Der prozessor ist nicht der beste i5 2nd generation ich glaube w 11 würde nicht gehen...
andere Brauser gehen, am liebsten edge, und keine Virenprogramme ausser defender.
Zitat:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01-11-2026
durchgeführt von juergen (Administrator) auf DESKTOP-LTP6GC9 (Hewlett-Packard HP Compaq 8100 Elite SFF PC) (04-11-2026 02:57:43)
Gestartet von C:\Users\juergen\Downloads\FRST64.exe
Geladene Profile: juergen
Plattform: Microsoft Windows 10 Pro N Version 22H2 19045.6466 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\Mozilla Thunderbird\thunderbird.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Thunderbird\crashhelper.exe
(C:\Program Files\NVIDIA Corporation\Display\nvtray.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2641.101.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderAiPlatformHost.exe
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\DefenderSessionHelper.exe
(C:\Users\juergen\AppData\Local\Programs\Microsoft VS Code\Code.exe ->) (GitHub, Inc. -> GitHub Inc.) C:\Users\juergen\AppData\Local\Programs\Microsoft VS Code\261c84cb1e\resources\app\node_modules.asar.unpacked\@github\copilot-sdk-win32-x64\prebuilds\win32-x64\copilot-runtime.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(explorer.exe ->) (NOTEPAD++ -> Don HO don.h@free.fr) C:\Program Files\Notepad++\notepad++.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <15>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\156.0.4314.58\msedgewebview2.exe <12>
(Microsoft Corporation -> Microsoft Corporation) C:\Users\juergen\AppData\Local\Programs\Microsoft VS Code\Code.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <35>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <5>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) (Anthropic, PBC -> ) C:\Program Files\WindowsApps\Claude_4.4212.0.0_x64__pzs8sxrjxfjjc\app\resources\cowork-svc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2607.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2641.101.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [IgfxTray] => C:\Windows\system32\igfxtray.exe (Keine Datei)
HKLM\...\Run: [HotKeysCmds] => C:\Windows\system32\hkcmd.exe (Keine Datei)
HKLM\...\Run: [Persistence] => C:\Windows\system32\igfxpers.exe (Keine Datei)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1767712 2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert]
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Run: [Opera Stable] => "C:\Users\juergen\AppData\Local\Programs\Opera\opera.exe" --autostart [3748808 2026-10-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Run: [VLC Plus Player Updater] => C:\Users\juergen\AppData\Local\VLC Plus Player Updater\Updater.exe [233656 2025-08-09] (Aller Media e.K. -> ) <==== ACHTUNG
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Run: [Opera Browser Assistant] => C:\Users\juergen\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [8160712 2026-10-29] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Run: [MicrosoftEdgeAutoLaunch_8B0B0C3D2A123330FA4A118C5B4EC8C6] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5453128 2026-10-30] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\juergen\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\juergen\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" [132779408 2026-11-03] (Microsoft Corporation -> Microsoft Corporation) <==== ACHTUNG
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\RunOnce: [Uninstall 26.189.0928.0009] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\juergen\AppData\Local\Microsoft\OneDrive\26.189.0928.0009" [289792 2026-06-20] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\Wondershare PDFelement Monitor: C:\Windows\System32\PEPrinterMonitor.dll [439512 2026-09-17] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\...\Print\Monitors\Wondershare PDFelement Toolbox Monitor: C:\Windows\System32\PEToolboxMonitor.dll [439512 2026-09-17] (Wondershare Technology Group Co.,Ltd -> Wondershare Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [4924568 2026-08-11] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\156.0.8078.80\Installer\chrmstp.exe [8358040 2026-11-03] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEScreenshot.lnk [2026-11-02]
ShortcutTarget: Wondershare PEScreenshot.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement for Windows\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Wondershare PEToolbox.lnk [2026-11-02]
ShortcutTarget: Wondershare PEToolbox.lnk -> C:\Program Files\Wondershare\Wondershare PDFelement for Windows\PENotify.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {A5ABD973-6921-449D-BFE3-E004C80E8AD1} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem157.0.8089.0{952DF885-2273-4660-85FC-414F5F6BA24C} => C:\Program Files (x86)\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {39E72396-96E3-4D02-9DBC-139E58CEE63B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EE01BCE8-957D-4E0F-8B95-5A6D8C20E61A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {10036497-37D7-4066-A6D2-39A543C11C77} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5862D2D7-2925-41EC-94B2-4C8AD86B6E79} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpCmdRun.exe [1997872 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {670AD41F-18DD-4D42-844F-2FD0EF7F3BAB} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1447029647-3237286587-1954702699-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1081984 2026-10-28] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {297D84B1-5291-4F78-8CA7-0AC64448BF64} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-10-28] (Mozilla Corporation -> Mozilla Foundation)
Task: {5524CA5F-8CCD-49DB-AEF9-BEF8F5B60D98} - System32\Tasks\Opera scheduled assistant Autoupdate 1752148042 => C:\Users\juergen\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7988168 2026-10-29] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\juergen\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)
Task: {79415D41-ADF0-47CA-A5F5-C8E46BDF81D1} - System32\Tasks\Opera scheduled Autoupdate 1752148031 => C:\Users\juergen\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [7988168 2026-10-29] (Opera Norway AS -> Opera Software)
Task: {688F3A6A-FC86-4010-98F2-12DCB81158D8} - System32\Tasks\VLC Plus Player Updater => C:\Users\juergen\AppData\Local\VLC Plus Player Updater\Updater.exe [233656 2025-08-09] (Aller Media e.K. -> ) <==== ACHTUNG
Task: {2AD36E4D-F12C-4534-970C-775A9644E6B4} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1447029647-3237286587-1954702699-1001 => C:\Users\juergen\AppData\Roaming\Zoom\bin\Zoom.exe [526280 2026-11-02] (Zoom Communications, Inc. -> Zoom Communications, Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{224161fa-c8b7-4bb1-9629-8317a40d2767}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{224161fa-c8b7-4bb1-9629-8317a40d2767}: [DhcpDomain] vodafone.ultrahub
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: lxks2f4e.default-release-1784798383961 -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 [2026-11-04]
FF Notifications: Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 -> hxxps://chatgpt.com
FF NewTabOverride: Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 -> Enabled: addonY219@freshyserch.com
FF NewTabOverride: Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 -> Enabled: uBlock0@raymondhill.net
FF NewTabOverride: Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 -> Disabled: addonY219@freshyserch.com
FF NewTabOverride: Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961 -> Disabled: addonY255@gettemplates.net
FF Extension: (Freshy Newtab and Search) - C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961\Extensions\addonY219@freshyserch.com.xpi [2026-08-11] [UpdateUrl:hxxps://cdn.freshysearch-cdn.com/xpi/freshy/mv3/1023/searchnnewtab/updates.json]
FF Extension: (Get Template Search) - C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961\Extensions\addonY255@gettemplates.net.xpi [2026-08-11] [UpdateUrl:hxxps://cdn.gettemplates-cdn.net/xpi/gettemplates/mv3/0823/search/updates.json]
FF Extension: (New Tab) - C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961\Extensions\newtab@mozilla.org.xpi [2026-10-31]
FF Extension: (uBlock Origin) - C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961\Extensions\uBlock0@raymondhill.net.xpi [2026-10-18]
FF ProfilePath: C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\na9z4cyg.altes Profil [2026-10-30]
FF ProfilePath: C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\wu75nnql.default [2026-10-30]
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin: @videolan.org/vlc,version=3.0.23 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [Keine Datei]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert]
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\juergen\AppData\Local\Microsoft\Edge\User Data\Default [2026-11-04]
Edge Notifications: Default -> hxxps://app.zoom.us; hxxps://www.facebook.com
Edge Extension: (Google Docs Offline) - C:\Users\juergen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-29]
Edge Extension: (Edge relevant text changes) - C:\Users\juergen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2025-07-10]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]
Chrome:
=======
CHR Profile: C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default [2026-10-24]
CHR Extension: (Avira Password Manager) - C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2026-10-09]
CHR Extension: (Avira Safe Shopping) - C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2026-10-24]
CHR Extension: (Avira Browserschutz) - C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2026-10-09]
CHR Extension: (Google Docs Offline) - C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-10-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\juergen\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2026-10-09]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
Opera:
=======
OPR DefaultProfile: Default
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 CoworkVMService; C:\Program Files\WindowsApps\Claude_4.4212.0.0_x64__pzs8sxrjxfjjc\app\resources\cowork-svc.exe [13725520 2026-11-02] (Anthropic, PBC -> )
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243208 2026-10-26] (HP Inc. -> HP Inc.)
