ESET Meldet Trojanerfund
Hallo,
ich habe auf dem Laptop meiner Frau ESET ausgeführt und die folgenden Meldungen bekommen.
Vielen Dank für eure Hilfe :daumenhoc Code:
31.10.2026 18:36:21
Geprüfte Dateien: 493724
Erkannte Dateien: 2
Gesäuberte Dateien: 0
Scandauer gesamt 01:21:07
Scanstatus: Abgeschlossen
C:\Users\SillaZ\AppData\Roaming\Thunderbird\Profiles\6v3duov8.default-esr\ImapMail\imap.gmx.net\Trash multiple detections,Win32/TrojanDownloader.Wauchos.BD trojan,a variant of Win32/Kryptik.EKNK trojan unable to clean
C:\Users\SillaZ\AppData\Roaming\Thunderbird\Profiles\pues6cga.default\ImapMail\imap.gmx.net\Trash multiple detections,Win32/TrojanDownloader.Wauchos.BD trojan,a variant of Win32/Kryptik.EKNK trojan unable to clean
Hier noch die FRST Files Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-10-2026
durchgeführt von NH (Administrator) auf XMG-2021 (SchenkerTechnologiesGmbH XMG NEO (CML/E20)) (31-10-2026 19:49:35)
Gestartet von C:\Users\NH\Downloads\FRST64.exe
Geladene Profile: NH
Plattform: Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mep.exe
(C:\Program Files (x86)\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files (x86)\Mozilla Firefox\crashhelper.exe
(C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\GCUService.exe
(C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\GCUService.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\MyControlCenter\OSDTpDetect.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(drivers\RivetNetworks\Killer\KAPSService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPS.exe
(drivers\RivetNetworks\Killer\KNDBWMService.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWM.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxEM.exe
(explorer.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(Intel Corporation -> Intel) C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag\KillerControlCenter_v2\KillerIntelligenceCenter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.50\msedgewebview2.exe <5>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe <13>
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
(Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe <4>
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_5207db0559876a61\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_401fde8782680631\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b260c545909302e9\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_b260c545909302e9\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\piecomponent.inf_amd64_19ebb84aa5e0e049\Intel_PIE_Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KAPSService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Windows\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy) C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\epson\MyEpson Portal\mepService.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) D:\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (THX Ltd -> VisiSonics) C:\Windows\System32\VSSrv.exe
(services.exe ->) (Uniwill Technology Inc. -> ) C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe
(sihost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe
(VSSrv.exe ->) (THX Ltd -> VisiSonics) C:\Windows\System32\VSHelper.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_dd4cb97d217df0bc\RtkAudUService64.exe [1647416 2023-02-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [122427152 2021-07-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [2756368 2023-10-18] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [Steam] => D:\steam\steam.exe [4382056 2024-05-24] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Run: [com.squirrel.Teams.Teams] => C:\Users\NH\AppData\Local\Microsoft\Teams\Update.exe [2454240 2022-11-27] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4725608 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIVFE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON XP-7100 Series 64MonitorBE: C:\windows\system32\E_YLMBVFE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\windows\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {82A8B393-F036-4EF1-BAEB-162D8729F51D} - System32\Tasks\CorelUpdateHelperTask-481BAC4DFF1C74BD042FACE0A79FBB04 => C:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {0553B627-27AC-406F-A1F6-CEA73E62E9EB} - System32\Tasks\CorelUpdateHelperTask-AA0C585F1E6D8E61FCF0B3C229D36DEB => C:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {E850D97F-7186-4351-8049-0D508F58C8F1} - System32\Tasks\CorelUpdateHelperTaskCore => c:\Program Files (x86)\Corel\CUH\v2\CUH.EXE [3834384 2024-01-24] (Corel Corporation -> Corel Corporation)
Task: {C132EED0-32F9-493E-93D9-95C9EA02E261} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\SillaZ\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-25] (ESET, spol. s r.o. -> ESET)
Task: {A39A797D-DCC1-4E4B-86C1-ECF3282D1485} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\SillaZ\AppData\Local\ESET\ESETOnlineScanner\ESETOnlineScanner_nt64.exe [16359344 2026-10-25] (ESET, spol. s r.o. -> ESET)
Task: {0748AEFC-1C29-4AC8-A3C4-D48127F29928} - System32\Tasks\EPSON XP-7100 Series Update {285704EB-3891-4B90-A560-B3FDCC62C30D} => C:\Windows\System32\spool\drivers\x64\3\E_YTSVFE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {FF25754F-DA91-4ADE-82AD-CC560666806F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {9709BDC0-B7F1-40A0-A654-E8853245C213} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21920576 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB966926-196C-4301-BC24-68BBDA0618A3} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143648 2026-10-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {80376772-41E0-42C9-9179-5C5520A1808C} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143648 2026-10-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Keine Datei)
Task: {97EF77E2-130C-4239-8A6F-1F0CE0286421} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Keine Datei)
Task: {FB3FF8AA-3501-413B-8556-22D41C16803C} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {67C82ED5-FE70-4C48-ABA6-205C3D218477} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AA5B96CE-16A0-4D26-BB40-79BB8E18BE40} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B3D38BD3-EC11-4F73-817C-D6FDA86D9B9E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3A888D8E-33E5-4363-A2DB-44B57B11FCD7} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7089D6A0-EDC0-4DA2-8146-532A9CEAA8F3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3106650408-2670254964-1717926162-1006 E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [1081984 2026-10-31] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {42BED309-AD32-4A5B-8266-C6047A76CEBD} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [44160 2026-10-31] (Mozilla Corporation -> Mozilla Foundation)
