| Wannekakki | 23.06.2025 13:30 |
System auf Malware überprüfen
Guten Tag,
ich möchte gerne mein System analysiert bekommen.
Hier die FRST-Logfiles dazu.
Vielen Dank schonmal Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-06-2025
durchgeführt von Carst (Administrator) auf CARSTENSGALAXYB (SAMSUNG ELECTRONICS CO., LTD. 960QFG) (23-06-2025 14:03:55)
Gestartet von C:\Users\Carst\Desktop\FRST64.exe
Geladene Profile: Carst
Plattform: Microsoft Windows 11 Home Version 24H2 26100.4351 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5_7.0.14.0_x64__3c1yjt4zspk6g\Extensions\ScreenMode.exe
(520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5_7.0.14.0_x64__3c1yjt4zspk6g\SamsungSettingsHost.exe <2>
(Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(C:\Program Files\Samsung\SamsungUpdate\SUService.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUEngine.exe
(C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2506.143.0_x64__8wekyb3d8bbwe\dotnet\PAD.AutomationServer.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2506.143.0_x64__8wekyb3d8bbwe\dotnet\PAD.BridgeToUIAutomation2.exe
(C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2506.143.0_x64__8wekyb3d8bbwe\dotnet\PAD.Console.Host.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2506.143.0_x64__8wekyb3d8bbwe\dotnet\PAD.AutomationServer.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25042.96.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.25042.96.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WsaClient\WsaClient.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WSACrashUploader\WSACrashUploader.exe
(C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy\LoopbackExemptionManager\LoopbackExemptionManager.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy\WindowsMCFCore\WindowsMCFCore.exe
(drivers\Intel\ICPS\IDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\Intel\ICPS\IDBWM.exe
(drivers\Intel\ICPS\IntelConnectService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\Intel\ICPS\IntelConnect.exe
(DriverStore\FileRepository\aircommandcomp.inf_amd64_c976f913f5087b0a\AircommandService.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\aircommandcomp.inf_amd64_c976f913f5087b0a\AircommandEngine.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_9f9e22715f56ef60\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe
(DriverStore\FileRepository\sfourswcomp15.inf_amd64_5f385966251a7373\SamsungSystemSupportService.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_5f385966251a7373\SamsungSystemSupportEngine.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <15>
(explorer.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Maxim Integrated) C:\Windows\System32\MaximAudioService64.exe
(services.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.MultiControl_2.3.1400.0_x64__wyx1vj98g3asy\MultiControlService\SamsungMultiControlService.exe
(services.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe
(services.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy\LoopbackExemptionManager\LoopbackExemptionManager.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.25.5230.0_x64__3c1yjt4zspk6g\SAService\SAService.exe
(services.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.12.0_x64__3c1yjt4zspk6g\SamsungAnalyticsService\SamsungAnalyticsService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_9f9e22715f56ef60\DAX3API.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_eb09d8513be92967\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_e330adaf63434ca3\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_ef0d92102be8d7c5\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\Intel\ICPS\IntelAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\Intel\ICPS\IntelConnectivityNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\Intel\ICPS\IDBWMService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\Intel\ICPS\IntelConnectService.exe
(services.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WsaService\WsaService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\drivers\GoodixWOTService_0.0.0.4.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\MaximServiceShell64.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9f05190a2befb920\RtkAudUService64.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Studiomode\StudiomodeSvc.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Live Wallpaper Service\LiveWallpaperWindowsService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Quick Search Service\QuickSearchService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Recovery\BulletService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUService.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SmartSwitch\qvWindowsService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\aircommandcomp.inf_amd64_c976f913f5087b0a\AircommandService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\samsungwificomponent.inf_amd64_f3df7fbf3f46d6fd\SamsungWiFi_UHB_Setting_Service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_5f385966251a7373\SamsungSystemSupportService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Windows\System32\DriverStore\FileRepository\systemplatformenginecomp.inf_amd64_264ff885c2d28710\SystemPlatformEngine.exe
(sihost.exe ->) (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> SamsungNotesSysTray) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungNotes_4.3.418.0_x64__wyx1vj98g3asy\SamsungNotesSysTray\SamsungNotesSysTray.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WsaClient\WsaClient.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MSTeams_25153.1010.3727.5483_x64__8wekyb3d8bbwe\ms-teams.exe <3>
(sihost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.PowerAutomateDesktop_11.2506.143.0_x64__8wekyb3d8bbwe\dotnet\PAD.Console.Host.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25042.38.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(svchost.exe ->) (520D4CDF-A287-4423-AB88-D88CCF7E866D -> ) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.25.5230.0_x64__3c1yjt4zspk6g\SAClient.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.DesktopAppInstaller_1.25.390.0_x64__8wekyb3d8bbwe\WindowsPackageManagerServer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.41.3.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_525.10401.30.0_x64__cw5n1h2txyewy\WidgetBoard.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\ColorEngine\ColorEngine.exe
(svchost.exe ->) (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\ColorEngine\DisplaySupporter.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Quick Search Service\QuickSearchIndexer.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\SamsungUpdate\SUUserModeWorker.exe
(vmcompute.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\vmwp.exe
konnte nicht auf den Prozess zugreifen -> vmmemWSA
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [MaximAudioSvc] => C:\Windows\System32\MaximAudioService64.exe [556544 2023-04-12] (Microsoft Windows Hardware Compatibility Publisher -> Maxim Integrated)
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\Run: [UninstallT20] => ms-teamsupdate.exe -UninstallT20 (Keine Datei)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\137.0.7151.104\Installer\chrmstp.exe [2025-06-12] (Google LLC -> Google LLC)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {2FEEFA07-2AF0-4077-951C-2E222D935C3E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {150F91E1-F622-4440-80F7-C2B0872E5AEF} - System32\Tasks\ColorEngine => C:\Program Files\Samsung\ColorEngine\ColorEngine.exe [648512 2023-02-15] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
Task: {B1CDC9FC-F590-454E-8848-48CB32AD4F9A} - System32\Tasks\DisplaySupporter => C:\Program Files\Samsung\ColorEngine\DisplaySupporter.exe [231784 2023-02-15] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
Task: {74D9B975-A6DA-4093-B80C-EA93FB722969} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem138.0.7194.0{A2953121-460F-446A-94E0-A338F5245D7D} => C:\Program Files (x86)\Google\GoogleUpdater\138.0.7194.0\updater.exe [7080032 2025-05-22] (Google LLC -> Google LLC)
Task: {16EABBCB-06C9-4077-90B2-C48239C94FA5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955352 2025-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {53809F5C-787C-453B-B82A-A21993B3B769} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [68368 2025-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A26CFA7-41B5-4DC8-B2D8-FDAC806D00B8} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28955352 2025-06-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {53524DC4-19FD-4199-8CC3-042E58FE8E3D} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2AD133AC-AAD3-44EF-B8D7-C9A39E4CA729} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1CCEFF05-1915-4CD3-BFA3-AC53FAACD6E8} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [225992 2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {6F9BC0F4-43FA-43DB-8E90-0F7442D3A427} - System32\Tasks\Microsoft\Office\Office Startup Boost => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECA4E8EE-8247-4403-A724-531A5528FA61} - System32\Tasks\Microsoft\Office\Office Startup Boost Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309960 2025-06-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A792F61-0B3B-4A78-883B-085ACC3E14CF} - System32\Tasks\Microsoft\Windows\Hotpatch\Monitoring => C:\WINDOWS\system32\cmd.exe [376832 2025-05-30] (Microsoft Windows -> Microsoft Corporation) -> /d /c %systemroot%\system32\hpatchmonTask.cmd
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {D07911E3-B824-4284-8C18-CD904C5A6379} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {63C976E8-B651-4C73-8071-81B94F245E27} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {ACFA4484-CF4D-4D1E-B5E5-FD8AC2EF3ABC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DAEE6426-1A08-4F3A-96F0-998C96E0CB3B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpCmdRun.exe [1757568 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7BAFA32E-48FB-4AA2-875C-25098B48610F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-5337926-3735871574-4012841875-1001 => C:\Users\Carst\AppData\Local\Microsoft\OneDrive\25.091.0512.0001\OneDriveLauncher.exe [684880 2025-06-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {41071A11-7DC6-409C-BCF1-F6D056492005} - System32\Tasks\QuickSearchIndexer_Idle_S-1-5-21-5337926-3735871574-4012841875-1001 => C:\Program Files\Samsung\Quick Search Service\IndexerRunner.exe [17720 2025-02-05] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files\Samsung\Quick Search Service\runIdleMode