S3 LibreOfficeMaintenance; C:\Program Files\LibreOffice\program\update_service.exe [125784 2026-10-23] (The Document Foundation -> The Document Foundation)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MpDefenderCoreService.exe [2386280 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803064 2026-06-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\NisSrv.exe [5609240 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26100.4-0\MsMpEng.exe [378128 2026-10-28] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WondersharePDFelement13DispatchService; C:\Program Files\Common Files\Wondershare\PDFelement13\DispatchService\PEServiceProcess.exe [344440 2026-10-29] (Wondershare Technology Group Co.,Ltd -> Wondershare)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [176976 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 iriuna0; C:\WINDOWS\System32\DriverStore\FileRepository\iriunaud.inf_amd64_03929b79d4508491\iriuna0.sys [41096 2025-08-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 iriuna1; C:\WINDOWS\System32\DriverStore\FileRepository\iriunaud.inf_amd64_03929b79d4508491\iriuna1.sys [41096 2025-08-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174416 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [667840 2026-08-30] (Microsoft Windows Hardware Compatibility Publisher -> AM Crypto)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-10-28] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [677952 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [144408 2026-10-28] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-11-04 02:57 - 2026-11-04 03:00 - 000022329 _____ C:\Users\juergen\Downloads\FRST.txt
2026-11-04 02:54 - 2026-11-04 02:54 - 002457088 _____ (Farbar) C:\Users\juergen\Downloads\FRST64(1).exe
2026-11-04 02:51 - 2026-11-04 02:51 - 002457088 _____ (Farbar) C:\Users\juergen\Downloads\FRST64.exe
2026-11-03 18:41 - 2026-11-03 18:43 - 000372736 _____ (Derick Rethans) C:\Users\juergen\Downloads\php_xdebug-3.5.3-8.2-ts-vs16-x86_64.dll
2026-11-03 17:50 - 2026-11-03 17:50 - 000007093 _____ C:\Users\juergen\Downloads\PrimfaktorenAusgabe.php
2026-11-03 12:29 - 2026-11-03 17:43 - 000029906 _____ C:\Users\juergen\Downloads\factorizeMitRest.php
2026-11-02 14:02 - 2026-11-02 14:02 - 000000000 ____D C:\Users\juergen\AppData\Local\Claude-Data
2026-11-02 14:02 - 2026-11-02 14:02 - 000000000 ____D C:\ProgramData\Claude
2026-11-02 14:00 - 2026-11-02 14:00 - 007214240 _____ (Anthropic, PBC) C:\Users\juergen\Downloads\Claude Setup.exe
2026-11-02 08:20 - 2026-11-02 08:20 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2026-11-02 08:18 - 2026-11-02 08:18 - 000000883 _____ C:\Users\juergen\Desktop\Electrum.lnk
2026-11-02 08:17 - 2026-11-02 08:17 - 000000000 ____D C:\Program Files\dotnet
2026-11-02 08:13 - 2026-11-02 08:13 - 000000000 ____D C:\ProgramData\GNU
2026-11-02 08:13 - 2026-11-02 08:13 - 000000000 ____D C:\Program Files\GnuPG
2026-11-02 08:12 - 2026-11-02 08:12 - 000001163 _____ C:\Users\Public\Desktop\LibreOffice 26.8.lnk
2026-11-02 08:12 - 2026-11-02 08:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LibreOffice
2026-11-02 08:10 - 2026-11-02 08:10 - 000001201 _____ C:\Users\Public\Desktop\Wondershare PDFelement.lnk
2026-11-02 08:10 - 2026-09-17 16:33 - 011861208 _____ () C:\WINDOWS\SysWOW64\PECRT32.dll
2026-11-02 08:10 - 2026-09-17 16:33 - 000439512 _____ (Wondershare Software) C:\WINDOWS\system32\PEToolboxMonitor.dll
2026-11-02 08:10 - 2026-09-17 16:33 - 000439512 _____ (Wondershare Software) C:\WINDOWS\system32\PEPrinterMonitor.dll
2026-11-02 08:03 - 2026-11-02 08:03 - 000001047 _____ C:\Users\Public\Desktop\IrfanView 64.lnk
2026-11-02 08:03 - 2026-11-02 08:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView
2026-11-01 05:18 - 2026-11-01 14:58 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Breitbandmessung
2026-11-01 05:17 - 2026-11-01 05:17 - 000002326 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Festnetz-Check.lnk
2026-11-01 05:17 - 2026-11-01 05:17 - 000002314 _____ C:\Users\Public\Desktop\Festnetz-Check.lnk
2026-11-01 05:17 - 2026-11-01 05:17 - 000000000 ____D C:\Users\juergen\AppData\Local\breitbandmessung-updater
2026-11-01 05:17 - 2026-11-01 05:17 - 000000000 ____D C:\Program Files\Breitbandmessung
2026-11-01 05:15 - 2026-11-01 05:15 - 114873088 _____ (zafaco GmbH) C:\Users\juergen\Downloads\Festnetz-Check-win.exe
2026-10-30 16:01 - 2026-10-30 16:01 - 000000000 ____D C:\Program Files\MATLAB
2026-10-30 15:56 - 2026-10-30 15:57 - 000000000 ____D C:\Users\juergen\Downloads\_temp_matlab_R2026b_Windows
2026-10-30 15:55 - 2026-10-30 15:56 - 287213920 _____ C:\Users\juergen\Downloads\matlab_R2026b_Windows.exe
2026-10-30 12:08 - 2026-10-26 10:04 - 000058256 _____ C:\Users\juergen\Desktop\bookmarks-2026-10-28_663_6_HhXUZnCA0e1LLk3KTjOmAahbxRDgJLjMY61VugvcU=.jsonlz4
2026-10-29 07:08 - 2026-10-29 07:23 - 000000895 _____ C:\Users\juergen\Documents\websites.txt
2026-10-29 07:07 - 2026-10-29 07:07 - 000000000 ____D C:\Users\juergen\Documents\_irgendwelchedatingportale
2026-10-28 12:59 - 2026-10-30 11:07 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-28 06:11 - 2026-10-30 11:07 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-10-27 13:32 - 2026-10-28 09:55 - 000000000 ____D C:\Users\juergen\Documents\_LustigesAus socialMedis
2026-10-27 13:32 - 2026-10-27 13:32 - 000000000 ____D C:\Users\juergen\Documents\_lustigesAusSoc
2026-10-27 13:31 - 2026-10-27 13:31 - 000000000 ____D C:\Users\juergen\Documents\_lustugesAus
2026-10-26 14:07 - 2026-10-26 14:07 - 000014510 _____ C:\Users\juergen\Downloads\index.php
2026-10-25 08:07 - 2026-10-30 10:11 - 000000000 ____D C:\Users\juergen\Documents\_finanzen
2026-10-25 08:01 - 2026-10-25 08:01 - 000000000 ____D C:\Users\juergen\Documents\_pdfFiles
2026-10-25 07:55 - 2026-10-25 08:06 - 000000000 ____D C:\Users\juergen\Documents\_pictures
2026-10-25 07:55 - 2026-10-25 07:58 - 000000000 ____D C:\Users\juergen\Documents\_javascript
2026-10-25 07:53 - 2026-10-25 08:02 - 000000000 ____D C:\Users\juergen\Documents\_HtmlDateien
2026-10-25 07:34 - 2026-10-25 08:09 - 000000000 ____D C:\Users\juergen\Documents\_diverseCss
2026-10-24 20:07 - 2026-10-25 02:08 - 000001298 _____ C:\Users\juergen\Desktop\diashow.ahk - Verknüpfung.lnk
2026-10-23 12:17 - 2026-10-23 12:17 - 000000488 __RSH C:\ProgramData\ntuser.pol
2026-10-23 12:13 - 2026-10-23 12:14 - 000000148 _____ C:\Users\juergen\Desktop\ChatGpt 23 10 2026 13 14.url
2026-10-23 11:23 - 2026-10-23 11:23 - 000000000 ____D C:\Users\juergen\Downloads\mt86plus_9.00_x86_64.iso
2026-10-23 11:20 - 2026-10-23 11:22 - 000311796 _____ C:\Users\juergen\Downloads\mt86plus_9.00_x86_64.iso.zip
2026-10-23 11:15 - 2026-10-23 11:15 - 000000000 ____D C:\Users\juergen\Downloads\Rufus
2026-10-23 11:14 - 2026-10-23 12:17 - 000000098 _____ C:\Users\juergen\Downloads\rufus.ini
2026-10-23 11:14 - 2026-10-23 11:14 - 001989992 _____ (Akeo Consulting) C:\Users\juergen\Downloads\rufus-4.15p.exe
2026-10-23 09:57 - 2026-10-23 09:57 - 000528924 _____ C:\Users\juergen\Downloads\mt86plus_9.00_USB_Installer.exe
2026-10-23 09:20 - 2026-10-23 09:20 - 000012423 _____ C:\Users\juergen\Downloads\NotepadPP_PHP_Sitzung.xml