Task: {00CD7172-D9C2-4A21-B440-544C0254231E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1005096 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {A9D8EACC-4CA0-40A0-995F-A1BB16C11552} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3345448 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F0FD59E6-4A72-4CFF-9CCB-62FD162D71F4} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649256 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {00A27B97-5B97-41F6-82F1-164CF480074D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {66FAEC0F-D27D-490C-B7FD-CFFF813B5867} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F82E3F7B-20B7-47EA-B07C-5AEFCF9DDD80} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D82C1EB0-1BCD-431C-807B-17CB44C85568} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FBB54CCD-D9EA-4C67-BD29-2C9D166F6C20} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {BC0D140D-3430-4684-AE6D-0698ED88CB03} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {63B9739D-86AA-4032-B23D-28ED4FCB3278} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {54E8B929-6882-447F-9894-15DC461B7682} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1005 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C346B812-9454-4618-ADFC-AA4A7B72B44E} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1006 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4456808 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {1FCBD36C-8A2C-456C-B575-66CA6D99EFF7} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1005 => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveLauncher.exe [877928 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {3CB22FB6-6CB0-4A9C-874E-905311DCC9F0} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1006 => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveLauncher.exe [877928 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {47D82DAC-618F-46EF-B9C5-D4E09EED0642} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagician.exe [133905984 2023-03-10] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.) -> C:\Program Files (x86)\Samsung\Samsung Magician\\/AUTOHIDE
Task: {1C3219BA-96E6-418B-87BF-674EA483888D} - System32\Tasks\SoftLanding\S-1-5-21-3106650408-2670254964-1717926162-1005\SoftLandingRefreshForExpirationTask-{b1ebde9e-e610-40b8-bb45-1e74079a581a} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {824CC96E-EFD2-4981-9D67-8EE83AF4978C} - System32\Tasks\SoftLanding\S-1-5-21-3106650408-2670254964-1717926162-1006\SoftLandingRefreshForExpirationTask-{cebcc811-6742-4909-a08e-66ef11c1193d} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}
Task: {8A401FF6-E254-433E-8D6B-42B26BE89345} - System32\Tasks\THX Ltd\THX Update Service\THX-Restart-v0-33-0 => C:\windows\system32\shutdown.exe [57344 2025-11-25] (Microsoft Windows -> Microsoft Corporation) -> /r /d p:01:01
Task: {65D7860B-891C-4268-9A1C-D6488E03C887} - System32\Tasks\THX Ltd\THX Update Service\THX-Update-Service-v0-33-0 => C:\Program Files\THX\thx-update-svc.exe [12639448 2020-10-05] (THX Ltd -> THX Ltd)
Task: {388E5945-39D3-4F26-9509-27385E72222A} - System32\Tasks\THX Ltd\THX Update Service\THX-Upgrade-Install-v0-33-0 => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [495616 2026-10-24] (Microsoft Windows -> Microsoft Corporation) -> -ExecutionPolicy Bypass -File "%PROGRAMFILES%\thx\THX-Upgrade-Install.ps1"
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\EPSON XP-7100 Series Update {285704EB-3891-4B90-A560-B3FDCC62C30D}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSVFE.EXE:/EXE:{285704EB-3891-4B90-A560-B3FDCC62C30D} /F:UpdateWorkGroup\XMG-2021$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{389513b0-011e-404a-8b7c-464380414915}: [DhcpNameServer] 1.1.1.1 8.8.8.8
Tcpip\..\Interfaces\{b0f71a51-b0d4-4c5d-a072-a24c6b860a85}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{b0f71a51-b0d4-4c5d-a072-a24c6b860a85}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{e45839cc-84d5-4547-8c89-9725289fe8d7}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{e45839cc-84d5-4547-8c89-9725289fe8d7}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{e5556801-3799-44e6-a5e6-0cd077708353}: [DhcpNameServer] 1.1.1.1 8.8.8.8
FireFox:
========
FF TaskBarID: E7CF176E110C211B -> C:\Program Files (x86)\Mozilla Firefox
FF DefaultProfile: dppga5ix.default -> E7CF176E110C211B
FF ProfilePath: C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default [2026-10-31]
FF DownloadDir: C:\Users\Nick\Downloads
FF Homepage: Mozilla\Firefox\Profiles\dppga5ix.default -> about:blank
FF NewTab: Mozilla\Firefox\Profiles\dppga5ix.default -> hxxp://www.bing.com/?pc=COS2&ptag=D091819-N0600A21ABFDD9D88F4162B1F&form=CONMHP&conlogo=CT3332016
FF Notifications: Mozilla\Firefox\Profiles\dppga5ix.default -> hxxps://community.postcrossing.com
FF Extension: (German Dictionary) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\de-DE@dictionaries.addons.mozilla.org.xpi [2022-11-23]
FF Extension: (Privacy Badger) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2026-10-25]
FF Extension: (Language: English (GB)) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2026-10-31]
FF Extension: (British English Dictionary (Marco Pinto)) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\marcoagpinto@mail.telepac.pt.xpi [2026-10-25]
FF Extension: (cookie monster - C is for cookie -) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\{2415ce03-07a4-4923-a381-8f76f885b1aa}.xpi [2019-05-13]
FF Extension: (Tangled - Pascal Rapunzel) - C:\Users\NH\AppData\Roaming\Mozilla\Firefox\Profiles\dppga5ix.default\Extensions\{8797666e-00c8-4efd-b902-28313405dcbe}.xpi [2019-05-13]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Keine Datei]
FF Plugin-x32: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x86.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\.DEFAULT: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.adobe.xfdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
FF Plugin HKU\S-1-5-21-3106650408-2670254964-1717926162-1005: @tracker-software.com/PDF-XChange Editor Plugin,version=1.0,application/vnd.fdf -> C:\Program Files\Tracker Software\PDF Editor\npPDFXEditPlugin.x64.dll [Keine Datei]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default [2024-08-22]
Edge Extension: (Google Docs Offline) - C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-08-22]
Edge Extension: (Edge relevant text changes) - C:\Users\NH\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-24]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9219392 2026-10-12] (Microsoft Corporation -> Microsoft Corporation)
R2 CMigrationService; C:\Program Files (x86)\Samsung\Samsung Magician\MigrationService\MigrationService.exe [761408 2023-03-10] (Samsung Electronics Co., Ltd. -> Clonix & CottonCandy)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2018-04-09] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncHelper.exe [3812712 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
R2 GCUBridge; C:\Program Files\OEM\Control Center\UniwillService\GCUBridge.exe [78912 2020-12-09] (Uniwill Technology Inc. -> )
R3 KAPSService; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KAPSService.exe [78088 2023-07-13] (Intel Corporation -> Intel® Corporation)
R2 Killer Analytics Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerAnalyticsService.exe [2480944 2023-07-13] (Intel Corporation -> Intel)
R2 Killer Network Service; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2981168 2023-07-13] (Intel Corporation -> Intel)
