Trojaner-Board - Trojaner durch Unvorsicht eingefangen [FRST.TXT]

Hallo zusammen

Freunde haben darauf hingewiesen, dass ich eine Story auf einem Instagram-Account gepostet habe, der für gewöhnlich keine Stories postet. Es handelt sich scheinbar um den Mr.Beast - Trojaner. Betroffen sind auch nur die zwei Accounts, die jeweils Kontakt am PC mit einem Browser hatten, nicht alle vier. Zwar sind jetzt kurzfristig alle mit 2FA geschützt worden, beim Durchlesen der Seite scheint es jedoch egal zu sein.

Per Logfile ist ersichtlich, dass ich mir den Trojaner wohl gestern durch eigene Blödheit eingefangen habe, da die Unvorsicht siegte. Er ist in den Logfiles sehr gut ersichtlich.

Windows Defender hatte nicht angeschlagen. Norton hat nichts gefunden, das auf Malware oder Trojaner hinweist. Avast hat etwas gefunden, allerdings weiss ich nicht, wie zuverlässig das Programm wirklich arbeitet. Was genau es gefunden hat, sagt es mir nicht, nur "dass alle Probleme behoben sind". Alles weitere wäre dann eine Abofrage.

Klarname wurde in den Logfiles durch *** ersetzt, sonst keine Veränderung im Text.

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 02-07-2026

durchgeführt von De***** (Administrator) auf OPFER (Gigabyte Technology Co., Ltd. B550 GAMING X V2) (04-07-2026 21:11:44)

Gestartet von C:\Users\De*****\Downloads\FRST64.exe

Geladene Profile: De*****

Plattform: Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: "C:\Program Files\Norton\Browser\Application\NortonBrowser.exe" --single-argument %1

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.) C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\vga_flasher.exe

(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe

(C:\Program Files\Elgato\StreamDeck\StreamDeck.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Elgato\StreamDeck\crashpad_handler.exe

(C:\Program Files\Elgato\StreamDeck\StreamDeck.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Users\De*****\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.discord.sdPlugin\ESDDiscord.exe

(C:\Program Files\Elgato\StreamDeck\StreamDeck.exe ->) (OpenJS Foundation -> Node.js) C:\Users\De*****\AppData\Roaming\Elgato\StreamDeck\NodeJS\20.20.0\node.exe <3>

(C:\Program Files\Elgato\StreamDeck\StreamDeck.exe ->) (The Qt Company Oy -> The Qt Company Ltd.) C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe <4>

(C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe

(C:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe ->) (Epic Games Inc. -> Epic Games, Inc.) C:\Program Files\Epic Games\Launcher\Engine\Binaries\Win64\EpicWebHelper.exe <4>

(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\Dll\GvFPS.exe

(C:\Program Files\GIGABYTE\Control Center\GCC.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\Dll\GvFvSDKCSharp.exe

(C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\Dll\GvFPS.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\Dll\PresentMon\Gv.PresentMon.exe

(C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\Dll\GvFvSDKCSharp.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe

(C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe

(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe

(C:\Program Files\Norton\Suite\NortonSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\aswEngSrv.exe

(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.exe

(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\FrameViewSDK\FvContainer\FvContainer.System.exe

(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\nvrla.exe

(C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\bin\PresentMon_x64.exe

(C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.98\msedgewebview2.exe

(Epic Games Inc. -> Epic Games, Inc.) C:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe

(Epic Games Inc. -> Node.js) C:\Program Files (x86)\Epic Games\Epic Online Services\EpicOnlineServicesUserHelper.exe <2>

(explorer.exe ->) (Corsair Memory, Inc. -> ) C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe

(explorer.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Elgato\ControlCenter\ControlCenter.exe

(explorer.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe

(explorer.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\NortonUI.exe

(explorer.exe ->) (Last.fm) [Datei ist nicht signiert] C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

(explorer.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe

(explorer.exe ->) (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenu.exe

(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe

(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\NortonUI.exe <4>

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\150.0.4078.48\Installer\setup.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\149.0.4022.98\msedgewebview2.exe <5>

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe

(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\afwServ.exe

(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\aswidsagent.exe

(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\nllToolsSvc.exe

(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\NortonSvc.exe

(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\VpnSvc.exe

(services.exe ->) (GIGA-BYTE Technology Co., Ltd. -> ) C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe

(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe

(services.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\System32\GigabyteUpdateService.exe

(services.exe ->) (GuinpinSoft inc) [Datei ist nicht signiert] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe

(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton\Suite\wsc_proxy.exe

(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe

(services.exe ->) (NVIDIA Corporation -> NVIDIA) C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe

(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe

(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2605.9.0_x64__8wekyb3d8bbwe\CalculatorApp.exe

(svchost.exe ->) (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files\GIGABYTE\Control Center\GCC.exe

(svchost.exe ->) (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeC2RClient.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [1090784 2020-07-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)

HKLM\...\Run: [Open-Shell Start Menu] => C:\Program Files\Open-Shell\StartMenu.exe [267776 2025-05-08] (Open-Shell) [Datei ist nicht signiert]

HKLM\...\Run: [Control Center] => C:\Program Files\Elgato\ControlCenter\ControlCenter.exe [2128536 2025-11-04] (Corsair Memory, Inc. -> Corsair Memory, Inc.)

HKLM\...\Run: [NortonUI.exe] => C:\Program Files\Norton\Suite\AvLaunch.exe [1078200 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [LGHUB] => C:\Program Files\LGHUB\system_tray\lghub_system_tray.exe [26469016 2026-07-01] (Logitech Inc -> Logitech, Inc.)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Discord] => C:\Users\De*****\AppData\Local\Discord\Update.exe [1596344 2026-05-11] (Discord Inc. -> Discord Inc.)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Stream Deck] => C:\Program Files\Elgato\StreamDeck\StreamDeck.exe [26921672 2026-05-11] (Corsair Memory, Inc. -> Corsair Memory, Inc.)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Volume Controller SD plugin] => C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe [336264 2025-05-20] (Corsair Memory, Inc. -> )

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Opera GX Stable] => "C:\Users\De*****\AppData\Local\Programs\Opera GX\opera.exe" --autostart [2974152 2026-06-30] (Opera Norway AS -> Opera Software)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [EpicGamesLauncher] => C:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [51866552 2026-07-02] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5773976 2026-06-25] (Valve Corp. -> Valve Corporation)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [Opera GX Browser Assistant] => C:\Users\De*****\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [7744968 2026-06-24] (Opera Norway AS -> Opera Software)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [VoicemodV3] => C:\Program Files\Voicemod V3\Voicemod.exe [6781896 2026-05-18] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Run: [NortonBrowserAutoLaunch_9B304CFC4BB8800D004DFBFCE6DDE458] => C:\Program Files\Norton\Browser\Application\NortonBrowser.exe [5346800 2026-06-06] (Gen Digital Inc. -> Gen Digital Inc.)

HKLM\...\Windows x64\Print Processors\Canon TS5300 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDFO.DLL [509952 2019-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\...\Print\Monitors\Canon BJ Language Monitor TS5300 series: C:\Windows\system32\CNMLMFO.DLL [940032 2019-07-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{3A3642E6-DE46-4F68-9887-AA017EEFE426}] -> C:\Program Files\Norton\Browser\Application\148.0.34771.218\Installer\chrmstp.exe [6295664 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

Startup: C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AORUS ENGINE.lnk [2026-05-15]

ShortcutTarget: AORUS ENGINE.lnk -> C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\autorun.exe () [Datei ist nicht signiert]

Startup: C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Last.fm Desktop Scrobbler.lnk [2026-05-24]

ShortcutTarget: Last.fm Desktop Scrobbler.lnk -> C:\Users\De*****\AppData\Roaming\Microsoft\Installer\{B13709CB-85AE-4F45-BFF9-2CB2B7A78F83}\_19B259572BFCF696C10AAD.exe () [Datei ist nicht signiert]

BootExecute: autocheck autochk * icarus_rvrt.exe

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0434F7FF-3E88-497D-8068-5EEC5C9B9287} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35425448 2025-09-12] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b

Task: {A382BFDA-B03B-4FD4-A277-285834C4DB1E} - System32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE => C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe [34677248 2025-12-22] (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert]

Task: {9448382A-FF23-41CB-8F49-7407AC3C827C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23564224 2023-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {4831E84F-3573-4DE4-990F-8F28FF6F2093} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23564224 2023-07-31] (Microsoft Corporation -> Microsoft Corporation)

Task: {D2AF46AF-E06E-471C-A29D-191838163BFC} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1446864 2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Task: {C3804A93-91AF-42FA-942A-4FC40E60D79D} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [1446864 2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Task: {C6DE697E-F78D-4826-B8F8-11420388A363} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2283984 2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Task: {FF2FBDF0-FF40-40A4-8167-A2A5093071D6} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [2283984 2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Task: {B74F8DBD-05D6-4272-9FFB-CD67904B1ECA} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3912185912-3826206352-237317771-1004 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-07-01] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).

Task: {63363E3C-1C69-4685-A96F-7262BAD53EF4} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-07-01] (Mozilla Corporation -> Mozilla Foundation)

Task: {56D3499E-A483-41BD-BDBB-C94BC571998A} - System32\Tasks\Norton Private Browser Heartbeat Task (Hourly) => C:\Program Files\Norton\Browser\Application\NortonBrowser.exe [5346800 2026-06-06] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {73F8707C-26D1-40FC-8F6F-36DC5142B93E} - System32\Tasks\Norton Private Browser Heartbeat Task (Logon) => C:\Program Files\Norton\Browser\Application\NortonBrowser.exe [5346800 2026-06-06] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {CBAC06A9-C2D5-4222-B53B-6101FA8D2C0C} - System32\Tasks\Norton Private Browser VPS Differential Update => C:\Program Files\Norton\Browser\Application\vps_helper.exe [2728104 2026-06-06] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {49C7BE09-AA52-4584-B3F6-96E172531337} - System32\Tasks\Norton\Norton 360 Patcher => C:\Program Files\Common Files\Norton\Icarus\norton-suite\icarus.exe [10030304 2026-06-23] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {BC4A40DC-DFD0-4424-B3DE-490D7A27BF43} - System32\Tasks\Norton\Norton VPN Bug Report => C:\Program Files\Norton\Suite\AvBugReport.exe [6621624 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.) -> --send "dumps|report" --silent --product 187 --programpath "C:\Program Files\Norton\Suite" --configpath "C:\ProgramData\Norton\VPN" --path "C:\ProgramData\Norton\VPN\log" --path "C:\ProgramData\Norton\Icarus\Logs" --logpath "C:\ProgramData\Norton\VPN\log" --guid c431cc20-a400-432f-aee0-6f18f1b02d64

Task: {E070BBB0-66A9-462C-8217-9A89633C09ED} - System32\Tasks\Norton\Overseer => C:\Program Files\Common Files\Norton\Overseer\overseer.exe [3759840 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {2978E623-5515-4310-B849-D2C0328D580D} - System32\Tasks\Norton\Suite Emergency Update => C:\Program Files\Norton\Suite\AvEmUpdate.exe [5808056 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {B3B9CD2E-8108-47E9-BEBE-394A7AAA7D97} - System32\Tasks\NortonDefaultBrowserTask => C:\Program Files\Norton\Browser\Application\NortonBrowserProtect.exe [1985248 2026-06-05] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {3C83D4BB-E607-495E-8D70-A8D88AB9CCF9} - System32\Tasks\NortonDefaultBrowserTask2 => C:\Program Files\Norton\Browser\Application\NortonBrowserProtect.exe [1985248 2026-06-05] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {F074E7A3-4259-477B-ACFC-47D0314B6277} - System32\Tasks\NortonUpdateTaskMachineCore => C:\Program Files (x86)\Norton\Browser\Update\NortonBrowserUpdate.exe [442448 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {9E04CFE3-329E-4034-A051-597816BEA5C1} - System32\Tasks\NortonUpdateTaskMachineUA => C:\Program Files (x86)\Norton\Browser\Update\NortonBrowserUpdate.exe [442448 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

Task: {781E25E5-8065-4FC3-98C3-0D9D3B7D0EDC} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-07] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {D6231641-418E-42CB-8C87-4ED11AFC865D} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1779398721 => C:\Users\De*****\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7633352 2026-06-24] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\De*****\AppData\Local\Programs\Opera GX\assistant" --producttype=assistant $(Arg0)

Task: {6537D360-168B-4D5D-88AA-D9C3DF8672A8} - System32\Tasks\Opera GX scheduled Autoupdate 1779398720 => C:\Users\De*****\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [7633352 2026-06-24] (Opera Norway AS -> Opera Software)

Task: {794FAC6B-7EC5-41FA-994F-D660CE6A2864} - System32\Tasks\PinnacleStudio26Notifier => C:\Program Files\Pinnacle\Studio 26\programs\PinnacleNotifierWrapper.exe [12560 2023-09-07] (Corel Corporation -> Pinnacle)

Task: {B95AED71-1BFC-4ECC-B212-585D0EC712ED} - System32\Tasks\PinnacleStudio26Updater => C:\Program Files\Pinnacle\Studio 26\programs\PSNotification.exe [560448 2023-09-05] (Corel Corporation -> )
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{92f7a2f7-2616-4dd9-bc56-75d2e543c925}: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{92f7a2f7-2616-4dd9-bc56-75d2e543c925}: [DhcpDomain] home
 

FireFox:

========

FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox

FF DefaultProfile: iwlc3x28.default-release -> 308046B0AF4A39CB

FF ProfilePath: C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\errvuaqj.default [2026-05-01]

FF ProfilePath: C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release [2026-07-04]

FF Session Restore: Mozilla\Firefox\Profiles\iwlc3x28.default-release -> ist aktiviert.

FF Extension: (BetterTTV) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\firefox@betterttv.net.xpi [2026-07-02]

FF Extension: (I don't care about cookies) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\jid1-KKzOGWgsW3Ao4Q@jetpack.xpi [2026-05-01]

FF Extension: (7TV) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\moz-addon-prod@7tv.app.xpi [2026-06-24]

FF Extension: (New Tab) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\newtab@mozilla.org.xpi [2026-06-27]

FF Extension: (uBlock Origin) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-07-03]

FF Extension: (YTMusic Scrobbler → Last.FM) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\ytmusic-scrobbler@addon.xpi [2026-05-24]

FF Extension: (Dark space - The best dynamic theme) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{22b0eca1-8c02-4c0d-a5d7-6604ddd9836e}.xpi [2026-05-21]

FF Extension: (Last.fm Scrobbler for YouTube™) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{4e09fe4d-835f-4d58-a7ec-0bbc19f0aeab}.xpi [2026-05-24]

FF Extension: (Return YouTube Dislike) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{762f9885-5a13-4abd-9c77-433dcd38b8fd}.xpi [2026-05-21]

FF Extension: (Last of us) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{7f42afdf-5e55-4f2c-882f-20d8fa4782d5}.xpi [2026-05-21]

FF Extension: (Shorts für YouTube™ ausblenden) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{88ebde3a-4581-4c6b-8019-2a05a9e3e938}.xpi [2026-05-24]

FF Extension: (Briked LastFM YoutubeMusic Scrobbler) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{db4d3665-83be-478f-8ff0-4d17052b465a}.xpi [2026-05-24]

FF Extension: (DocsAfterDark) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\Extensions\{e8ffc3db-2875-4c7f-af38-d03e7f7f8ab9}.xpi [2026-05-14]

FF Extension: (IPP Activator) - C:\Users\De*****\AppData\Roaming\Mozilla\Firefox\Profiles\iwlc3x28.default-release\features\{08036fea-d89d-4965-88a5-38c8a8c425ff}\ipp-activator@mozilla.com.xpi [2026-06-24]

FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2025-12-31] (VideoLAN -> VideoLAN)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @update.norton.securebrowser.com/Norton Browser;version=3 -> C:\Program Files (x86)\Norton\Browser\Update\1.8.1994.6\npNortonBrowserUpdate3.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

FF Plugin-x32: @update.norton.securebrowser.com/Norton Browser;version=9 -> C:\Program Files (x86)\Norton\Browser\Update\1.8.1994.6\npNortonBrowserUpdate3.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\De*****\AppData\Local\Microsoft\Edge\User Data\Default [2026-07-03]

Edge Extension: (Google Docs Offline) - C:\Users\De*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-04-30]

Edge Extension: (Edge relevant text changes) - C:\Users\De*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2026-04-30]
 

Opera: 

=======

StartMenuInternet: (HKU\S-1-5-21-3912185912-3826206352-237317771-1004) Opera GXStable - "C:\Users\De*****\AppData\Local\Programs\Opera GX\opera.exe"
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AorusLcdService; C:\Program Files\GIGABYTE\Control Center\Lib\GBT_VGA\Service\AorusLcdService.exe [60000 2025-10-22] (GIGA-BYTE Technology Co., Ltd. -> )

R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2026-06-12] (GuinpinSoft inc) [Datei ist nicht signiert]

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9491904 2023-07-31] (Microsoft Corporation -> Microsoft Corporation)

S3 CorsairDeviceControlService; C:\Program Files\Corsair\Corsair Device Control Service\bin\CorsairDeviceControlService.exe [2937496 2025-12-02] (Corsair Memory, Inc. -> Corsair Memory, Inc.)