Task: {7D9D3A99-1194-4B5D-B6F4-77A5A5EF28D4} - System32\Tasks\QuickSearchIndexer_S-1-5-21-5337926-3735871574-4012841875-1001 => C:\Program Files\Samsung\Quick Search Service\QuickSearchIndexer.exe [132408 2025-02-05] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files\Samsung\Quick Search Service\runByTaskScheduler
Task: {931A88D3-AC42-4DFF-9FEE-6060F8E6C7DE} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9f05190a2befb920\RtkAudUService64.exe [2150760 2024-07-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {32959F0A-8EDF-4742-8838-82F5595ECCD4} - System32\Tasks\Samsung\Recovery8\BulletUserModeWorker => C:\Program Files\Samsung\Recovery\BulletUserModeWorker.exe [620944 2022-11-07] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
Task: {A00F3C4F-7645-4BF2-8B68-2D27504B6939} - System32\Tasks\Samsung\SamsungUpdate\UserModeWorker => C:\Program Files\Samsung\SamsungUpdate\SUUserModeWorker.exe [682840 2024-12-02] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
Task: {C7EFDF05-CFBE-4BBA-8F5E-810DE39E0E10} - System32\Tasks\SecTimeSync\TimeSyncInit => C:\Windows\SecTimeSync.exe [1971048 2021-04-29] (Samsung Electronics CO., LTD. -> Samsung Electronics CO., LTD.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\..\Interfaces\{41c20d41-79f0-4167-bf80-adc03b3b3030}: [DhcpNameServer] 192.168.49.1
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}: [DhcpNameServer] 192.168.179.1
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\64259445A51224F687023484: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\64259445A51224F687023484: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\75C414E4D2538313135353: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\75C414E4D2538313135353: [DhcpDomain] Speedport_W_724V_09011603_06_010
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\C4965626C696E67637865696D6: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{f47108da-4381-45ab-b24b-97e675c0d6d2}\C4965626C696E67637865696D6: [DhcpDomain] local
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default [2025-06-11]
Edge Notifications: Default -> hxxps://drive.google.com
Edge HomePage: Default -> hxxp://www.google.de/
Edge Extension: (ProxFlow) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2023-11-10]
Edge Extension: (WEB.DE MailCheck) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\dklkaimkejnkhbhiahnhlndmkjijofjj [2023-12-26]
Edge Extension: (Google Docs Offline) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-07]
Edge Extension: (Edge relevant text changes) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-29]
Edge Extension: (Microsoft Power Automate) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kagpabjoboikccfdghpdlaaopmgpgfdc [2025-05-04]
Edge Extension: (AVG Online Security) - C:\Users\Carst\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nbmoafcmbajniiapeidgficgifbfmjfo [2025-04-13]
Edge HKU\S-1-5-21-5337926-3735871574-4012841875-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [kagpabjoboikccfdghpdlaaopmgpgfdc]
Edge HKLM-x32\...\Edge\Extension: [fphgeikpdcdcheaochkhldmnfblfogla]
FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-06-06] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default [2025-06-23]
CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://www.instagram.com; hxxps://www.netflix.com; hxxps://www.ticketmaster.de; hxxps://www.waz.de
CHR HomePage: Default -> hxxp://www.google.com/
CHR StartupUrls: Default -> "hxxp://www.trovi.com/?gd=&ctid=CT3321557&octid=EB_ORIGINAL_CTID&ISID=MAD461719-FCEC-4165-B7E5-84A6366152BE&SearchSource=55&CUI=&UM=6&UP=SP9D1E4C60-0D59-4491-BECA-20D7E6F88308&SSPV=","hxxp://www.google.com/","hxxps://www.google.com/"
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-06-19]
CHR Extension: (Google Docs Offline) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-05-30]
CHR Extension: (Klarna | Jetzt einkaufen, später bezahlen) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfapbcheiepjppjbnkphkmegjlipojba [2025-06-16]
CHR Extension: (Microsoft Power Automate) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\ljglajjnnkapghbckkcmodicjhacbfhk [2025-04-13]
CHR Extension: (Morpheon Dark) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\mafbdhjdkjnoafhfelkjpchpaepjknad [2024-03-15]
CHR Extension: (Google Mail-Checker) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2025-02-10]
CHR Extension: (AVG Online Security) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbmoafcmbajniiapeidgficgifbfmjfo [2025-03-30]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-10-06]
CHR Profile: C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-06-03]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-06-03]
CHR Extension: (Google Docs Offline) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-03]
CHR Extension: (Microsoft Power Automate) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ljglajjnnkapghbckkcmodicjhacbfhk [2025-06-03]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Carst\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-06-03]
CHR Profile: C:\Users\Carst\AppData\Local\Google\Chrome\User Data\System Profile [2025-06-19]
CHR HKU\S-1-5-21-5337926-3735871574-4012841875-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-5337926-3735871574-4012841875-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [ljglajjnnkapghbckkcmodicjhacbfhk]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13724344 2025-06-06] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_9f9e22715f56ef60\DAX3API.exe [2361864 2023-02-15] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-11-15] (Intel Corporation -> Intel Corporation)
S2 GBExperience; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungWelcome_3.5.1.0_x64__3c1yjt4zspk6g\WindowsService\GBExperience.exe [1516392 2025-02-20] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.)
R2 GoodixWOTService; C:\WINDOWS\System32\drivers\GoodixWOTService_0.0.0.4.exe [43016 2022-12-19] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 hpatchmon; C:\WINDOWS\system32\hpatchmon.dll [173472 2025-05-30] (Microsoft Windows -> Microsoft Corporation)
R3 IDBWM; C:\WINDOWS\System32\drivers\Intel\ICPS\IDBWMService.exe [78656 2024-05-08] (Intel Corporation -> Intel® Corporation)
R2 Intel Analytics Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelAnalyticsService.exe [1962416 2024-05-08] (Intel Corporation -> Intel)
R2 Intel Connectivity Network Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelConnectivityNetworkService.exe [2225576 2024-05-08] (Intel Corporation -> Intel)
S2 Intel Provider Data Helper Service; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe [824232 2024-05-08] (Intel Corporation -> Intel)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_6f0a892deb241071\AS\IAS\IntelAudioService.exe [530424 2023-08-31] (Intel Corporation -> Intel)
R3 IntelConnectService; C:\WINDOWS\System32\drivers\Intel\ICPS\IntelConnectService.exe [78760 2024-05-08] (Intel Corporation -> Intel® Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-11-14] (Intel Corporation -> Intel Corporation)
R2 LiveWallpaperService; C:\Program Files\Samsung\Live Wallpaper Service\LiveWallpaperWindowsService.exe [482144 2023-04-03] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 MaximAudioService; C:\WINDOWS\System32\MaximServiceShell64.exe [217600 2023-04-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MpDefenderCoreService.exe [2071592 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ProtonVPN Service; C:\Program Files\Proton\VPN\v3.5.1\ProtonVPNService.exe [464608 2024-12-11] (Proton AG -> ProtonVPN)
S3 ProtonVPN WireGuard; C:\Program Files\Proton\VPN\v3.5.1\ProtonVPN.WireGuardService.exe [464104 2024-12-11] (Proton AG -> ProtonVPN)
R2 Quick Search Service; C:\Program Files\Samsung\Quick Search Service\QuickSearchService.exe [173064 2025-02-05] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 Quick Share Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\QuickShareService\QuickShareService.exe [51200 2025-05-30] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 Samsung Analytics Agent; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.12.0_x64__3c1yjt4zspk6g\SamsungAnalyticsService\SamsungAnalyticsService.exe [98087814 2024-11-28] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> Samsung Electronics Co., Ltd.)
R2 Samsung Multi Control Service; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.MultiControl_2.3.1400.0_x64__wyx1vj98g3asy\MultiControlService\SamsungMultiControlService.exe [703848 2025-04-19] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 Samsung WiFi UHB Setting Service; C:\WINDOWS\System32\DriverStore\FileRepository\samsungwificomponent.inf_amd64_f3df7fbf3f46d6fd\SamsungWiFi_UHB_Setting_Service.exe [271280 2024-10-04] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungAccountService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.25.5230.0_x64__3c1yjt4zspk6g\SAService\SAService.exe [7680 2025-03-19] (520D4CDF-A287-4423-AB88-D88CCF7E866D -> )
R2 SamsungContinuityWindowsService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy\LoopbackExemptionManager\LoopbackExemptionManager.exe [452408 2025-04-19] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
R2 SamsungPenService; C:\WINDOWS\System32\DriverStore\FileRepository\aircommandcomp.inf_amd64_c976f913f5087b0a\AircommandService.exe [585176 2023-11-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungPlatformEngine; C:\WINDOWS\System32\DriverStore\FileRepository\systemplatformenginecomp.inf_amd64_264ff885c2d28710\SystemPlatformEngine.exe [1643344 2023-11-29] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungRecoveryService; C:\Program Files\Samsung\Recovery\BulletService.exe [816016 2022-11-07] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 SamsungSystemSupportService; C:\WINDOWS\System32\DriverStore\FileRepository\sfourswcomp15.inf_amd64_5f385966251a7373\SamsungSystemSupportService.exe [176976 2025-03-28] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 SamsungUpdateService; C:\Program Files\Samsung\SamsungUpdate\SUService.exe [407896 2024-12-02] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S2 SecondScreenService; C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.12.3.0_x64__wyx1vj98g3asy\SecondScreenService\SecondScreenService.exe [19800 2025-05-07] (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
R2 SmartSwitchService; C:\Program Files\Samsung\SmartSwitch\qvWindowsService.exe [293280 2023-01-02] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 StudiomodeSvc; C:\Program Files (x86)\Samsung\Studiomode\StudiomodeSvc.exe [292712 2022-12-19] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\NisSrv.exe [4513624 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25050.5-0\MsMpEng.exe [278328 2025-06-02] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WsaService; C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WsaService\WsaService.exe [320512 2024-12-19] (Microsoft Corporation -> )