R3 KNDBWM; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KNDBWMService.exe [78128 2023-07-13] (Intel Corporation -> Intel® Corporation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 MyEpson Portal Service; C:\Program Files (x86)\EPSON\MyEpson Portal\mepService.exe [714712 2017-06-28] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe [1274888 2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.195.1006.0007\OneDriveUpdaterService.exe [4112232 2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [680120 2026-04-21] (Geek Software GmbH -> geek software GmbH)
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 SamsungMagicianSVC; C:\Program Files (x86)\Samsung\Samsung Magician\SamsungMagicianSVC.exe [381504 2023-03-10] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-10-24] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256632 2022-09-16] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; d:\TeamViewer\TeamViewer_Service.exe [22548280 2024-10-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 VSSrv; C:\WINDOWS\system32\VSSrv.exe [212696 2020-06-18] (THX Ltd -> VisiSonics)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 avmaura; C:\WINDOWS\System32\drivers\avmaura.sys [116480 2021-05-01] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-02-09] (Microsoft Corporation) [Datei ist nicht signiert]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2021-04-19] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])
R3 KfeCoSvc; C:\WINDOWS\System32\drivers\RivetNetworks\Killer\KfeCo11X64.sys [209200 2023-07-13] (Intel Corporation -> Rivet Networks, LLC.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2023-11-10] (Nvidia Corporation -> NVIDIA Corporation)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; \??\C:\Windows\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 rt68cx21; C:\WINDOWS\System32\DriverStore\FileRepository\rt68cx21x64.inf_amd64_043a02d7d5d8270f\rt68cx21x64.sys [752496 2023-08-16] (Realtek Semiconductor Corp. -> Realtek)
R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [90704 2020-02-25] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\WINDOWS\System32\drivers\secnvmeF.sys [30512 2020-02-25] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R3 SparkIO; \??\C:\windows\system32\SparkIO.sys [22128 2019-07-08] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 THXVAD; C:\WINDOWS\System32\drivers\THXVAD.sys [99552 2020-06-18] (THX Ltd -> Windows (R) Win 7 DDK provider)
R3 vhidmini; C:\WINDOWS\System32\drivers\vhidmini.sys [22944 2020-07-17] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-02-09] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_14dc9a213197a8b8\WSDScan.sys [61440 2026-10-24] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-10-31 19:49 - 2026-10-31 19:50 - 000036450 _____ C:\Users\NH\Downloads\FRST.txt
2026-10-31 19:49 - 2026-10-31 19:49 - 000000000 ____D C:\FRST
2026-10-31 19:48 - 2026-10-31 19:48 - 002457088 _____ (Farbar) C:\Users\NH\Downloads\FRST64.exe
2026-10-31 19:48 - 2026-10-31 19:48 - 002457088 _____ (Farbar) C:\Users\NH\Downloads\FRST64(1).exe
2026-10-31 18:36 - 2026-10-31 18:36 - 000001168 _____ C:\Users\NH\Documents\ESET Scan.txt
2026-10-31 17:09 - 2026-10-31 17:09 - 000000000 ____D C:\Users\NH\AppData\Local\WindowsOobeAppHost
2026-10-31 16:11 - 2026-10-31 16:11 - 000746904 _____ C:\WINDOWS\system32\perfh007.dat
2026-10-31 16:11 - 2026-10-31 16:11 - 000158970 _____ C:\WINDOWS\system32\perfc007.dat
2026-10-26 15:16 - 2026-10-31 18:04 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-25 15:36 - 2026-10-25 15:36 - 000002190 _____ C:\Users\NH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-25 09:17 - 2026-10-25 16:10 - 000001431 _____ C:\Users\SillaZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-25 09:17 - 2026-10-25 16:10 - 000001325 _____ C:\Users\SillaZ\Desktop\ESET Online Scanner.lnk
2026-10-25 09:17 - 2026-10-25 09:17 - 008423856 _____ (ESET) C:\Users\SillaZ\Downloads\esetonlinescanner.exe
2026-10-25 09:17 - 2026-10-25 09:17 - 000000000 ____D C:\Users\SillaZ\AppData\Local\ESET
2026-10-24 19:56 - 2026-10-24 19:56 - 000000000 ____D C:\Users\SillaZ\AppData\Local\WindowsOobeAppHost
2026-10-24 19:48 - 2026-10-25 15:36 - 000002575 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-24 19:47 - 2026-10-24 19:47 - 000001714 _____ C:\Users\Public\Desktop\PDF24 Toolbox.lnk
2026-10-24 19:47 - 2026-10-24 19:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24
2026-10-24 19:47 - 2026-10-24 19:47 - 000000000 ____D C:\Program Files\PDF24
2026-10-24 16:30 - 2026-10-24 16:30 - 000155799 _____ C:\Users\SillaZ\Downloads\endres mama.pdf
2026-10-24 16:28 - 2026-10-24 16:28 - 000155799 _____ C:\Users\SillaZ\Downloads\Rechnung_1668323.pdf
2026-10-24 15:51 - 2026-10-24 15:51 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000014689 _____ C:\WINDOWS\system32\ecoscore_config.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriUHMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriLMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004646 _____ C:\WINDOWS\system32\ResPriHMImageList
2026-10-24 15:51 - 2026-10-24 15:51 - 000004555 _____ C:\WINDOWS\system32\ResPriImageListLowCost
2026-10-24 15:51 - 2026-10-24 15:51 - 000004555 _____ C:\WINDOWS\system32\ResPriHMImageListLowCost
2026-10-24 15:31 - 2026-10-24 15:31 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-10-31 19:47 - 2022-02-09 14:37 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-31 19:46 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-31 19:46 - 2023-12-13 14:18 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-31 19:46 - 2021-11-15 18:51 - 000000000 ____D C:\Users\NH\AppData\Roaming\Samsung Magician
2026-10-31 19:46 - 2021-04-23 14:46 - 000000000 __SHD C:\Users\NH\IntelGraphicsProfiles
2026-10-31 19:09 - 2026-08-27 07:31 - 000002190 _____ C:\Users\SillaZ\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-31 19:09 - 2021-04-25 15:55 - 000001299 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-31 19:09 - 2021-04-25 15:55 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2026-10-31 19:05 - 2024-08-24 15:23 - 000000000 ____D C:\Users\SillaZ\AppData\Local\Packages
2026-10-31 19:04 - 2024-10-07 14:39 - 000000000 ____D C:\Users\SillaZ\AppData\Roaming\Microsoft\Excel
2026-10-31 18:46 - 2021-04-25 16:10 - 000001062 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-10-31 18:46 - 2021-04-25 16:10 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-31 18:41 - 2020-09-16 06:01 - 000000000 ____D C:\ProgramData\Package Cache
2026-10-31 18:39 - 2025-02-09 19:57 - 000003446 _____ C:\WINDOWS\system32\Tasks\CorelUpdateHelperTask-481BAC4DFF1C74BD042FACE0A79FBB04
2026-10-31 18:01 - 2025-02-09 19:52 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-31 17:10 - 2024-03-18 19:00 - 000001386 _____ C:\Users\NH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2026-10-31 17:10 - 2024-03-18 19:00 - 000001280 _____ C:\Users\NH\Desktop\ESET Online Scanner.lnk
2026-10-31 16:20 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-31 16:19 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-10-31 16:13 - 2025-02-09 19:57 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-10-31 16:13 - 2025-02-09 19:57 - 000003682 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-10-31 16:11 - 2025-02-09 19:55 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-31 16:11 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-31 16:04 - 2025-02-09 19:55 - 000014162 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-31 16:04 - 2024-08-24 15:24 - 000000000 ____D C:\Users\SillaZ\AppData\Local\SquirrelTemp