2026-10-23 09:03 - 2026-10-23 09:03 - 000027570 _____ C:\Users\juergen\Documents\transkriptPart6.txt
2026-10-23 08:34 - 2026-10-23 08:34 - 000000000 ____D C:\memtest
2026-10-23 08:33 - 2026-10-23 08:33 - 012715306 _____ C:\Users\juergen\Downloads\memtest86-usb.zip
2026-10-22 12:04 - 2026-10-22 12:04 - 033815912 _____ C:\Users\juergen\Downloads\php-8.2.35-Win32-vs16-x64.zip
2026-10-21 15:49 - 2026-10-21 15:49 - 000000000 ____D C:\ProgramData\Dbg
2026-10-21 15:38 - 2026-10-21 15:49 - 000000000 ____D C:\Users\juergen\AppData\Local\dbg
2026-10-21 13:48 - 2026-10-21 13:48 - 000000685 _____ C:\Users\juergen\Downloads\windbg.appinstaller
2026-10-21 05:33 - 2026-10-21 05:33 - 000000000 ____D C:\Users\juergen\AppData\Local\NVIDIA Corporation
2026-10-21 05:32 - 2026-10-21 05:32 - 000002210 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2026-10-21 05:32 - 2016-11-14 13:30 - 001767712 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2026-10-21 05:32 - 2016-11-14 13:30 - 001756560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2026-10-21 05:32 - 2016-11-14 13:30 - 001377752 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2026-10-21 05:32 - 2016-11-14 13:30 - 001316136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2026-10-21 05:32 - 2016-11-14 13:30 - 000112168 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2026-10-21 05:31 - 2016-11-14 10:45 - 000615992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2026-10-21 05:30 - 2026-10-21 05:30 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2026-10-21 05:29 - 2016-11-14 13:30 - 031523384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 024208440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 023000000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcompiler.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 017559384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 016128720 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 015301056 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcompiler.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 014497712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 013915720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 013826968 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 011270656 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 011208312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 004253240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 003995192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 002822568 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 001908272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6434201.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 001557552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6434201.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000951232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000913856 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000909760 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000876480 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000114744 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvaudcap64v.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000104512 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvaudcap32v.dll
2026-10-21 05:29 - 2016-11-14 13:30 - 000056384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvvad64v.sys
2026-10-21 05:28 - 2026-10-21 05:28 - 000000000 ____D C:\NVIDIA
2026-10-21 05:25 - 2026-10-21 05:25 - 306673592 _____ (NVIDIA Corporation) C:\Users\juergen\Downloads\342.01-desktop-win10-64bit-international.exe
2026-10-20 12:56 - 2026-10-20 12:56 - 000828119 _____ C:\Users\juergen\Downloads\MathePlanet Bewusstsein.pdf
2026-10-15 04:38 - 2026-10-15 04:38 - 000004383 _____ C:\Users\juergen\Downloads\Goldbach_Formelsammlung_Ergaenzung_2026-10-15.md
2026-10-14 16:29 - 2026-10-14 16:29 - 000000000 ____D C:\Users\juergen\AppData\Local\Backup
2026-10-13 09:22 - 2026-10-13 09:23 - 000000000 ____D C:\WINDOWS\Minidump
2026-10-13 09:22 - 2026-10-13 09:22 - 000758068 _____ C:\WINDOWS\Minidump\101326-10671-01.dmp
2026-10-12 05:38 - 2026-10-12 05:38 - 000000000 ____D C:\Users\juergen\.gnutls
2026-10-11 16:45 - 2026-10-11 16:45 - 000000766 _____ C:\Users\juergen\Documents\BriefAnsKBA.txt
2026-10-09 13:46 - 2026-11-03 08:08 - 000002315 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-10-09 13:46 - 2026-11-03 08:08 - 000002268 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-10-09 13:46 - 2026-10-09 13:46 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-10-09 13:46 - 2026-10-09 13:46 - 000000000 ____D C:\Users\juergen\AppData\Local\Google
2026-10-09 13:45 - 2026-10-09 13:45 - 000000000 ____D C:\Program Files\Google
2026-10-09 13:44 - 2026-10-09 13:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleSystem
2026-10-09 13:44 - 2026-10-09 13:44 - 000000000 ____D C:\Program Files (x86)\Google
2026-10-09 13:43 - 2026-10-09 13:44 - 013288376 _____ (Google LLC) C:\Users\juergen\Downloads\ChromeSetup.exe
2026-10-08 10:42 - 2026-10-08 10:42 - 000000170 _____ C:\Users\juergen\Documents\gespraechSTVA.txt
2026-10-05 12:01 - 2026-10-05 12:01 - 000000045 _____ C:\Users\juergen\Documents\kreuzfahrten.txt
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-11-04 02:59 - 2023-06-13 15:46 - 000000000 ____D C:\FRST
2026-11-04 02:51 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-11-04 02:34 - 2026-06-19 14:09 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-11-04 02:32 - 2023-12-04 03:51 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-11-03 20:13 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2026-11-03 20:13 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-11-03 19:07 - 2026-07-23 12:04 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Code
2026-11-03 19:05 - 2026-07-23 11:58 - 000000000 ____D C:\Users\juergen\AppData\Local\Programs\Microsoft VS Code
2026-11-03 19:04 - 2026-07-23 11:59 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Visual Studio Code
2026-11-03 16:13 - 2026-10-01 15:30 - 000000000 ____D C:\Users\juergen\Documents\_matheplanet
2026-11-03 08:19 - 2025-07-10 12:46 - 000000000 ____D C:\Users\juergen\AppData\Local\Programs\Opera
2026-11-03 08:10 - 2026-06-19 14:17 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1447029647-3237286587-1954702699-1001
2026-11-03 08:10 - 2026-06-19 14:17 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-1447029647-3237286587-1954702699-1001
2026-11-03 08:10 - 2026-06-19 14:17 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1447029647-3237286587-1954702699-1001
2026-11-03 08:10 - 2026-06-19 14:00 - 000002450 _____ C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-11-03 08:07 - 2026-06-19 14:17 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-11-03 08:07 - 2026-06-19 14:17 - 000003684 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-11-02 20:02 - 2025-07-10 08:24 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-11-02 19:24 - 2026-09-02 16:14 - 000000000 ____D C:\Users\juergen\Documents\_rechtlich
2026-11-02 14:06 - 2026-09-02 16:12 - 000000000 ____D C:\Users\juergen\Documents\_witzig