S3 DiscordSystemHelper; C:\Program Files\Common Files\Discord\Discord\DiscordSystemHelper.exe [2241408 2026-06-18] (discord-code-sign-windows-admin -> Discord Inc.)

R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [159912 2025-12-31] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S3 EpicGamesUpdater; C:\Program Files\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3408312 2026-07-02] (Epic Games Inc. -> Epic Games, Inc.)

S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [2606520 2026-06-23] (Epic Games Inc. -> Epic Games, Inc.)

S2 GBTECService; C:\Program Files (x86)\GIGABYTE\GBTECService\OLEDDisplayService.exe [21160 2025-09-25] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [20985496 2026-07-01] (Logitech Inc -> Logitech, Inc.)

S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MpDefenderCoreService.exe [2150144 2026-06-10] (Microsoft Windows Publisher -> Microsoft Corporation)

R3 nllbIDSAgent; C:\Program Files\Norton\Suite\aswidsagent.exe [8304568 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

S2 norton; C:\Program Files (x86)\Norton\Browser\Update\NortonBrowserUpdate.exe [442448 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

R2 Norton Antivirus; C:\Program Files\Norton\Suite\NortonSvc.exe [1045944 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

R2 Norton Firewall; C:\Program Files\Norton\Suite\afwServ.exe [2758584 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

R2 Norton Tools; C:\Program Files\Norton\Suite\nllToolsSvc.exe [1098680 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

S3 nortonm; C:\Program Files (x86)\Norton\Browser\Update\NortonBrowserUpdate.exe [442448 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

S3 NortonPrivateBrowserElevationService; C:\Program Files\Norton\Browser\Application\148.0.34771.218\elevation_service.exe [3932120 2026-06-06] (Gen Digital Inc. -> Gen Digital Inc.)

R2 NortonVpn; C:\Program Files\Norton\Suite\VpnSvc.exe [15169464 2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

R2 NortonWscReporter; C:\Program Files\Norton\Suite\wsc_proxy.exe [76552 2026-07-04] (NortonLifeLock Inc. -> NortonLifeLock Inc.)

R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-04-23] (NVIDIA Corporation -> NVIDIA Corporation)

S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [1523832 2026-05-25] (Rockstar Games, Inc. -> Rockstar Games)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2026-04-30] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\NisSrv.exe [4608640 2026-06-10] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26050.15-0\MsMpEng.exe [290744 2026-06-10] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 GigabyteUpdateService; C:\Windows\system32\GigabyteUpdateService.exe [898808 2026-07-04] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AmdTools64; C:\Windows\System32\drivers\AmdTools64.sys [77240 2022-07-18] (Advanced Micro Devices Inc. -> AMD)

S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]

R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [39672 2026-05-15] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)

R3 FvKMDSvc; C:\Windows\system32\VRFCAT-Plugins\FrameViewKM_x64.sys [29248 2026-02-27] (NVIDIA Corporation -> )

R3 gdrv3; C:\Windows\System32\drivers\gdrv3.sys [52440 2026-05-15] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R3 iriuna0; C:\Windows\System32\DriverStore\FileRepository\iriunaud.inf_amd64_03929b79d4508491\iriuna0.sys [41096 2025-08-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)

S3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [82312 2026-05-23] (Microsoft Windows -> Microsoft Corporation)

R3 logi_joy_bus_enum; C:\Windows\System32\drivers\logi_joy_bus_enum.x64.sys [45448 2026-05-13] (Logitech Inc -> Logitech)

R3 logi_joy_vir_hid; C:\Windows\System32\drivers\logi_joy_vir_hid.x64.sys [32648 2026-05-13] (Logitech Inc -> Logitech)

R3 logi_joy_xlcore; C:\Windows\System32\drivers\logi_joy_xlcore.x64.sys [74632 2026-05-13] (Logitech Inc -> Logitech)

R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2026-05-15] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)

S0 nllArDisk; C:\Windows\System32\drivers\nllArDisk.sys [21088 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllArPot; C:\Windows\System32\drivers\nllArPot.sys [259160 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllbidsdriver; C:\Windows\System32\drivers\nllbidsdriver.sys [451168 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R0 nllbidsh; C:\Windows\System32\drivers\nllbidsh.sys [316512 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R0 nllbuniv; C:\Windows\System32\drivers\nllbuniv.sys [87136 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

S0 nllElam; C:\Windows\System32\drivers\nllElam.sys [29144 2026-07-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)

R1 nllKbd; C:\Windows\System32\drivers\nllKbd.sys [34912 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllMonFlt; C:\Windows\System32\drivers\nllMonFlt.sys [294496 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllNetHub; C:\Windows\System32\drivers\nllNetHub.sys [636512 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllRdr; C:\Windows\System32\drivers\nllRdr2.sys [100960 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

S0 nllRvrt; C:\Windows\System32\drivers\nllRvrt.sys [71776 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllSnx; C:\Windows\System32\drivers\nllSnx.sys [887904 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R1 nllSP; C:\Windows\System32\drivers\nllSP.sys [1295968 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R3 nllStm; C:\Windows\System32\drivers\nllStm.sys [250976 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R0 nllVmm; C:\Windows\System32\drivers\nllVmm.sys [472672 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

S3 nllVpnRdr; C:\Windows\System32\drivers\nllVpnRdr.sys [76384 2026-07-04] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)

R3 voicemodvad; C:\Windows\System32\DriverStore\FileRepository\voicemodvad.inf_amd64_b1314f88d7831d1d\voicemodvad.sys [93352 2025-10-24] (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod S.L.)

S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [21888 2026-06-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [646536 2026-06-10] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [115120 2026-06-10] (Microsoft Windows -> Microsoft Corporation)
 

==================== SvcHost (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Drei Monate (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2026-07-04 21:13 - 2026-07-04 21:13 - 000002174 _____ C:\Users\Public\Desktop\Avast One.lnk

2026-07-04 21:13 - 2026-07-04 21:13 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Avast Software

2026-07-04 21:13 - 2026-07-04 21:13 - 000000000 ____D C:\Users\De*****\AppData\Local\Avast Software

2026-07-04 21:13 - 2026-07-04 21:13 - 000000000 ____D C:\ProgramData\Avast Software

2026-07-04 21:12 - 2026-07-04 21:12 - 001737448 _____ (Gen Digital Inc.) C:\Users\De*****\Downloads\avast_one_free_antivirus.exe

2026-07-04 21:12 - 2026-07-04 21:12 - 000000000 ____D C:\Users\De*****\AppData\Roaming\xpdf

2026-07-04 21:11 - 2026-07-04 21:12 - 000035690 _____ C:\Users\De*****\Downloads\FRST.txt

2026-07-04 21:11 - 2026-07-04 21:12 - 000000000 ____D C:\FRST

2026-07-04 21:11 - 2026-07-04 21:11 - 002448896 _____ (Farbar) C:\Users\De*****\Downloads\FRST64.exe

2026-07-04 21:10 - 2026-07-04 21:12 - 000000000 ____D C:\Users\De*****\AppData\Local\Norton

2026-07-04 21:10 - 2026-07-04 21:10 - 000003834 _____ C:\Windows\system32\Tasks\Norton Private Browser Heartbeat Task (Hourly)

2026-07-04 21:10 - 2026-07-04 21:10 - 000003662 _____ C:\Windows\system32\Tasks\NortonUpdateTaskMachineUA

2026-07-04 21:10 - 2026-07-04 21:10 - 000003624 _____ C:\Windows\system32\Tasks\Norton Private Browser VPS Differential Update

2026-07-04 21:10 - 2026-07-04 21:10 - 000003538 _____ C:\Windows\system32\Tasks\NortonUpdateTaskMachineCore

2026-07-04 21:10 - 2026-07-04 21:10 - 000003498 _____ C:\Windows\system32\Tasks\NortonDefaultBrowserTask2

2026-07-04 21:10 - 2026-07-04 21:10 - 000003496 _____ C:\Windows\system32\Tasks\NortonDefaultBrowserTask

2026-07-04 21:10 - 2026-07-04 21:10 - 000003250 _____ C:\Windows\system32\Tasks\Norton Private Browser Heartbeat Task (Logon)

2026-07-04 21:10 - 2026-07-04 21:10 - 000002451 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Private Browser.lnk

2026-07-04 21:10 - 2026-07-04 21:10 - 000002416 _____ C:\Users\Public\Desktop\Norton Private Browser.lnk

2026-07-04 21:09 - 2026-07-04 21:10 - 000000000 ____D C:\Program Files\Norton

2026-07-04 21:09 - 2026-07-04 21:09 - 001999912 _____ (Gen Digital Inc.) C:\Users\De*****\Downloads\norton_360_online_setup.exe

2026-07-04 21:09 - 2026-07-04 21:09 - 000324536 _____ (Gen Digital Inc.) C:\Windows\system32\nllBoot.exe

2026-07-04 21:09 - 2026-07-04 21:09 - 000056128 _____ (Gen Digital Inc.) C:\Windows\system32\icarus_rvrt.exe

2026-07-04 21:09 - 2026-07-04 21:09 - 000002123 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton 360.lnk

2026-07-04 21:09 - 2026-07-04 21:09 - 000002111 _____ C:\Users\Public\Desktop\Norton 360.lnk

2026-07-04 21:09 - 2026-07-04 21:09 - 000000000 ____D C:\Windows\system32\Tasks\Norton

2026-07-04 21:09 - 2026-07-04 21:09 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Norton

2026-07-04 21:09 - 2026-07-04 21:09 - 000000000 ____D C:\ProgramData\Norton

2026-07-04 21:09 - 2026-07-04 21:09 - 000000000 ____D C:\Program Files\Common Files\Norton

2026-07-04 21:09 - 2026-07-04 21:09 - 000000000 ____D C:\Program Files (x86)\Norton

2026-07-04 20:54 - 2026-07-04 20:54 - 000000799 _____ C:\Users\De*****\Documents\Videos - Verknüpfung.lnk

2026-07-03 22:54 - 2026-07-03 22:55 - 2080374784 _____ C:\Users\De*****\Downloads\negoziodifoto267rt.part4.rar

2026-07-03 22:54 - 2026-07-03 22:55 - 2080374784 _____ C:\Users\De*****\Downloads\negoziodifoto267rt.part3.rar

2026-07-03 22:54 - 2026-07-03 22:55 - 2080374784 _____ C:\Users\De*****\Downloads\negoziodifoto267rt.part2.rar

2026-07-03 22:54 - 2026-07-03 22:55 - 2047096756 _____ C:\Users\De*****\Downloads\negoziodifoto267rt.part5.rar

2026-07-03 22:53 - 2026-07-03 22:53 - 2080374784 _____ C:\Users\De*****\Downloads\negoziodifoto267rt.part1.rar

2026-07-03 22:52 - 2026-07-03 22:52 - 272629760 _____ C:\Users\De*****\Downloads\negoziodifoto25gpai8.part1(1).rar

2026-07-03 09:00 - 2026-07-03 09:00 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Adobe

2026-07-02 18:08 - 2026-07-02 18:08 - 004895711 _____ C:\Users\De*****\Downloads\folders.3.1.9.zip

2026-07-02 17:52 - 2026-07-02 17:52 - 000082705 _____ C:\Users\De*****\Downloads\responsive-slider-gallery.1.5.4.zip

2026-07-02 08:01 - 2026-07-02 08:01 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\QuickStyles

2026-07-02 07:56 - 2026-07-02 07:56 - 000000856 _____ C:\Users\Public\Desktop\Logitech G HUB.lnk

2026-07-02 07:56 - 2026-07-02 07:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi

2026-07-02 07:56 - 2026-07-02 07:56 - 000000000 ____D C:\Program Files\LGHUB

2026-07-02 07:55 - 2026-07-02 07:55 - 000000000 ____D C:\ProgramData\Logi

2026-07-01 21:37 - 2026-07-04 21:06 - 000000000 ____D C:\Program Files\Mozilla Firefox

2026-06-30 22:28 - 2026-07-02 09:37 - 000000000 ____D C:\Users\De*****\AppData\Local\VoicemodV3

2026-06-30 22:28 - 2026-06-30 22:28 - 000001841 _____ C:\Users\Public\Desktop\Voicemod V3.lnk

2026-06-30 22:28 - 2026-06-30 22:28 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Voicemod.exe

2026-06-30 22:28 - 2026-06-30 22:28 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Voicemod

2026-06-30 22:28 - 2026-06-30 22:28 - 000000000 ____D C:\ProgramData\Voicemod

2026-06-30 22:28 - 2026-06-30 22:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Voicemod V3

2026-06-30 22:28 - 2026-06-30 22:28 - 000000000 ____D C:\Program Files\Voicemod V3

2026-06-30 22:27 - 2026-06-30 22:27 - 006396696 _____ (Voicemod Inc., Sucursal en España ) C:\Users\De*****\Downloads\VoicemodInstaller_1.6.13-tigkb3.exe

2026-06-28 02:09 - 2026-06-28 02:09 - 000383694 _____ C:\Users\De*****\Downloads\Spotify-Font.zip

2026-06-28 01:46 - 2026-06-28 02:53 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Notepad++

2026-06-28 01:46 - 2026-06-28 01:46 - 006899264 _____ (Don HO don.h@free.fr) C:\Users\De*****\Downloads\npp.8.9.6.4.Installer.x64.exe

2026-06-28 01:46 - 2026-06-28 01:46 - 000000883 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk

2026-06-28 01:46 - 2026-06-28 01:46 - 000000000 ____D C:\Program Files\Notepad++

2026-06-28 01:41 - 2026-06-28 01:41 - 025594304 _____ (NowPlayingToFile) C:\Users\De*****\Downloads\NowPlayingToFile.exe

2026-06-28 01:26 - 2026-06-28 01:26 - 007980050 _____ C:\Users\De*****\Downloads\201736-916310642(1).mp4

2026-06-28 01:07 - 2026-06-28 01:07 - 000088330 _____ C:\Users\De*****\Downloads\Snip-v8.0.2.zip

2026-06-28 01:03 - 2026-06-28 01:49 - 000000000 ____D C:\Users\De*****\Desktop\Snip

2026-06-25 21:24 - 2026-06-25 21:34 - 000000000 ____D C:\Users\De*****\AppData\Roaming\YouTube Music Desktop App

2026-06-25 21:24 - 2026-06-25 21:24 - 109704704 _____ (NovusTheory) C:\Users\De*****\Downloads\2.0.5.exe

2026-06-25 21:24 - 2026-06-25 21:24 - 000002649 _____ C:\Users\De*****\Desktop\YouTube Music Desktop App.lnk

2026-06-25 21:24 - 2026-06-25 21:24 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NovusTheory

2026-06-25 21:24 - 2026-06-25 21:24 - 000000000 ____D C:\Users\De*****\AppData\Local\youtube_music_desktop_app

2026-06-25 21:19 - 2026-06-25 21:19 - 000000109 _____ C:\Users\De*****\Downloads\instructions.url.download

2026-06-25 21:13 - 2026-06-25 21:13 - 000000000 ____D C:\Users\De*****\.android

2026-06-25 21:12 - 2026-06-25 21:12 - 002686736 _____ C:\Users\De*****\Downloads\IriunWebcam-2.9.6.exe

2026-06-25 21:12 - 2026-06-25 21:12 - 000001127 _____ C:\Users\De*****\Desktop\Iriun Webcam.lnk

2026-06-25 21:12 - 2026-06-25 21:12 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iriun Webcam

