| JayAwesome | 01.08.2020 02:29 |
FRST.txt (Teil 2) Code:
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2020-08-01 03:01 - 2017-04-16 18:56 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\discord
2020-08-01 03:00 - 2019-09-27 21:41 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\OpenShell
2020-08-01 02:59 - 2019-09-24 22:36 - 001725172 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-08-01 02:59 - 2019-03-19 14:16 - 000743888 _____ C:\WINDOWS\system32\perfh007.dat
2020-08-01 02:59 - 2019-03-19 14:16 - 000150212 _____ C:\WINDOWS\system32\perfc007.dat
2020-08-01 02:59 - 2019-03-19 06:50 - 000000000 ____D C:\WINDOWS\INF
2020-08-01 02:55 - 2017-08-11 20:02 - 000000000 ____D C:\ProgramData\NVIDIA
2020-08-01 02:54 - 2019-06-02 03:48 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\LGHUB
2020-08-01 02:54 - 2019-02-14 23:27 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\LGHUB
2020-08-01 02:53 - 2019-09-24 22:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-08-01 02:53 - 2019-03-19 06:52 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-08-01 02:53 - 2019-03-19 06:37 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2020-08-01 02:53 - 2019-01-10 12:01 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2020-08-01 02:53 - 2017-10-07 20:37 - 000000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2020-08-01 02:53 - 2017-10-07 20:37 - 000000000 __SHD C:\Users\Jan Behrens\IntelGraphicsProfiles
2020-08-01 02:53 - 2016-10-11 19:46 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2020-08-01 02:52 - 2019-08-01 01:22 - 000059889 _____ C:\Users\Jan Behrens\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2020-08-01 02:43 - 2019-09-24 22:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-08-01 01:49 - 2016-10-11 19:46 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2020-08-01 01:47 - 2018-06-09 00:00 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\D3DSCache
2020-08-01 01:38 - 2019-05-23 00:28 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\LOOT
2020-08-01 01:38 - 2015-01-14 21:47 - 000000000 ____D C:\ProgramData\Package Cache
2020-08-01 01:29 - 2019-03-19 06:52 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-08-01 01:29 - 2015-08-02 11:14 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-08-01 01:16 - 2019-09-24 22:37 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2020-08-01 01:10 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-08-01 00:58 - 2019-08-05 23:24 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\Spotify
2020-08-01 00:20 - 2019-08-05 23:24 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\Spotify
2020-07-31 17:39 - 2020-06-19 18:27 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-07-31 01:21 - 2019-05-01 23:43 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\WhatsApp
2020-07-31 00:34 - 2019-05-01 23:43 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\WhatsApp
2020-07-30 21:15 - 2019-03-19 06:52 - 000000000 ___HD C:\Program Files\WindowsApps
2020-07-30 01:20 - 2017-09-09 17:36 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\obs-studio
2020-07-30 01:20 - 2015-03-12 22:20 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\CrashDumps
2020-07-29 23:33 - 2014-11-15 20:22 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-07-27 20:09 - 2019-06-16 21:22 - 000000000 ____D C:\WINDOWS\MZ0380
2020-07-26 23:20 - 2015-01-10 21:05 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\vlc
2020-07-26 00:06 - 2019-05-27 18:28 - 000000000 ____D C:\Program Files\Elgato
2020-07-26 00:06 - 2019-05-25 15:48 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\Elgato
2020-07-26 00:00 - 2015-07-11 22:29 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\ElevatedDiagnostics