S2 ET05A1EvtSvc; %SystemRoot%\System32\Rundll32.exe C:\WINDOWS\System32\drivers\UMDF\EgisTouchFPEventLog05A1.dll,Rundll32EntryPointW [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AcxHdAudio; C:\WINDOWS\System32\drivers\AcxHdAudio.sys [581632 2024-10-12] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-10-12] (Microsoft Windows -> Microsoft Corporation)
R3 iaisp64; C:\WINDOWS\System32\drivers\iaisp64.sys [50352 2023-07-12] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_774a66f35d00ad3d\iaLPSS2_GPIO2_ADL.sys [140960 2022-06-22] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_1ebed6f33a1c1014\iaLPSS2_I2C_ADL.sys [210600 2022-06-22] (Intel Corporation -> Intel Corporation)
R3 IntcBtLE; C:\WINDOWS\System32\DriverStore\FileRepository\intcbtle.inf_amd64_0c9aadaff32d0209\IntcBtLE.sys [140280 2023-08-31] (Intel Corporation -> Intel(R) Corporation)
R3 INTCCoSvc; C:\WINDOWS\System32\drivers\Intel\ICPS\IntcCo11X64.sys [216488 2024-05-08] (Intel Corporation -> Intel Corporation)
S3 IntcSdwBus; C:\WINDOWS\System32\DriverStore\FileRepository\intcsdwbus.inf_amd64_d3d4da2eb15364e3\IntcSdwBus.sys [516672 2022-12-08] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88784 2022-10-04] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-11-14] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-11-14] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-11-14] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [330112 2025-06-02] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140728 2025-05-30] (Microsoft Windows -> Microsoft Corporation)
S3 LT6911Au; C:\WINDOWS\System32\DriverStore\FileRepository\lt6911au.inf_amd64_2f08ac6e600a0ba1\LT6911Au.sys [63520 2022-12-08] (Intel Corporation -> Intel(R) Corporation)
R3 OV02C10; C:\WINDOWS\System32\drivers\OV02C10.sys [192632 2023-01-08] (Intel Corporation -> Intel Corporation)
R3 PenS2Helper; C:\WINDOWS\System32\drivers\PenS2Helper.sys [79264 2022-08-17] (Samsung Electronics CO., LTD. -> )
S3 PlutonHeci; C:\WINDOWS\System32\DriverStore\FileRepository\pluton-heci.inf_amd64_f74945e2fcb1d3d7\pluton-heci.sys [75168 2025-05-30] (Microsoft Windows -> Microsoft Corporation)
S3 ProtonVPNCallout; C:\Program Files\Proton\VPN\v3.5.1\Resources\ProtonVPN.CalloutDriver.sys [40360 2024-12-11] (Proton AG -> Proton AG)
R3 SamsungEventController; C:\WINDOWS\System32\drivers\SamsungEventController.sys [72248 2022-08-28] (Samsung Electronics CO., LTD. -> Samsung)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2023-09-29] (nordvpn s.a. -> The OpenVPN Project)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-03-30] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-05-30] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [20032 2025-06-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [612768 2025-06-02] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100744 2025-06-02] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_367f6ef053419fd6\WiManHu\WiManHu.sys [212040 2022-09-13] (Intel Corporation -> Intel Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-10-06] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2024-10-12] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_971c769b103df369\WSDScan.sys [61440 2024-10-12] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2025-06-23 14:03 - 2025-06-23 14:04 - 000040878 _____ C:\Users\Carst\Desktop\FRST.txt
2025-06-23 14:03 - 2025-06-23 14:04 - 000000000 ____D C:\FRST
2025-06-23 13:37 - 2025-06-23 13:37 - 002406912 _____ (Farbar) C:\Users\Carst\Desktop\FRST64.exe
2025-06-16 02:07 - 2025-06-16 02:07 - 000152897 _____ C:\Users\Carst\Desktop\20250522_151142_ARBEITSBESCHEINIGUNG.pdf
2025-06-16 02:05 - 2025-06-16 02:05 - 000161171 _____ C:\Users\Carst\Desktop\20250612_155027_ARBEITSBESCHEINIGUNG.pdf
2025-06-13 01:23 - 2025-06-13 01:23 - 000016893 _____ C:\Users\Carst\Desktop\application-2.2.octet-stream
2025-06-13 01:04 - 2025-06-13 01:04 - 000748376 _____ C:\WINDOWS\system32\perfh007.dat
2025-06-13 01:04 - 2025-06-13 01:04 - 000159426 _____ C:\WINDOWS\system32\perfc007.dat
2025-06-10 00:14 - 2025-06-10 23:56 - 000014381 _____ C:\Users\Carst\Desktop\Wohnungs Gesuch.odt
2025-06-05 19:29 - 2025-06-05 19:29 - 000694139 _____ C:\Users\Carst\Desktop\Schalke Tickets.pdf
2025-06-04 01:19 - 2025-06-04 01:19 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2025-05-30 10:32 - 2025-06-20 01:46 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-05-30 10:16 - 2025-05-30 10:16 - 000001555 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2025-05-30 10:15 - 2025-05-30 10:15 - 000033224 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-05-30 10:15 - 2025-05-30 10:15 - 000033224 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2025-06-23 14:01 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-06-23 14:00 - 2023-07-15 16:16 - 000000000 ____D C:\Users\Carst\AppData\Local\D3DSCache
2025-06-23 13:55 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-06-23 13:55 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-06-23 13:54 - 2023-07-15 16:36 - 000000000 ____D C:\ProgramData\SamsungAnalytics
2025-06-23 13:48 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-06-23 13:36 - 2025-03-12 01:53 - 000000000 ____D C:\Users\Carst\Desktop\Brand
2025-06-23 12:37 - 2025-05-10 22:44 - 000003720 _____ C:\WINDOWS\system32\Tasks\QuickSearchIndexer_Idle_S-1-5-21-5337926-3735871574-4012841875-1001
2025-06-23 12:34 - 2023-07-20 08:08 - 000000524 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2025-06-20 02:30 - 2024-10-13 00:40 - 000000000 ____D C:\Users\Carst
2025-06-17 15:22 - 2023-04-21 04:07 - 000000000 ____D C:\Program Files\Microsoft Office
2025-06-16 00:21 - 2024-10-13 23:31 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-06-13 01:04 - 2024-10-13 23:35 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-06-13 01:04 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-06-13 00:59 - 2024-10-13 23:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-06-13 00:59 - 2024-10-13 23:32 - 000007300 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-06-13 00:59 - 2024-10-13 23:31 - 000000485 _____ C:\WINDOWS\system32\config\VSMHBK
2025-06-13 00:59 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-06-13 00:59 - 2024-04-01 09:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2025-06-13 00:59 - 2023-04-21 11:39 - 000012288 ___SH C:\DumpStack.log.tmp
2025-06-13 00:58 - 2025-04-11 01:11 - 000001445 _____ C:\WINDOWS\system32\config\VsmDrtmEncLkeyPkg
2025-06-13 00:58 - 2024-10-13 23:31 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2025-06-13 00:58 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-06-12 23:00 - 2024-10-13 23:34 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-06-12 23:00 - 2023-10-23 13:18 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-06-12 22:46 - 2023-10-06 22:33 - 000002239 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-06-12 16:18 - 2023-09-13 22:35 - 000000000 ____D C:\Users\Carst\AppData\Local\CrashDumps
2025-06-12 00:26 - 2023-07-15 16:16 - 000000000 ____D C:\Users\Carst\AppData\Local\Packages
2025-06-12 00:16 - 2024-10-13 23:31 - 000505904 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-06-12 00:16 - 2024-04-01 18:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-06-12 00:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-06-12 00:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-06-11 23:05 - 2023-07-15 22:33 - 000000000 ____D C:\Users\Carst\Downloads\Quick Share
2025-06-11 10:25 - 2023-07-15 22:19 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-06-11 10:21 - 2024-10-13 23:33 - 003383808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-06-11 03:00 - 2025-02-11 02:39 - 000003558 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-5337926-3735871574-4012841875-1001
2025-06-11 03:00 - 2024-10-13 23:34 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-5337926-3735871574-4012841875-1001
2025-06-11 03:00 - 2024-10-13 23:34 - 000003374 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-5337926-3735871574-4012841875-1001
2025-06-11 03:00 - 2023-07-15 16:18 - 000002391 _____ C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-06-11 02:53 - 2023-07-15 22:19 - 216824056 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-06-03 01:40 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-06-03 01:39 - 2023-04-21 11:39 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-05-30 17:47 - 2023-04-21 11:43 - 000000000 ____D C:\ProgramData\Packages
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Com
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-05-30 17:15 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-05-30 10:45 - 2024-04-01 09:26 - 001384944 _____ C:\WINDOWS\system32\vulkan-1.dll
2025-05-30 10:45 - 2024-04-01 09:26 - 001240024 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2025-05-27 19:11 - 2023-04-21 04:00 - 000000000 ____D C:\ProgramData\ColorMode
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2025-03-12 00:07 - 2025-04-22 20:54 - 000003974 _____ () C:\Users\Carst\AppData\Local\GetHelp.msalcacheconsumers.bin
2024-07-30 03:45 - 2024-07-30 03:45 - 000007629 _____ () C:\Users\Carst\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-06-2025
durchgeführt von Carst (23-06-2025 14:05:07)
Gestartet von C:\Users\Carst\Desktop
Microsoft Windows 11 Home Version 24H2 26100.4351 (X64) (2024-10-13 21:34:44)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-5337926-3735871574-4012841875-500 - Administrator - Disabled)
Carst (S-1-5-21-5337926-3735871574-4012841875-1001 - Administrator - Enabled) => C:\Users\Carst
DefaultAccount (S-1-5-21-5337926-3735871574-4012841875-503 - Limited - Disabled)
Gast (S-1-5-21-5337926-3735871574-4012841875-501 - Limited - Disabled)
WDAGUtilityAccount (S-1-5-21-5337926-3735871574-4012841875-504 - Limited - Disabled)
WsiAccount (S-1-5-21-5337926-3735871574-4012841875-1006 - Limited - Disabled) => C:\Users\WsiAccount
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
4 Gewinnt (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\com.dunjegame.andrecastany.fourinarow) (Version: 4.2 - andrecastany.dunjegame.com)
Adobe Acrobat (64-bit) (HKLM\...\{AC76BA86-1031-1033-7760-BC15014EA700}) (Version: 25.001.20531 - Adobe)
Adobe Refresh Manager (HKLM-x32\...\{AC76BA86-0804-1033-1959-018244601110}) (Version: 1.8.0 - Adobe Systems Incorporated) Hidden
Amazon Appstore (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\com.amazon.venezia) (Version: release-60.25.1.0.210698.0_736410 - amazon.com)
AusweisApp (HKLM\...\{76BCD646-0551-41D7-B2B2-F379C874CB98}) (Version: 2.3.1 - Governikus GmbH & Co. KG)
ColorEngine (HKLM\...\{0B48E952-494A-408B-8D9D-5F3331F96659}) (Version: 5.5 - Samsung Electronics Co., Ltd.)