2026-06-25 21:12 - 2026-06-25 21:12 - 000000000 ____D C:\Program Files (x86)\Iriun Webcam

2026-06-25 21:12 - 2026-06-25 21:12 - 000000000 ____D C:\Program Files (x86)\dotnet

2026-06-19 18:19 - 2026-06-19 18:19 - 000000000 ____D C:\Users\De*****\AppData\Local\Chameleon

2026-06-19 18:16 - 2026-06-19 18:16 - 000000223 _____ C:\Users\De*****\Desktop\MECCHA CHAMELEON.url

2026-06-13 22:53 - 2026-06-13 22:54 - 000000000 ____D C:\Users\De*****\Downloads\Presets

2026-06-12 14:16 - 2026-06-12 14:16 - 000002142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop Lightroom 5 64-Bit.lnk

2026-06-12 14:16 - 2026-06-12 14:16 - 000002122 _____ C:\Users\Public\Desktop\Lightroom 5 64-Bit.lnk

2026-06-12 14:16 - 2026-06-12 14:16 - 000000000 ____D C:\Program Files\Common Files\Adobe

2026-06-12 14:15 - 2026-06-12 14:15 - 000000000 ____D C:\Program Files\Adobe

2026-06-12 09:44 - 2026-06-12 09:44 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MakeMKV

2026-06-12 09:44 - 2026-06-12 09:44 - 000000000 ____D C:\Program Files (x86)\MakeMKV

2026-06-12 09:43 - 2026-06-12 09:43 - 016347143 _____ (GuinpinSoft inc) C:\Users\De*****\Downloads\Setup_MakeMKV_v1.18.3(1).exe

2026-06-12 09:43 - 2026-06-12 09:43 - 000000000 ____D C:\Users\De*****\.MakeMKV

2026-06-12 09:42 - 2026-06-12 09:44 - 000001066 _____ C:\Users\De*****\Desktop\MakeMKV.lnk

2026-06-12 09:42 - 2026-06-12 09:42 - 000000000 ____D C:\Program Files\Common Files\cdarbsvc

2026-06-11 20:51 - 2026-06-11 20:51 - 000000039 _____ C:\Users\De*****\AppData\Local\kritadisplayrc

2026-06-11 20:22 - 2026-06-11 20:22 - 272629760 _____ C:\Users\De*****\Downloads\negoziodifoto25gpai8.part1.rar

2026-06-11 20:19 - 2026-06-11 21:00 - 017954611 _____ C:\Users\De*****\Downloads\Blaetter.psd

2026-06-11 20:18 - 2026-06-11 20:18 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part6.rar

2026-06-11 20:18 - 2026-06-11 20:18 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part5.rar

2026-06-11 20:18 - 2026-06-11 20:18 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part4.rar

2026-06-11 20:18 - 2026-06-11 20:18 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part3.rar

2026-06-11 20:18 - 2026-06-11 20:18 - 170926090 _____ C:\Users\De*****\Downloads\negoziodifoto267.part7.rar

2026-06-11 20:17 - 2026-06-11 20:17 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part2.rar

2026-06-11 20:17 - 2026-06-11 20:17 - 581959680 _____ C:\Users\De*****\Downloads\negoziodifoto267.part1.rar

2026-06-11 20:11 - 2026-06-11 20:11 - 000000000 ____D C:\Users\De*****\AppData\Local\krita

2026-06-11 20:10 - 2026-06-11 20:51 - 000003213 _____ C:\Users\De*****\AppData\Local\kritarc

2026-06-11 20:10 - 2026-06-11 20:51 - 000000000 ____D C:\Users\De*****\AppData\Roaming\krita

2026-06-11 20:10 - 2026-06-11 20:10 - 000000000 ____D C:\Users\De*****\AppData\Local\fontconfig

2026-06-11 20:09 - 2026-06-11 20:09 - 164092376 _____ (Krita Foundation) C:\Users\De*****\Downloads\krita-x64-5.3.2.1-setup.exe

2026-06-11 17:35 - 2026-06-11 17:35 - 000130944 _____ C:\Users\De*****\Downloads\il_fullxfull.783482168_nce9.jpeg

2026-06-11 13:58 - 2026-06-11 13:58 - 000010466 _____ C:\Users\De*****\Downloads\ash.zip

2026-06-10 22:21 - 2026-06-10 22:21 - 000995553 _____ C:\Users\De*****\Downloads\Farntattoo mit Farn

2026-06-10 22:16 - 2026-06-10 22:16 - 000995553 _____ C:\Users\De*****\Downloads\downloaded_photo(8).jpeg

2026-06-10 19:40 - 2026-06-19 18:16 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2026-06-10 19:40 - 2026-06-10 19:40 - 000000223 _____ C:\Users\De*****\Desktop\The Walking Dead The Telltale Definitive Series.url

2026-06-10 19:40 - 2026-06-10 19:40 - 000000222 _____ C:\Users\De*****\Desktop\Life is Strange 2.url

2026-06-10 19:40 - 2026-06-10 19:40 - 000000000 ____D C:\Users\De*****\AppData\Local\Dontnod

2026-06-10 14:02 - 2026-06-10 14:03 - 1510591777 _____ C:\Users\De*****\Downloads\Mixed-20260610T120132Z-3-001.zip

2026-06-10 14:02 - 2026-06-10 14:03 - 1389048167 _____ C:\Users\De*****\Downloads\Left Behind-20260610T120131Z-3-001.zip

2026-06-10 14:02 - 2026-06-10 14:03 - 1221712215 _____ C:\Users\De*****\Downloads\Pittsburgh-20260610T120132Z-3-001.zip

2026-06-10 14:02 - 2026-06-10 14:03 - 1047567441 _____ C:\Users\De*****\Downloads\Bus Depot-20260610T120128Z-3-001.zip

2026-06-10 14:01 - 2026-06-10 14:02 - 957405611 _____ C:\Users\De*****\Downloads\Lakeside Resort -20260610T120130Z-3-001.zip

2026-06-10 14:01 - 2026-06-10 14:02 - 537997910 _____ C:\Users\De*****\Downloads\The University -20260610T120137Z-3-001.zip

2026-06-10 14:01 - 2026-06-10 14:02 - 1233344112 _____ C:\Users\De*****\Downloads\Bill's Town-20260610T120125Z-3-001.zip

2026-06-10 14:01 - 2026-06-10 14:01 - 228039412 _____ C:\Users\De*****\Downloads\Hometown-20260610T120129Z-3-001.zip

2026-06-10 14:01 - 2026-06-10 14:01 - 206546538 _____ C:\Users\De*****\Downloads\Jackson-20260610T120129Z-3-001.zip

2026-06-10 09:06 - 2026-06-10 09:07 - 001407658 _____ C:\Users\De*****\Downloads\downloaded_photo(3).jpeg

2026-06-10 09:06 - 2026-06-10 09:07 - 001103142 _____ C:\Users\De*****\Downloads\downloaded_photo(4).jpeg

2026-06-10 09:06 - 2026-06-10 09:07 - 001072101 _____ C:\Users\De*****\Downloads\downloaded_photo(5).jpeg

2026-06-10 09:06 - 2026-06-10 09:07 - 000952869 _____ C:\Users\De*****\Downloads\downloaded_photo(6).jpeg

2026-06-10 09:06 - 2026-06-10 09:06 - 000996769 _____ C:\Users\De*****\Downloads\downloaded_photo(7).jpeg

2026-06-10 09:06 - 2026-06-10 09:06 - 000663240 _____ C:\Users\De*****\Downloads\downloaded_photo(2).jpeg

2026-06-10 08:52 - 2026-06-10 08:52 - 000601566 _____ C:\Users\De*****\Downloads\downloaded_photo.jpeg

2026-06-10 08:52 - 2026-06-10 08:52 - 000454672 _____ C:\Users\De*****\Downloads\downloaded_photo(1).jpeg

2026-06-10 08:07 - 2026-06-10 08:07 - 000299739 _____ C:\Users\De*****\Downloads\WhatsApp Image 2026-06-09 at 10.42.02.jpeg

2026-06-10 08:07 - 2026-06-10 08:07 - 000145064 _____ C:\Users\De*****\Downloads\WhatsApp Image 2026-06-08 at 15.28.27.jpeg

2026-06-09 20:57 - 2023-10-16 09:54 - 000000154 _____ C:\Users\De*****\Desktop\fernfox.txt

2026-06-09 20:20 - 2026-06-28 02:52 - 000000000 ____D C:\Users\De*****\AppData\Roaming\vlc

2026-06-09 20:20 - 2026-06-09 20:20 - 045948080 _____ C:\Users\De*****\Downloads\vlc-3.0.23-win64.exe

2026-06-09 20:20 - 2026-06-09 20:20 - 000000922 _____ C:\Users\Public\Desktop\VLC media player.lnk

2026-06-09 20:20 - 2026-06-09 20:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN

2026-06-09 20:20 - 2026-06-09 20:20 - 000000000 ____D C:\Program Files\VideoLAN

2026-06-01 09:04 - 2026-06-01 09:04 - 007071774 _____ C:\Users\De*****\Downloads\motivation_druck.psd

2026-05-31 22:44 - 2026-05-31 22:44 - 000971767 _____ C:\Users\De*****\Downloads\logo_tumblr.psd

2026-05-31 16:04 - 2026-05-31 16:04 - 000003232 _____ C:\Users\De*****\Downloads\rarkey.rar

2026-05-31 16:04 - 2026-05-31 16:04 - 000000000 ____D C:\Users\De*****\AppData\Roaming\WinRAR

2026-05-31 16:03 - 2026-05-31 16:03 - 003963480 _____ (Alexander Roshal) C:\Users\De*****\Downloads\winrar-x64-722d.exe

2026-05-31 16:03 - 2026-05-31 16:03 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR

2026-05-31 16:03 - 2026-05-31 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR

2026-05-31 16:03 - 2026-05-31 16:03 - 000000000 ____D C:\Program Files\WinRAR

2026-05-31 10:11 - 2026-05-31 10:11 - 005272015 _____ C:\Users\De*****\Downloads\oceanwp.4.1.6.zip

2026-05-31 09:04 - 2026-05-31 09:04 - 001676550 _____ C:\Users\De*****\Downloads\minimalio.1.4.46.zip

2026-05-31 08:40 - 2026-05-31 08:59 - 004873161 _____ C:\Users\De*****\Downloads\motivation.psd

2026-05-29 18:15 - 2026-05-29 18:15 - 000000000 ____D C:\Users\De*****\AppData\Local\DBG

2026-05-29 18:15 - 2026-05-29 18:15 - 000000000 ____D C:\Users\De*****\AppData\Local\CrashReportClient

2026-05-29 18:15 - 2026-05-29 18:15 - 000000000 ____D C:\ProgramData\dbg

2026-05-26 21:17 - 2026-05-26 21:17 - 000000000 ___HD C:\Users\De*****\Downloads\.opera

2026-05-26 21:17 - 2026-05-26 21:17 - 000000000 ___HD C:\Users\De*****\.opera

2026-05-25 21:51 - 2026-05-25 21:51 - 000000000 ____D C:\Users\De*****\Documents\Rockstar Games

2026-05-25 21:40 - 2026-05-25 21:40 - 000001924 _____ C:\Users\De*****\Desktop\Rockstar Games Launcher.lnk

2026-05-25 21:40 - 2026-05-25 21:40 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Rockstar Games

2026-05-25 21:39 - 2026-05-25 21:39 - 000000000 ____D C:\Program Files\Rockstar Games

2026-05-25 21:38 - 2026-05-25 21:38 - 000000000 ____D C:\Users\De*****\AppData\Local\Rockstar Games

2026-05-25 21:38 - 2026-05-25 21:38 - 000000000 ____D C:\ProgramData\Rockstar Games

2026-05-25 20:01 - 2026-07-04 21:10 - 000000000 ____D C:\Program Files (x86)\Steam

2026-05-25 20:01 - 2026-05-25 20:03 - 000000000 ____D C:\Users\De*****\AppData\Local\Steam

2026-05-25 20:01 - 2026-05-25 20:01 - 000001038 _____ C:\Users\Public\Desktop\Steam.lnk

2026-05-25 20:01 - 2026-05-25 20:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam

2026-05-24 16:58 - 2026-05-24 16:58 - 000003119 _____ C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Last.fm Desktop Scrobbler.lnk

2026-05-24 16:58 - 2026-05-24 16:58 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Last.fm

2026-05-24 16:58 - 2026-05-24 16:58 - 000000000 ____D C:\Program Files (x86)\Last.fm

2026-05-24 16:57 - 2026-05-24 16:57 - 001332736 _____ C:\Users\De*****\Downloads\LastFM_Scrobbler_3.1.29.msi

2026-05-24 00:26 - 2026-06-19 18:19 - 000000000 ____D C:\Users\De*****\AppData\Local\UnrealEngine

2026-05-24 00:26 - 2026-05-24 00:26 - 000000000 ____D C:\Users\De*****\AppData\Local\UnrealEngineLauncher

2026-05-24 00:26 - 2026-05-24 00:26 - 000000000 ____D C:\Users\De*****\AppData\Local\EpicGamesLauncher

2026-05-24 00:26 - 2026-05-24 00:26 - 000000000 ____D C:\Users\De*****\AppData\Local\Epic Games

2026-05-24 00:26 - 2026-05-24 00:26 - 000000000 ____D C:\Users\De*****\AppData\Local\CEF

2026-05-24 00:26 - 2026-05-24 00:26 - 000000000 ____D C:\Program Files (x86)\Epic Games

2026-05-24 00:25 - 2026-05-25 21:39 - 000000000 ____D C:\ProgramData\EpicInstallerTemp

2026-05-24 00:25 - 2026-05-24 00:26 - 000000000 ____D C:\ProgramData\Epic

2026-05-24 00:25 - 2026-05-24 00:25 - 086221312 _____ C:\Users\De*****\Downloads\EpicInstaller-19.2.3.exe

2026-05-24 00:25 - 2026-05-24 00:25 - 000001230 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk

2026-05-24 00:25 - 2026-05-24 00:25 - 000001218 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk

2026-05-24 00:25 - 2026-05-24 00:25 - 000000000 ____D C:\Program Files\Epic Games

2026-05-22 00:11 - 2026-05-22 00:11 - 002380800 _____ C:\Users\De*****\Downloads\SteamSetup.exe

2026-05-21 23:51 - 2026-05-21 23:52 - 112102008 _____ (Rockstar Games Inc.) C:\Users\De*****\Downloads\Rockstar-Games-Launcher.exe

2026-05-21 23:25 - 2026-06-30 21:04 - 000004592 _____ C:\Windows\system32\Tasks\Opera GX scheduled assistant Autoupdate 1779398721

2026-05-21 23:25 - 2026-06-30 21:04 - 000004302 _____ C:\Windows\system32\Tasks\Opera GX scheduled Autoupdate 1779398720

2026-05-21 23:25 - 2026-06-30 21:04 - 000001539 _____ C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk

2026-05-21 23:25 - 2026-05-21 23:25 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Opera Software

2026-05-21 23:25 - 2026-05-21 23:25 - 000000000 ____D C:\Users\De*****\AppData\Local\Opera Software

2026-05-21 23:24 - 2026-05-21 23:24 - 004130544 _____ () C:\Users\De*****\Downloads\OperaGXSetup.exe

2026-05-17 10:49 - 2026-05-17 10:49 - 000001565 _____ C:\Users\De*****\AppData\Local\recently-used.xbel

2026-05-17 10:37 - 2026-05-17 10:37 - 000000000 ____D C:\Users\De*****\AppData\Local\gtk-3.0

2026-05-17 10:36 - 2026-05-17 10:45 - 000000000 ____D C:\Users\De*****\.dbus-keyrings

2026-05-17 10:36 - 2026-05-17 10:36 - 000001304 _____ C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GIMP 3.2.4.lnk

2026-05-17 10:36 - 2026-05-17 10:36 - 000001296 _____ C:\Users\De*****\Desktop\GIMP 3.2.4.lnk

2026-05-17 10:36 - 2026-05-17 10:36 - 000000000 ____D C:\Users\De*****\AppData\Roaming\GIMP

2026-05-17 10:36 - 2026-05-17 10:36 - 000000000 ____D C:\Users\De*****\AppData\Local\GIMP

2026-05-17 10:36 - 2026-05-17 10:36 - 000000000 ____D C:\Users\De*****\AppData\Local\gegl-0.4