2020-07-25 17:23 - 2014-11-15 22:45 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\JDownloader v2.0
2020-07-25 17:21 - 2016-09-16 17:22 - 000001236 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2020-07-25 17:21 - 2016-09-16 17:22 - 000001232 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2020-07-25 16:29 - 2019-05-27 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elgato
2020-07-25 16:27 - 2020-03-28 14:18 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\AdiIRC
2020-07-24 18:48 - 2019-09-24 22:37 - 000004296 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2020-07-24 18:48 - 2019-09-24 22:37 - 000004064 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2020-07-23 19:12 - 2014-11-16 18:38 - 000000000 ___RD C:\Users\Jan Behrens\Dropbox
2020-07-23 08:37 - 2015-08-02 21:29 - 000000000 ___RD C:\Users\Jan Behrens\OneDrive
2020-07-21 22:24 - 2016-09-16 17:22 - 000000000 ____D C:\Program Files (x86)\Dropbox
2020-07-21 19:24 - 2014-11-15 20:14 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\Adobe
2020-07-17 17:57 - 2017-04-16 18:56 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\SquirrelTemp
2020-07-17 13:49 - 2019-09-24 22:28 - 000471472 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-07-17 03:13 - 2019-09-24 22:30 - 000000000 ____D C:\Users\Jan Behrens
2020-07-17 02:42 - 2015-10-24 22:50 - 000000000 ____D C:\Users\Jan Behrens\AppData\Local\NVIDIA Corporation
2020-07-17 02:36 - 2019-09-24 22:30 - 000000000 ____D C:\Users\Administrator
2020-07-17 02:34 - 2019-03-19 06:37 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-07-16 14:01 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2020-07-16 14:01 - 2014-11-16 01:05 - 000000000 ____D C:\Program Files\Microsoft Office
2020-07-15 17:24 - 2019-12-06 12:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-07-15 17:24 - 2019-12-06 12:25 - 000000000 ____D C:\Program Files\Java
2020-07-15 17:24 - 2014-11-15 23:28 - 000000000 ____D C:\Program Files (x86)\Java
2020-07-15 17:23 - 2019-12-06 12:26 - 000193704 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2020-07-15 17:23 - 2019-12-06 12:25 - 000166056 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2020-07-15 17:16 - 2017-11-02 22:23 - 000000000 ___RD C:\Users\Jan Behrens\3D Objects
2020-07-15 17:16 - 2014-11-16 00:19 - 000000000 __RHD C:\Users\Public\AccountPictures
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\SystemResources
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\system32\oobe
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\ShellExperiences
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-07-15 02:55 - 2019-03-19 06:52 - 000000000 ____D C:\Program Files\Common Files\System
2020-07-14 23:52 - 2013-08-22 17:44 - 000410842 __RSH C:\bootmgr
2020-07-12 23:27 - 2017-09-09 17:36 - 000000000 ____D C:\Program Files (x86)\obs-studio
2020-07-12 11:45 - 2020-06-19 18:27 - 000003698 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-07-12 11:45 - 2020-06-19 18:27 - 000003574 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2020-07-10 16:06 - 2018-01-19 16:32 - 000116488 _____ (ESET) C:\WINDOWS\system32\Drivers\epfwwfp.sys
2020-07-10 16:06 - 2017-11-01 23:19 - 000195456 _____ (ESET) C:\WINDOWS\system32\Drivers\ehdrv.sys
2020-07-10 16:06 - 2017-11-01 23:19 - 000159528 _____ (ESET) C:\WINDOWS\system32\Drivers\eamonm.sys
2020-07-10 16:06 - 2017-11-01 23:19 - 000106640 _____ (ESET) C:\WINDOWS\system32\Drivers\edevmon.sys
2020-07-10 09:55 - 2015-02-01 02:31 - 000000000 ____D C:\Users\Jan Behrens\AppData\Roaming\Skype