2026-11-02 14:02 - 2025-07-09 16:42 - 000000000 ____D C:\Users\juergen\AppData\Local\Packages
2026-11-02 14:02 - 2025-07-09 16:42 - 000000000 ____D C:\ProgramData\Packages
2026-11-02 08:20 - 2026-06-19 14:17 - 000004258 _____ C:\WINDOWS\system32\Tasks\ZoomUpdateTaskUser-S-1-5-21-1447029647-3237286587-1954702699-1001
2026-11-02 08:20 - 2025-09-25 15:19 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Zoom
2026-11-02 08:19 - 2026-06-19 14:17 - 000004534 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1752148042
2026-11-02 08:19 - 2026-06-19 14:17 - 000004270 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1752148031
2026-11-02 08:19 - 2025-07-10 12:47 - 000001423 _____ C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2026-11-02 08:18 - 2025-08-03 11:04 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Electrum
2026-11-02 08:18 - 2025-08-03 11:04 - 000000000 ____D C:\Program Files\Electrum
2026-11-02 08:17 - 2025-07-29 12:32 - 000000000 ____D C:\ProgramData\Package Cache
2026-11-02 08:14 - 2026-06-24 13:40 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OBS Studio.lnk
2026-11-02 08:14 - 2026-06-24 13:40 - 000001052 _____ C:\Users\Public\Desktop\OBS Studio.lnk
2026-11-02 08:14 - 2026-05-22 07:43 - 000000000 ____D C:\ProgramData\obs-studio
2026-11-02 08:13 - 2026-05-22 07:40 - 000000000 ____D C:\Program Files\obs-studio
2026-11-02 08:13 - 2025-07-29 12:33 - 000000000 ____D C:\Program Files (x86)\GnuPG
2026-11-02 08:11 - 2026-08-02 05:36 - 000000000 ____D C:\Program Files\LibreOffice
2026-11-02 08:10 - 2026-07-31 10:03 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2026-11-02 08:09 - 2026-07-31 10:02 - 000000000 ____D C:\ProgramData\Wondershare
2026-11-02 08:09 - 2026-07-31 10:02 - 000000000 ____D C:\Program Files\Common Files\Wondershare
2026-11-02 08:06 - 2026-07-31 10:02 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Wondershare
2026-11-02 08:06 - 2025-07-09 15:24 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2026-11-02 08:04 - 2026-08-05 20:44 - 000002242 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Window Spy.lnk
2026-11-02 08:04 - 2026-08-05 20:44 - 000001352 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AutoHotkey Dash.lnk
2026-11-02 08:04 - 2026-08-05 20:42 - 000000000 ____D C:\Program Files\AutoHotkey
2026-11-02 08:04 - 2025-08-19 09:16 - 000001108 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2026-11-02 08:04 - 2025-08-19 09:16 - 000001052 _____ C:\Users\Public\Desktop\WinRAR.lnk
2026-11-02 08:04 - 2025-08-19 09:16 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-11-02 08:04 - 2025-08-19 09:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-11-02 08:04 - 2025-08-19 09:15 - 000000000 ____D C:\Program Files\WinRAR
2026-11-02 08:04 - 2025-07-10 08:38 - 000000877 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2026-11-02 00:52 - 2026-06-19 14:19 - 001632024 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-11-02 00:52 - 2019-12-07 15:51 - 000706062 _____ C:\WINDOWS\system32\perfh007.dat
2026-11-02 00:52 - 2019-12-07 15:51 - 000142356 _____ C:\WINDOWS\system32\perfc007.dat
2026-11-02 00:52 - 2019-12-07 10:12 - 000000000 ____D C:\WINDOWS\INF
2026-11-02 00:47 - 2025-08-09 10:10 - 000000000 ____D C:\Users\juergen\AppData\Local\VLC Plus Player Updater
2026-11-02 00:46 - 2026-06-19 14:17 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-11-02 00:46 - 2025-07-09 15:24 - 000000000 ____D C:\ProgramData\NVIDIA
2026-11-02 00:46 - 2022-01-04 15:03 - 000008192 ___SH C:\DumpStack.log.tmp
2026-11-02 00:46 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2026-11-01 14:58 - 2019-12-07 10:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2026-11-01 12:11 - 2026-09-04 06:50 - 000000000 ____D C:\Users\juergen\Documents\_galoisundMathe
2026-11-01 00:55 - 2026-06-19 14:17 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-11-01 00:22 - 2025-07-09 15:01 - 000002512 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-30 16:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2026-10-30 15:45 - 2026-09-11 09:46 - 000000000 ____D C:\Users\juergen\Documents\_sonstigePdatein
2026-10-30 11:10 - 2025-10-26 14:36 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps
2026-10-30 11:07 - 2025-07-10 08:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-10-30 04:08 - 2025-08-09 10:19 - 000000000 ____D C:\Users\juergen\AppData\Roaming\vlc
2026-10-28 20:20 - 2026-08-24 15:35 - 000002129 _____ C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-28 20:20 - 2025-07-10 08:24 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-28 18:07 - 2025-07-09 15:01 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-28 16:18 - 2025-07-18 09:13 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-10-28 06:11 - 2025-12-15 09:49 - 000402048 _____ (Mozilla Foundation) C:\Users\juergen\Desktop\Firefox.exe
2026-10-26 20:26 - 2026-08-27 09:39 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-10-26 20:26 - 2026-08-27 09:39 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2026-10-26 11:34 - 2026-07-08 05:25 - 000000000 ___RD C:\Users\juergen\Documents\Scanned Documents
2026-10-25 08:15 - 2026-08-05 08:09 - 000000000 ____D C:\Users\juergen\Documents\TextDateien
2026-10-25 08:06 - 2026-07-28 10:51 - 000000000 ____D C:\Users\juergen\Documents\Dienstag11_00_files
2026-10-25 08:05 - 2026-07-28 10:53 - 000000000 ____D C:\Users\juergen\Documents\dienstag_27_7_11_30_files
2026-10-25 08:04 - 2026-07-27 13:37 - 000000000 ____D C:\Users\juergen\Documents\_chatverlaeufe
2026-10-24 21:01 - 2026-05-21 18:32 - 000005120 _____ C:\Users\juergen\Downloads\Microsoft.Services.Store.winmd
2026-10-24 20:07 - 2026-08-07 08:32 - 000000000 ____D C:\Users\juergen\Documents\AutoHotkey
2026-10-24 18:25 - 2025-08-09 10:12 - 000000916 _____ C:\Users\Public\Desktop\VLC media player.lnk
2026-10-23 11:14 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2026-10-22 13:32 - 2026-08-02 04:09 - 000000161 _____ C:\Users\juergen\Documents\OffeneZyklen.txt
2026-10-22 12:06 - 2025-07-29 12:21 - 000000000 ____D C:\xampp
2026-10-21 05:37 - 2025-07-09 15:23 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2026-10-21 05:36 - 2026-06-19 14:00 - 000000000 ____D C:\Users\juergen
2026-10-21 05:35 - 2025-09-15 09:18 - 000000000 ____D C:\Users\juergen\AppData\Local\CrashDumps
2026-10-21 05:32 - 2025-07-09 16:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2026-10-21 05:32 - 2025-07-09 15:23 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2026-10-21 05:32 - 2023-05-06 11:04 - 000000000 ____D C:\temp
2026-10-21 04:55 - 2025-10-06 09:30 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\MMC
2026-10-19 22:10 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-10-17 21:17 - 2026-08-06 08:34 - 000000000 ____D C:\Users\juergen\AppData\Roaming\Microsoft\HTML Help
2026-10-16 08:40 - 2026-07-05 10:57 - 000014966 _____ C:\Users\juergen\Documents\israelKIkorrigiert.txt
2026-10-14 16:29 - 2025-07-09 16:42 - 000000000 ____D C:\Users\juergen\AppData\Local\ConnectedDevicesPlatform
2026-10-14 15:36 - 2025-07-10 12:45 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-14 15:32 - 2025-07-10 12:44 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-14 13:46 - 2025-07-09 16:42 - 000000000 __RHD C:\Users\Public\AccountPictures