2026-05-17 10:36 - 2026-05-17 10:36 - 000000000 ____D C:\Users\De*****\AppData\Local\babl-0.1

2026-05-17 10:35 - 2026-05-17 10:35 - 188132312 _____ (The GIMP Team ) C:\Users\De*****\Downloads\gimp-3.2.4-setup.exe

2026-05-17 10:34 - 2026-05-17 10:34 - 000002272 _____ C:\Users\De*****\Desktop\JDownloader 2.lnk

2026-05-17 10:34 - 2026-05-17 10:34 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader

2026-05-17 10:33 - 2026-06-11 20:14 - 000000000 ____D C:\Users\De*****\AppData\Local\JDownloader 2

2026-05-17 10:33 - 2026-05-17 10:33 - 075418256 _____ (AppWork GmbH) C:\Users\De*****\Downloads\JDownloader2Setup_windows-amd64_v21_0_10.exe

2026-05-17 10:33 - 2026-05-17 10:33 - 000000000 ____D C:\Users\De*****\AppData\Local\install4j

2026-05-16 18:39 - 2026-06-28 02:54 - 000000000 ____D C:\Users\De*****\AppData\Roaming\discord

2026-05-16 18:39 - 2026-06-19 17:34 - 000002309 _____ C:\Users\De*****\Desktop\Discord.lnk

2026-05-16 18:39 - 2026-05-16 18:39 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord Inc

2026-05-16 18:39 - 2026-05-16 18:39 - 000000000 ____D C:\Program Files\Common Files\Discord

2026-05-16 18:38 - 2026-06-27 21:52 - 000000000 ____D C:\Users\De*****\AppData\Local\Discord

2026-05-16 18:38 - 2026-06-25 21:24 - 000000000 ____D C:\Users\De*****\AppData\Local\SquirrelTemp

2026-05-16 18:38 - 2026-05-16 18:38 - 121508792 _____ (Discord Inc.) C:\Users\De*****\Downloads\DiscordSetup.exe

2026-05-15 21:20 - 2026-05-15 21:20 - 000000000 ____D C:\Windows\system32\VRFCAT-Plugins

2026-05-15 21:20 - 2026-05-15 21:20 - 000000000 ____D C:\Users\Public\Documents\Corsair

2026-05-15 21:20 - 2026-05-15 21:20 - 000000000 ____D C:\ProgramData\Corsair

2026-05-15 19:55 - 2026-07-04 21:06 - 000003452 _____ C:\Windows\system32\Tasks\GCC

2026-05-15 19:54 - 2026-05-15 19:54 - 000001927 _____ C:\Users\Public\Desktop\GCC.lnk

2026-05-15 19:54 - 2026-05-15 19:54 - 000000000 ____D C:\Users\Public\Documents\Creative

2026-05-15 19:54 - 2026-05-15 19:54 - 000000000 ____D C:\Program Files\GIGABYTE

2026-05-15 19:54 - 2026-05-15 19:54 - 000000000 ____D C:\Program Files\Corsair

2026-05-15 19:53 - 2026-05-15 19:53 - 097953908 _____ C:\Users\De*****\Downloads\RGB_Fusion_B24.1202.1.zip

2026-05-15 19:53 - 2026-05-15 19:53 - 000002081 _____ C:\Users\Public\Desktop\RGBFusion.lnk

2026-05-15 19:53 - 2026-05-15 19:53 - 000000000 ____D C:\Users\De*****\Downloads\RGB_Fusion_B24.1202.1

2026-05-15 19:53 - 2026-05-15 19:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\AORUS

2026-05-15 19:53 - 2026-05-15 19:53 - 000000000 ____D C:\Program Files\Verbatim

2026-05-15 19:51 - 2026-05-15 19:53 - 703963272 _____ (NVIDIA Corporation) C:\Users\De*****\Downloads\466.77-desktop-win10-64bit-international-dch-whql.exe

2026-05-15 19:51 - 2026-05-15 19:51 - 897379002 _____ C:\Users\De*****\Downloads\GCC_26.03.31.01.zip

2026-05-15 19:50 - 2026-05-15 19:54 - 000000000 ____D C:\Program Files\ENE

2026-05-15 19:50 - 2026-05-15 19:50 - 000000000 ____D C:\Program Files\WD

2026-05-15 19:50 - 2026-05-15 19:50 - 000000000 ____D C:\Program Files\Patriot

2026-05-15 19:49 - 2026-05-15 19:54 - 000052440 ____N (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\Drivers\gdrv3.sys

2026-05-15 19:49 - 2026-05-15 19:54 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIGABYTE

2026-05-15 19:49 - 2026-05-15 19:49 - 000003512 _____ C:\Windows\system32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE

2026-05-15 19:49 - 2026-05-15 19:49 - 000001245 _____ C:\Users\Public\Desktop\AORUS ENGINE.lnk

2026-05-15 19:49 - 2026-05-15 19:49 - 000000000 ____D C:\Users\De*****\Documents\temp

2026-05-15 19:48 - 2026-05-15 19:54 - 000000000 ____D C:\Program Files (x86)\GIGABYTE

2026-05-15 19:48 - 2026-05-15 19:48 - 172799512 _____ (GIGABYTE Technology Co.,Inc. ) C:\Users\De*****\Downloads\AORUS_ENGINE_SETUP_V2.3.1.0_B251226_x86_Signed.exe

2026-05-15 16:56 - 2026-07-04 21:07 - 000000000 ____D C:\Users\De*****\AppData\Local\CrashDumps

2026-05-14 20:43 - 2026-05-14 20:43 - 000000000 ___HD C:\ProgramData\CanonBJ

2026-05-13 21:40 - 2026-07-02 09:37 - 000000000 ____D C:\Users\De*****\AppData\Roaming\G HUB

2026-05-13 21:40 - 2026-07-02 07:56 - 000000000 ____D C:\Users\De*****\AppData\Roaming\lghub

2026-05-13 21:40 - 2026-07-02 07:56 - 000000000 ____D C:\Users\De*****\AppData\Local\LGHUB

2026-05-13 21:40 - 2026-05-13 21:40 - 000074632 _____ (Logitech) C:\Windows\system32\Drivers\logi_joy_xlcore.x64.sys

2026-05-13 21:40 - 2026-05-13 21:40 - 000045448 _____ (Logitech) C:\Windows\system32\Drivers\logi_joy_bus_enum.x64.sys

2026-05-13 21:40 - 2026-05-13 21:40 - 000032648 _____ (Logitech) C:\Windows\system32\Drivers\logi_joy_vir_hid.x64.sys

2026-05-13 21:40 - 2026-05-13 21:40 - 000000000 ____D C:\ProgramData\Logishrd

2026-05-13 21:40 - 2026-05-13 21:40 - 000000000 ____D C:\ProgramData\LGHUBData

2026-05-13 21:40 - 2026-05-13 21:40 - 000000000 ____D C:\ProgramData\LGHUB

2026-05-13 21:40 - 2026-05-13 21:40 - 000000000 ____D C:\Program Files\Logitech

2026-05-13 21:40 - 2026-05-13 21:40 - 000000000 ____D C:\Program Files\Logi

2026-05-13 21:39 - 2026-05-13 21:39 - 069735576 _____ (Logitech, Inc.) C:\Users\De*****\Downloads\lghub_installer.exe

2026-05-13 21:39 - 2026-05-13 21:39 - 069735576 _____ (Logitech, Inc.) C:\Users\De*****\Downloads\lghub_installer(1).exe

2026-05-13 21:39 - 2026-05-13 21:39 - 000000000 ____D C:\Users\De*****\AppData\Local\Sentry

2026-05-12 21:46 - 2026-05-25 18:29 - 000020718 _____ C:\Users\De*****\Documents\Passwort_Sheets.xlsx

2026-05-12 21:46 - 2026-05-12 21:46 - 000000000 ____D C:\Users\De*****\Documents\Benutzerdefinierte Office-Vorlagen

2026-05-12 21:39 - 2026-05-25 00:06 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Excel

2026-05-12 21:31 - 2026-07-02 22:00 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\UProof

2026-05-12 21:31 - 2026-07-02 08:03 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Word

2026-05-12 21:31 - 2026-07-02 08:00 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Office

2026-05-12 21:31 - 2026-05-12 21:31 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Proof

2026-05-12 21:31 - 2026-05-12 21:31 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\AddIns

2026-05-12 21:28 - 2026-05-12 21:28 - 000002592 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive for Business.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002589 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002585 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002564 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002539 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote 2016.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000002475 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk

2026-05-12 21:28 - 2026-05-12 21:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools

2026-05-12 21:28 - 2026-05-12 21:28 - 000000000 ____D C:\Program Files\Microsoft Office 15

2026-05-12 21:28 - 2026-05-12 21:28 - 000000000 ____D C:\Program Files (x86)\Microsoft Office

2026-05-12 21:27 - 2026-05-12 21:27 - 1713711104 _____ C:\Users\De*****\Downloads\DE_OfficeStandard2019_x32Bit.iso

2026-05-12 21:21 - 2026-05-12 21:21 - 008323072 _____ C:\Users\De*****\Downloads\DE_OfficeStandard2019_x64Bit.iso

2026-05-11 21:59 - 2026-06-28 02:52 - 000000000 ____D C:\Users\De*****\AppData\Roaming\obs-studio

2026-05-11 21:22 - 2026-05-11 21:23 - 000000000 ____D C:\Users\Public\Documents\Triple Scoop Music

2026-05-11 21:22 - 2026-05-11 21:23 - 000000000 ____D C:\Users\De*****\temp

2026-05-11 21:22 - 2026-05-11 21:23 - 000000000 ____D C:\Users\De*****\Documents\Pinnacle

2026-05-11 21:22 - 2026-05-11 21:22 - 000000199 _____ C:\Users\De*****\AppData\Roaming\DESKTOP-7N9OIEK.MTBF.txt

2026-05-11 21:22 - 2026-05-11 21:22 - 000000000 ____D C:\Users\De*****\AppData\Roaming\NVIDIA

2026-05-11 21:22 - 2026-05-11 21:22 - 000000000 ____D C:\Users\De*****\AppData\Local\Pinnacle

2026-05-11 21:22 - 2026-05-11 21:22 - 000000000 ____D C:\Users\De*****\AppData\Local\Corel

2026-05-11 21:01 - 2026-05-15 19:53 - 000000000 ____D C:\Users\De*****\AppData\Local\Downloaded Installations

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Corel

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\Uninstall

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\Roxio

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\MyDVD

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MultiCam Capture 2.0 Lite

2026-05-11 21:01 - 2026-05-11 21:01 - 000000000 ____D C:\Program Files\Corel

2026-05-11 21:00 - 2026-05-11 21:22 - 000000000 ____D C:\Users\De*****\AppData\Local\Pinnacle_Studio_26

2026-05-11 21:00 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Pinnacle Studio 26

2026-05-11 21:00 - 2026-05-11 21:00 - 000002249 _____ C:\Users\Public\Desktop\Pinnacle Studio 26.lnk

2026-05-11 21:00 - 2026-05-11 21:00 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Ulead Systems

2026-05-11 21:00 - 2026-05-11 21:00 - 000000000 ____D C:\ProgramData\Roxio Log Files

2026-05-11 21:00 - 2026-05-11 21:00 - 000000000 ____D C:\Program Files (x86)\Pinnacle

2026-05-11 20:59 - 2026-05-11 21:22 - 000003740 _____ C:\Windows\system32\Tasks\PinnacleStudio26Updater

2026-05-11 20:59 - 2026-05-11 20:59 - 000003552 _____ C:\Windows\system32\Tasks\PinnacleStudio26Notifier

2026-05-11 20:59 - 2026-05-11 20:59 - 000000000 ____D C:\Users\Public\Documents\Pinnacle

2026-05-11 20:59 - 2026-05-11 20:59 - 000000000 ____D C:\Program Files\Pinnacle

2026-05-11 20:57 - 2026-05-11 20:57 - 000000000 ____D C:\Program Files (x86)\Corel

2026-05-11 20:56 - 2026-07-04 20:59 - 000000349 _____ C:\Users\Public\Documents\PCLECHAL.INI

2026-05-11 20:56 - 2026-05-11 21:01 - 000000000 ____D C:\ProgramData\Corel

2026-05-11 20:56 - 2026-05-11 20:59 - 000000000 ____D C:\ProgramData\Pinnacle

2026-05-11 20:56 - 2026-05-11 20:57 - 000000000 ____D C:\Users\De*****\Desktop\PinnacleStudio26

2026-05-11 20:55 - 2026-05-11 20:56 - 006078720 _____ (Corel Corporation) C:\Users\De*****\Downloads\Pinnacle-Studio_26_Installer.exe

2026-05-11 20:55 - 2026-05-11 20:55 - 000000000 ____D C:\ProgramData\UniqueId

2026-05-11 20:55 - 2026-05-11 20:55 - 000000000 ____D C:\ProgramData\Pinnacle Log Files

2026-05-11 20:52 - 2026-05-11 22:06 - 000000000 ____D C:\Users\De*****\AppData\Roaming\HueSync

2026-05-11 20:52 - 2026-05-11 20:52 - 000000962 _____ C:\Users\Public\Desktop\Hue Sync.lnk

2026-05-11 20:52 - 2026-05-11 20:52 - 000000000 ____D C:\Users\De*****\AppData\Local\Signify

2026-05-11 20:52 - 2026-05-11 20:52 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hue Sync

2026-05-11 20:52 - 2026-05-11 20:52 - 000000000 ____D C:\ProgramData\HueSync

2026-05-11 20:52 - 2026-05-11 20:52 - 000000000 ____D C:\Program Files\Hue Sync

2026-05-11 20:51 - 2026-05-18 20:26 - 000001151 _____ C:\Users\Public\Desktop\Elgato Stream Deck.lnk

2026-05-11 20:51 - 2026-05-18 20:26 - 000000000 ____D C:\ProgramData\obs-studio

2026-05-11 20:51 - 2026-05-11 20:51 - 000000000 ____D C:\Users\De*****\AppData\Local\Elgato

2026-05-11 20:50 - 2026-05-18 20:26 - 000000000 ____D C:\Program Files\Elgato

2026-05-11 20:50 - 2026-05-11 21:27 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Elgato

2026-05-11 20:50 - 2026-05-11 20:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elgato

2026-05-11 20:50 - 2026-05-11 20:50 - 212291584 _____ C:\Users\De*****\Downloads\Stream_Deck_7.4.1.22720.msi

2026-05-11 20:50 - 2026-05-11 20:50 - 080474360 _____ (Signify Netherlands B.V.) C:\Users\De*****\Downloads\HueSyncInstaller_1.13.1.83.exe

2026-05-11 20:50 - 2026-05-11 20:50 - 022323200 _____ C:\Users\De*****\Downloads\ControlCenter_1.8.2.714_x64.msi

2026-05-11 20:50 - 2026-05-11 20:50 - 000001193 _____ C:\Users\Public\Desktop\Elgato Control Center.lnk

2026-05-11 20:45 - 2026-05-11 20:45 - 157809480 _____ (OBS Project) C:\Users\De*****\Downloads\OBS-Studio-32.1.2-Windows-x64-Installer.exe

2026-05-11 20:45 - 2026-05-11 20:45 - 000001070 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk

2026-05-11 20:45 - 2026-05-11 20:45 - 000001058 _____ C:\Users\Public\Desktop\OBS Studio.lnk

2026-05-11 20:45 - 2026-05-11 20:45 - 000000000 ____D C:\ProgramData\obs-studio-hook

2026-05-11 20:45 - 2026-05-11 20:45 - 000000000 ____D C:\Program Files\obs-studio

2026-05-11 20:40 - 2026-07-04 21:05 - 000000000 ____D C:\Users\De*****\AppData\Local\OpenShell

2026-05-11 20:40 - 2026-05-11 20:40 - 000000000 ____D C:\Users\De*****\AppData\Roaming\OpenShell

2026-05-11 20:39 - 2026-05-11 20:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Open-Shell

2026-05-11 20:39 - 2026-05-11 20:39 - 000000000 ____D C:\Program Files\Open-Shell

2026-05-11 20:38 - 2026-05-11 20:38 - 005235880 _____ (BurdaForward GmbH) C:\Users\De*****\Downloads\Open-Shell - CHIP Installer _ThahT.exe