2026-10-31 16:04 - 2024-08-24 15:23 - 000000000 __SHD C:\Users\SillaZ\IntelGraphicsProfiles
2026-10-31 16:03 - 2025-02-09 19:57 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-31 16:03 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-31 16:03 - 2022-11-29 19:05 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-10-31 16:03 - 2021-04-19 15:33 - 000000000 ____D C:\Intel
2026-10-31 16:03 - 2020-09-15 14:22 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-29 16:42 - 2024-04-01 08:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-10-29 13:33 - 2025-02-09 19:57 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1006
2026-10-29 13:33 - 2025-02-09 19:57 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3106650408-2670254964-1717926162-1005
2026-10-29 13:33 - 2025-02-09 19:57 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1006
2026-10-29 13:33 - 2025-02-09 19:57 - 000003552 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3106650408-2670254964-1717926162-1005
2026-10-29 13:33 - 2025-02-09 19:57 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-10-29 13:33 - 2022-11-27 14:10 - 000002046 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-28 13:57 - 2020-09-15 14:22 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-28 13:41 - 2024-08-24 15:25 - 000000000 ____D C:\Users\SillaZ\AppData\Local\D3DSCache
2026-10-25 16:14 - 2021-04-25 16:51 - 000000000 ____D C:\Program Files (x86)\MozBackup
2026-10-25 15:36 - 2021-04-23 14:46 - 000000000 ____D C:\Users\NH\AppData\Local\Packages
2026-10-25 15:35 - 2021-11-14 14:58 - 000000000 ____D C:\Users\NH\AppData\Local\D3DSCache
2026-10-25 15:35 - 2021-04-25 15:55 - 000000000 ____D C:\Users\NH\AppData\Roaming\Mozilla
2026-10-25 15:35 - 2021-04-23 14:48 - 000000000 ____D C:\Users\NH\AppData\Local\PlaceholderTileLogoFolder
2026-10-25 15:32 - 2025-02-09 19:57 - 000003858 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onLogOn
2026-10-25 15:32 - 2025-02-09 19:57 - 000003416 _____ C:\WINDOWS\system32\Tasks\EOSv3 Scheduler onTime
2026-10-25 09:28 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-24 20:03 - 2025-02-09 19:53 - 000000000 ____D C:\Users\NH
2026-10-24 19:55 - 2025-02-09 19:53 - 000000000 ____D C:\Users\SillaZ
2026-10-24 19:53 - 2025-02-09 19:52 - 000533008 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-24 19:52 - 2026-01-02 17:21 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-10-24 19:52 - 2025-07-15 15:05 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-10-24 19:52 - 2024-04-01 17:37 - 000000000 ____D C:\WINDOWS\InboxApps
2026-10-24 19:52 - 2024-04-01 17:37 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-10-24 19:52 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-24 19:52 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\L2Schemas
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-24 19:52 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-24 19:52 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-10-24 17:09 - 2020-09-15 14:36 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-24 17:07 - 2020-09-15 14:35 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-24 15:51 - 2025-02-09 19:54 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-24 15:31 - 2021-11-14 14:28 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-24 15:30 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\appcompat
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-11-28 10:16 - 2023-12-14 10:58 - 001065984 _____ () C:\Users\NH\AppData\Local\file__0.localstorage
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 28-10-2026
durchgeführt von NH (31-10-2026 19:51:17)
Gestartet von C:\Users\NH\Downloads
Microsoft Windows 11 Pro Version 26H2 26300.9711 (X64) (2025-02-11 15:58:25)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-3106650408-2670254964-1717926162-500 - Administrators - Disabled) => C:\Users\Administrator (Orphaned Folder) <==== ACHTUNG
DefaultAccount (S-1-5-21-3106650408-2670254964-1717926162-503 - Limited - Disabled)
Gast (S-1-5-21-3106650408-2670254964-1717926162-501 - Limited - Disabled)
NH (S-1-5-21-3106650408-2670254964-1717926162-1005 - Administrators - Enabled) => C:\Users\NH
SillaZ (S-1-5-21-3106650408-2670254964-1717926162-1006 - Administrators - Enabled) => C:\Users\SillaZ
WDAGUtilityAccount (S-1-5-21-3106650408-2670254964-1717926162-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Control Center (HKLM\...\{6ea3ce12-b991-4b65-9f8d-b148eaaecd87}_is1) (Version: 1.1.0.51 - OEM)
Corel Painter Essentials 8 - Core (HKLM\...\{1D4D63BF-5E27-4D47-A23F-66E4B406D9B3}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - Content (HKLM\...\{334F8B75-D2CD-4DAE-931D-48118D313478}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - CT (HKLM\...\{CA834CD6-0363-422C-A6B5-DD0B85AC1A45}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - DE (HKLM\...\{55B21364-36FE-4172-8794-98CBC6984376}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - EN (HKLM\...\{BE36DCD3-299F-492F-89B6-D5DC051A1778}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - FR (HKLM\...\{056F7BDE-C2C0-4DBC-BB05-283178DE87FE}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - IPM (HKLM\...\{C45B69A6-7210-41B1-BEFB-7DBC66A228BE}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - IPM Content (HKLM\...\{E20BAA2A-03C4-41FA-9A12-743E58181E7E}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - JP (HKLM\...\{E73B9BAC-C186-46C8-8264-59439269A155}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 - NNArtAssets (HKLM\...\{53CFBCA0-80C1-42FD-A037-9C6C45146E03}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Essentials 8 (HKLM\...\_{D3688764-0B0D-436E-BDF2-98752AB8E0CE}) (Version: 8.0.0.148 - Corel Corporation)
Corel Painter Essentials 8 (HKLM\...\{8522EF0F-BA35-4D78-94B4-309943C39F30}) (Version: 8.0 - Corel Corporation) Hidden
Corel Painter Thumbnail Previewer (HKLM\...\{50139369-99B2-496A-8726-D3DC5D6D4235}) (Version: 18.0 - Corel Corporation)
Corel PaintShop Pro 2023 (HKLM-x32\...\_{9266F7AF-3AD8-4B80-9A16-AD8B4580C1C0}) (Version: 25.2.0.58 - Corel Corporation)
Corel Update Manager (HKLM\...\{1E7AD2D2-EDD9-4334-992D-7F7ED9769217}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{48F41881-D9E9-4208-9C7E-16F7A84CE851}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{AF3E1983-6B8F-4D66-81BD-1900FF5730E3}) (Version: 2.17.698 - Corel corporation) Hidden
Corel Update Manager (HKLM\...\{BDF05081-13FF-457E-A01E-3798506DE951}) (Version: 2.17.698 - Corel corporation) Hidden
CrystalDiskInfo 8.0.0 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 8.0.0 - Crystal Dew World)
Dynamic Application Loader Host Interface Service (HKLM\...\{602631E2-0FA8-4BED-9EDB-E7CE9FDA437F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Easy Photo Scan (HKLM-x32\...\{99364024-626C-4BE1-89C8-2F207023497B}) (Version: 1.00.0018 - Seiko Epson Corporation)
Epson Event Manager (HKLM-x32\...\{39171CAA-4D3B-47D3-86BC-458D03510251}) (Version: 3.11.77 - Seiko Epson Corporation)
Epson Printer Connection Checker (HKLM-x32\...\{DE32F90E-1A29-4D74-BCF1-E7DDB25D713A}) (Version: 3.4.0.0 - Seiko Epson Corporation)
Epson Scan 2 (HKLM-x32\...\Epson Scan 2) (Version: - Seiko Epson Corporation)
EPSON Scan OCR Component (HKLM-x32\...\{3615C893-F844-4A5B-B949-8409EAB62271}) (Version: 3.00.05 - Seiko Epson Corporation)