2026-10-14 13:28 - 2026-08-26 08:58 - 000000000 ____D C:\dragxel
2026-10-13 09:22 - 2025-08-25 09:09 - 575982139 _____ C:\WINDOWS\MEMORY.DMP
2026-10-05 14:40 - 2026-09-02 15:28 - 000080984 _____ C:\Users\juergen\Documents\Kontovorgange0209.txt
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2026-05-22 07:52 - 2026-07-02 16:22 - 000000015 _____ () C:\Users\juergen\AppData\Roaming\obs-virtualcam.txt
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 01-11-2026
durchgeführt von juergen (04-11-2026 03:05:21)
Gestartet von C:\Users\juergen\Downloads
Microsoft Windows 10 Pro N Version 22H2 19045.6466 (X64) (2026-06-19 13:18:01)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-1447029647-3237286587-1954702699-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-1447029647-3237286587-1954702699-503 - Limited - Disabled)
Gast (S-1-5-21-1447029647-3237286587-1954702699-501 - Limited - Disabled)
juergen (S-1-5-21-1447029647-3237286587-1954702699-1001 - Administrators - Enabled) => C:\Users\juergen
WDAGUtilityAccount (S-1-5-21-1447029647-3237286587-1954702699-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 26.05 (x64) (HKLM\...\7-Zip) (Version: 26.05 - Igor Pavlov)
AutoHotkey (HKLM\...\AutoHotkey) (Version: 2.0.31 - AutoHotkey Foundation LLC)
DroidCam OBS Plugin (X64) (HKLM-x32\...\OBSDroidCam) (Version: 2.5.1 - Dev47Apps)
Electrum (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Electrum) (Version: 4.8.3 - Electrum Technologies GmbH)
Festnetz-Check 3.13.0 (HKLM\...\14607473-30db-509f-94f0-bb7c085c619e) (Version: 3.13.0 - zafaco GmbH)
GNU Privacy Guard (HKLM\...\GnuPG) (Version: 2.5.24 - The GnuPG Project)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 156.0.8078.80 - Google LLC)
Gpg4win (4.4.1) (HKLM-x32\...\Gpg4win) (Version: 4.4.1 - The Gpg4win Project)
IrfanView 4.76 (64-bit) (HKLM\...\IrfanView64) (Version: 4.76 - Irfan Skiljan)
Iriun Webcam (HKLM-x32\...\IriunWebcam_is1) (Version: - )
LibreOffice 26.8.2.2 (HKLM\...\{8B759F5C-C713-43BD-9EA0-3DAA5C81EFD9}) (Version: 26.8.2.2 - The Document Foundation)
Microsoft .NET Host - 10.0.14 (x64) (HKLM\...\{7A1A9C6B-1386-478E-9C35-7242968A5634}) (Version: 80.56.61678 - Microsoft Corporation) Hidden
Microsoft .NET Host - 10.0.8 (x86) (HKLM-x32\...\{0F9FB11C-AD3C-4F55-B657-364489CAC99F}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.14 (x64) (HKLM\...\{3887007B-C74B-4DF7-8155-F3838C013D2C}) (Version: 80.56.61678 - Microsoft Corporation) Hidden
Microsoft .NET Host FX Resolver - 10.0.8 (x86) (HKLM-x32\...\{0D5C8AE5-439B-4D3F-82CE-A0D14D9C4EF7}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.14 (x64) (HKLM\...\{941B1F64-FCD9-4C40-B927-E75F49DD96D8}) (Version: 80.56.61678 - Microsoft Corporation) Hidden
Microsoft .NET Runtime - 10.0.8 (x86) (HKLM-x32\...\{CAE576AC-3499-4735-B4F8-D82B2D670BA1}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 156.0.4314.58 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 156.0.4314.58 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\OneDriveSetup.exe) (Version: 26.195.1006.0007 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.28902 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{042d26ef-3dbe-4c25-95d3-4c1b11b235a7}) (Version: 12.0.40664.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.40664 (HKLM\...\{010792BA-551A-3AC0-A7EF-0FAB4156C382}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.40664 (HKLM\...\{53CF6934-A98D-3D84-9146-FC4EDF3D5641}) (Version: 12.0.40664 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.51.36247 (HKLM\...\{6FA797CF-6B76-4B6D-87EE-768F92008720}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.51.36247 (HKLM\...\{931A2CF0-2404-45EA-82F5-345735AE6A90}) (Version: 14.51.36247 - Microsoft Corporation) Hidden
Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247 (HKLM-x32\...\{0e3bb569-69d6-4c34-bff9-c2f81db5e5f0}) (Version: 14.51.36247.0 - Microsoft Corporation)
Microsoft Visual Studio Code (User) (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\{771FD6B0-FA20-440A-A002-3B3BAC16DC50}_is1) (Version: 1.144.1 - Microsoft Corporation)
Microsoft Windows Desktop Runtime - 10.0.14 (x64) (HKLM\...\{64BFC674-D664-480B-AFF2-D47C5531D6D2}) (Version: 80.56.61678 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime - 10.0.8 (x86) (HKLM-x32\...\{B0AD693F-9836-4CEF-B4FD-CFEACD8290B5}) (Version: 80.32.52183 - Microsoft Corporation) Hidden
Microsoft Windows Desktop Runtime 10.0.14 (x64) (HKLM-x32\...\{29A18B06-B190-4463-9FFC-BC0D70D80B7C}) (Version: 10.0.14.50000 - Microsoft Corporation)
Microsoft Windows Desktop Runtime 10.0.8 (x86) (HKLM-x32\...\{DA4D6331-BCC8-4AEC-9120-498589CB7983}) (Version: 10.0.8.50000 - Microsoft Corporation)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 159.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 140.0.1 - Mozilla)
Mozilla Thunderbird (x64 de) (HKLM\...\Mozilla Thunderbird 159.0 (x64 de)) (Version: 159.0 - Mozilla)
Need for Speed™ Most Wanted PC Demo (HKLM-x32\...\{E085FD28-F22C-4D41-00A1-F0751BF8EFC1}) (Version: - )
Notepad++ (64-bit x64) (HKLM\...\Notepad++) (Version: 8.9.8.1 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 340.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 340.50 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 342.01 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.125 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.125 - NVIDIA Corporation)
NVIDIA Grafiktreiber 342.01 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 342.01 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.30.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.30.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.26.0703 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.26.0703 - NVIDIA Corporation)
NVIDIA Stereoscopic 3D Driver (HKLM-x32\...\NVIDIAStereo) (Version: 7.17.12.6514 - NVIDIA Corporation) Hidden
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 33.0.0 - OBS Project)
OneClick (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\OneClick) (Version: 2.5.10.15 - OneClick)
Opera Stable 139.0.6053.22 (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\Opera 139.0.6053.22) (Version: 139.0.6053.22 - Opera Software)
SetupChipset (HKLM\...\{A1606226-071B-45CD-AD52-925D6080281A}) (Version: 10.1.20398.8776 - Intel Corporation)
Total Commander 64+32-bit (Remove or Repair) (HKLM\...\Totalcmd64) (Version: 11.55 - Ghisler Software GmbH)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.26.29 - AM Crypto)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.24 - VideoLAN)
VLC Plus Player Updater (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\AM VLC Plus Player Updater) (Version: 1.2.251120
- ) <==== ACHTUNG
WinRAR 7.23 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.23.0 - win.rar GmbH)
Wondershare PDFelement ( Version 13.0.10 ) (HKLM\...\{5B4F5CD0-9910-4E18-A2B3-CB7B1E6F2A98}_is1) (Version: 13.0.10 - Wondershare)
XAMPP (HKLM\...\xampp) (Version: 8.2.12-0 - Apache Friends)
Zoom Workplace (HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\ZoomUMX) (Version: 7.2.5 (51704) - Zoom Communications, Inc.)