2026-05-01 16:26 - 2026-05-01 16:26 - 003644376 _____ (Adobe Inc.) C:\Users\De*****\Downloads\Photoshop_Set-Up_747p(1).exe

2026-05-01 16:26 - 2026-05-01 16:26 - 000000000 ____D C:\Users\De*****\AppData\Roaming\com.adobe.dunamis

2026-05-01 16:25 - 2026-05-01 16:25 - 003644376 _____ (Adobe Inc.) C:\Users\De*****\Downloads\Photoshop_Set-Up_747p.exe

2026-05-01 16:13 - 2026-05-01 16:13 - 016347143 _____ (GuinpinSoft inc) C:\Users\De*****\Downloads\Setup_MakeMKV_v1.18.3.exe

2026-05-01 14:59 - 2026-06-30 21:06 - 000003594 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-3912185912-3826206352-237317771-1004

2026-05-01 14:58 - 2026-07-04 21:09 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2026-05-01 14:58 - 2026-07-04 21:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2026-05-01 14:58 - 2026-07-02 07:56 - 000001071 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2026-05-01 14:58 - 2026-05-01 14:58 - 000501176 _____ (Mozilla) C:\Users\De*****\Downloads\Firefox Installer.exe

2026-05-01 14:58 - 2026-05-01 14:58 - 000002040 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk

2026-05-01 14:58 - 2026-05-01 14:58 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla

2026-05-01 14:58 - 2026-05-01 14:58 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Mozilla

2026-05-01 14:58 - 2026-05-01 14:58 - 000000000 ____D C:\Users\De*****\AppData\Local\Mozilla

2026-04-30 10:51 - 2026-04-30 10:51 - 000000000 ___HD C:\$WINDOWS.~BT

2026-04-30 10:34 - 2026-04-30 10:34 - 000000000 ____D C:\Users\De*****\AppData\Local\PlaceholderTileLogoFolder

2026-04-30 08:43 - 2026-04-30 08:43 - 000000000 ____D C:\Users\De*****\AppData\Local\PeerDistRepub

2026-04-30 08:35 - 2026-05-16 18:39 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Spelling

2026-04-30 08:32 - 2026-04-30 08:32 - 000000000 ____D C:\Windows\system32\compatrel

2026-04-30 08:32 - 2026-04-30 08:32 - 000000000 ____D C:\inetpub

2026-04-30 08:27 - 2026-06-25 21:12 - 000000000 ____D C:\ProgramData\Package Cache

2026-04-30 08:27 - 2026-04-30 08:27 - 000003834 _____ C:\Windows\system32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2026-04-30 08:27 - 2026-04-30 08:27 - 000001436 _____ C:\Users\Public\Desktop\NVIDIA App.lnk

2026-04-30 08:27 - 2026-04-30 08:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation

2026-04-30 08:27 - 2026-04-07 07:23 - 001311344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll

2026-04-30 08:27 - 2026-04-07 07:23 - 001116272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll

2026-04-30 08:27 - 2026-04-07 07:23 - 000296560 _____ C:\Windows\system32\FvSDK_x64.dll

2026-04-30 08:27 - 2026-04-07 07:23 - 000271472 _____ C:\Windows\SysWOW64\FvSDK_x86.dll

2026-04-30 08:27 - 2026-04-07 07:00 - 000185496 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll

2026-04-30 08:27 - 2026-04-07 07:00 - 000161936 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap32v.dll

2026-04-30 08:26 - 2026-05-11 20:09 - 000000000 ____D C:\Users\De*****\AppData\Local\NVIDIA

2026-04-30 08:26 - 2026-04-30 08:27 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation

2026-04-30 08:26 - 2026-04-30 08:26 - 000000000 ____D C:\Windows\system32\lxss

2026-04-30 08:26 - 2026-04-30 08:26 - 000000000 ____D C:\Windows\system32\Drivers\NVIDIA Corporation

2026-04-30 08:24 - 2026-04-30 08:24 - 000023734 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json

2026-04-30 08:24 - 2026-04-24 00:45 - 002421296 _____ C:\Windows\system32\vulkaninfo-1-999-0-0-0.exe

2026-04-30 08:24 - 2026-04-24 00:45 - 002421296 _____ C:\Windows\system32\vulkaninfo.exe

2026-04-30 08:24 - 2026-04-24 00:45 - 001923120 _____ C:\Windows\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2026-04-30 08:24 - 2026-04-24 00:45 - 001923120 _____ C:\Windows\SysWOW64\vulkaninfo.exe

2026-04-30 08:24 - 2026-04-24 00:45 - 001625648 _____ C:\Windows\system32\vulkan-1-999-0-0-0.dll

2026-04-30 08:24 - 2026-04-24 00:45 - 001625648 _____ C:\Windows\system32\vulkan-1.dll

2026-04-30 08:24 - 2026-04-24 00:45 - 001434672 _____ C:\Windows\SysWOW64\vulkan-1-999-0-0-0.dll

2026-04-30 08:24 - 2026-04-24 00:45 - 001434672 _____ C:\Windows\SysWOW64\vulkan-1.dll

2026-04-30 08:24 - 2026-04-24 00:45 - 000478952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll

2026-04-30 08:24 - 2026-04-24 00:45 - 000375016 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll

2026-04-30 08:24 - 2026-04-24 00:41 - 001391848 _____ (NVIDIA Corporation) C:\Windows\system32\nvml.dll

2026-04-30 08:24 - 2026-04-24 00:41 - 000676584 _____ (NVIDIA Corporation) C:\Windows\system32\nvofapi64.dll

2026-04-30 08:24 - 2026-04-24 00:41 - 000510184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvofapi.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 028071144 _____ C:\Windows\system32\nvidia-pcc.exe

2026-04-30 08:24 - 2026-04-24 00:40 - 002329832 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 001725160 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 001624808 _____ (NVIDIA Corporation) C:\Windows\system32\nvidia-smi.exe

2026-04-30 08:24 - 2026-04-24 00:40 - 001584872 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 001232616 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 001067240 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll

2026-04-30 08:24 - 2026-04-24 00:40 - 000821480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 029138664 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 021714152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 008441064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 005674216 _____ (NVIDIA Corporation) C:\Windows\system32\nvcudadebugger.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 004466920 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll

2026-04-30 08:24 - 2026-04-24 00:39 - 000469736 _____ (NVIDIA Corporation) C:\Windows\system32\nvdebugdump.exe

2026-04-30 08:24 - 2026-04-24 00:38 - 005925608 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll

2026-04-30 08:24 - 2026-04-24 00:38 - 005517504 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll

2026-04-30 08:24 - 2026-04-24 00:38 - 005014056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll

2026-04-30 08:24 - 2026-04-24 00:38 - 000853736 _____ (NVIDIA Corporation) C:\Windows\system32\MCU.exe

2026-04-30 08:24 - 2026-04-23 11:12 - 000162176 _____ C:\Windows\system32\nvinfo.pb

2026-04-30 08:24 - 2026-04-23 11:12 - 000127208 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys

2026-04-30 08:24 - 2026-04-07 07:00 - 000060568 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys

2026-04-30 08:23 - 2026-04-30 08:23 - 000023734 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json

2026-04-30 08:21 - 2026-04-30 08:23 - 958860120 _____ (NVIDIA Corporation) C:\Users\De*****\Downloads\596.36-desktop-win10-win11-64bit-international-dch-whql.exe

2026-04-30 08:20 - 2026-04-30 08:20 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\MMC

2026-04-30 08:15 - 2026-06-10 09:51 - 000000000 ____D C:\Windows\system32\MRT

2026-04-30 08:15 - 2026-04-30 08:15 - 000000000 ____D C:\Users\De*****\AppData\Local\Comms

2026-04-30 08:13 - 2026-04-30 08:13 - 000000000 ____D C:\Program Files\RUXIM

2026-04-30 08:13 - 2026-04-30 08:13 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

2026-04-30 08:12 - 2026-06-30 21:06 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3912185912-3826206352-237317771-1004

2026-04-30 08:11 - 2026-07-02 18:41 - 000000000 ____D C:\Users\De*****\AppData\Local\D3DSCache

2026-04-30 08:11 - 2026-06-30 21:06 - 000003382 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3912185912-3826206352-237317771-1004

2026-04-30 08:11 - 2026-06-30 21:06 - 000002421 _____ C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk

2026-04-30 08:11 - 2026-06-25 21:13 - 000000000 ____D C:\Users\De*****

2026-04-30 08:11 - 2026-06-08 18:12 - 000000000 ____D C:\Users\De*****\AppData\Local\Packages

2026-04-30 08:11 - 2026-06-02 23:23 - 000000000 ___SD C:\Users\De*****\AppData\Roaming\Microsoft\Credentials

2026-04-30 08:11 - 2026-04-30 08:26 - 000000000 ____D C:\Users\De*****\AppData\LocalLow\NVIDIA

2026-04-30 08:11 - 2026-04-30 08:11 - 000000020 ___SH C:\Users\De*****\ntuser.ini

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Vorlagen

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Startmenü

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Netzwerkumgebung

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Lokale Einstellungen

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Eigene Dateien

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Druckumgebung

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Documents\Eigene Videos

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Documents\Eigene Musik

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Documents\Eigene Bilder

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\AppData\Local\Verlauf

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\AppData\Local\Anwendungsdaten

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 _SHDL C:\Users\De*****\Anwendungsdaten

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ___SD C:\Users\De*****\AppData\Roaming\Microsoft\SystemCertificates

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ___SD C:\Users\De*****\AppData\Roaming\Microsoft\Protect

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ___SD C:\Users\De*****\AppData\Roaming\Microsoft\Crypto

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ___RD C:\Users\De*****\OneDrive

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ___RD C:\Users\De*****\3D Objects

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Windows

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Vault

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Roaming\Microsoft\Network

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Local\VirtualStore

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Local\Publishers

2026-04-30 08:11 - 2026-04-30 08:11 - 000000000 ____D C:\Users\De*****\AppData\Local\ConnectedDevicesPlatform

2026-04-27 15:55 - 2026-04-27 15:55 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3912185912-3826206352-237317771-1001

2026-04-27 15:55 - 2026-04-27 15:55 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3912185912-3826206352-237317771-1001

2026-04-27 15:55 - 2026-04-27 15:55 - 000000000 ____D C:\ProgramData\Microsoft OneDrive

2026-04-27 15:54 - 2026-07-04 21:06 - 000109304 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteDownloadAssistant.exe

2026-04-27 15:53 - 2026-04-30 08:11 - 000000000 __RHD C:\Users\Public\AccountPictures

2026-04-27 13:09 - 2026-04-30 10:51 - 000000000 ____D C:\Windows\Panther

2026-04-27 12:16 - 2026-06-30 21:06 - 001622274 _____ C:\Windows\system32\PerfStringBackup.INI

2026-04-27 12:15 - 2026-07-04 21:06 - 000000000 ____D C:\ProgramData\NVIDIA

2026-04-27 12:15 - 2026-05-24 00:26 - 000000000 ____D C:\ProgramData\NVIDIA Corporation

2026-04-27 12:15 - 2026-05-11 21:07 - 000000000 ____D C:\ProgramData\Packages

2026-04-27 12:15 - 2026-04-30 08:27 - 000000000 ____D C:\Program Files\NVIDIA Corporation

2026-04-27 12:15 - 2020-07-19 19:54 - 001163984 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtCOM64.dll

2026-04-27 12:15 - 2020-07-19 19:54 - 001090784 _____ (Realtek Semiconductor) C:\Windows\system32\RtkAudUService64.exe

2026-04-27 12:15 - 2020-07-19 19:54 - 000853520 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64U.dll

2026-04-27 12:15 - 2020-07-19 19:54 - 000481576 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll

2026-04-27 12:15 - 2020-07-19 19:54 - 000232904 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Videos

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Musik

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Public\Documents\Eigene Bilder

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Vorlagen

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Startmenü

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Netzwerkumgebung

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Lokale Einstellungen

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Eigene Dateien

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Druckumgebung

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Videos

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Musik

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Documents\Eigene Bilder

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\AppData\Local\Verlauf

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Users\Default\Anwendungsdaten

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Programme

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\ProgramData\Vorlagen

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\ProgramData\Startmenü

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\ProgramData\Microsoft\Windows\Start Menu\Programme

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\ProgramData\Dokumente

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\ProgramData\Anwendungsdaten

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Program Files\Gemeinsame Dateien

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 _SHDL C:\Dokumente und Einstellungen

2026-04-27 12:10 - 2026-04-27 12:10 - 000000000 ____D C:\Windows\CSC

2026-04-27 12:09 - 2026-07-04 21:07 - 000002442 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2026-04-27 12:09 - 2026-07-04 21:06 - 000926512 _____ C:\Windows\system32\wpbbin.exe

2026-04-27 12:09 - 2026-07-04 21:06 - 000898808 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Windows\system32\GigabyteUpdateService.exe

2026-04-27 12:09 - 2026-07-04 21:06 - 000008192 ___SH C:\DumpStack.log.tmp

2026-04-27 12:09 - 2026-07-04 21:06 - 000000006 ____H C:\Windows\Tasks\SA.DAT

2026-04-27 12:09 - 2026-07-03 22:17 - 000000000 ____D C:\Windows\system32\SleepStudy

2026-04-27 12:09 - 2026-06-20 20:34 - 000003756 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2026-04-27 12:09 - 2026-06-20 20:34 - 000003630 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2026-04-27 12:09 - 2026-06-10 07:54 - 000000000 ____D C:\Windows\system32\Drivers\wd

2026-04-27 12:09 - 2026-05-16 18:22 - 000527952 _____ C:\Windows\system32\FNTCACHE.DAT

2026-04-27 12:09 - 2026-04-27 12:09 - 000000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdFs_01_11_00.Wdf

2026-04-27 12:09 - 2026-04-27 12:09 - 000000000 ____D C:\Windows\ServiceProfiles
 

==================== Drei Monate (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2026-07-04 21:11 - 2023-12-04 04:56 - 000000000 ____D C:\Windows\SystemTemp

2026-07-04 21:09 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP

2026-07-04 21:09 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF

2026-07-04 21:07 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps

2026-07-04 21:07 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness

2026-07-04 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState

2026-07-04 21:06 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2026-07-04 21:06 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI

2026-06-30 21:06 - 2019-12-07 16:51 - 000701762 _____ C:\Windows\system32\perfh007.dat

2026-06-30 21:06 - 2019-12-07 16:51 - 000141266 _____ C:\Windows\system32\perfc007.dat

2026-06-12 00:41 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2026-05-11 21:22 - 2026-05-11 21:22 - 000000199 _____ () C:\Users\De*****\AppData\Roaming\DESKTOP-7N9OIEK.MTBF.txt

2026-06-11 20:10 - 2026-06-11 20:11 - 000008300 _____ () C:\Users\De*****\AppData\Local\krita-sysinfo.log

2026-06-11 20:10 - 2026-06-11 20:51 - 000000868 _____ () C:\Users\De*****\AppData\Local\krita.log

2026-06-11 20:51 - 2026-06-11 20:51 - 000000039 _____ () C:\Users\De*****\AppData\Local\kritadisplayrc

2026-06-11 20:10 - 2026-06-11 20:51 - 000003213 _____ () C:\Users\De*****\AppData\Local\kritarc

2026-05-17 10:49 - 2026-05-17 10:49 - 000001565 _____ () C:\Users\De*****\AppData\Local\recently-used.xbel
 

==================== SigCheckExt =========================
 

2025-05-08 08:22 - 2025-05-08 08:22 - 000438272 _____ (Open-Shell) C:\Windows\system32\StartMenuHelper64.dll

2003-03-18 19:05 - 2003-03-18 19:05 - 000089088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\atl71.dll

2003-03-18 21:20 - 2003-03-18 21:20 - 001060864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71.dll

2003-03-18 21:12 - 2003-03-18 21:12 - 001047552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfc71u.dll

2003-03-18 20:14 - 2003-03-18 20:14 - 000499712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp71.dll

2003-02-21 04:42 - 2003-02-21 04:42 - 000348160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr71.dll

2025-05-08 08:29 - 2025-05-08 08:29 - 000363008 _____ (Open-Shell) C:\Windows\SysWOW64\StartMenuHelper32.dll

2026-06-25 21:24 - 2026-06-25 21:24 - 109704704 _____ (NovusTheory) C:\Users\De*****\Downloads\2.0.5.exe