Epson Software Updater (HKLM-x32\...\{711E8536-AB71-4455-A6C4-357FDBBEBF91}) (Version: 4.6.7 - Seiko Epson Corporation)
EPSON XP-7100 Series Printer Uninstall (HKLM\...\EPSON XP-7100 Series) (Version: - Seiko Epson Corporation)
EPSON-Handbücher (HKLM-x32\...\{84CECC1B-21EF-41B1-9A91-3E724E5D99D3}) (Version: 1.57.0.0 - Seiko Epson Corporation)
EpsonNet Print (HKLM\...\{96ED1D58-440C-4345-8FEE-C4781366C67F}) (Version: 3.1.4.0 - SEIKO EPSON Corporation)
Highlight Reel (HKLM\...\{9D5DA75C-ECD2-4C51-A4F4-CDD821D84AE0}) (Version: 1.1.0.524 - Corel Corporation)
ICA (HKLM\...\{D3688764-0B0D-436E-BDF2-98752AB8E0CE}) (Version: 8.0 - Corel Corporation) Hidden
ICA (HKLM-x32\...\{9266F7AF-3AD8-4B80-9A16-AD8B4580C1C0}) (Version: 25.2.0.58 - Corel Corporation) Hidden
ICA (HKLM-x32\...\{FD799776-5758-48E4-8523-328AC68F3D7A}) (Version: 1.0.0.167 - Corel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM\...\{D666FBA1-39CE-48D2-9336-9256827EB308}) (Version: 10.1.19502.8391 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{e7892987-b2d0-4c0d-951c-86af011df195}) (Version: 10.1.19502.8391 - Intel(R) Corporation)
Intel(R) Icls (HKLM\...\{AC2499C1-4700-4ECF-9581-08954D4DAE1F}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 2328.5.16.0 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{5B599B1E-BEE8-4493-85AD-0BC087AB2B88}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{DEAFF352-6F9F-45F4-916A-DF7A0C5A5B0C}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME WMI Provider (HKLM\...\{74970E1F-42D7-443F-857F-A0A0C4E71604}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{0940A8E6-DBBC-4554-B07D-EBFB10627716}) (Version: 30.100.2020.7 - Intel Corporation) Hidden
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.100.2020.7 - Intel Corporation)
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000250-0220-1031-84C8-B8D95FA3C8C3}) (Version: 22.250.0.2 - Intel Corporation)
IPM_MIR_COM64 (HKLM\...\{30734396-FBD6-4B6D-83E1-5223C12778C5}) (Version: 1.0.0.167 - Corel Corporation) Hidden
IPM_PSP_COM64 (HKLM\...\{6D9980A5-6722-445F-8954-73871C3F12C6}) (Version: 25.2.0.58 - Corel Corporation) Hidden
Killer Performance Driver Suite UWD (HKLM\...\{13A28F12-CD32-44FB-B2E0-EE58BE4A398B}) (Version: 34.23.7168 - Rivet Networks)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.50 - Microsoft Corporation) Hidden
Microsoft Office LTSC Professional Plus 2021 - de-de (HKLM\...\ProPlus2021Volume - de-de) (Version: 16.0.14334.20974 - Microsoft Corporation)
Microsoft OneDrive (HKLM\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Teams) (Version: 1.4.00.19572 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29016 (HKLM-x32\...\{40d3fee2-b257-46c2-bdc0-cb1088d97327}) (Version: 14.27.29016.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30135 (HKLM-x32\...\{b7a2b241-3f54-4d7d-94d1-8ce0146e03c7}) (Version: 14.29.30135.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.27.29016 (HKLM\...\{F07B1E25-5670-4556-9C7F-5A1966C83269}) (Version: 14.27.29016 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.27.29016 (HKLM\...\{E493B8F4-E300-43EC-95D0-BDF3711297EA}) (Version: 14.27.29016 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30135 (HKLM-x32\...\{77EB1EA9-8E1B-459D-8CDC-1984D0FF15B6}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30135 (HKLM-x32\...\{36A1E79B-581A-4FE5-843D-84C2D3C9431E}) (Version: 14.29.30135 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\{9495AEB4-AB97-39DE-8C42-806EEF75ECA7}) (Version: 10.0.50908 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
MIR64 (HKLM\...\{C50F1C9E-B410-4565-917A-EAD2BF2D350D}) (Version: 1.0.0.167 - Corel Corporation) Hidden
MIRContent (HKLM-x32\...\{68DE4372-501F-49E7-A293-305497686165}) (Version: 1.0.0.167 - Corel Corporation) Hidden
MIRHelp (HKLM-x32\...\{27A2EAF9-31BD-47FB-A676-754E8C2CF36E}) (Version: 1.0.0.167 - Corel Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 159.0 (x64 de)) (Version: 159.0 - Mozilla)
Mozilla Thunderbird ESR (x64 de) (HKLM\...\Mozilla Thunderbird 153.6.0 ESR (x64 de)) (Version: 153.6.0 - Mozilla)
MultiCam Capture 2.0 Lite (HKLM\...\{8F281193-9234-4F08-9624-42B1AF08B999}) (Version: 2.1.0.119 - Corel Corporation)
MyEpson Portal (HKLM-x32\...\{3361D415-BA35-4143-B301-661991BA6219}) (Version: 1.1.3.6 - SEIKO EPSON CORPORATION) Hidden
MyEpson Portal (HKLM-x32\...\MyEpson Portal) (Version: - Seiko Epson Corporation)
NVIDIA FrameView SDK 1.3.8513.32290073 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.3.8513.32290073 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.27.0.120 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.27.0.120 - NVIDIA Corporation)
NVIDIA Grafiktreiber 546.17 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 546.17 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.40.14 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.40.14 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.21.0713 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.21.0713 - NVIDIA Corporation)
NVIDIA USBC Driver 1.50.831.832 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_USBC) (Version: 1.50.831.832 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.14334.20974 - Microsoft Corporation) Hidden
ParticleShop - Core (HKLM\...\{539A8441-261C-42DA-8B4B-FB512F61D33B}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop - IPM (HKLM\...\{9E99AA1D-F1DC-442D-B9D9-8DD3EE529AE9}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop - IPM Content (HKLM\...\{67BDB811-383B-4D2B-870E-F27D2511F200}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop (HKLM\...\_{6F224046-E164-4B78-9867-3AE494271D29}) (Version: 1.5.0.108 - Corel Corporation)
ParticleShop (HKLM\...\{6F224046-E164-4B78-9867-3AE494271D29}) (Version: 1.5 - Corel Corporation) Hidden
ParticleShop (HKLM\...\{D4F483F8-71F1-457F-AB1B-31C61529B658}) (Version: 1.5 - Corel Corporation) Hidden
PDF24 Creator 11.30.1 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.30.1 - Geek Software GmbH)
PhotoMirage (HKLM-x32\...\_{FD799776-5758-48E4-8523-328AC68F3D7A}) (Version: 1.0.0.167 - Corel Corporation)
PSPPContent (HKLM-x32\...\{5F7D4DF0-36C1-4217-BED8-49F8D55C9EE2}) (Version: 25.2.0.58 - Corel Corporation) Hidden
PSPPHelp (HKLM-x32\...\{CC302687-F27F-4765-85FD-1DD35BE22B27}) (Version: 25.2.0.58 - Corel Corporation) Hidden
PSPPro64 (HKLM\...\{917DBDD3-CB61-4E51-AEAD-A1020D94D64D}) (Version: 25.2.0.58 - Corel Corporation) Hidden
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9484.1 - Realtek Semiconductor Corp.)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.22621.31279 - Realtek Semiconductor Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 11.15.0717.2023 - Realtek)
Samsung Data Migration (HKLM-x32\...\{3B304604-0BF5-488E-AB95-F2F2E31206F3}) (Version: 4.0.0.16 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 7.3.0.1100 - Samsung Electronics)
Setup (HKLM-x32\...\{A4D517DC-1201-499A-B344-3576C0C11698}) (Version: 1.0.0.167 - Ihr Firmenname) Hidden
Setup (HKLM-x32\...\{B5A35E57-2AC8-4BF1-A3C2-621AEC415DE9}) (Version: 25.2.0.58 - Ihr Firmenname) Hidden
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.4.0.19572 - Microsoft Corporation)
TeamViewer (HKLM\...\TeamViewer) (Version: 15.58.5 - TeamViewer)
THX Spatial Audio Driver (HKLM\...\THXSpatialAudio) (Version: 1.2.42 - THX Ltd.)