ContinuityMSOfficeAddIn (HKLM-x32\...\{66145599-9668-4022-9DC4-114302699E1D}) (Version: 1.0.18 - Samsung)
Display Profile (HKLM\...\{97CE6D18-8335-4420-A7C7-A72B8AFAFFFD}) (Version: 5.3 - Samsung Electronics Co., Ltd.)
Dynamic Application Loader Host Interface Service (HKLM\...\{44C1F557-6E04-460A-B692-A8F2DEE66A66}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Galaxy Book Smart Switch service (HKLM\...\{C1465FF4-4B1B-4D40-945D-472C8FD3FFC0}) (Version: 1.3.8 - Samsung Electronics Co., Ltd.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 137.0.7151.104 - Google LLC)
Intel Software Package (HKLM-x32\...\{a5966d05-b019-44f6-b94f-f49ebdd19b58}) (Version: 1.0.11200.30652 - Intel) Hidden
Intel(R) Chipset Device Software (HKLM\...\{E6CC1C02-638D-44F5-8BAE-E455453F80BA}) (Version: 10.1.19468.8385 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{8af15a1a-f70d-4968-84c0-97df0607c3e6}) (Version: 10.1.19468.8385 - Intel(R) Corporation)
Intel(R) Dynamic Tuning Technology (HKLM-x32\...\{DDD0E7BA-1023-44F1-B2E0-2297B9ED42B5}) (Version: 9.0.11200.30652 - Intel Corporation)
Intel(R) Icls (HKLM\...\{62A12FCC-E419-42BA-A2A0-AC94ED0A538E}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Innovation Platform Framework (HKLM-x32\...\{1F2F557C-7559-4376-9347-1C6ACFAD35C2}) (Version: 2.0.10300.12 - Intel Corporation)
Intel(R) LMS (HKLM\...\{DB7601FB-39F1-47BF-A18D-63EFDF4FD6D9}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2249.3.39.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{75780158-7F08-4C4A-AA61-CA12EE86CB13}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{A5084E56-1B7B-4A7F-BC66-D2ACC4BD0428}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{82A51A61-6619-4215-879A-FC9C18855989}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{F9D05AD5-D6A7-4586-A565-8CE565286351}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{8BB1B6E6-25C3-4B53-A8C4-4EB25E1FD1AB}) (Version: 30.100.2221.20 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2221.20 - Intel Corporation)
Intel(R) SOL LMS Extension (HKLM\...\{7D1E0451-4755-4DDD-B666-7C7FA76ADD38}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000210-0220-1033-84C8-B8D95FA3C8C3}) (Version: 22.210.0.3 - Intel Corporation)
Intel(R) Wireless Manageability Driver (HKLM\...\{C5F25593-A0DC-478A-BD3D-A6839102F1DB}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Wireless Manageability Driver Extension (HKLM\...\{3C53E369-8847-47AE-88AB-25DC4AB330B6}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel® Integrated Sensor Solution (HKLM-x32\...\{d4503da1-928a-409a-a52e-bdbb49f7df37}) (Version: 3.10.100.4586 - Intel Corporation)
ISS_Drivers_x64 (HKLM\...\{04AEF55C-E06C-4BF3-BCE6-A84E7D5236A5}) (Version: 3.10.100.4586 - Intel Corporation) Hidden
Live Wallpaper Service (HKLM\...\{2FE1B5C4-2C7A-4DE6-9EB7-4A7AB435145E}) (Version: 3.2.8 - Samsung Electronics Co., Ltd.)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.18827.20150 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 137.0.3296.83 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\OneDriveSetup.exe) (Version: 25.091.0512.0001 - Microsoft Corporation)
Microsoft OneNote - de-de (HKLM\...\OneNoteFreeRetail - de-de) (Version: 16.0.18827.20150 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.13006 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127 (HKLM\...\{8678BA04-D161-45BE-ACA4-CC5D13073F35}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127 (HKLM\...\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20102 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.18827.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.18827.20102 - Microsoft Corporation) Hidden
OpenOffice 4.1.15 (HKLM-x32\...\{D8DD7A6F-CB70-43AF-9A0C-9A5A4C195068}) (Version: 4.115.9813 - Apache Software Foundation)
Proton VPN (HKLM\...\Proton VPN_is1) (Version: 3.5.1 - Proton AG)
Quick Search Service (HKLM\...\{5536CC89-01C4-4120-B4ED-AFDBC6626A48}) (Version: 4.1.58 - Samsung Electronics Co., Ltd.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9496.1 - Realtek Semiconductor Corp.)
Realtek USB Ethernet Controller All-In-One Windows Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 11.8.0608.2022 - Realtek)
Samsung Recovery Service (HKLM\...\{A942FE64-54BE-4787-A336-C0674F50A118}) (Version: 8.1.46 - Samsung Electronics Co., Ltd.)
Samsung Update Service (HKLM\...\{1DF1988D-9E7B-463F-9769-7C53E5F590BE}) (Version: 3.0.108.0 - Samsung Electronics Co., Ltd.)
Studio mode (HKLM\...\{3F610C12-D47B-4051-93CE-D7FC21C2F8CD}) (Version: 3.0 - Samsung Electronics Co., Ltd.)
tagesschau (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\de.tagesschau) (Version: 3.4.0 - Unknown)
tiptoi® Manager 5.1 (HKLM\...\{833392BB-E8C0-4066-9408-3A30FA43972F}_is1) (Version: 5.1 - Ravensburger AG)
Chrome apps:
============
Dokumente (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\a623785e323463be51e0b045734052c5) (Version: 1.0 - Google\Chrome)
Gmail (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\572465dcbae68f13e5102e925e0f9b82) (Version: 1.0 - Google\Chrome)
Google Drive (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\9cf36aa536c2eef1e23720b0e337ee95) (Version: 1.0 - Google\Chrome)
Präsentationen (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\53856c2175adf341f256d946f77b0717) (Version: 1.0 - Google\Chrome)
Tabellen (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\d81dd285d849416659075da30ff05a13) (Version: 1.0 - Google\Chrome)
YouTube (HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\066ede3feee57feafc3f4c7ccc4ea819) (Version: 1.0 - Google\Chrome)
Packages:
=========
@{MicrosoftWindows.54792954.Filons_1000.26100.4202.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.54792954.Filons/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.54792954.Filons_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.54792954.Filons_1000.26100.4343.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.54792954.Filons/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.54792954.Filons_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3624.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-30] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-30] ()
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-05-30] ()
@{MicrosoftWindows.56978801.Voiess_1000.26100.4202.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.56978801.Voiess/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.56978801.Voiess_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.56978801.Voiess_1000.26100.4343.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.56978801.Voiess/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.56978801.Voiess_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.57058570.Speion_1000.26100.4202.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57058570.Speion/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57058570.Speion_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.57058570.Speion_1000.26100.4343.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57058570.Speion/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57058570.Speion_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.57074914.Livtop_1000.26100.4202.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074914.Livtop/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074914.Livtop_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.57074914.Livtop_1000.26100.4343.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.57074914.Livtop/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074914.Livtop_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.Client.CoreAI_1000.26100.3912.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.Client.CoreAI_1000.26100.4061.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.Client.CoreAI_1000.26100.4202.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
@{MicrosoftWindows.Client.CoreAI_1000.26100.4343.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.Client.CoreAI/AIXHost/ClickToDo/AppDisplayName} -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
100 Doors Game - Escape from School -> C:\Program Files\WindowsApps\Peaksel.100DoorsGame-EscapefromSchool_2.1.18.0_x64__tyntx30xb5zhp [2024-02-01] (PEAKSEL D.O.O. NIŠ)
Adobe Acrobat Reader -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Assets [2025-05-30] ()
Air Command 2 -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.AirCommand2_2.4.8.0_x64__3c1yjt4zspk6g [2025-06-23] (Samsung Electronics Co. Ltd.)
Aktion per Mausklick (Vorschau) -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CoreAI_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2811.0_x64__343d40qqvtj1t [2023-07-15] (Amazon.com)
Amazon Music -> C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_9.5.2.0_x86__kc6t79cpj4tp0 [2023-12-13] (AMZN Mobile LLC)
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2024-11-12] (INTEL CORP) [Startup Task]
CLIP STUDIO PAINT START for SC -> C:\Program Files\WindowsApps\B0A091E8.CLIPSTUDIOPAINTSTARTforSC_1.0.12.0_x64__2vfvh2vszw3jw [2023-07-15] (CELSYS, Inc.)