2026-07-04 21:11 - 2026-07-04 21:11 - 002448896 _____ (Farbar) C:\Users\De*****\Downloads\FRST64.exe

2026-06-28 01:41 - 2026-06-28 01:41 - 025594304 _____ (NowPlayingToFile) C:\Users\De*****\Downloads\NowPlayingToFile.exe

2026-06-12 09:43 - 2026-06-12 09:43 - 016347143 _____ (GuinpinSoft inc) C:\Users\De*****\Downloads\Setup_MakeMKV_v1.18.3(1).exe

2026-05-01 16:13 - 2026-05-01 16:13 - 016347143 _____ (GuinpinSoft inc) C:\Users\De*****\Downloads\Setup_MakeMKV_v1.18.3.exe
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 
 

==================== BCD ================================
 

Start-Manager für Firmware

--------------------------

Bezeichner              {fwbootmgr}

displayorder            {bootmgr}

                        {dc1685da-445a-11f1-9f59-806e6f6e6963}

                        {dc1685db-445a-11f1-9f59-806e6f6e6963}

                        {f7ba0381-51ea-11f1-9f62-806e6f6e6963}

                        {5a7afae7-4229-11f1-be94-a4446879e083}

timeout                 1
 

Windows-Start-Manager

---------------------

Bezeichner              {bootmgr}

device                  partition=\Device\HarddiskVolume5

path                    \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI

description             Windows Boot Manager

locale                  de-DE

inherit                 {globalsettings}

default                 {current}

resumeobject            {5a7afaea-4229-11f1-be94-a4446879e083}

displayorder            {current}

toolsdisplayorder       {memdiag}

timeout                 30
 

Firmwareanwendung (101fffff)

----------------------------

Bezeichner              {5a7afae7-4229-11f1-be94-a4446879e083}

description             WD_BLACK SN7100 2TB
 

Firmwareanwendung (101fffff)

----------------------------

Bezeichner              {dc1685da-445a-11f1-9f59-806e6f6e6963}

device                  partition=\Device\HarddiskVolume1

path                    \EFI\MICROSOFT\BOOT\BOOTMGFW.EFI

description             Windows Boot Manager
 

Firmwareanwendung (101fffff)

----------------------------

Bezeichner              {dc1685db-445a-11f1-9f59-806e6f6e6963}

description             WD_BLACK SN750 SE NVMe 1TB
 

Firmwareanwendung (101fffff)

----------------------------

Bezeichner              {f7ba0381-51ea-11f1-9f62-806e6f6e6963}

description             WD Elements 2621 1034
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {current}

device                  partition=C:

path                    \Windows\system32\winload.efi

description             Windows 10

locale                  de-DE

inherit                 {bootloadersettings}

recoverysequence        {5a7afaec-4229-11f1-be94-a4446879e083}

displaymessageoverride  Recovery

recoveryenabled         Yes

isolatedcontext         Yes

allowedinmemorysettings 0x15000075

osdevice                partition=C:

systemroot              \Windows

resumeobject            {5a7afaea-4229-11f1-be94-a4446879e083}

nx                      OptIn

bootmenupolicy          Standard
 

Windows-Startladeprogramm

-------------------------

Bezeichner              {5a7afaec-4229-11f1-be94-a4446879e083}

device                  ramdisk=[\Device\HarddiskVolume8]\Recovery\WindowsRE\Winre.wim,{5a7afaed-4229-11f1-be94-a4446879e083}

path                    \windows\system32\winload.efi

description             Windows Recovery Environment

locale                  de-de

inherit                 {bootloadersettings}

displaymessage          Recovery

osdevice                ramdisk=[\Device\HarddiskVolume8]\Recovery\WindowsRE\Winre.wim,{5a7afaed-4229-11f1-be94-a4446879e083}

systemroot              \windows

nx                      OptIn

bootmenupolicy          Standard

winpe                   Yes
 

Wiederaufnahme aus dem Ruhezustand

----------------------------------

Bezeichner              {5a7afaea-4229-11f1-be94-a4446879e083}

device                  partition=C:

path                    \Windows\system32\winresume.efi

description             Windows Resume Application

locale                  de-DE

inherit                 {resumeloadersettings}

recoverysequence        {5a7afaec-4229-11f1-be94-a4446879e083}

recoveryenabled         Yes

isolatedcontext         Yes

allowedinmemorysettings 0x15000075

filedevice              partition=C:

filepath                \hiberfil.sys

bootmenupolicy          Standard

debugoptionenabled      No
 

Windows-Speichertestprogramm

----------------------------

Bezeichner              {memdiag}

device                  partition=\Device\HarddiskVolume5

path                    \EFI\Microsoft\Boot\memtest.efi

description             Windows-Speicherdiagnose

locale                  de-DE

inherit                 {globalsettings}

badmemoryaccess         Yes
 

EMS-Einstellungen

-----------------

Bezeichner              {emssettings}

bootems                 No
 

Debuggereinstellungen

---------------------

Bezeichner              {dbgsettings}

debugtype               Local
 

RAM-Defekte

-----------

Bezeichner              {badmemory}
 

Globale Einstellungen

---------------------

Bezeichner              {globalsettings}

inherit                 {dbgsettings}

                        {emssettings}

                        {badmemory}
 

Startladeprogramm-Einstellungen

-------------------------------

Bezeichner              {bootloadersettings}

inherit                 {globalsettings}

                        {hypervisorsettings}
 

Hypervisoreinstellungen

-----------------------

Bezeichner              {hypervisorsettings}

hypervisordebugtype     Serial

hypervisordebugport     1

hypervisorbaudrate      115200
 

Einstellungen zur Ladeprogrammfortsetzung

-----------------------------------------

Bezeichner              {resumeloadersettings}

inherit                 {globalsettings}
 

Geräteoptionen

--------------

Bezeichner              {5a7afaed-4229-11f1-be94-a4446879e083}

description             Windows Recovery

ramdisksdidevice        partition=\Device\HarddiskVolume8

ramdisksdipath          \Recovery\WindowsRE\boot.sdi
 

==================== Ende von FRST.txt ========================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-07-2026

durchgeführt von De***** (04-07-2026 21:14:03)

Gestartet von C:\Users\De*****\Downloads

Microsoft Windows 10 Pro Version 22H2 19045.6466 (X64) (2026-04-27 10:10:37)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3912185912-3826206352-237317771-500 - Administrators - Disabled)

claud (S-1-5-21-3912185912-3826206352-237317771-1003 - Limited - Disabled)

De***** (S-1-5-21-3912185912-3826206352-237317771-1004 - Administrators - Enabled) => C:\Users\De*****

DefaultAccount (S-1-5-21-3912185912-3826206352-237317771-503 - Limited - Disabled)

Gast (S-1-5-21-3912185912-3826206352-237317771-501 - Limited - Disabled)

selin (S-1-5-21-3912185912-3826206352-237317771-1002 - Limited - Disabled)

WDAGUtilityAccount (S-1-5-21-3912185912-3826206352-237317771-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Norton 360 (Enabled - Up to date) {343E1860-FD6F-AB8D-96E4-A5006AA98D2C}

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: Avast Antivirus (Disabled - Out of date) {EB19B86E-3998-C706-90EF-92B41EB091AF}

FW: Norton 360 (Enabled) {0C059945-B700-AAD5-BDBB-0C35947ACA57}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Photoshop Lightroom 5 64-bit (HKLM\...\{6C1A010F-9108-4162-A26F-9FEC4AC0F0F0}) (Version: 5.0.1 - Adobe)

AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 2.3.1.0 - GIGABYTE Technology Co.,Inc.)

Avast One (HKLM\...\Avast Suite) (Version: 26.6.11052.894 - Gen Digital Inc.)

Corsair Device Control Service (HKLM\...\{7DABA693-C23D-4B86-B506-3B941CEDF1FF}) (Version: 1.9.9 - Corsair) Hidden

Corsair Device Control Service Bundle (HKLM-x32\...\{dffe1772-7f42-4dd2-ae7c-f07b34d720be}) (Version: 1.9.9 - Corsair)

Dazzle Video Capture DVC100 X64 Driver 1.09 (HKLM-x32\...\{FB4B9EB9-68B2-4C42-8C38-B65F8FE5A5CA}) (Version: 1.09.0000 - Pinnacle) Hidden

DazzleBDAX64 (HKLM-x32\...\{F28AD4BC-AE49-4735-9E50-64212BD2083B}) (Version: 1.06.0000 - Corel) Hidden

Discord (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Discord) (Version: 1.0.9243 - Discord Inc.)

Elgato Control Center (HKLM\...\{7C4F166A-6F89-4E48-851E-F7983793C7A1}) (Version: 1.8.2.714 - Corsair Memory, Inc.)

Elgato Stream Deck (HKLM\...\{C7AF453E-819C-487D-AD09-CDD3FF83BCB7}) (Version: 7.4.2.22730 - Corsair Memory, Inc.)

ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden

ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden

ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden

ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden

ENE_DRAM_RGB_AIO (HKLM\...\{DFAD06E0-C5FC-4154-8F95-65871D5AB5BF}) (Version: 1.0.23.1 - Ene Tech.) Hidden

ENE_DRAM_RGB_AIO (HKLM-x32\...\{3a0741bc-3391-41cd-81aa-0122796a0648}) (Version: 1.0.23.1 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.17.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{6a0e18d7-c33b-4c8c-aa31-4beedf5956c6}) (Version: 1.0.17.0 - ENE TECHNOLOGY INC.) Hidden

ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden

ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden

ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden

ENE_MousePad_HAL (HKLM-x32\...\{bf256b46-8ff7-48be-ab7f-5661e9a0651f}) (Version: 1.0.1.8 - ENE TECHNOLOGY INC.) Hidden

ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden

ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM\...\{49A4D983-CF26-4648-ABA6-B389B878E763}) (Version: 1.3.176.0 - Epic Games, Inc.)

Epic Online Services (HKLM-x32\...\{E8B44A12-7A40-43A7-928E-8DA376AFA1B7}) (Version: 5.2.0 - Epic Games, Inc.)

GBT_MB_Update (HKLM\...\GBT_MB_Update) (Version: 26.01.14.01 - GIGABYTE)

GBT_RGB_Sync_Control 26.03.25.01 (HKLM\...\GBT_RGB_Sync_Control) (Version: 26.03.25.01 - GIGABYTE)

GBT_rgbMotherboard_UC 25.12.23.01 (HKLM\...\GBT_rgbMotherboard_UC) (Version: 25.12.23.01 - GIGABYTE)

GBT_VGA 26.03.10.01 (HKLM\...\GBT_VGA) (Version: 26.03.10.01 - GIGABYTE)

GIGABYTE Control Center 26.03.26.01 (HKLM\...\GIGABYTE Control Center) (Version: 26.03.26.01 - GIGABYTE)

GIGABYTE Performance Library (HKLM\...\MBEasyTune) (Version: 26.03.19.01 - GIGABYTE)

GIGABYTE Storage Library (HKLM\...\MBStorage) (Version: 26.03.30.01 - GIGABYTE)

GIMP 3.2.4 (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\GIMP-3_is1) (Version: 3.2.4.0 - The GIMP Team)

Hue Sync (HKLM\...\{C6402782-99C2-4495-B853-CD3A4976D582}) (Version: 1.13.1.83 - Signify Netherlands B.V.)

Iriun Webcam (HKLM-x32\...\IriunWebcam_is1) (Version:  - )

JDownloader 2 (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\jdownloader2) (Version: 2.0.260331 - AppWork GmbH)

Last.fm Desktop Scrobbler (HKLM-x32\...\{B13709CB-85AE-4F45-BFF9-2CB2B7A78F83}) (Version: 3.1.29 - Last.fm)

Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: 2026.4.919028 - Logitech)

MakeMKV v1.18.3 (HKLM-x32\...\MakeMKV) (Version: v1.18.3 - GuinpinSoft inc)

Microsoft .NET Host - 10.0.8 (x86) (HKLM-x32\...\{0F9FB11C-AD3C-4F55-B657-364489CAC99F}) (Version: 80.32.52183 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 10.0.8 (x86) (HKLM-x32\...\{0D5C8AE5-439B-4D3F-82CE-A0D14D9C4EF7}) (Version: 80.32.52183 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 10.0.8 (x86) (HKLM-x32\...\{CAE576AC-3499-4735-B4F8-D82B2D670BA1}) (Version: 80.32.52183 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 150.0.4078.48 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 149.0.4022.98 - Microsoft Corporation) Hidden

Microsoft Office Standard 2019 - de-de (HKLM\...\Standard2019Volume - de-de) (Version: 16.0.10401.20025 - Microsoft Corporation)

Microsoft OneDrive (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\OneDriveSetup.exe) (Version: 26.106.0603.0003 - Microsoft Corporation)

Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 10.0.8 (x86) (HKLM-x32\...\{B0AD693F-9836-4CEF-B4FD-CFEACD8290B5}) (Version: 80.32.52183 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime 10.0.8 (x86) (HKLM-x32\...\{DA4D6331-BCC8-4AEC-9120-498589CB7983}) (Version: 10.0.8.50000 - Microsoft Corporation)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 152.0.4 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 150.0.1 - Mozilla)

MultiCam Capture 2.0 Lite (HKLM\...\{8F281193-9234-4F08-9624-42B1AF08B999}) (Version: 2.1.0.138 - Corel Corporation) Hidden

MyDVD Content Pack 1 (HKLM-x32\...\{ADCF7AE3-8E36-4B80-9460-66B74B56927F}) (Version: 1.00.0000 - Corel Corporation)

MyDVD Content Pack 2 (HKLM-x32\...\{B9987701-F119-46FA-BFF1-A8B593BFAF9E}) (Version: 1.00.0000 - Corel Corporation)

Norton 360 (HKLM\...\Norton 360) (Version: 26.6.11052.2582 - Gen Digital Inc.)

Norton Private Browser (HKLM-x32\...\Norton Private Browser) (Version: 148.0.34771.218 - Die Norton Private Browser-Autoren)

Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.9.6.4 - Notepad++ Team)

NVIDIA App 11.0.7.237 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NvApp) (Version: 11.0.7.237 - NVIDIA Corporation)

NVIDIA FrameView SDK 1.7.12227.37421622 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.7.12227.37421622 - NVIDIA Corporation)

NVIDIA Grafiktreiber 596.36 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 596.36 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.4.5.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.4.5.7 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.23.1019 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.23.1019 - NVIDIA Corporation)

OBS Studio (HKLM-x32\...\OBS Studio) (Version: 32.1.2 - OBS Project)

Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.10401.20025 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.10401.20025 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.10401.20025 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.10401.20025 - Microsoft Corporation) Hidden

Open-Shell (HKLM\...\{828B8D4B-7BC6-47C7-81CD-9B5CC579C447}) (Version: 4.4.196 - The Open-Shell Team)

Opera GX Stable 132.0.5905.110 (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\Opera GX 132.0.5905.110) (Version: 132.0.5905.110 - Opera Software)

Patriot Viper M2 SSD RGB (HKLM\...\{8B4C0A3D-C135-4E1F-98D8-3926494B4D61}) (Version: 1.1.0.3 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{6e0eff60-c502-43bb-8f56-360ca07e73d9}) (Version: 1.1.0.3 - Patriot Memory) Hidden

Pinnacle 3D Title Editor (HKLM\...\{7A863778-80BD-420B-B50B-BF3DD62DBC8A}) (Version: 1.0.10.302 - Corel Corporation) Hidden

Pinnacle Creative Pack Volume 1 (HKLM\...\{9E0ADCB8-A77F-43FD-A723-6A22BDDE7742}) (Version: 11.0 - Corel Corporation)

Pinnacle Hollywood FX Volumes 1-3 (HKLM\...\{BAF923F8-84EF-48D6-BB4F-5497D39D9EB3}) (Version: 10.0 - Corel Corporation)

Pinnacle MyDVD (HKLM\...\{C8F119D0-8BB5-4121-83CE-C13FC63B86CA}) (Version: 3.0.304.0 - Ihr Firmenname) Hidden

Pinnacle MyDVD (HKLM-x32\...\{A11758A5-E546-4B9D-906A-92F58BD32506}) (Version: 3.0 - Corel) Hidden

Pinnacle Premium Pack Volumes 1-2 (HKLM-x32\...\{AD9FEAC6-2C4D-45F9-968B-EA79DC7FBB29}) (Version: 10.0 - Corel Corporation)