Ultimate Creative Collection (HKLM-x32\...\_{C3AE9C80-873E-4516-9B68-538FFDD02F5F}) (Version: 1.0.0.222 - Corel Corporation)
Ultimate Creative Collection (HKLM-x32\...\{C3AE9C80-873E-4516-9B68-538FFDD02F5F}) (Version: 1.0.0.222 - Ihr Firmenname) Hidden
Update for Windows 10 for x64-based Systems (KB5001716) (HKLM\...\{82BD0A1C-815F-487F-9AE7-CE73DA413CFF}) (Version: 4.91.0.0 - Microsoft Corporation)
Wargaming.net Game Center (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\Wargaming.net Game Center) (Version: 24.4.0.6472 - Wargaming.net)
Windows Driver Package - Intel(R) Corporation System (01/25/2020 1.41.823.0) (HKLM\...\985C0D2A2D76D4C026B61D8EFCACD825B45279E6) (Version: 01/25/2020 1.41.823.0 - Intel(R) Corporation)
Windows Driver Package - Synaptics (SynTP) HIDClass (07/15/2019 19.5.32.68) (HKLM\...\B30A41DD17F4A0018A061E4B91C940B4AC22694B) (Version: 07/15/2019 19.5.32.68 - Synaptics)
Windows Driver Package - Synaptics (SynTP) Mouse (07/15/2019 19.5.32.68) (HKLM\...\903934C7B4ED70F81C2D3B6D6BBDB8C7E22B3B3A) (Version: 07/15/2019 19.5.32.68 - Synaptics)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
World_of_Warships (HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\2562693762) (Version: - Wargaming.net)
Packages:
=========
AppUp.IntelGraphicsExperience -> C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5688.0_x64__8j3eq9eme6ctt [2025-02-11] (INTEL CORP) [Startup Task]
AppUp.ThunderboltControlCenter -> C:\Program Files\WindowsApps\AppUp.ThunderboltControlCenter_1.0.36.0_x64__8j3eq9eme6ctt [2023-12-13] (INTEL CORP)
Disney+ Das Streaming Zuhause von Disney, Pixar, Marvel, Star Wars, National Geographic und Star. -> C:\Program Files\WindowsApps\www.disneyplus.com-A696BC3_1.0.0.2_neutral__gcze62ayd7e3t [2026-10-25] (www.disneyplus.com)
Disney+ Das Streaming Zuhause von Disney, Pixar, Marvel, Star Wars, National Geographic und Star. -> C:\Program Files\WindowsApps\www.disneyplus.com-D3D50414_1.0.0.3_neutral__gcze62ayd7e3t [2025-01-07] (www.disneyplus.com)
Killer Intelligence Center -> C:\Program Files\WindowsApps\RivetNetworks.KillerControlCenter_3.1423.712.0_x64__rh07ty8m5nkag [2024-08-24] (INTEL CORP) [Startup Task]
Microsoft.Photos.MediaEngineDLC -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2022-04-01] (Microsoft Corporation)
NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.969.0_x64__56jybvy8sckqj [2025-11-06] (NVIDIA Corp.)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.8.204.0_x64__dt26b99r8h8gj [2023-12-13] (Realtek Semiconductor Corp)
XING -> C:\Program Files\WindowsApps\XINGAG.XING_4.0.9.0_x86__xpfg3f7e9an52 [2023-08-28] (New Work SE)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005_Classes\CLSID\{317AEACB-3CF9-4CA6-B277-87CE91BC9F19}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005_Classes\CLSID\{9cd6216c-a299-47e5-ae1c-92d2bb456b1a}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers4: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ FileSyncEx] -> {CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B} => C:\Program Files\Microsoft OneDrive\26.195.1006.0007\FileSyncShell64.dll [2026-10-29] (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\nvshext.dll [2023-11-10] (NVIDIA Corporation -> NVIDIA Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2024-05-04 14:48 - 2023-03-10 15:18 - 002521600 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\ffmpeg.dll
2024-05-04 14:48 - 2023-03-10 15:18 - 000375808 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libegl.dll
2024-05-04 14:48 - 2023-03-10 15:18 - 006533120 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\libglesv2.dll
2024-05-04 14:48 - 2023-03-10 15:17 - 000097280 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magutils-napi.node
2024-05-04 14:48 - 2023-03-10 15:17 - 000087040 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\magvibrancy-napi.node
2024-05-04 14:48 - 2023-03-10 15:17 - 000589824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\resources\app\dist\uimpewrapper-napi.node
2021-11-15 18:51 - 2023-03-10 15:18 - 004426752 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Samsung\Samsung Magician\vk_swiftshader.dll
2024-05-04 16:31 - 2024-05-04 16:31 - 000126976 ____N (Microsoft Corporation) [Datei ist nicht signiert] C:\WINDOWS\SYSTEM32\UpdatePolicyScenarioReliabilityAggregator.dll
2023-10-18 16:43 - 2023-10-18 16:43 - 000242688 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\epnsm.dll
2023-10-18 16:44 - 2023-10-18 16:44 - 000291328 _____ (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON Software\Event Manager\LcMgr.dll
2021-10-26 10:00 - 2021-10-26 10:00 - 000708608 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Configration_00000171\MepCfg.dll
2020-04-17 10:15 - 2020-04-17 10:15 - 000577536 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\MepUploader_00000542\MepUploader.dll
2019-02-22 15:09 - 2019-02-22 15:09 - 000475136 _____ (Seiko Epson Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\EPSON\MyEpson Portal\Online Manual_00000013\MepFAQ.dll
2016-09-14 14:31 - 2016-09-14 14:31 - 000500736 ____S (SEIKO EPSON CORPORATION) [Datei ist nicht signiert] C:\WINDOWS\System32\enppmon.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://bestware.com
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.mysn.de/
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.mysn.de
SearchScopes: HKU\S-1-5-21-3106650408-2670254964-1717926162-1005 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2025-06-20] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2025-08-28] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2022-11-27] (Microsoft Corporation -> Microsoft Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2022-09-17 06:51 - 2022-09-17 06:51 - 000000375 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.178.1
ist aktiviert.
Network Binding:
=============
Ethernet 4: Realtek PCIe GbE Family Controller #3 -> rt68cx21x64.sys
WLAN: Killer(R) Wi-Fi 6 AX1650i 160MHz Wireless Network Adapter (201NGW) -> Netwtw10.sys
Bluetooth-Netzwerkverbindung 3: Bluetooth Device (Personal Area Network) #3 -> bthpan.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\NH\Pictures\XMG_Wallpaper_3D-grunge_1920x1200.jpg
HKU\S-1-5-21-3106650408-2670254964-1717926162-1006\Control Panel\Desktop\\Wallpaper -> C:\Users\SillaZ\AppData\Local\Packages\Microsoft.Windows.Photos_8wekyb3d8bbwe\LocalState\PhotosAppBackground\2451440431525976.jpg
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run: => "Logitech Download Assistant"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_6FF68D6DF02CC3C8AB7EFED63FD83047"
HKU\S-1-5-21-3106650408-2670254964-1717926162-1005\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{C6A611BA-865C-4ADF-8B99-92EB42BA5C39}] => (Allow) D:\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{70CABCAB-EAC7-49C9-97E1-41E52F88692E}] => (Allow) D:\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{C9377B36-FFEC-43C4-9678-696A6FFC27A0}] => (Allow) D:\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{9AB0382D-BC2F-4CA0-825B-F5555EDC4101}] => (Allow) D:\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{71F91F57-1591-4D3F-ACE0-50F625F372BB}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{A8BFD2D2-8D65-4FBB-A338-4259CCDF618D}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_24193.1904.3031.6050_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3B09AC52-7E77-48F2-8DF9-D8A42DB76E42}] => (Allow) D:\World_of_Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{DC93FC0D-982D-4FC1-BB39-3B7949430384}] => (Allow) D:\World_of_Warships\WorldOfWarships.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{108928B8-3861-4B33-A61F-EB00DEF5AF66}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{B946FE67-2B6B-4F8F-873C-B4D560330F95}] => (Allow) C:\ProgramData\Wargaming.net\GameCenter\wgc.exe (Wargaming Group Limited -> Wargaming.net)
FirewallRules: [{94D3DAFC-7AAA-4AFC-82C1-0F772CF41074}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer_Service.exe => Keine Datei
FirewallRules: [{824F748E-D085-4761-AF7C-B351EA8D581F}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer_Service.exe => Keine Datei
FirewallRules: [{36C539DF-AA47-4DBA-B18F-C65164966756}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer.exe => Keine Datei
FirewallRules: [{30E76763-4B31-46C8-B17F-0DEF700140F2}] => (Allow) C:\Users\Public\temp\TeamViewer\TeamViewer.exe => Keine Datei
FirewallRules: [{4B007729-F7FD-4739-964D-329275ECDD2E}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{C76A4F9F-666D-4122-83A5-C7609EB16722}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{2AC97C2C-15BC-4A13-931E-48F8826AEA97}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{BDA70C06-7DA1-4DBE-9A51-24E1F780983F}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{0C2DFF0F-FDC4-44AA-B91E-CC8E65831952}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe (Digital Extremes Ltd. -> )
FirewallRules: [{43814E90-8E3E-4FA8-84AC-9CF8E4839CA5}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{84894C7C-64F2-4A7E-B18E-B28ED6A6E3AD}] => (Allow) D:\steam\steamapps\common\Warframe\Warframe.x64.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{EC00C50F-28FF-46F7-A779-605913906802}] => (Allow) D:\steam\steamapps\common\Warframe\Tools\Launcher.exe (Digital Extremes Ltd. -> Digital Extremes)
FirewallRules: [{C5EA682B-B439-48AE-B21A-A76CECEA3EE5}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{678CB66C-4356-47DD-BD41-A96DC1960144}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{DA8625D8-83F1-4D43-8669-A1640AA675FF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{0BA6F86E-DD00-4577-8CD2-7751C43B4A0A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{300CBEEF-CF33-433E-BC0C-2E316B396E5C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{CAC39172-FBDA-48BA-BFC2-C9F10B893EE9}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{96C0C179-C22A-4E6F-829C-16BABA7B1776}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{C13AC275-C12C-445D-977F-F95E3DC87B3E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{62E9D32E-B6C9-4D06-80A9-47E2E89356C4}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{7B73BFA0-89D7-47BA-B0E3-3503FC762D8B}] => (Allow) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
FirewallRules: [{28968F4F-308B-4718-9EEC-9C838CDBDD0B}] => (Allow) C:\Users\NH\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{22CC17A9-6FB0-450A-896F-4DAA78DED4D2}] => (Allow) C:\Users\NH\AppData\Local\Temp\EpInsNav\DL\3013\Network\EpsonNetSetup\Data\ENEasyApp.exe => Keine Datei
FirewallRules: [{63A3A3A4-9DF9-474E-BC00-EBA272AE4648}] => (Allow) D:\steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{22A218DE-50DF-44D7-8498-273715886B33}] => (Allow) D:\steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2D69F248-FD01-430C-A362-F3C8E3F66565}] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5F71AD91-8349-4361-88A6-62B972A558C9}] => (Allow) D:\steam\steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{E66A00B8-A66B-4DB9-ACBA-BF169C582A76}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{2268DFB5-3C42-47F2-9F97-ABF9D291A9D4}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{7C5AAB2A-8B00-4388-84B7-991E71860B91}C:\program files (x86)\mozilla firefox\firefox.exe] => (Allow) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{48635A1C-68B6-4FE3-974C-9D2210347DC7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{7C792C4D-EE5D-4D34-82FD-A286F0E4E389}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{CD901CC3-C87A-4690-9E34-8794F27F5047}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [{D9272524-52FF-43C2-A172-E2C230FA3FEA}] => (Allow) C:\Users\NH\AppData\Local\Apps\2.0\781B0MOV.0LL\XJKDWRRN.4VM\frit..tion_4b253d3c7789a3f0_0002.0003_43ca0da5fd8718cc\fritzbox-usb-fernanschluss.exe (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{CD108862-AA73-4E7F-BC00-9D286917603E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D4DDDA13-B651-44FB-AD6F-28534B8AB44F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3E084F23-8EAC-4A9E-A465-95F063681FCC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{B2FF53F7-8580-4E4A-BE65-A4B3C04485BE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.MicrosoftOfficeHub_19.2610.35011.0_x64__8wekyb3d8bbwe\M365Copilot.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
28-10-2026 13:57:47 Windows Update
31-10-2026 16:20:08 Windows Update
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (10/31/2026 07:09:49 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )
Description: Event-ID 5
Error: (10/31/2026 06:42:37 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: NVDisplay.Container.exe, Version: 1.39.3323.1171, Zeitstempel: 0x64e85748
Fehlerhafter Modulname: nvxdsyncplugin.dll, Version: 8.17.15.4617, Zeitstempel: 0x654d45ce
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000095f05
Fehlerhafte Prozess-ID: 0x4bf8
Fehlerhafte Anwendungsstartzeit: 0x1dd69523dbbf447
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\plugins\Session\nvxdsyncplugin.dll
Berichts-ID: 5f237da8-aa61-42c1-bab8-9e87d7b9f30e
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (10/31/2026 05:24:46 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: TR98ZNZZN3E95DV7, host id: Wl4xUf6SJVW7oTP4Xdj40+qCyY6I7jLBQq9BYwiAysREnNSIgNK38uxzw3YH7wXyzR2gF4D8lJeOfvYPOzwb7zVWUDYa+9PL
Error: (10/31/2026 05:24:45 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: ERROR: getManifest : attempting fallback to ap-southeast-1
Error: (10/31/2026 05:09:38 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)
Description: Fehlerhafter Anwendungsname: NVDisplay.Container.exe, Version: 1.39.3323.1171, Zeitstempel: 0x64e85748
Fehlerhafter Modulname: nvxdapix.dll, Version: 8.17.15.4617, Zeitstempel: 0x654d4801
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000042576d
Fehlerhafte Prozess-ID: 0x15b8
Fehlerhafte Anwendungsstartzeit: 0x1dd69490e12ca4d
Fehlerhafter Anwendungspfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\Display.NvContainer\NVDisplay.Container.exe
Fehlerhafter Modulpfad: C:\WINDOWS\System32\DriverStore\FileRepository\nvtfig.inf_amd64_64477ef971b813ed\nvxdapix.dll
Berichts-ID: 4998c644-798a-4032-86fb-66768e058223
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (10/31/2026 04:19:12 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: Y4TZAQZ2GZCG2YZA, host id: 8zyOkVHR0oE2HCF2Tls4w3DmArSzMWzi1bwrK98uzsNUlk4UPY+KKkRJOItazVa1d3nVWXjcmPbkflhAIb4yKb7m85/zzQjp
Error: (10/31/2026 04:19:11 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: ERROR: getManifest : attempting fallback to ap-southeast-1
Error: (10/29/2026 01:47:46 PM) (Source: THXUpdSvc) (EventID: 2) (User: )
Description: FATAL: getManifest : Forbidden: Forbidden
status code: 403, request id: YJ025BB16W9V076V, host id: AUUG+qsUAS9HG6/ZB2dv3NdIB2/+wedld02Xcp/JEHKi/R9H0QygUEg8JuPH2I+VNo9fswmRkHXQNz0CQaaPAcZbLq+/0D3W
Systemfehler:
=============
Error: (10/31/2026 07:46:00 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/29/2026 04:42:36 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Background Intelligent Transfer Service" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%(2147943515 = Der Computer wird heruntergefahren.)