Disney+ -> C:\Program Files\WindowsApps\Disney.37853FC22B2CE_2024.3.211.0_neutral__6rarf9sa4v8jt [2024-08-03] (Disney)
Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.2900.0_x64__rz1tebttyb220 [2025-06-13] (Dolby Laboratories)
Facebook -> C:\Program Files\WindowsApps\FACEBOOK.FACEBOOK_2023.531.1.0_x64__8xx8rvfyw5nnt [2024-10-04] (Meta)
Galaxy Book Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungWelcome_3.5.1.0_x64__3c1yjt4zspk6g [2025-02-20] (Samsung Electronics Co. Ltd.)
Galaxy Book Smart Switch -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartSwitchforGalaxyBook_1.7.4.0_x64__3c1yjt4zspk6g [2025-05-16] (Samsung Electronics Co. Ltd.)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.850.1840.0_x64__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.850.1840.0_x86__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.850.1840.0_x64__8wekyb3d8bbwe [2025-05-02] (Microsoft Corporation)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.23.0_neutral__8xx8rvfyw5nnt [2024-09-26] (Instagram)
Intel® Connectivity Performance Suite -> C:\Program Files\WindowsApps\AppUp.IntelConnectivityPerformanceSuite_3.1024.505.0_x64__8j3eq9eme6ctt [2024-12-05] (INTEL CORP) [Startup Task]
Intel® Unison™ -> C:\Program Files\WindowsApps\AppUp.IntelTechnologyMDE_20.31.11890.0_x64__8j3eq9eme6ctt [2025-06-03] (INTEL CORP)
Journal -> C:\Program Files\WindowsApps\Microsoft.MicrosoftJournal_1.25150.49.0_x64__8wekyb3d8bbwe [2025-06-05] (Microsoft Corporation)
Live Wallpaper -> C:\Program Files\WindowsApps\Sidia.LiveWallpaper_3.3.42.0_x64__wkpx6gdq8qyz8 [2025-06-19] (Samsung Electronics Co. Ltd.)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2505.23002.0_x64__8wekyb3d8bbwe [2025-06-19] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-09-23] (Microsoft Corp.)
Microsoft Mahjong -> C:\Program Files\WindowsApps\Microsoft.MicrosoftMahjong_4.7.4221.0_x64__8wekyb3d8bbwe [2025-05-05] (Microsoft Studios)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_55.20331.573.0_x64__8wekyb3d8bbwe [2025-04-08] (Microsoft Corporation)
Microsoft.D3DMappingLayers -> C:\Program Files\WindowsApps\Microsoft.D3DMappingLayers_1.2505.8.0_x64__8wekyb3d8bbwe [2025-06-04] (Microsoft Corporation)
Microsoft.StartExperiencesApp -> C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.41.3.0_x64__8wekyb3d8bbwe [2025-06-07] (Microsoft Corporation)
Multi Control -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.MultiControl_2.3.1400.0_x64__wyx1vj98g3asy [2025-04-19] (Samsung Electronics Co, Ltd.)
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_7.0.8.0_neutral__mcm4njqhnhss8 [2024-07-27] (Netflix, Inc.)
Noteshelf Samsung -> C:\Program Files\WindowsApps\FluidTouchPteLtd.NoteshelfSamsung_4.5.6.0_x64__b23vtfmgdrt7e [2025-04-21] (Fluid Touch Pvt Ltd)
OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2025-06-17] ()
PENUP -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.PENUP_2.15.9.0_x64__3c1yjt4zspk6g [2025-06-15] (Samsung Electronics Co. Ltd.)
Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.174.0_x64__pwbj9vvecjh7j [2025-04-23] (Amazon Development Centre (London) Ltd)
Private Share -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.PrivateShare_1.2.22.0_x64__3c1yjt4zspk6g [2024-10-12] (Samsung Electronics Co. Ltd.)
Quick Share -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy [2025-05-30] (Samsung Electronics Co, Ltd.) [Startup Task]
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.51.331.0_x64__dt26b99r8h8gj [2024-07-23] (Realtek Semiconductor Corp)
RubenGerlach.Mau-Mau-Palast -> C:\Program Files\WindowsApps\RubenGerlach.Mau-Mau-Palast_1.49.382.0_x86__0kgzq02j3b4w8 [2023-12-13] (<?xml version="1.0" encoding="utf-8"?>
<Package xmlns="hxxp://schemas.microsoft.com/appx/manifest/foundation/windows10" xmlns:uap="hxxp://schemas.microsoft.com/appx/manifest/uap/windows10" xmlns:uap2="hxxp://schemas.microsoft.com/appx/manifest/uap/windows10/2" xmlns:uap3="hxxp://schemas.microsoft.com/appx/manifest/uap/windows10/3" xmlns:uap4="hxxp://schemas.microsoft.com/appx/manifest/uap/windows10/4" xmlns:rescap="hxxp://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities" xmlns:rescap3="hxxp://schemas.microsoft.com/appx/manifest/foundation/windows10/restrictedcapabilities/3" xmlns:desktop="hxxp://schemas.microsoft.com/appx/manifest/desktop/windows10" xmlns:desktop2="hxxp://schemas.microsoft.com/appx/manifest/desktop/windows10/2" xmlns:desktop3="hxxp://schemas.microsoft.com/appx/manifest/desktop/windows10/3" xmlns:com="hxxp://schemas.microsoft.com/appx/manifest/com/windows10" xmlns:wincap3="hxxp://schemas.microsoft.com/appx/manifest/foundation/windows10/windowscapabilities/3" IgnorableNamespaces="uap4 wincap3 rescap3 desktop2 desktop3 com" xmlns:mp="hxxp://schemas.microsoft.com/appx/2014/phone/manifest">
<Identity Name="RubenGerlach.Mau-Mau-Palast" ProcessorArchitecture="x86" Publisher="CN=545F4CB0-739D-4B07-A9DA-C97C94EFE557" Version="1.49.382.0" />
<Properties>
<DisplayName>ms-resource:Resources/PackageDisplayName</DisplayName>
<PublisherDisplayName>ms-resource:Resources/PublisherDisplayName</PublisherDisplayName>
<Logo>Assets\StoreLogo.png</Logo>
</Properties>
<Resources>
<Resource Language="en-us" />
<Resource Language="de-de" />
<Resource Language="fr-fr" />
<Resource Language="es-es" />
<Resource Language="pl-pl" />
<Resource Language="ru-ru" />
<Resource uap:Scale="100" />
<Resource uap:Scale="125" />
<Resource uap:Scale="150" />
<Resource uap:Scale="200" />
<Resource uap:Scale="400" />
</Resources>
<Dependencies>
<TargetDeviceFamily Name="Windows.Desktop" MinVersion="10.0.14393.0" MaxVersionTested="10.0.19041.0" />
</Dependencies>
<Capabilities>
<rescap:Capability Name="runFullTrust" />
<Capability Name="internetClient" />
</Capabilities>
<Applications>
<Application Id="de.rgerlach.maumaupalast" Executable="mau-mau-palast.exe" EntryPoint="Windows.FullTrustApplication">
<uap:VisualElements DisplayName="ms-resource:Resources/ApplicationDisplayName" Description="ms-resource:Resources/ApplicationDescription" BackgroundColor="transparent" Square150x150Logo="Assets\Square150x150Logo.png" Square44x44Logo="Assets\Square44x44Logo.png">
<uap:DefaultTile ShortName="ms-resource:Resources/TileShortName" Wide310x150Logo="Assets\Wide310x150Logo.png" Square310x310Logo="Assets\Square310x310Logo.png" Square71x71Logo="Assets\Square71x71Logo.png">
<uap:ShowNameOnTiles>
<uap:ShowOn Tile="square150x150Logo" />
<uap:ShowOn Tile="wide310x150Logo" />
<uap:ShowOn Tile="square310x310Logo" />
</uap:ShowNameOnTiles>
</uap:DefaultTile>
</uap:VisualElements>
<Extensions>
<uap3:Extension Category="windows.appUriHandler">
<uap3:AppUriHandler>
<uap3:Host Name="www.mau-mau-palast.de" />
</uap3:AppUriHandler>
</uap3:Extension>
<uap:Extension Category="windows.protocol">
<uap:Protocol Name="mau-mau-palast">
<uap:Logo>Assets\Square310x310Logo.png</uap:Logo>
<uap:DisplayName>ms-resource:Resources/ApplicationDisplayName</uap:DisplayName>
</uap:Protocol>
</uap:Extension>
</Extensions>
</Application>
</Applications>
<mp:PhoneIdentity PhoneProductId="114af784-d1b1-4f8e-8414-d5e184be9460" PhonePublisherId="8e4f0cf8-d0b0-486c-baaa-fcf5062d8856" />
</Package>)
Samsung Account -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAccount_1.25.5230.0_x64__3c1yjt4zspk6g [2025-06-02] (Samsung Electronics Co. Ltd.)
Samsung Analytics Agent -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungAnalyticsAgent_2.2.12.0_x64__3c1yjt4zspk6g [2024-11-28] (Samsung Electronics Co. Ltd.)
Samsung Cloud -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungCloudPlatformManag_1.8.5.0_x64__3c1yjt4zspk6g [2025-05-30] (Samsung Electronics Co. Ltd.)
Samsung Cloud Bluetooth Sync -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungCloudBluetoothSync_1.0.49.0_x64__3c1yjt4zspk6g [2024-08-27] (Samsung Electronics Co. Ltd.)
Samsung Continuity Service -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy [2025-04-19] (Samsung Electronics Co, Ltd.)
Samsung Flow -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1604.0_x64__wyx1vj98g3asy [2025-06-02] (Samsung Electronics Co, Ltd.)