Packages:
=========
Claude -> C:\Program Files\WindowsApps\Claude_4.4212.0.0_x64__pzs8sxrjxfjjc [2026-11-02] (Anthropic, PBC) [Startup Task]
Genco-A brand new podcasts app -> C:\Program Files\WindowsApps\9397djFox.Genco-Abrandnewpodcastsapp_1.0.3.0_x64__p09r4hp8rggvp [2026-05-21] (dj_Fox)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_166.3.1118.0_x64__v10z8vjag6ke6 [2026-10-26] (HP Inc.)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2641.101.0_x64__cv1g1gvanyjgm [2026-10-30] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.6.4.0_x64__8wekyb3d8bbwe [2026-11-03] (Microsoft Corp.)
WinDbg -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2610.1001.0_x64__8wekyb3d8bbwe [2026-10-21] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-1447029647-3237286587-1954702699-1001_Classes\CLSID\{A223D9BB-E936-4DF0-B89E-258C8AAE9B8D}\InprocServer32 -> C:\Program Files\Mozilla Thunderbird\notificationserver.dll (Mozilla Corporation -> Mozilla Foundation)
CustomCLSID: HKU\S-1-5-21-1447029647-3237286587-1954702699-1001_Classes\CLSID\{bc49d5e2-91ab-411b-a09a-43d09a15bf59}\InprocServer32 -> C:\Program Files\Common Files\Wondershare\PDFelement13\AddIns\PEOfficeAddIn.exe (Wondershare Technology Group Co.,Ltd -> Wondershare)
CustomCLSID: HKU\S-1-5-21-1447029647-3237286587-1954702699-1001_Classes\CLSID\{C7E46F14-612E-49AA-9ED7-425370610287}\localserver32 -> E:\installaatonsFiles\LosslessCut-win-3.69.0\LosslessCut.exe (Mikael Finstad) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-1447029647-3237286587-1954702699-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\juergen\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.28902\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2025-05-21] (g10 Code GmbH -> g10 Code GmbH)
ContextMenuHandlers1: [PDFelement.ContextMenu] -> {ea6c980d-7823-3752-88ac-d43b3a873d20} => C:\Program Files\Common Files\Wondershare\PDFelement13\Shell Extensions\PEShellContextMenu4.exe [2026-10-29] (Wondershare Technology Group Co.,Ltd -> Wondershare)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2026-06-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2026-06-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers3: [ContextMenu] -> {ee10d625-cc60-30a4-b3df-4b349785be6b} => C:\Program Files (x86)\Avira\Security\Antivirus.ContextMenu\Antivirus.ContextMenu.DLL -> Keine Datei
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [GpgEX] -> {CCD955E4-5C16-4A33-AFDA-A8947A94946B} => C:\Program Files (x86)\Gpg4win\bin_64\gpgex.dll [2025-05-21] (g10 Code GmbH -> g10 Code GmbH)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files\7-Zip\7-zip.dll [2026-10-21] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2026-06-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2026-06-27] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\juergen\Desktop\apache_start - Verknüpfung.lnk -> C:\xampp\apache_start.bat ()
ShortcutWithArgument: C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps\Amazon.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "3c3cd8e1-d674-4344-8ee5-9003c3a4a0ff" "-new-window" "hxxps://www.amazon.de" "-profile" "C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961" "-container" "0"
ShortcutWithArgument: C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps\Instagram.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "ce321c31-2435-48fe-b18a-0e958a4612cc" "-new-window" "hxxps://www.instagram.com/?utm_source=pwa_homescreen&__pwa=1" "-profile" "C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961" "-container" "0"
ShortcutWithArgument: C:\Users\juergen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps\YouTube.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "9442d08b-d77d-4ebe-bdc5-eb6bf4c33299" "-new-window" "hxxps://www.youtube.com/?feature=ytca" "-profile" "C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961" "-container" "0"
ShortcutWithArgument: C:\Users\juergen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Instagram.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "ce321c31-2435-48fe-b18a-0e958a4612cc" "-new-window" "hxxps://www.instagram.com/?utm_source=pwa_homescreen&__pwa=1" "-profile" "C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961" "-container" "0"
ShortcutWithArgument: C:\Users\juergen\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\YouTube.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> "-taskbar-tab" "9442d08b-d77d-4ebe-bdc5-eb6bf4c33299" "-new-window" "hxxps://www.youtube.com/?feature=ytca" "-profile" "C:\Users\juergen\AppData\Roaming\Mozilla\Firefox\Profiles\lxks2f4e.default-release-1784798383961" "-container" "0"
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2026-05-22 10:35 - 2026-10-21 13:00 - 000101888 _____ (Igor Pavlov) [Datei ist nicht signiert] C:\Program Files\7-Zip\7-zip.dll
2026-10-21 05:32 - 2016-11-14 13:30 - 001300688 _____ (NVIDIA Corporation PE Sign v2014 -> NVIDIA Corporation) [Datei ist nicht signiert] C:\Program Files\NVIDIA Corporation\NvStreamSrv\rxinput.dll
2026-10-21 05:31 - 2016-11-14 10:45 - 001408200 _____ (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPI64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 10:14 - 2025-10-26 09:06 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.0.1
ist aktiviert.
Network Binding:
=============
Ethernet: Intel(R) 82578DM Gigabit Network Connection -> e1i65x64.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 2) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: 2)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\StartupFolder: => "Wondershare PEToolbox.lnk"
HKLM\...\StartupApproved\StartupFolder: => "Wondershare PEScreenshot.lnk"
HKLM\...\StartupApproved\Run: => "HotKeysCmds"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "NvBackend"
HKLM\...\StartupApproved\Run: => "Persistence"
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_8B0B0C3D2A123330FA4A118C5B4EC8C6"
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\StartupApproved\Run: => "Opera Stable"
HKU\S-1-5-21-1447029647-3237286587-1954702699-1001\...\StartupApproved\Run: => "VLC Plus Player Updater"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [UDP Query User{2280D668-C04B-4B95-840F-BB9EEE0B7DF2}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> )
FirewallRules: [TCP Query User{4035B41C-95B8-4D1B-B2AF-5728E56A1E2B}C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe] => (Allow) C:\program files\obs-studio\obs-plugins\64bit\obs-browser-page.exe (OBS Project, LLC -> )
FirewallRules: [UDP Query User{22080342-E99D-485F-9730-4649FE43B8A6}C:\users\juergen\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\juergen\appdata\roaming\zoom\bin\zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [TCP Query User{8C57D2C2-6261-4981-A677-81238C76F55E}C:\users\juergen\appdata\roaming\zoom\bin\zoom.exe] => (Allow) C:\users\juergen\appdata\roaming\zoom\bin\zoom.exe (Zoom Communications, Inc. -> Zoom Communications, Inc.)