2020-07-09 20:24 - 2019-09-24 22:37 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2020-07-09 20:24 - 2015-11-01 23:44 - 000002143 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2019-06-02 13:45 - 2019-06-02 13:45 - 000000559 _____ () C:\Program Files\Uninstall FolderSort.bat
2019-05-27 20:31 - 2019-08-02 00:44 - 000034128 _____ () C:\Users\Jan Behrens\AppData\Roaming\VoiceMeeterBananaDefault.xml
2019-05-25 20:02 - 2019-06-07 16:08 - 000004699 _____ () C:\Users\Jan Behrens\AppData\Roaming\VoiceMeeterDefault.xml
2019-08-01 01:22 - 2020-08-01 02:52 - 000059889 _____ () C:\Users\Jan Behrens\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2019-06-13 14:28 - 2019-06-14 00:04 - 000000600 _____ () C:\Users\Jan Behrens\AppData\Roaming\winscp.rnd
2020-07-21 19:25 - 2020-07-26 23:33 - 000001456 _____ () C:\Users\Jan Behrens\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2020-04-11 21:06 - 2020-04-11 21:06 - 000000000 _____ () C:\Users\Jan Behrens\AppData\Local\D272E0.tmp
2020-04-18 21:17 - 2020-04-18 21:17 - 000000000 _____ () C:\Users\Jan Behrens\AppData\Local\D27E44.tmp
2020-04-11 13:12 - 2020-04-11 13:12 - 000000000 _____ () C:\Users\Jan Behrens\AppData\Local\D2954C.tmp
2017-01-15 18:53 - 2017-01-15 18:53 - 000000000 _____ () C:\Users\Jan Behrens\AppData\Local\Driver_LOM_8161Present.flag
2019-05-13 19:24 - 2019-08-13 17:25 - 000001230 _____ () C:\Users\Jan Behrens\AppData\Local\oobelibMkey.log
2017-08-02 23:56 - 2019-11-02 16:46 - 000000128 _____ () C:\Users\Jan Behrens\AppData\Local\PUTTY.RND
2020-07-17 14:10 - 2020-07-17 14:10 - 000001290 _____ () C:\Users\Jan Behrens\AppData\Local\recently-used.xbel
2017-02-19 13:36 - 2017-02-19 13:36 - 000007605 _____ () C:\Users\Jan Behrens\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Addition.txt
FRST Additions Logfile: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-07-2020
durchgeführt von Jan Behrens (01-08-2020 03:02:08)
Gestartet von D:\Users\Jan Behrens\Downloads
Windows 10 Pro Version 1909 18363.959 (X64) (2019-09-24 20:37:48)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-4111253365-1997517826-1648085879-500 - Administrator - Disabled) => C:\Users\Administrator
DefaultAccount (S-1-5-21-4111253365-1997517826-1648085879-503 - Limited - Disabled)
Gast (S-1-5-21-4111253365-1997517826-1648085879-501 - Limited - Disabled)
Jan Behrens (S-1-5-21-4111253365-1997517826-1648085879-1001 - Administrator - Enabled) => C:\Users\Jan Behrens
WDAGUtilityAccount (S-1-5-21-4111253365-1997517826-1648085879-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Spybot - Search and Destroy (Enabled - Up to date) {F77C7796-45C4-531E-0DAE-B4A8229B11C8}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AV: ESET Security (Enabled - Up to date) {885D845F-AF19-0124-FECE-FFF49D00F440}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
AdiIRC (HKLM-x32\...\AdiIRC) (Version: 3.8 - Per Amundsen)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.009.20074 - Adobe Systems Incorporated)
Adobe After Effects 2019 (HKLM-x32\...\AEFT_16_1_2) (Version: 16.1.2 - Adobe Systems Incorporated)
Adobe Lightroom Classic (HKLM-x32\...\LTRM_8_3_1) (Version: 8.3.1 - Adobe Systems Incorporated)
Adobe Photoshop CC 2019 (HKLM-x32\...\PHSP_20_0_5) (Version: 20.0.5 - Adobe Systems Incorporated)
Adobe Premiere Pro 2020 (HKLM-x32\...\PPRO_14_0_1) (Version: 14.0.1 - Adobe Systems Incorporated)
Adobe Shockwave Player 12.3 (HKLM-x32\...\{4487064C-F31E-4499-A1EF-9B8E809A0358}) (Version: 12.3.5.205 - Adobe, Inc)
AIDA64 Extreme v5.80 (HKLM-x32\...\AIDA64 Extreme_is1) (Version: 5.80 - FinalWire Ltd.)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation)
Audacity 2.3.3 (HKLM-x32\...\Audacity_is1) (Version: 2.3.3 - Audacity Team)
Autodesk Fusion 360 (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\73e72ada57b7480280f7a6f4a289729f) (Version: 2.0.8624 - Autodesk, Inc.)