Samsung Gallery -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.PCGallery_7.0.18.0_x64__3c1yjt4zspk6g [2025-03-31] (Samsung Electronics Co. Ltd.)
Samsung Notes -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungNotes_4.3.418.0_x64__wyx1vj98g3asy [2025-05-15] (Samsung Electronics Co, Ltd.) [Startup Task]
Samsung Pass -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPass_2.0.6.0_x64__3c1yjt4zspk6g [2025-02-20] (Samsung Electronics Co. Ltd.)
Samsung Quick Search -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungQuickSearch_4.1.58.0_x64__3c1yjt4zspk6g [2025-02-21] (Samsung Electronics Co. Ltd.)
Samsung Recovery -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungRecovery_8.1.52.0_x64__3c1yjt4zspk6g [2024-10-12] (Samsung Electronics Co. Ltd.)
Samsung Screen Recorder -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungScreenRecording_2.2.36.0_x64__3c1yjt4zspk6g [2025-02-26] (Samsung Electronics Co. Ltd.)
Samsung Settings 1.5 -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5_7.0.14.0_x64__3c1yjt4zspk6g [2025-04-19] (Samsung Electronics Co. Ltd.)
Samsung Settings Runtime -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungSettingsRuntime_7.0.0.0_x64__3c1yjt4zspk6g [2025-02-08] (Samsung Electronics Co. Ltd.)
Samsung Update -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungUpdate_3.0.108.0_x64__3c1yjt4zspk6g [2024-12-19] (Samsung Electronics Co. Ltd.)
SamsungDeviceCare -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPCCleaner_4.0.42.0_x64__3c1yjt4zspk6g [2025-03-13] (Samsung Electronics Co. Ltd.)
SAMSUNGELECTRONICSCO.LTD.Bixby -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.Bixby_6.10.17.0_x64__3c1yjt4zspk6g [2025-06-19] (Samsung Electronics Co. Ltd.)
Second Screen -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.12.3.0_x64__wyx1vj98g3asy [2025-05-07] (Samsung Electronics Co, Ltd.)
SmartThings -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SmartThingsWindows_1.25087.3.0_x64__3c1yjt4zspk6g [2025-04-19] (Samsung Electronics Co. Ltd.) [Startup Task]
SpotifyAB.SpotifyMusic -> C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0 [2025-06-19] (Spotify AB) [Startup Task]
Studio Plus -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.StudioPlus_5.6.0.0_x64__3c1yjt4zspk6g [2024-08-23] (Samsung Electronics Co. Ltd.)
Telegram Desktop -> C:\Program Files\WindowsApps\TelegramMessengerLLP.TelegramDesktop_5.15.2.0_x64__t4vj0pshhgkwm [2025-06-15] (Telegram Messenger LLP) [Startup Task]
The Chess Lv.100 -> C:\Program Files\WindowsApps\6918E89D.THECHESSLV.100_2.9.0.0_x64__66n08swfvvka0 [2024-10-12] (UNBALANCE corp.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2524.4.0_x64__cv1g1gvanyjgm [2025-06-19] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Main.1.3 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.3_3000.934.1904.0_x64__8wekyb3d8bbwe [2023-09-02] (Microsoft Corp.)
WinAppRuntime.Main.1.4 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.4_4000.1309.2056.0_x64__8wekyb3d8bbwe [2024-08-13] (Microsoft Corp.)
WinAppRuntime.Main.1.5 -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Main.1.5_5001.373.1736.0_x64__8wekyb3d8bbwe [2025-01-29] (Microsoft Corp.)
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_7000.498.2246.0_x64__8wekyb3d8bbwe [2025-06-04] (Microsoft Corp.)
Windows App Runtime DDLM 3000.882.2207.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x6_3000.882.2207.0_x64__8wekyb3d8bbwe [2023-09-19] (Microsoft Corporation)
Windows App Runtime DDLM 3000.882.2207.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.3000.882.2207.0-x8_3000.882.2207.0_x86__8wekyb3d8bbwe [2023-09-19] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x6 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x6_4000.964.11.0_x64__8wekyb3d8bbwe [2023-11-21] (Microsoft Corporation)
Windows App Runtime DDLM 4000.964.11.0-x8 -> C:\Program Files\WindowsApps\Microsoft.WinAppRuntime.DDLM.4000.964.11.0-x8_4000.964.11.0_x86__8wekyb3d8bbwe [2023-11-21] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.54792954.Filons_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.56978801.Voiess_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57058570.Speion_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57074914.Livtop_cw5n1h2txyewy [2025-06-12] (Microsoft Windows)
Windows-Subsystem für Android™ -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe [2024-12-19] (Microsoft Corp.) [Startup Task]
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{13357088-9834-0409-1600-134951500000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{23B3E3D8-C162-4A8B-AB0C-0905DCB1DF19}\InprocServer32 -> C:\Users\Carst\AppData\Local\Packages\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe\TempState\RDP\DVCPlugin\x64\Microsoft.Flow.RPA.Desktop.UIAutomation.RDP.DVC.Plugin.dll (Microsoft Corporation -> )
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{38142727-3008-9161-1521-349515000000}\localserver32 -> C:\Program Files\Adobe\Acrobat DC\Acrobat\ADNotificationManager.exe (Adobe Inc. -> Adobe)
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{4e6f7264-5650-4e00-0000-000000000000}\localserver32 -> "C:\Program Files\NordVPN\NordVPN.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{50726f74-6f6e-2e56-504e-000000000000}\localserver32 -> C:\Program Files\Proton\VPN\v3.5.1\ProtonVPN.exe (Proton AG -> )
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{a04f95c0-6183-7419-2316-954e331d0cbc}\localserver32 -> "C:\Program Files\Proton\VPN\v3.2.2\ProtonVPN.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-5337926-3735871574-4012841875-1001_Classes\CLSID\{D52F80D7-FF69-4E80-BD28-E635767B36F6} -> [S24+ von Carsten] => C:\Users\Carst\CrossDevice\S24+ von Carsten [2025-04-17 22:57]
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Dokumente.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=mpnpojknpmmopombnjdcgaaiekajbnjb
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Gmail.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fmgjjmmmlfnkbppncabfkddbjimcfncm
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Drive.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=aghbiahbpaijignceidepookljebhfak
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Präsentationen.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=kefjledonklijopmnomlcbpllchaibag
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Tabellen.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=fhihpiojkbmbpdjeoajapmgkhlnakfjf
ShortcutWithArgument: C:\Users\Carst\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\YouTube.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) -> --profile-directory=Default --app-id=agimnkijcaahngcdmfeangaknmldooml
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2024-12-19 23:12 - 2024-12-19 23:12 - 000026112 _____ () [Datei ist nicht signiert] C:\ProgramData\Microsoft\Windows\AppRepository\Packages\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\PackagedCom\WsaProxy\WsaProxy.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://samsung.msn.com
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://samsung.msn.com
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2025-06-03] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2022-05-07 07:24 - 2025-06-15 23:27 - 000000858 _____ C:\WINDOWS\system32\drivers\etc\hosts
2023-07-20 08:08 - 2025-06-23 12:34 - 000000524 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
172.19.96.1 CarstensGalaxyBook.mshome.net # 2030 3 3 20 2 46 41 330
172.23.224.1 CarstensGalaxyBook3Pro360.mshome.net # 2030 6 6 22 10 34 15 919
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\Control Panel\Desktop\\Wallpaper -> c:\users\carst\appdata\local\packages\microsoft.windows.photos_8wekyb3d8bbwe\localstate\photosappbackground\20161118_112853.jpg
HKU\S-1-5-21-5337926-3735871574-4012841875-1006\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg
DNS Servers: 192.168.179.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
ist aktiviert.