Pinnacle ScoreFitter Volumes 1-2 (HKLM\...\{3627D5D2-A197-4059-AAF7-333D3E345B32}) (Version: 10.0 - Corel Corporation)

Pinnacle Studio - Standard Content Pack (HKLM\...\{B17FBF94-EF8A-4CA2-8281-EB0A729EB75C}) (Version: 26 - Corel Corporation)

Pinnacle Studio 26 (HKLM\...\{CB208FA7-D241-45B2-83E0-DD119C9FCAC5}) (Version: 26.2.0.298 - Corel Corporation)

Pinnacle Title Extreme (HKLM\...\{3C993EC4-A1EC-4B38-8D3F-96E089FB6182}) (Version: 10.0 - Corel Corporation)

RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.24.1202.1 - Gigabyte)

Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.106.2879 - Rockstar Games)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)

Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden

Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden

VLC media player (HKLM\...\VLC media player) (Version: 3.0.23 - VideoLAN)

Voicemod (HKLM\...\{FE519A29-8B15-47C4-BCD6-A513277DC26F}_is1) (Version: 1.6.13 - Voicemod Inc., Sucursal en España)

WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden

WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden

WinRAR 7.22 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.22.0 - win.rar GmbH)

YouTube Music Desktop App (HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\youtube_music_desktop_app) (Version: 2.0.11 - NovusTheory)
 

Packages:

=========

Hue Sync -> C:\Program Files\Hue Sync [2026-05-11] (Signify Netherlands B.V.) [Startup Task]

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2026-04-30] (NVIDIA Corp.)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.1.137.0_x64__dt26b99r8h8gj [2026-04-30] (Realtek Semiconductor Corp)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3912185912-3826206352-237317771-1004_Classes\CLSID\{e13cc75c-3ffc-4561-9482-33bbaa8b710c}\localserver32 -> C:\Program Files\Elgato\ControlCenter\ControlCenter.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)

ShellIconOverlayIdentifiers: [001BUOverlayProtected] -> {9C11454A-4B5C-4586-B0BB-E51BB6033668} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [002BUOverlayPending] -> {5A4597A9-CC87-4ED2-A7E5-3BC62CF54901} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [003BUOverlayExcluded] -> {42DE06EE-09E4-4808-A8AA-F63B1D3F6CE5} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [00nll] -> {472083B2-C522-11CF-8763-00608CC02F24} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

ShellIconOverlayIdentifiers-x32: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers-x32: [00nll] -> {472083B2-C522-11CF-8763-00608CC02F24} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

ContextMenuHandlers1: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers1: [norton] -> {472083B2-C522-11CF-8763-00608CC02F24} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2026-05-01] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2026-05-01] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers3: [00asw] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers3: [00nll] -> {472083B2-C522-11CF-8763-00608CC02F24} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers5: [NvAppDesktopContext] -> {F2E8B4A1-9C7D-4F6E-B3A5-8D2C1F4E9B7A} => C:\Program Files\NVIDIA Corporation\NVIDIA App\NvCpl\nvui.dll [2026-04-07] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_67995ceab8993b08\nvshext.dll [2026-04-23] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\Avast Software\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers6: [norton] -> {472083B2-C522-11CF-8763-00608CC02F24} => C:\Program Files\Norton\Suite\ashShell.dll [2026-07-04] (Gen Digital Inc. -> Gen Digital Inc.)

ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\Windows\system32\StartMenuHelper64.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2026-05-01] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2026-05-01] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [vidc.mjpg] => pvmjpgx40.dll

HKLM\...\Drivers32: [vidc.pDAD] => C:\Windows\SysWOW64\prodad-codec.dll [506312 2021-04-12] (proDAD GmbH -> proDAD GmbH)
 

==================== Verknüpfungen & WMI ========================
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2026-05-15 19:48 - 2019-08-05 13:26 - 000025088 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\BSL430.dll

2026-05-15 19:48 - 2019-08-05 13:26 - 000225792 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvFireware.dll

2026-05-15 19:48 - 2022-04-01 15:48 - 000045056 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvIntelI2C.dll

2026-05-15 19:48 - 2021-05-04 11:39 - 000185344 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\ITEDriver.dll

2026-05-11 21:27 - 2026-03-17 12:44 - 000086016 ____N () [Datei ist nicht signiert] C:\Users\De*****\AppData\Roaming\Elgato\StreamDeck\Plugins\com.elgato.discord.sdPlugin\z.dll

2026-05-11 21:06 - 2026-05-11 21:06 - 000049664 _____ () [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_64\ControlCentdba37129#\10ea5854cafa7b86c0c4d8e1623957d0\ControlCenter.XmlSerializers.ni.dll

2026-05-11 21:06 - 2026-05-11 21:06 - 002301952 _____ (deniszykov) [Datei ist nicht signiert] C:\Windows\assembly\NativeImages_v4.0.30319_64\deniszykov.615d72e4#\28a429c507507671a8efbfb516c74769\deniszykov.WebSocketListener.ni.dll

2026-05-15 19:48 - 2021-12-22 15:15 - 000732672 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvComW.dll

2026-05-15 19:48 - 2019-08-05 13:26 - 000013312 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvCrypt.dll

2026-05-15 19:48 - 2022-06-23 10:13 - 000524800 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GVDisplay.dll

2026-05-15 19:48 - 2020-11-05 14:16 - 000268800 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvIllumLib.dll

2026-05-15 19:48 - 2019-08-05 13:26 - 000218112 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvOrderLib.dll

2026-05-11 21:00 - 2026-05-11 21:00 - 001093120 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL

2026-05-11 21:00 - 2026-05-11 21:00 - 000065536 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Windows\WinSxS\x86_microsoft.vc80.mfcloc_1fc8b3b9a1e18e3b_8.0.50727.762_none_43efccf17831d131\MFC80DEU.DLL

2025-05-08 08:21 - 2025-05-08 08:21 - 002777600 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenuDLL.dll

2026-05-15 19:48 - 2019-08-27 13:22 - 000224256 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvAutoUpdate.dll

2026-05-15 19:48 - 2022-05-17 17:30 - 000436736 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvLedLib.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\aswSP.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\nllSP.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\aswSP.sys => ""="Driver"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\nllSP.sys => ""="Driver"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
 

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer64.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Open-Shell\ClassicExplorer32.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer64.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Open-Shell\ClassicExplorer32.dll [2025-05-08] (Open-Shell) [Datei ist nicht signiert]

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-12] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 11:14 - 2019-12-07 11:12 - 000000824 _____ C:\Windows\system32\drivers\etc\hosts
 

==================== Network ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

DNS Servers: 192.168.1.1

 ist aktiviert.
 

Network Binding:

=============

Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys

Ethernet: Realtek PCIe GbE Family Controller -> rt640x64.sys
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\Control Panel\Desktop\\Wallpaper -> C:\Users\De*****\Pictures\yotei_wallpaper.png

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )

HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A734CDB21F65BACD27474256D84E27D6"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "Opera GX Stable"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "Opera GX Browser Assistant"

HKU\S-1-5-21-3912185912-3826206352-237317771-1004\...\StartupApproved\Run: => "VoicemodV3"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{696F2D6C-4311-410F-B9F1-99DB6DB42207}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{0854DA47-90E9-4D54-959E-3F9FA3B1E945}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{BEF85657-E578-4D5F-852D-C07BD2870558}] => (Allow) C:\Program Files\Elgato\ControlCenter\ControlCenter.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)

FirewallRules: [TCP Query User{7BC350D1-1823-4394-8D05-B90806DEBCB1}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)

FirewallRules: [UDP Query User{311D4903-ABC2-47A2-BBE4-EFA8940578D7}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)

FirewallRules: [{9C3F5053-CD7E-4FAD-B110-83B5CC23D1A8}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\RM.exe (Corel Corporation -> Pinnacle)

FirewallRules: [{CEFDD12B-7FAE-4917-B486-792F514FF6CB}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\RM.exe (Corel Corporation -> Pinnacle)

FirewallRules: [{8A1F47D8-ACE6-40E6-8D39-1A04463A057B}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\NGStudio.exe () <==== ACHTUNG [Null Byte Datei/Ordner]

FirewallRules: [{2DEA488B-589C-438B-A2F3-59B0273D5DA8}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\NGStudio.exe () <==== ACHTUNG [Null Byte Datei/Ordner]

FirewallRules: [{12C38129-15A3-4FC9-AE25-0F50F32A069B}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\UMI.exe (Corel Corporation -> Pinnacle)

FirewallRules: [{A8834EFF-522C-46C8-BCF4-9091665DF3C3}] => (Allow) C:\Program Files\Pinnacle\Studio 26\programs\UMI.exe (Corel Corporation -> Pinnacle)

FirewallRules: [TCP Query User{E6E5DDDE-E6CC-4DB5-ADA0-37E054B87AE8}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> )

FirewallRules: [UDP Query User{DFABD219-5C9E-4CB4-97DF-D51AACEABCDF}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> )

FirewallRules: [{741FB140-61E0-4296-B075-924A343866C7}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{ADDC789D-3361-40F0-AA77-EC8D94A3941D}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{364F069F-117C-44F8-BBC6-25F8D64001BE}] => (Allow) C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)

FirewallRules: [{2971C988-59E6-4121-BA5C-699736C85BC3}] => (Allow) C:\Program Files\obs-studio\bin\64bit\obs64.exe (OBS Project, LLC -> OBS)

FirewallRules: [{3F8F98B2-F135-41CF-A159-2B1D1D39A237}] => (Allow) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)

FirewallRules: [TCP Query User{B6401BCA-6D56-49D8-AC1B-8CA5495E2045}C:\users\De*****\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\De*****\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [UDP Query User{EE7B8624-FF25-4C03-993B-F90F4C435EBE}C:\users\De*****\appdata\local\programs\opera gx\opera.exe] => (Allow) C:\users\De*****\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)

FirewallRules: [TCP Query User{AF58695F-7EF0-41D7-81A0-6CEA9FC2C1F6}C:\program files\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [UDP Query User{47E70EC5-20A4-4E07-A12D-915973EB8631}C:\program files\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Allow) C:\program files\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)

FirewallRules: [{D29C7FDA-1F90-4852-AA2B-714075E89E6A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{F977251F-E3B0-496A-AE2A-26A298448AD7}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{F8FAFADB-05D3-4F5A-BE38-743C7F7BD09C}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{B909EECD-E7AC-4222-8A93-0AAC0D5DC972}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)

FirewallRules: [{5AB89A66-A2EA-49D9-871D-1A0E44A5F0AC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead The Telltale Definitive Series\WDC.exe (Telltale Games) [Datei ist nicht signiert]

FirewallRules: [{6F562F79-4433-4C29-8065-6FDA5544120A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Walking Dead The Telltale Definitive Series\WDC.exe (Telltale Games) [Datei ist nicht signiert]

FirewallRules: [{2FDDBF44-01BA-4366-97D1-7264667C8B0F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Strange 2\lis2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [{A3A1F8F8-B780-49FE-B6AF-095EE248201C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Life is Strange 2\lis2\Binaries\Win64\LIS2-Win64-Shipping.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [{D156EF6A-6DA5-405E-B830-6BF518FCAB82}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MECCHA CHAMELEON\PenguinHotel.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> Epic Games, Inc.) [Datei ist nicht signiert]

FirewallRules: [{14783131-3FB1-4D74-BA03-9500E69E85AE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\MECCHA CHAMELEON\PenguinHotel.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> Epic Games, Inc.) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{DDC6F3DD-1A64-4F9B-80A7-03404A052360}C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{6CB66F7D-93FF-488B-AB7B-786D8918334E}C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\meccha chameleon\chameleon\binaries\win64\penguinhotel-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]

FirewallRules: [{64544FBE-4500-4236-A5FA-08A4ED80C739}] => (Allow) C:\Program Files (x86)\Iriun Webcam\IriunWebcam.exe (IriunWebcam) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{4215F917-9B59-4C2B-B46A-D7417C5ADC35}C:\users\De*****\appdata\local\youtube_music_desktop_app\app-2.0.11\youtube-music-desktop-app.exe] => (Allow) C:\users\De*****\appdata\local\youtube_music_desktop_app\app-2.0.11\youtube-music-desktop-app.exe (NovusTheory) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{DD3569A7-F58C-438F-B87B-CC6943F273ED}C:\users\De*****\appdata\local\youtube_music_desktop_app\app-2.0.11\youtube-music-desktop-app.exe] => (Allow) C:\users\De*****\appdata\local\youtube_music_desktop_app\app-2.0.11\youtube-music-desktop-app.exe (NovusTheory) [Datei ist nicht signiert]

FirewallRules: [{D2B9EA81-077C-4C20-B83B-5557A88832A0}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)

FirewallRules: [{31E8F000-B014-40F4-B04C-34C95C28BF1C}] => (Allow) C:\Users\De*****\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)

FirewallRules: [{3338592C-679F-45BC-8C1C-38AF996CBF5A}] => (Allow) C:\Program Files\Voicemod V3\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc.)

FirewallRules: [{665905E3-B126-4E82-9769-BB94257A38E7}] => (Allow) C:\Users\De*****\AppData\Local\VoicemodV3\app\last\Voicemod.exe (VOICEMOD, INC. SUCURSAL EN ESPAÑA -> Voicemod Inc., Sucursal en España)

FirewallRules: [{7826FC77-363E-4FFA-BF88-F91B59214130}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{B9AAF61D-2343-4EBD-9988-AFB3ADEED071}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{AD1B509C-5E1A-4C6A-81FB-61ED039263D3}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{41109D83-F279-4889-BFA0-3453C02CFC72}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2606.60031.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{EF22B69E-4169-4512-A7B7-D5D27EB89849}] => (Allow) C:\Program Files\Norton\Suite\NortonUI.exe (Gen Digital Inc. -> Gen Digital Inc.)

FirewallRules: [{976FE628-1B14-4875-8A50-45EF09B796B5}] => (Allow) C:\Program Files\Norton\Suite\NortonUI.exe (Gen Digital Inc. -> Gen Digital Inc.)

FirewallRules: [{11E4AB33-EF47-4DCD-AE2B-8D4267F8DEC8}] => (Allow) C:\Program Files\Norton\Browser\Application\NortonBrowser.exe (Gen Digital Inc. -> Gen Digital Inc.)

FirewallRules: [{8C491F9E-3B99-426F-9CB4-C538B9820D6D}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)

FirewallRules: [{C4D17D6F-BE16-4CFE-BD18-D394BC5A729C}] => (Allow) C:\Program Files\Avast Software\Suite\AvastUI.exe (Gen Digital Inc. -> Gen Digital Inc.)
 