FirewallRules: [UDP Query User{A7E18899-3813-4D59-BF77-5F4A36D7692B}C:\xampp\apache\bin\httpd.exe] => (Block) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{EFCB37C0-DF14-416B-918A-4FC369F56F88}C:\xampp\apache\bin\httpd.exe] => (Block) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{31C29D65-B597-4698-B3C6-1CA4D287A98B}C:\users\juergen\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\juergen\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{CDF5238E-027C-437C-9F9E-C6AB3C33DCC6}C:\users\juergen\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\juergen\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{ED802643-3121-40A7-A3BE-48462B683ABC}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{A053A704-C3FB-4E4F-B582-11C8F3B265B8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{68A85724-3DE6-4FC6-BFF0-B8FC8C5AE4BB}] => (Allow) C:\Program Files (x86)\Iriun Webcam\IriunWebcam.exe (IriunWebcam) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{103D3ED0-1231-4114-ABE8-C6637A3E479A}G:\neu\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) G:\neu\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [UDP Query User{AEC35BD7-B248-4559-823A-7061E0178DBF}G:\neu\platform-tools-latest-windows\platform-tools\adb.exe] => (Allow) G:\neu\platform-tools-latest-windows\platform-tools\adb.exe (Google LLC -> )
FirewallRules: [TCP Query User{31337027-CD0A-400C-B555-4F86B3704874}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{146AD4CC-1391-45C4-837E-7B690CC3CB40}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{C20FF7F6-3BCD-4650-BA66-E050353EC1AE}C:\users\juergen\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\juergen\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{D68F9564-30F3-434A-B123-68C6D816E7E1}C:\users\juergen\appdata\local\programs\opera\opera.exe] => (Allow) C:\users\juergen\appdata\local\programs\opera\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [{EB710CB1-F5B5-48D0-AC98-53E240CE5430}] => (Allow) LPort=80
FirewallRules: [{E7336629-67D5-4492-93B3-5FDFEC7CD107}] => (Allow) C:\Program Files\WindowsApps\Claude_4.4212.0.0_x64__pzs8sxrjxfjjc\app\Claude.exe (Anthropic, PBC -> Anthropic)
FirewallRules: [{8340E83F-EC04-49B7-B87D-B8BF2D3A0D01}] => (Allow) C:\Program Files\WindowsApps\Claude_4.4212.0.0_x64__pzs8sxrjxfjjc\app\resources\cowork-svc.exe (Anthropic, PBC -> )
FirewallRules: [{F04C78BC-6A0C-4D07-A678-DCD44919A1BD}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
==================== Wiederherstellungspunkte =========================
15-10-2026 17:23:41 Geplanter Prüfpunkt
21-10-2026 05:27:15 Neu 21 10 2026
21-10-2026 06:04:11 Windows-Sicherung
30-10-2026 15:20:24 Geplanter Prüfpunkt
02-11-2026 08:15:27 Microsoft Visual C++ v14 Redistributable (x64) - 14.51.36247
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: PS/2-kompatible Maus
Description: PS/2-kompatible Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: PS/2-Standardtastatur
Description: PS/2-Standardtastatur
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.
Name: Serieller PCI-Anschluss
Description: Serieller PCI-Anschluss
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (11/04/2026 02:33:13 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80004005
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9fbaf5d6-4d83-4422-870d-fdda6e5858aa;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (11/04/2026 02:33:08 AM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80004005
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9fbaf5d6-4d83-4422-870d-fdda6e5858aa;NotificationInterval=1440;Trigger=NetworkAvailable
Error: (11/03/2026 09:12:00 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf Volume (F:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/03/2026 09:11:58 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf neueMaxTor (H:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/03/2026 09:11:52 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf (G:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/03/2026 09:11:40 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf TOSHIBA EXT (E:) nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/03/2026 09:09:18 PM) (Source: Microsoft-Windows-Defrag) (EventID: 264) (User: )
Description: Die Speicheroptimierung konnte erneut optimieren auf System Reserved nicht abschließen. Grund: Der angeforderte Vorgang wird von der Hardware des Volumes nicht unterstützt. (0x8900002A)
Error: (11/03/2026 05:32:25 PM) (Source: Software Protection Platform Service) (EventID: 8198) (User: )
Description: Fehler bei der Lizenzaktivierung (slui.exe). Fehlercode:
hr=0x80004005
Befehlszeilenargumente:
RuleId=31e71c49-8da7-4a2f-ad92-45d98a1c79ba;Action=AutoActivate;AppId=55c92734-d682-4d71-983e-d6ec3f16059f;SkuId=9fbaf5d6-4d83-4422-870d-fdda6e5858aa;NotificationInterval=1440;Trigger=NetworkAvailable
Systemfehler:
=============
Error: (11/02/2026 12:51:37 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: FirmwareManufacturer:Hewlett-Packard;FirmwareVersion:786H1 v01.05;OEMModelBaseBoard:304Ah;OEMManufacturerName:Hewlett-Packard;OSArchitecture:amd64;
BucketId: 3312a85df34adb5aa8df1a3bb70af227774d70569310c2d71ffd26e8472897c1
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/02/2026 12:46:43 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst NvStreamNetworkSvc erreicht.
Error: (11/01/2026 02:31:00 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: FirmwareManufacturer:Hewlett-Packard;FirmwareVersion:786H1 v01.05;OEMModelBaseBoard:304Ah;OEMManufacturerName:Hewlett-Packard;OSArchitecture:amd64;
BucketId: 3312a85df34adb5aa8df1a3bb70af227774d70569310c2d71ffd26e8472897c1
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/01/2026 02:26:06 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst NvStreamNetworkSvc erreicht.
Error: (11/01/2026 12:16:46 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: FirmwareManufacturer:Hewlett-Packard;FirmwareVersion:786H1 v01.05;OEMModelBaseBoard:304Ah;OEMManufacturerName:Hewlett-Packard;OSArchitecture:amd64;
BucketId: 3312a85df34adb5aa8df1a3bb70af227774d70569310c2d71ffd26e8472897c1
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Error: (11/01/2026 12:11:54 AM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (45000 ms) wurde beim Verbindungsversuch mit dem Dienst NvStreamNetworkSvc erreicht.
Error: (11/01/2026 12:11:48 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "FrameServer" wurde mit folgendem Fehler beendet:
%%(2147942403 = Das System kann den angegebenen Pfad nicht finden.)
Error: (10/31/2026 04:01:15 AM) (Source: Microsoft-Windows-TPM-WMI) (EventID: 1801) (User: NT-AUTORITÄT)
Description: Die Zertifizierungsstelle/Schlüssel für den sicheren Start müssen aktualisiert werden. Diese Gerätesignaturinformationen sind hier enthalten.
DeviceAttributes: FirmwareManufacturer:Hewlett-Packard;FirmwareVersion:786H1 v01.05;OEMModelBaseBoard:304Ah;OEMManufacturerName:Hewlett-Packard;OSArchitecture:amd64;
BucketId: 3312a85df34adb5aa8df1a3bb70af227774d70569310c2d71ffd26e8472897c1
BucketConfidenceLevel:
UpdateType: 0
HResult: 0
Windows Defender:
================
TimeCreated : 03.11.2026 15:40:28
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{165508FB-51A2-47F0-A285-B42E4DDBD4F7}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŜčĥέδυŀěð şçąη ẁąŝ
şκíφφэδ вз¢àџѕ℮ тĥ℮ ŀάśτ ѕџςčėšѕƒúŀ šĉǻʼn ẃäѕ ώīτђίŋ τћє ļăśτ 7 δаγѕ
TimeCreated : 02.11.2026 20:10:37
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{7906ABBE-7D94-4895-A9A1-B05FB5F51E2E}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŜčĥέδυŀěð şçąη ẁąŝ
şκíφφэδ вз¢àџѕ℮ тĥ℮ ŀάśτ ѕџςčėšѕƒúŀ šĉǻʼn ẃäѕ ώīτђίŋ τћє ļăśτ 7 δаγѕ
TimeCreated : 28.10.2026 16:42:51
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{B17548C6-8ACC-44BE-A6AC-99C9BBD10C26}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŠčħэđųℓĕð şčдŋ ώªş
śќїφρеđ ьέĉªűšε ţнě ļåśт ŝϋςςēšśƒůł şćâň ŵªŝ ŵîтћĭй ŧħė ľäŝŧ 7 đауş
TimeCreated : 27.10.2026 14:28:47
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{3FE3A9B4-B4BB-483B-AB79-65705ACA7D52}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŠčħэđųℓĕð şčдŋ ώªş
śќїφρеđ ьέĉªűšε ţнě ļåśт ŝϋςςēšśƒůł şćâň ŵªŝ ŵîтћĭй ŧħė ľäŝŧ 7 đауş
TimeCreated : 26.10.2026 15:13:07
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{B2680F4F-C7AD-4F5D-A1EE-60EEE68A33C2}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŠčħэđųℓĕð şčдŋ ώªş
śќїφρеđ ьέĉªűšε ţнě ļåśт ŝϋςςēšśƒůł şćâň ŵªŝ ŵîтћĭй ŧħė ľäŝŧ 7 đауş
TimeCreated : 25.10.2026 14:26:35
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{C5555082-0B33-4C69-8B41-CF072F6C4704}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вЃΡĆ ćőŋńèċťīόŋ řΰñδθщņ
TimeCreated : 24.10.2026 15:20:50
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{B1B3763F-A72B-466E-A95C-D0F663B07001}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŠčħэđųℓĕð şčдŋ ώªş
śќїφρеđ ьέĉªűšε ţнě ļåśт ŝϋςςēšśƒůł şćâň ŵªŝ ŵîтћĭй ŧħė ľäŝŧ 7 đауş
TimeCreated : 20.10.2026 16:18:51
Message : Microsoft Defender Antivirus šćάп ћªş ъзėʼn ŝτōрρęď ьëƒσřę ċŏмρļёťϊθή.%п %ţŜċǻʼn
ΪĐ:%в{3A00900A-4FDD-477D-87CB-6640AE4989F2}%ń %ţŜćâй Ŧуφé:%ъAntimalware%ń %ţŚćάп
Ρаѓàméŧēŕš:%вSchnellüberprüfung%ʼn %τŰşęя:%ьNT-AUTORITÄT\SYSTEM%п %ťŚτōρ Гēǻśǿл:%вŠčħэđųℓĕð şčдŋ ώªş
śќїφρеđ ьέĉªűšε ţнě ļåśт ŝϋςςēšśƒůł şćâň ŵªŝ ŵîтћĭй ŧħė ľäŝŧ 7 đауş
CodeIntegrity:
===============
Date: 2026-10-13 10:23:16
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.4-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-09-12 12:21:57
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume5\ProgramData\Microsoft\Windows Defender\Platform\4.18.26080.3-0\DefenderSessionHelper.exe because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2026-06-22 16:19:08
Description:
Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\fcon.dll because the set of per-page image hashes could not be found on the system.
==================== Speicherinformationen ===========================
BIOS: Hewlett-Packard 786H1 v01.05 06/09/2010
Hauptplatine: Hewlett-Packard 304Ah
Prozessor: Intel(R) Core(TM) i5 CPU 650 @ 3.20GHz
Prozentuale Nutzung des RAM: 88%
Installierter physikalischer RAM: 8055.29 MB
Verfügbarer physikalischer RAM: 899.79 MB
Summe virtueller Speicher: 31677.43 MB
Verfügbarer virtueller Speicher: 13962.88 MB
==================== Laufwerke ================================
Disk 0 - Drive c: () (Fixed) (Total:222.96 GB) (Free:82.99 GB) (Model: Patriot Burst ATA Device) NTFS
Disk 0 - Drive d: (System-reserviert) (Fixed) (Total:100 MB) (Free:65.55 MB) (Model: Patriot Burst ATA Device) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Disk 3 - Drive e: (TOSHIBA EXT) (Fixed) (Total:1521.53 GB) (Free:267.55 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS
Disk 3 - Drive f: (Volume) (Fixed) (Total:341.48 GB) (Free:257.53 GB) (Model: TOSHIBA External USB 3.0 USB Device) NTFS
Disk 1 - Drive g: () (Fixed) (Total:488.18 GB) (Free:210.48 GB) (Model: ST1000DM003-1ER162 ATA Device) NTFS
Disk 1 - Drive h: (neueMaxTor) (Fixed) (Total:443.23 GB) (Free:91.55 GB) (Model: ST1000DM003-1ER162 ATA Device) NTFS
Disk 2 - Drive j: (Seagate Portable Drive) (Fixed) (Total:1814.19 GB) (Free:1179.51 GB) (Model: Seagate Portable SCSI Disk Device) NTFS
Disk 1 - \\?\Volume{9a083bdb-0000-0000-0000-100000000000}\ (System Reserved) (Fixed) (Total:100 MB) (Free:57.84 MB) NTFS
Disk 0 - \\?\Volume{f6efd871-0000-0000-0000-80c337000000}\ () (Fixed) (Total:526 MB) (Free:84.79 MB) NTFS
Disk 2 - \\?\Volume{01822d25-0000-0000-0000-008cc5010000}\ () (Fixed) (Total:0 bytes) (Free:0 bytes)
==================== MBR & Partitionstabelle ====================
============================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 223.57 GB) (Disk ID: F6EFD871)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0xF6EFD871
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 100 MB
Offset : 1 MB
Partition GUID : {F6EFD871-0000-0000-0000-100000000000}
Bootable : Yes
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition 2
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 222.96 GB
Offset : 101 MB
Partition GUID : {F6EFD871-0000-0000-0000-500600000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 206848
------------------------------------------------------------
Partition 3
Type : MBR 0x27 (Windows Recovery)
Size : 526 MB
Offset : 228408 MB
Partition GUID : {F6EFD871-0000-0000-0000-80C337000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 467779584
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 3
============================================================
Disk: 1 (MBR Code: Windows 7/8/10) (Size: 931.51 GB) (Disk ID: 9A083BDB)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x9A083BDB
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 100 MB
Offset : 1 MB
Partition GUID : {9A083BDB-0000-0000-0000-100000000000}
Bootable : Yes
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition 2
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 488.18 GB
Offset : 101 MB
Partition GUID : {9A083BDB-0000-0000-0000-500600000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 206848
------------------------------------------------------------
Partition 3
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 443.23 GB
Offset : 500000 MB
Partition GUID : {9A083BDB-0000-0000-0000-00127A000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 1024000000
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 3
============================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1863.02 GB) (Disk ID: 01822D25)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x01822D25
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 1814.19 GB
Offset : 1 MB
Partition GUID : {01822D25-0000-0000-0000-100000000000}
Bootable : No
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition 2
Type : MBR 0x06 (FAT16)
Size : 48.83 GB
Offset : 1857728 MB
Partition GUID : {01822D25-0000-0000-0000-008CC5010000}
Bootable : No
Recognized : Yes
Hidden Sectors : 3804626944
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 2
============================================================
Disk: 3 (Size: 1863.02 GB) (Disk ID: 89DE76DF)
Partitions:
===========
Partition Style : MBR
Partition Count : 4
Disk Signature : 0x89DE76DF
Partition 1
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 1521.53 GB
Offset : 1 MB
Partition GUID : {89DE76DF-0000-0000-0000-100000000000}
Bootable : Yes
Recognized : Yes
Hidden Sectors : 2048
------------------------------------------------------------
Partition 2
Type : MBR 0x07 (NTFS / exFAT / HPFS)
Size : 341.48 GB
Offset : 1558051 MB
Partition GUID : {89DE76DF-0000-0000-0000-30627C010000}
Bootable : No
Recognized : Yes
Hidden Sectors : 3190888448
------------------------------------------------------------
Partition Entries : 4
Actual Partitions : 2
============================================================
==================== Ende vom Addition.txt =======================