Network Binding:
=============
WLAN: Intel(R) Wi-Fi 6E AX211 160MHz -> Netwtw14.sys
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
vEthernet (WSLCore): Hyper-V Virtual Ethernet Adapter ->
vms_vsf: Erweiterungsfilter für virtuellen Hyper-V-Switch
ms_l1vhlwf: Nested Network Virtualization
vms_vsp: Extension-Protokoll für virtuellen Hyper-V-Switch
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_9AD818C197E12209B10DEDB8FB309C1E"
HKU\S-1-5-21-5337926-3735871574-4012841875-1001\...\StartupApproved\Run: => "OneDrive"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{F88F3659-14BF-499E-9C8D-1FD3C4817160}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_9.5.2.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (16916B57-7991-4968-B02A-2ADE4B5FB0DE -> Amazon.com Services LLC)
FirewallRules: [{C5F80D9C-DA5A-4CE1-9178-184DC33B3432}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_9.5.2.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (16916B57-7991-4968-B02A-2ADE4B5FB0DE -> Amazon.com Services LLC)
FirewallRules: [UDP Query User{A9554F87-07AA-4C9F-8AF8-3469A08337C8}C:\program files\windowsapps\samsungelectronicscoltd.samsungcontinuityservice_1.7.21.0_x64__wyx1vj98g3asy\windowsmcfcore\windowsmcfcore.exe] => (Allow) C:\program files\windowsapps\samsungelectronicscoltd.samsungcontinuityservice_1.7.21.0_x64__wyx1vj98g3asy\windowsmcfcore\windowsmcfcore.exe => Keine Datei
FirewallRules: [TCP Query User{DF079FEE-55D2-4EC9-9543-90EDB0C03303}C:\program files\windowsapps\samsungelectronicscoltd.samsungcontinuityservice_1.7.21.0_x64__wyx1vj98g3asy\windowsmcfcore\windowsmcfcore.exe] => (Allow) C:\program files\windowsapps\samsungelectronicscoltd.samsungcontinuityservice_1.7.21.0_x64__wyx1vj98g3asy\windowsmcfcore\windowsmcfcore.exe => Keine Datei
FirewallRules: [{F3697853-C6F0-44A9-AE58-FAFCCD4EFE0A}] => (Allow) C:\ProgramData\Samsung\SamsungMultiControl\Binary\SamsungMultiControl.exe => Keine Datei
FirewallRules: [{C64503A7-F7FA-4E88-86F6-123738FB95F1}] => (Allow) C:\MfgDiag\BFT\BoardFunctionTest.exe => Keine Datei
FirewallRules: [TCP Query User{ED8A87BC-E837-4121-8417-DF223F1770DF}C:\program files\windowsapps\spotifyab.spotifymusic_1.248.405.0_x64__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.248.405.0_x64__zpdnekdrzrea0\spotify.exe => Keine Datei
FirewallRules: [UDP Query User{08AE1E30-CA76-4BD9-A793-6F04E24047E9}C:\program files\windowsapps\spotifyab.spotifymusic_1.248.405.0_x64__zpdnekdrzrea0\spotify.exe] => (Allow) C:\program files\windowsapps\spotifyab.spotifymusic_1.248.405.0_x64__zpdnekdrzrea0\spotify.exe => Keine Datei
FirewallRules: [{B8E0F21A-6FD3-4494-B4EB-54F9CA382F1F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForAndroid_2407.40000.4.0_x64__8wekyb3d8bbwe\WsaClient\WsaClient.exe (Microsoft Corporation -> )
FirewallRules: [FPS-SpoolWorker-In-TCP] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-V2] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [FPS-SpoolWorker-In-TCP-NoScope] => (Allow) C:\WINDOWS\system32\spoolsvworker.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{73430E3A-A0A1-48E0-8012-667B7B2DB532}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungContinuityService_1.13.15.0_x64__wyx1vj98g3asy\WindowsMCFCore\WindowsMCFCore.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{43A96985-AC44-4589-B4DC-B21F00233E5C}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6CA90EBB-5F48-490D-AB1A-2DBEE70A8A2C}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.12.3.0_x64__wyx1vj98g3asy\SecondScreenDesktop\SecondScreenDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{6285DD72-3FFF-4FFE-8D99-9E87FB21DD7C}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SecondScreen_1.12.3.0_x64__wyx1vj98g3asy\SecondScreenDesktop\SecondScreenDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{A2DD04C9-CBA2-4E18-AD95-BA7D0F8151E7}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{5F00F186-6689-4F71-B09A-F35F78B9B1ED}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{3D7CF2B6-2BF7-40DB-8645-DF0AC781CDD9}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{A518FEEA-936E-4D20-814D-BB0968AF5439}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{ED3BC17E-3668-4BA9-8B08-1362F2C96A9F}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungQuickShare_2.0.71.0_x64__wyx1vj98g3asy\Win32\QSSystray.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> Samsung Electronics Co., Ltd.)
FirewallRules: [{B55251DB-EB0B-47D6-864C-17BEA02413A0}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25137.403.3671.1395_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7E9B6DD5-7FBB-465D-9149-269F96569804}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25137.403.3671.1395_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AC973BC4-67F1-434A-AA91-611D46B248D7}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{18417C4A-C9AF-407B-AAD1-A78D1E7D1AF4}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{85F5313D-7E3E-46DC-A4D6-C78A2AC358C4}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{40B8D577-30E5-4001-9EC7-F1D190877FB4}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{9D568B32-0F5A-437E-8211-5CEB11111399}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{F8049F2B-2CF7-43D5-B0DD-1D20B14FC736}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{2ACC354A-82D7-42C5-A79E-D7808EA8BF4B}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{7DC20C65-3D4B-4245-BCBF-09530A3063DD}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\WindowsBackupClient.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{1FDA8E73-8C86-4069-9326-C85A6BBB8756}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{1187156A-1019-4B10-AE6E-73EF078BA76B}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{D5481934-7419-44FA-AC3F-93B04ECC3DAC}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{963AE69D-F757-45B2-85B9-B3E19EB8FC90}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{4359A2C9-BD0B-423D-A86C-6B5B53E7EF6F}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{9C3E1AED-13AF-4341-8C05-FFFCE0045C75}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{A569BDE0-4ABD-489F-AB71-FB39533B7DDE}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{8AA64E3C-38F1-4A8A-9109-919B5B10F84B}] => (Allow) C:\WINDOWS\SystemApps\MicrosoftWindows.Client.OOBE_cw5n1h2txyewy\OobeHostApp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{79638FE0-1D51-46C4-BE34-38BF00E25DD4}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1604.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{153EC40E-0FA2-409C-B95D-5AD87443DA2B}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1604.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{EB96BC71-96F3-47A2-9C1C-AAE1B94A3D16}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1604.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{BDC3CFB9-F786-46F2-B6A7-3A6F64CA200D}] => (Allow) C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCoLtd.SamsungFlux_4.9.1604.0_x64__wyx1vj98g3asy\DesktopApp\SamsungFlowDesktop.exe (14C847C8-791E-46EB-9C0D-7CADAF31C930 -> )
FirewallRules: [{83EE0819-5C5C-4A8B-95F6-1125D3737045}] => (Allow) C:\Program Files\WindowsApps\AppUp.IntelTechnologyMDE_20.31.11890.0_x64__8j3eq9eme6ctt\IntelUnison.exe (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation)
FirewallRules: [{2D63755D-D801-41CD-BCD6-8F8E27B9F522}] => (Allow) C:\Program Files\WindowsApps\AppUp.IntelTechnologyMDE_20.31.11890.0_x64__8j3eq9eme6ctt\IntelUnison.exe (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation)
FirewallRules: [{FD4C36B4-5908-49A6-BE22-55954932BE86}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{FBD48255-60F0-44D3-81C3-5AC04351E2BB}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\137.0.3296.83\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{861E599D-8775-430A-B598-F2FD9AA56AF1}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{4C576862-93C5-4D64-A7CC-8A91C63AA4E9}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{25927496-9DF2-42FD-8C40-CB05BC3C0E73}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{EDBCE8A7-9819-4563-B347-45565ABB049F}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{3810F1FA-001B-4DF5-BD5E-DB34B48CA664}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{9AE38419-C263-4EA2-A3C9-76C077996FB4}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{DA18E96F-8441-4BC9-ADE8-7E0A962194A2}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{1F7BF417-D027-492E-83A4-A6EBE1D4E470}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{3D162284-835B-48AA-865B-02B63DE4DCDE}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{D29740C7-92E9-41B1-A0B5-986781A4239E}] => (Allow) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.266.447.0_x64__zpdnekdrzrea0\Spotify.exe (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd)
FirewallRules: [{AFE1F408-3015-44E8-958C-C18043290BE0}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25153.1010.3727.5483_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{DC556844-CBF1-453A-BD72-B9151D551341}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25153.1010.3727.5483_x64__8wekyb3d8bbwe\ms-teams.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
20-06-2025 00:36:20 Windows Update
20-06-2025 00:36:20 Windows Update
23-06-2025 12:59:39 Windows Update
23-06-2025 12:59:42 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (06/13/2025 12:59:46 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Fehlerhafter Modulname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000006fab1
Fehlerhafte Prozess-ID: 0x130c
Fehlerhafte Anwendungsstartzeit: 0x1dbdbedb11c9af1
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Berichts-ID: 6743a292-0010-4461-bf20-49d02a35e6ac
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (06/13/2025 12:58:55 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Fehlerhafter Modulname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000006fab1
Fehlerhafte Prozess-ID: 0x1344
Fehlerhafte Anwendungsstartzeit: 0x1dbdbed92b90ca7
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Berichts-ID: 52cf81bd-3fcc-4697-a92f-7944f85c04ff
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (06/12/2025 04:18:28 PM) (Source: Application Error) (EventID: 1000) (User: CARSTENSGALAXYB)
Description: Fehlerhafter Anwendungsname: ColorEngine.exe, Version: 5.5.5.5, Zeitstempel: 0x63ec4070
Fehlerhafter Modulname: ColorEngine.exe, Version: 5.5.5.5, Zeitstempel: 0x63ec4070
Ausnahmecode: 0xc0000094
Fehleroffset: 0x0000000000021bea
Fehlerhafte Prozess-ID: 0x3c74
Fehlerhafte Anwendungsstartzeit: 0x1dbdba4c18b0a2a
Fehlerhafter Anwendungspfad: C:\Program Files\Samsung\ColorEngine\ColorEngine.exe
Fehlerhafter Modulpfad: C:\Program Files\Samsung\ColorEngine\ColorEngine.exe
Berichts-ID: 2feba121-1170-412f-946f-3b22aeaa2140
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (06/12/2025 03:08:48 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: SUEngine.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
bei SU3.SysMon.SysUWAMon+<Run>d__9.MoveNext()
bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
Error: (06/12/2025 12:17:51 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Fehlerhafter Modulname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000006fab1
Fehlerhafte Prozess-ID: 0x12e4
Fehlerhafte Anwendungsstartzeit: 0x1dbdb1eab77f337
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Berichts-ID: 8a903f58-c07f-4d28-8a21-c9e510b8215f
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (06/12/2025 12:17:00 AM) (Source: CertEnroll) (EventID: 86) (User: NT-AUTORITÄT)
Description: Fehler bei der Initialisierung der SCEP-Zertifikatregistrierung für WORKGROUP\CARSTENSGALAXYB$ über https://INTC-KeyId-ba21136573c2c38a5be57cb6c68bfc23bb36ca58.microsoftaik.azure.net/templates/Aik/scep:
GetCACaps
Methode: GET(16ms)
Phase: GetCACaps
Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 0x80072ee7 (WinHttp: 12007 ERROR_WINHTTP_NAME_NOT_RESOLVED)
Error: (06/12/2025 12:16:53 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Fehlerhafter Modulname: IntelProviderDataHelperService.exe, Version: 3.1024.505.1, Zeitstempel: 0x6637eb71
Ausnahmecode: 0xc0000409
Fehleroffset: 0x000000000006fab1
Fehlerhafte Prozess-ID: 0x1278
Fehlerhafte Anwendungsstartzeit: 0x1dbdb1e888fe557
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\drivers\Intel\ICPS\IntelProviderDataHelperService.exe
Berichts-ID: 1764d5a9-85c0-43f0-8186-c613d3bcdcee
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (06/12/2025 12:16:04 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: SUEngine.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.NullReferenceException
bei SU3.SysMon.SysUWAMon+<Run>d__9.MoveNext()
bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()
bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
bei System.Threading.ThreadPoolWorkQueue.Dispatch()
Systemfehler:
=============
Error: (06/23/2025 01:00:39 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9P2TBWSHK6HJ-SAMSUNGELECTRONICSCO.LTD.SamsungSettings1.5
Error: (06/23/2025 12:37:24 PM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: CARSTENSGALAXYB)
Description: Die Hardware-Echtzeituhr wurde aufgrund eines Fehlers bei der Auswertung der ACPI-Zeit- und -Alarmgerätemethode nicht festgelegt. Status: 3221225659.