==================== Wiederherstellungspunkte =========================
 

28-06-2026 15:40:27 Geplanter Prüfpunkt
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (07/04/2026 09:07:01 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Last.fm Desktop Scrobbler.exe, Version: 3.1.29.1, Zeitstempel: 0x5be9c779

Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.19041.6093, Zeitstempel: 0xcff64e29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0011f2ed

ID des fehlerhaften Prozesses: 0x175c

Startzeit der fehlerhaften Anwendung: 0x01dd0be8486a8c1d

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll

Berichtskennung: 09a37bf9-7064-418c-98d2-fbe264a4c193

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/04/2026 08:50:17 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Last.fm Desktop Scrobbler.exe, Version: 3.1.29.1, Zeitstempel: 0x5be9c779

Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.19041.6093, Zeitstempel: 0xcff64e29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0011f2ed

ID des fehlerhaften Prozesses: 0x4598

Startzeit der fehlerhaften Anwendung: 0x01dd0be5f1e6c56b

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll

Berichtskennung: 876f523b-f2bf-4479-99e6-6fa9f25d8183

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/03/2026 08:49:38 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Last.fm Desktop Scrobbler.exe, Version: 3.1.29.1, Zeitstempel: 0x5be9c779

Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.19041.6093, Zeitstempel: 0xcff64e29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0011f2ed

ID des fehlerhaften Prozesses: 0x57f8

Startzeit der fehlerhaften Anwendung: 0x01dd0b1cb02ecce4

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll

Berichtskennung: c6c45c5b-6599-4a0d-991c-a15d51ae47ce

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/03/2026 08:40:58 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Last.fm Desktop Scrobbler.exe, Version: 3.1.29.1, Zeitstempel: 0x5be9c779

Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.19041.6093, Zeitstempel: 0xcff64e29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0011f2ed

ID des fehlerhaften Prozesses: 0x13f0

Startzeit der fehlerhaften Anwendung: 0x01dd0ab6e5038118

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll

Berichtskennung: 342076b6-3d37-4f14-a7cd-15fc20edbe82

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/02/2026 03:47:50 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: Last.fm Desktop Scrobbler.exe, Version: 3.1.29.1, Zeitstempel: 0x5be9c779

Name des fehlerhaften Moduls: wmp.dll, Version: 12.0.19041.6093, Zeitstempel: 0xcff64e29

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0011f2ed

ID des fehlerhaften Prozesses: 0x2654

Startzeit der fehlerhaften Anwendung: 0x01dd0a295d03e0d9

Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\Last.fm\Last.fm Desktop Scrobbler\Last.fm Desktop Scrobbler.exe

Pfad des fehlerhaften Moduls: C:\Windows\system32\wmp.dll

Berichtskennung: 8eb998d1-5cba-4509-85f4-8e8ccf5edce4

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/02/2026 07:56:15 AM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: GCC.exe, Version: 25.9.12.1, Zeitstempel: 0xe41d8258

Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.19041.6280, Zeitstempel: 0x56511854

Ausnahmecode: 0xe0434352

Fehleroffset: 0x0000000000025369

ID des fehlerhaften Prozesses: 0x4864

Startzeit der fehlerhaften Anwendung: 0x01dd09e7688ba166

Pfad der fehlerhaften Anwendung: C:\Program Files\GIGABYTE\Control Center\GCC.exe

Pfad des fehlerhaften Moduls: C:\Windows\System32\KERNELBASE.dll

Berichtskennung: a84d3396-ea1f-45c5-b92b-caf26ea7bd03

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (07/02/2026 07:56:15 AM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: GCC.exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: System.Runtime.Remoting.RemotingException
 

Server stack trace: 

   bei System.Runtime.Remoting.Channels.Ipc.IpcPort.Write(Byte[] data, Int32 offset, Int32 size)

   bei System.Runtime.Remoting.Channels.ChunkedMemoryStream.WriteTo(Stream stream)

   bei System.Runtime.Remoting.Channels.Ipc.IpcClientHandler.SendRequest(IMessage msg, ITransportHeaders headers, Stream contentStream)

   bei System.Runtime.Remoting.Channels.Ipc.IpcClientTransportSink.ProcessMessage(IMessage msg, ITransportHeaders requestHeaders, Stream requestStream, ITransportHeaders& responseHeaders, Stream& responseStream)

   bei System.Runtime.Remoting.Channels.BinaryClientFormatterSink.SyncProcessMessage(IMessage msg)

   bei System.Runtime.Remoting.Proxies.RealProxy.HandleReturnMessage(System.Runtime.Remoting.Messaging.IMessage, System.Runtime.Remoting.Messaging.IMessage)

   bei System.Runtime.Remoting.Proxies.RealProxy.PrivateInvoke(System.Runtime.Remoting.Proxies.MessageData ByRef, Int32)

   bei Gigabyte.EnvironmentControl.Common.CoolingDevice.Fan.ISmartGuardianFanControlCoordinateSystem.get_IsSupported()

   bei MB.CPNT.EZTune.Fan.FanGroupPanel.RetrieveGroupNumber(UInt64 ByRef)

   bei MB.CPNT.EZTune.Fan.FanGroupPanel.InitObjects(Boolean ByRef)

   bei MB.CPNT.EZTune.Fan.FanGroupPanel.InitObjectsTriggerByRunningEvent(Boolean, Boolean)

   bei System.Threading.Tasks.Task.Execute()

   bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   bei System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(System.Threading.Tasks.Task)

   bei MB.CPNT.EZTune.Fan.FanGroupPanel+<DelayInitObjs_Tick>d__68.MoveNext()

   bei System.Runtime.ExceptionServices.ExceptionDispatchInfo.Throw()

   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

   bei System.Windows.Threading.DispatcherOperation.InvokeImpl()

   bei MS.Internal.CulturePreservingExecutionContext.CallbackWrapper(System.Object)

   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object)

   bei MS.Internal.CulturePreservingExecutionContext.Run(MS.Internal.CulturePreservingExecutionContext, System.Threading.ContextCallback, System.Object)

   bei System.Windows.Threading.DispatcherOperation.Invoke()

   bei System.Windows.Threading.Dispatcher.ProcessQueue()

   bei System.Windows.Threading.Dispatcher.WndProcHook(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

   bei MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)

   bei MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)

   bei System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)

   bei System.Windows.Threading.ExceptionWrapper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)

   bei System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)

   bei MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)

   bei MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)

   bei System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)

   bei System.Windows.Application.RunDispatcher(System.Object)

   bei System.Windows.Application.RunInternal(System.Windows.Window)

   bei GCC.App.Main()
 

Error: (07/02/2026 07:56:13 AM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 
 

Systemfehler:

=============

Error: (07/04/2026 09:11:28 PM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)

Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.

DeviceAttributes: BaseBoardManufacturer:Gigabyte Technology Co., Ltd.;FirmwareManufacturer:American Megatrends International, LLC.;FirmwareVersion:FC;OEMModelNumber:B550 GAMING X V2;OEMModelBaseBoard:B550 GAMING X V2;OEMModelSystemFamily:B550 MB;OEMManufacturerName:Gigabyte Technology Co., Ltd.;OEMModelSKU:Default string;OSArchitecture:amd64;

BucketId: b0739b840432cfc4c8bffd37c193b0dfd13ce1dd797df5e0dbad06f9a64f43fa

BucketConfidenceLevel: 

UpdateType: 0

HResult: 0
 

Error: (07/04/2026 09:06:01 PM) (Source: Service Control Manager) (EventID: 7043) (User: )

Description: Der Dienst Übermittlungsoptimierung konnte nach dem Empfang eines Preshutdown-Steuerelements nicht richtig heruntergefahren werden.
 

Error: (07/04/2026 09:05:46 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (07/04/2026 09:05:46 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (07/04/2026 08:50:30 PM) (Source: Service Control Manager) (EventID: 7024) (User: )

Description: Der Dienst "Epic Online Services" wurde mit dem folgenden dienstspezifischen Fehler beendet: 

%%78
 

Error: (07/02/2026 07:56:20 AM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (07/02/2026 07:56:20 AM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (07/02/2026 07:56:19 AM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 
 

Windows Defender:

================

Date: 2026-07-03 22:45:34

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Sabsik.EN.A!ml&threatid=2147810995&enterprise=0

Name: Trojan:Script/Sabsik.EN.A!ml

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\Generative\python37.dll

Erkennungsursprung: Lokaler Computer

Erkennungstype: FastPath

Erkennungsquelle: Echtzeitschutz

Benutzer: OPFER\De*****

Prozessname: C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\Generative\Setup.exe

Sicherheitsversion: AV: 1.453.410.0, AS: 1.453.410.0, NIS: 1.453.410.0

Modulversion: AM: 1.1.26050.11, NIS: 1.1.26050.11
 

Date: 2026-07-03 22:41:24

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Sabsik.EN.A!ml&threatid=2147810995&enterprise=0

Name: Trojan:Script/Sabsik.EN.A!ml

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\python37.dll

Erkennungsursprung: Lokaler Computer

Erkennungstype: FastPath

Erkennungsquelle: Echtzeitschutz

Benutzer: OPFER\De*****

Prozessname: C:\Windows\explorer.exe

Sicherheitsversion: AV: 1.453.410.0, AS: 1.453.410.0, NIS: 1.453.410.0

Modulversion: AM: 1.1.26050.11, NIS: 1.1.26050.11
 

Date: 2026-07-03 22:41:16

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Sabsik.EN.A!ml&threatid=2147810995&enterprise=0

Name: Trojan:Script/Sabsik.EN.A!ml

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\python37.dll

Erkennungsursprung: Lokaler Computer

Erkennungstype: FastPath

Erkennungsquelle: Echtzeitschutz

Benutzer: OPFER\De*****

Prozessname: C:\Windows\explorer.exe

Sicherheitsversion: AV: 1.453.410.0, AS: 1.453.410.0, NIS: 1.453.410.0

Modulversion: AM: 1.1.26050.11, NIS: 1.1.26050.11
 

Date: 2026-07-03 22:39:56

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Sabsik.EN.A!ml&threatid=2147810995&enterprise=0

Name: Trojan:Script/Sabsik.EN.A!ml

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\python37.dll

Erkennungsursprung: Lokaler Computer

Erkennungstype: FastPath

Erkennungsquelle: Echtzeitschutz

Benutzer: OPFER\De*****

Prozessname: C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\Setup.exe

Sicherheitsversion: AV: 1.453.410.0, AS: 1.453.410.0, NIS: 1.453.410.0

Modulversion: AM: 1.1.26050.11, NIS: 1.1.26050.11
 

Date: 2026-07-03 22:37:39

Description: 

Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.

Weitere Informationen:

https://go.microsoft.com/fwlink/?linkid=37020&name=Trojan:Script/Sabsik.EN.A!ml&threatid=2147810995&enterprise=0

Name: Trojan:Script/Sabsik.EN.A!ml

Schweregrad: Schwerwiegend

Kategorie: Trojaner

Pfad: file:_C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\python37.dll

Erkennungsursprung: Lokaler Computer

Erkennungstype: FastPath

Erkennungsquelle: Echtzeitschutz

Benutzer: OPFER\De*****

Prozessname: C:\Users\De*****\Desktop\Adobe Photoshop 2026 v27.7 Portable\Sandbox\Adobe Photoshop 2026\roaming\modified\@PROGRAMFILES@\Adobe\Adobe Photoshop 2026\Plug-ins\Setup.exe

Sicherheitsversion: AV: 1.453.410.0, AS: 1.453.410.0, NIS: 1.453.410.0

Modulversion: AM: 1.1.26050.11, NIS: 1.1.26050.11

Event[0]:
 

Date: 2026-07-04 20:59:43

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.453.410.0

Update Source: Microsoft Update-Server

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.26050.11

Fehlercode: 0x8024402c

Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support". 
 

Date: 2026-04-30 08:07:36

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.303.25.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.16400.2

Fehlercode: 0x80072ee7

Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 
 

Date: 2026-04-30 08:07:36

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.303.25.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiSpyware

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.16400.2

Fehlercode: 0x80072ee7

Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 
 

Date: 2026-04-30 08:07:36

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.303.25.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.16400.2

Fehlercode: 0x80072ee7

Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 
 

Date: 2026-04-30 08:07:36

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.303.25.0

Update Source: Microsoft Center zum Schutz vor Schadsoftware

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\Netzwerkdienst

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.16400.2

Fehlercode: 0x80072ee7

Fehlerbeschreibung: Der Servername oder die Serveradresse konnte nicht verarbeitet werden. 
 

CodeIntegrity:

===============

Date: 2026-07-04 21:13:33

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Avast Software\Suite\AvastSvc.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 

Date: 2026-07-04 21:09:57

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Program Files\Norton\Suite\NortonSvc.exe) attempted to load \Device\HarddiskVolume7\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements.
 

Date: 2026-06-27 21:52:12

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Users\De*****\AppData\Local\Discord\app-1.0.9242\Discord.exe) attempted to load \Device\HarddiskVolume7\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
 

Date: 2026-06-18 20:19:15

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Users\De*****\AppData\Local\Discord\app-1.0.9241\Discord.exe) attempted to load \Device\HarddiskVolume7\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
 

Date: 2026-06-10 22:17:16

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Users\De*****\AppData\Local\Discord\app-1.0.9240\Discord.exe) attempted to load \Device\HarddiskVolume7\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
 

Date: 2026-06-06 19:53:43

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Users\De*****\AppData\Local\Discord\app-1.0.9238\Discord.exe) attempted to load \Device\HarddiskVolume7\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
 

Date: 2026-05-21 13:38:17

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume7\Users\De*****\AppData\Local\Discord\app-1.0.9237\Discord.exe) attempted to load \Device\HarddiskVolume7\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
 
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends International, LLC. FC 06/08/2023

Hauptplatine: Gigabyte Technology Co., Ltd. B550 GAMING X V2

Prozessor: AMD Ryzen 7 5700X 8-Core Processor 

Prozentuale Nutzung des RAM: 30%

Installierter physikalischer RAM: 32688.33 MB

Verfügbarer physikalischer RAM: 22805.36 MB

Summe virtueller Speicher: 64688.33 MB

Verfügbarer virtueller Speicher: 53328.16 MB
 

==================== Laufwerke ================================
 

Drive c: (System) (Fixed) (Total:1862.35 GB) (Free:1592.05 GB) (Model: WD_BLACK SN7100 2TB) NTFS

Drive d: (System ALT) (Fixed) (Total:930.85 GB) (Free:106.12 GB) (Model: WD_BLACK SN750 SE NVMe 1TB) NTFS

Drive e: (Fuchsbau) (Fixed) (Total:4657.49 GB) (Free:2455.73 GB) (Model: WD Elements 2621 USB Device) NTFS
 

\\?\Volume{c57d8c83-53af-4995-942e-9f7cfbf3a066}\ () (Fixed) (Total:0.55 GB) (Free:0.07 GB) NTFS

\\?\Volume{00d0777e-346e-47a2-8901-83d7a35a08e0}\ () (Fixed) (Total:0.55 GB) (Free:0.08 GB) NTFS

\\?\Volume{edcb1fc1-59a0-42b4-8a72-3b72ea5eac54}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32

\\?\Volume{940704ec-8f6c-4c7d-af09-c59c244c4c87}\ () (Fixed) (Total:0.09 GB) (Free:0.07 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Protective MBR) (Size: 931.5 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 1 (Protective MBR) (Size: 1863 GB) (Disk ID: 00000000)
 

Partition: GPT.
 

==========================================================

Disk: 2 (Size: 4657.5 GB) (Disk ID: 16F2A91F)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================

Mit dem zweiten File wurde der Beitrag zu lang. Das Forum liess mich keinen zweiten Beitrag posten mit dem Inhalt und von Antwort im eigenen Beitrag wurde abgeraten. Hier reiche ich es gerne als Antwort nach.

Win10 ist mir bewusst, hatte nur den Key.

Habe jetzt MBAM installiert und scannen lassen. Bericht:

Code:

Malwarebytes

www.malwarebytes.com
 

-Protokolldetails-

Scan-Datum: 04.07.2026

Scan-Zeit: 23:12

Protokolldatei: 0b13967a-77ed-11f1-b245-74563ce134af.json
 

-Softwaredaten-

Version: 5.6.1.257

Komponentenversion: 159.0.5666

Version des Aktualisierungspakets: 1.0.111748

Lizenz: Testversion
 

-Systemdaten-

Betriebssystem: Windows 10 (Build 19045.6466)

CPU: x64

Dateisystem: NTFS

Benutzer: Opfer\Deborah Bernegger
 

-Scan-Übersicht-

Scan-Typ: Bedrohungs-Scan

Scan gestartet von: Manuell

Ergebnis: Abgeschlossen

Gescannte Objekte: 202.803

Erkannte Bedrohungen: 1

In die Quarantäne verschobene Bedrohungen: 1

Scandauer: 1 Min., 12 Sek.
 

-Scan-Optionen-

Speicher: Aktiviert

Start: Aktiviert

Dateisystem: Aktiviert

Archive: Aktiviert

Rootkits: Aktiviert

Heuristik: Aktiviert

PUP: Erkennung

PUM: Erkennung
 

-Scan-Details-

Prozess: 0

(keine bösartigen Elemente erkannt)
 

Modul: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsschlüssel: 0

(keine bösartigen Elemente erkannt)
 

Registrierungswert: 0

(keine bösartigen Elemente erkannt)
 

Registrierungsdaten: 0

(keine bösartigen Elemente erkannt)
 

Daten-Stream: 0

(keine bösartigen Elemente erkannt)
 

Ordner: 0

(keine bösartigen Elemente erkannt)
 

Datei: 1

PUP.Optional.BundleInstaller, C:\USERS\D******\DOWNLOADS\OPEN-SHELL - CHIP INSTALLER _THAHT.EXE, In Quarantäne, 71, 1367328, 1.0.111748, , ame, , 49AEEF9FCA98082A8E5722F530C0B3D0, 7D831037EA0ED99D5839082277FDEC869FDD4160EED0B1776192E7C7F42A37BB
 

Physischer Sektor: 0

(keine bösartigen Elemente erkannt)
 

WMI: 0

(keine bösartigen Elemente erkannt)
 
 

(end)