balenaEtcher 1.5.59 (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\d2f3b6c7-6f49-59e2-b8a5-f72e33900c2b) (Version: 1.5.59 - Balena Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Call of Duty Modern Warfare (HKLM-x32\...\Call of Duty Modern Warfare) (Version: - Blizzard Entertainment)
CCleaner (HKLM\...\CCleaner) (Version: 5.69 - Piriform)
ClockPro 1.2.1 (HKLM-x32\...\ClockPro) (Version: 1.2.1 - Texas Instruments Inc.)
Core Temp 1.13 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.13 - ALCPU)
CPUID CPU-Z 1.86 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.86 - CPUID, Inc.)
CPUID HWMonitor 1.41 (HKLM\...\CPUID HWMonitor_is1) (Version: 1.41 - CPUID, Inc.)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
dBpoweramp (HKLM-x32\...\dBpoweramp) (Version: Release 15.3 - Illustrate)
dBpoweramp DSP Effects (HKLM-x32\...\dBpoweramp DSP Effects) (Version: Release 11 - Illustrate)
dBpoweramp Ogg Vorbis Codec (HKLM-x32\...\dBpoweramp Ogg Vorbis Codec) (Version: Release 26 (Vorbis v1.3.6) - Illustrate)
Destiny 2 (HKLM-x32\...\Destiny 2) (Version: - Blizzard Entertainment)
Diablo II (HKLM-x32\...\Diablo II) (Version: 0.0.0.0 - Blizzard Entertainment)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Discord (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\Discord) (Version: 0.0.306 - Discord Inc.)
Dolby Digital Live Pack (HKLM-x32\...\Dolby Digital Live Pack) (Version: 3.03 - Creative Technology Limited)
Dropbox (HKLM-x32\...\Dropbox) (Version: 102.4.431 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.335.1 - Dropbox, Inc.) Hidden
DTS Connect Pack (HKLM-x32\...\DTS Connect Pack) (Version: 1.00 - Creative Technology Limited)
Elgato Stream Deck (HKLM\...\{3AC2CBFE-1D7D-4CE2-B578-94B684D706AA}) (Version: 4.8.1.13027 - Elgato Systems GmbH)
ElsterFormular (HKLM-x32\...\ElsterFormular) (Version: 20.1 - Thüringer Landesfinanzdirektion)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{66C5838F-B854-4A55-89E6-A6138747A4DF}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Equalizer APO (HKLM\...\EqualizerAPO) (Version: 1.2.1 - )
ESET Security (HKLM\...\{B489BC2D-0079-4631-97BF-CA2378299D43}) (Version: 13.2.16.0 - ESET, spol. s r.o.)
eXtreme Burner - AVR 1.4.2 (HKLM\...\{420475CC-5F81-421A-86A8-42FC1E147679}_is1) (Version: 1.4.2 - eXtreme Electronics, India.)