Error: (06/23/2025 12:37:24 PM) (Source: Microsoft-Windows-HAL) (EventID: 20) (User: CARSTENSGALAXYB)
Description: Die Hardware-Echtzeituhr wurde aufgrund eines Fehlers bei der Auswertung der ACPI-Zeit- und -Alarmgerätemethode nicht abgefragt. Status: 3221225659.
Error: (06/23/2025 12:36:41 PM) (Source: DCOM) (EventID: 10000) (User: CARSTENSGALAXYB)
Description: Ein DCOM-Server konnte nicht gestartet werden: {94269C4E-071A-4116-90E6-52E557067E4E}. Fehler:
"2147942402"
Aufgetreten beim Start dieses Befehls:
"C:\Users\Carst\AppData\Local\Microsoft\OneDrive\25.091.0512.0001\FileCoAuth.exe" -Embedding
Error: (06/23/2025 12:36:41 PM) (Source: DCOM) (EventID: 10000) (User: CARSTENSGALAXYB)
Description: Ein DCOM-Server konnte nicht gestartet werden: {94269C4E-071A-4116-90E6-52E557067E4E}. Fehler:
"2147942402"
Aufgetreten beim Start dieses Befehls:
"C:\Users\Carst\AppData\Local\Microsoft\OneDrive\25.091.0512.0001\FileCoAuth.exe" -Embedding
Error: (06/23/2025 12:36:41 PM) (Source: DCOM) (EventID: 10000) (User: CARSTENSGALAXYB)
Description: Ein DCOM-Server konnte nicht gestartet werden: {94269C4E-071A-4116-90E6-52E557067E4E}. Fehler:
"2147942402"
Aufgetreten beim Start dieses Befehls:
"C:\Users\Carst\AppData\Local\Microsoft\OneDrive\25.091.0512.0001\FileCoAuth.exe" -Embedding
Error: (06/23/2025 12:36:41 PM) (Source: DCOM) (EventID: 10000) (User: CARSTENSGALAXYB)
Description: Ein DCOM-Server konnte nicht gestartet werden: {94269C4E-071A-4116-90E6-52E557067E4E}. Fehler:
"2147942402"
Aufgetreten beim Start dieses Befehls:
"C:\Users\Carst\AppData\Local\Microsoft\OneDrive\25.091.0512.0001\FileCoAuth.exe" -Embedding
Error: (06/23/2025 12:33:31 PM) (Source: Microsoft-Windows-HAL) (EventID: 21) (User: CARSTENSGALAXYB)
Description: Die Hardware-Echtzeituhr wurde aufgrund eines Fehlers bei der Auswertung der ACPI-Zeit- und -Alarmgerätemethode nicht festgelegt. Status: 3221225659.
Windows Defender:
================
Date: 2025-06-20 01:41:37
Description:
Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόʼn.%л %ťЅсăй ІĐ:%ъ{933AC9B0-B092-41AC-BB90-DB28D37544A9}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŞçђєδůĺęδ ѕçãŋ щäş śкīρρέð ъέĉâυśē ŧћэ ľάšţ śůççеŝѕƒųŀ ѕċąñ щâѕ щіţħïń ťħė ŀáşť 7 ďάγş
Date: 2025-06-18 02:19:03
Description:
Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόʼn.%л %ťЅсăй ІĐ:%ъ{81CC5701-2707-4A69-89D1-8EA4175C2A13}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŞçђєδůĺęδ ѕçãŋ щäş śкīρρέð ъέĉâυśē ŧћэ ľάšţ śůççеŝѕƒųŀ ѕċąñ щâѕ щіţħïń ťħė ŀáşť 7 ďάγş
Date: 2025-06-17 17:46:52
Description:
Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόʼn.%л %ťЅсăй ІĐ:%ъ{5A089B24-5B83-4FED-8D63-7B6795CA66C5}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŞçђєδůĺęδ ѕçãŋ щäş śкīρρέð ъέĉâυśē ŧћэ ľάšţ śůççеŝѕƒųŀ ѕċąñ щâѕ щіţħïń ťħė ŀáşť 7 ďάγş
Date: 2025-06-16 01:59:30
Description:
Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόʼn.%л %ťЅсăй ІĐ:%ъ{0C446267-C7DB-485C-82BA-A34E9951D7AD}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŞçђєδůĺęδ ѕçãŋ щäş śкīρρέð ъέĉâυśē ŧћэ ľάšţ śůççеŝѕƒųŀ ѕċąñ щâѕ щіţħïń ťħė ŀáşť 7 ďάγş
Date: 2025-06-16 00:03:58
Description:
Microsoft Defender Antivirus ŝçäи ĥåš вėэй šţōрρěđ вёƒσŗę сŏмρľëŧïόʼn.%л %ťЅсăй ІĐ:%ъ{337DE25F-D735-4877-870E-862445B35498}%ⁿ %ŧŞċăπ Тýрё:%ъAntimalware%ή %τŚςâņ Рåřám℮ţĕŗş:%ъSchnellüberprüfung%ņ %ţÛšēґ:%ъNT-AUTORITÄT\SYSTEM%ŋ %ťŠţóρ Ŗєāśøή:%вŔР€ ĉσпйëćтΐοй řúиðοωи
Event[0]
Date: 2025-01-15 22:02:18
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.421.1361.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.24090.11
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.
Date: 2025-01-15 22:02:18
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.421.1361.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.24090.11
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.
Date: 2024-12-29 00:55:38
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.421.1054.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.24090.11
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.
Date: 2024-12-29 00:55:38
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.
Neue Version der Sicherheitsinformationen:
%Vorherige Version der Sicherheitsinformationen: 1.421.1054.0
Update Source: Microsoft Update-Server
Sicherheitstyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion:
%Vorherige Modulversion: 1.1.24090.11
Fehlercode: 0x80240022
Fehlerbeschreibung: Die Suche des Programms nach Definitionsaktualisierungen ist nicht möglich.
Date: 2024-10-13 23:34:48
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80070003
Fehlerbeschreibung: Das System kann den angegebenen Pfad nicht finden.
Security Intelligence-Version: 0.0.0.0;0.0.0.0
Modulversion: 0.0.0.0
==================== Speicherinformationen ===========================
BIOS: American Megatrends International, LLC. P07ALN.260.240415.SH 04/15/2024
Hauptplatine: SAMSUNG ELECTRONICS CO., LTD. NP960QFG-KA4DE
Prozessor: 13th Gen Intel(R) Core(TM) i7-1360P
Prozentuale Nutzung des RAM: 68%
Installierter physikalischer RAM: 15943.93 MB
Verfügbarer physikalischer RAM: 5019.77 MB
Summe virtueller Speicher: 19527.93 MB
Verfügbarer virtueller Speicher: 6162.74 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:199.11 GB) (Free:55.25 GB) (Model: WDSN740-SDDPNQD-1T00-1004) NTFS
Drive d: (Volume) (Fixed) (Total:733.06 GB) (Free:486.29 GB) (Model: WDSN740-SDDPNQD-1T00-1004) NTFS
\\?\Volume{3da3504f-d14b-4b6a-853c-0c9db6f047ff}\ () (Fixed) (Total:0.89 GB) (Free:0.07 GB) NTFS
\\?\Volume{b207ec87-b9ee-4568-85c7-2b5e51af4aea}\ (SAMSUNG_REC2) (Fixed) (Total:18.7 GB) (Free:1.69 GB) NTFS
\\?\Volume{e42de93b-b707-429f-4173-636c65706975}\ (SAMSUNG_REC) (Fixed) (Total:1 GB) (Free:0.4 GB) FAT32
\\?\Volume{1c618e83-4e88-4ebe-a5e0-fb7d55ceca21}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 953.9 GB) (Disk ID: 26EA9241)
Partition: GPT.
==================== Ende von Addition.txt =======================
|
Lesestoff: