.84 GB) (Free:78.29 GB) NTFS
Drive d: (Volume) (Fixed) (Total:931.5 GB) (Free:450.38 GB) NTFS
\\?\Volume{1633f081-a26b-4036-8b44-514696eadb46}\ (Wiederherstellung) (Fixed) (Total:0.52 GB) (Free:0.07 GB) NTFS
\\?\Volume{7f0d4d85-499b-4888-943e-91e0d54731ae}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Size: 238.5 GB) (Disk ID: A544B632)
Partition: GPT.
==================== Ende von Addition.txt =======================
Ich habe nochmal den AdwCleaner laufen lassen und nun hat er nichts mehr gefunden: Code:
# -------------------------------
# Malwarebytes AdwCleaner 8.0.8.0
# -------------------------------
# Build: 10-08-2020
# Database: 2020-09-29.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 11-05-2020
# Duration: 00:00:15
# OS: Windows 10 Pro
# Scanned: 31837
# Detected: 0
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
No Preinstalled Software found.
AdwCleaner[S00].txt - [2089 octets] - [05/11/2020 14:19:52]
AdwCleaner[C00].txt - [2209 octets] - [05/11/2020 14:20:56]
AdwCleaner[S01].txt - [1636 octets] - [05/11/2020 14:33:19]
AdwCleaner[C01].txt - [1904 octets] - [05/11/2020 14:33:28]
AdwCleaner[S02].txt - [1758 octets] - [05/11/2020 14:46:52]
AdwCleaner[C02].txt - [2026 octets] - [05/11/2020 14:47:00]
AdwCleaner[S03].txt - [1771 octets] - [05/11/2020 16:53:48]
AdwCleaner[S04].txt - [1832 octets] - [05/11/2020 16:55:09]
AdwCleaner[S05].txt - [1893 octets] - [05/11/2020 17:01:32]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S06].txt ##########
Ist der Trojaner jetzt weg? |