Error: (10/29/2026 04:42:36 PM) (Source: Microsoft-Windows-Bits-Client) (EventID: 16392) (User: NT-AUTORITÄT)
Description: Fehler beim Starten des BITS-Dienstes. Fehler: 2147943515.
Error: (10/29/2026 04:42:32 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/29/2026 02:46:29 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice
Error: (10/29/2026 02:07:57 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9NTXGKQ8P7N0-MicrosoftWindows.CrossDevice
Error: (10/28/2026 04:00:06 PM) (Source: DCOM) (EventID: 10010) (User: XMG-2021)
Description: Der Server "{9BA05972-F6A8-11CF-A442-00A0C90A8F39}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (10/26/2026 03:58:09 PM) (Source: Service Control Manager) (EventID: 7024) (User: )
Description: Der Dienst "Background Intelligent Transfer Service" wurde mit dem folgenden dienstspezifischen Fehler beendet:
%%(2147943515 = Der Computer wird heruntergefahren.)
Windows Defender:
================
TimeCreated : 28.10.2026 15:58:37
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{9C649B9D-6FBA-410A-B82F-289E9510CB20}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŜčĥέδυŀěð şçąη ẁąŝ
şκíφφэδ вз¢àџѕ℮ тĥ℮ ŀάśτ ѕџςčėšѕƒúŀ šĉǻʼn ẃäѕ ώīτђίŋ τћє ļăśτ 7 δаγѕ
TimeCreated : 26.10.2026 15:47:58
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{D788BE0E-465D-46D4-823E-1DD3AD8E73E2}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃΡĆ ćőŋńèċťīόŋ řΰñδθщņ
TimeCreated : 25.10.2026 15:44:14
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{B53855DD-1C4F-4E8C-8BFB-062A45297C6B}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃΡĆ ćőŋńèċťīόŋ řΰñδθщņ
TimeCreated : 24.10.2026 16:37:27
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{0C5A66DC-47EF-4315-8BCB-228EA06C3EB4}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\Netzwerkdienst%п %ťŚτōρ Гēǻśǿл:%вŮήĸñôẁπ
CodeIntegrity:
===============
Date: 2026-10-31 16:04:21
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\UUS\amd64\WaaSMedicAgent.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
Date: 2025-06-13 17:06:43
Description:
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files (x86)\Microsoft\EdgeWebView\Application\136.0.3240.92\msedgewebview2.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvspcap64.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. N.1.06 10/28/2020
Hauptplatine: NB02 GMxMPxS
Prozessor: Intel(R) Core(TM) i7-10875H CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 48%
Installierter physikalischer RAM: 16216.33 MB
Verfügbarer physikalischer RAM: 8294.58 MB
Summe virtueller Speicher: 17240.33 MB
Verfügbarer virtueller Speicher: 9750.11 MB
==================== Laufwerke ================================
Disk 0 - Drive c: (Windows) (Fixed) (Total:434.47 GB) (Free:282.15 GB) (Model: NVMe Samsung SSD 970 SCSI Disk Device) NTFS
Disk 0 - Drive d: (Programme) (Fixed) (Total:490.63 GB) (Free:360.41 GB) (Model: NVMe Samsung SSD 970 SCSI Disk Device) NTFS
Disk 1 - Drive e: (Save) (Fixed) (Total:465.76 GB) (Free:236.39 GB) (Model: KINGSTON SA2000M8500G) NTFS
Disk 0 - \\?\Volume{6b0c9fb9-a9a9-11eb-abab-ccf9e4c542bf}\ (Recovery) (Fixed) (Total:1.95 GB) (Free:1.36 GB) NTFS
Disk 0 - \\?\Volume{e388ff75-963d-4a7e-a600-d6a0fbdd32c1}\ () (Fixed) (Total:1.04 GB) (Free:114.96 MB) NTFS
Disk 0 - \\?\Volume{60c2d148-aa8b-11eb-abba-ccf9e4c542bf}\ (BOOT) (Fixed) (Total:1.46 GB) (Free:1.43 GB) FAT32
==================== MBR & Partitionstabelle ====================
============================================================
Disk: 0 (Size: 931.51 GB) (Disk ID: 3C43A428)
Partitions:
===========
Partition Style : GPT
Partition Count : 6
Disk ID : {6B0C9FB8-A9A9-11EB-ABAB-CCF9E4C542BF}
Usable Offset : 0.02 MB
Usable Length : 931.51 GB
Max Partitions : 128
Partition 1
Type : Windows Recovery
Size : 1.95 GB
Offset : 1 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {6B0C9FB9-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Basic data partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 2
Type : EFI System Partition
Size : 1.46 GB
Offset : 2001 MB
Type GUID : {C12A7328-F81F-11D2-BA4B-00A0C93EC93B}
Partition GUID : {60C2D148-AA8B-11EB-ABBA-CCF9E4C542BF}
GPT Name : EFI system partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 3
Type : Microsoft Reserved (MSR)
Size : 1.95 GB
Offset : 3501.01 MB
Type GUID : {E3C9E316-0B5C-4DB8-817D-F92DF00215AE}
Partition GUID : {6B0C9FBB-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Microsoft reserved partition
Attributes : 0x8000000000000000
Attribute Flags : No Default Drive Letter
Hidden : Yes
Platform Required: No
------------------------------------------------------------
Partition 4
Type : Basic Data Partition
Size : 434.47 GB
Offset : 5501.01 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {6B0C9FBC-A9A9-11EB-ABAB-CCF9E4C542BF}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partition 5
Type : Windows Recovery
Size : 1.04 GB
Offset : 450400 MB
Type GUID : {DE94BBA4-06D1-4D40-A16A-BFD50179D6AC}
Partition GUID : {E388FF75-963D-4A7E-A600-D6A0FBDD32C1}
Attributes : 0x8000000000000001
Attribute Flags : Platform Required, No Default Drive Letter
Hidden : Yes
Platform Required: Yes
------------------------------------------------------------
Partition 6
Type : Basic Data Partition
Size : 490.63 GB
Offset : 451466 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {BADE7F10-BFAD-4C6C-BF82-F804BB14D011}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
Partitions:
===========
Partition Style : GPT
Partition Count : 1
Disk ID : {8865871F-7BA5-48DD-9005-70910B7B782D}
Usable Offset : 0.02 MB
Usable Length : 465.76 GB
Max Partitions : 128
Partition 1
Type : Basic Data Partition
Size : 465.76 GB
Offset : 1 MB
Type GUID : {EBD0A0A2-B9E5-4433-87C0-68B6B72699C7}
Partition GUID : {ABD61B81-F76B-4A87-B750-535D4EA58663}
GPT Name : Basic data partition
Attributes : 0x0000000000000000
Attribute Flags : None
Hidden : No
Platform Required: No
------------------------------------------------------------
============================================================
==================== Ende vom Addition.txt =======================
|