FAKEFACTORY Cinematic Mod 2013 (HKLM-x32\...\FAKEFACTORY CM2013beta 1) (Version: beta 1 - FAKEFACTORY)
FileZilla Client 3.46.3 (HKLM-x32\...\FileZilla Client) (Version: 3.46.3 - Tim Kosse)
Fotogalerie (HKLM-x32\...\{41BF4A3B-D60A-4E92-883F-C88C8C157261}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Game Capture HD60 Pro v1.1.0.185 (HKLM-x32\...\Software_Elgato_Game Capture HD60 Pro) (Version: 1.1.0.185 - Elgato Systems)
GerberLogix (HKLM-x32\...\{EDF2B212-F0B4-4313-BB9F-294CB9CF79EA}) (Version: 3.5 - EasyLogix)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 84.0.4147.105 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.35.451 - Google LLC) Hidden
Google Update Helper (HKLM-x32\...\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}) (Version: 1.3.25.11 - Google Inc.) Hidden
HD2 Toolkit Version 4.1 (HKLM-x32\...\{12EE0B2A-84C6-494E-A7AC-6771E898F6A0}_is1) (Version: 4.1 - Kaushal Subedi (KSubedi))
Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment)
HitFilm Express (HKLM\...\{9878FC34-063A-4B70-BAC5-2D188AC11678}) (Version: 14.3.9931.38452 - FXHOME)
IGdm 3.0.1 (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\1ead4f81-c61a-5fa6-9e81-7a8c0c868952) (Version: 3.0.1 - ifedapo olarewaju)
Image Resizer for Windows (64 bit) (HKLM\...\{2A1F3759-5792-469B-B895-7E29680F02F1}) (Version: 3.1.1.0 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{92916BDF-74CB-479C-B69E-32EACB074FFE}) (Version: 3.1.1.0 - Brice Lambson) Hidden
Image Resizer for Windows (HKLM-x32\...\{c624f5da-779e-4ccb-9ce1-34bc5ef0a6b9}) (Version: 3.1.1.0 - Brice Lambson)
Inkscape (HKLM-x32\...\Inkscape) (Version: 1.0.0- - Inkscape)
Intel(R) C++ Redistributables on Intel(R) 64 (HKLM-x32\...\{F70BCE36-25F2-4475-A918-6209B3D85BF3}) (Version: 15.0.179 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1158 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4624 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.5.0.1081 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{c7f54569-0018-439c-809a-48046a4d4ebc}) (Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Java 8 Update 261 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)
Java 8 Update 261 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Killer Performance Driver Suite (HKLM\...\{409DA386-33A4-4341-A320-359F0B8C003B}) (Version: 1.4.1492 - Rivet Networks)
Killer Performance Suite (HKLM-x32\...\{91E64D64-B120-4A10-9C70-AD39A1D9DFD3}) (Version: 1.1.65.1752 - Rivet Networks)
Last Year: The Nightmare (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\478637764565401630) (Version: - )
Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech G HUB (HKLM\...\{521c89be-637f-4274-a840-baaf7460c2b2}) (Version: - Logitech)
Malwarebytes version 4.1.2.73 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.1.2.73 - Malwarebytes)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 84.0.522.50 - Microsoft Corporation)
Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.133.5 - )
Microsoft Office Professional Plus 2019 - de-de (HKLM\...\ProPlus2019Retail - de-de) (Version: 16.0.13001.20384 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\OneDriveSetup.exe) (Version: 20.114.0607.0002 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x64 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 Redistributable - x86 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40664 (HKLM-x32\...\{49e969a1-2990-464d-92b5-25f6f34573c6}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40664 (HKLM-x32\...\{d2c8df0e-f15d-4426-9e51-f13f329f9cb4}) (Version: 12.0.40664.0 - Корпорация Майкрософт)
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
MiniTool Partition Wizard Free 10.3 (HKLM\...\{05D996FA-ADCB-4D23-BA3C-A7C184A8FAC6}_is1) (Version: - MiniTool Software Limited)
Movie Maker (HKLM-x32\...\{70C91B91-61E8-4D06-86D6-A9DCC291983A}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{DD67BE4B-7E62-4215-AFA3-F123A800A389}) (Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
My Media for Alexa (64-bit) (HKLM\...\{BB60469F-2B55-4683-B6BD-BD8E5C8EB5CD}) (Version: 1.3.122.0 - bizmodeller)
Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.6.6 - Notepad++ Team)
NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.19 - NVIDIA Corporation) Hidden
NVIDIA GeForce Experience 3.20.2.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.2.34 - NVIDIA Corporation)
NVIDIA Grafiktreiber 441.66 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 441.66 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.38.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.21 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 21.1.2 - OBS Project)
obs-websocket version 4.8.0 (HKLM-x32\...\{117EE44F-48E1-49E5-A381-CC8D9195CF35}_is1) (Version: 4.8.0 - Stephane Lepin)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13001.20144 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13001.20384 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13001.20144 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Open-Shell (HKLM\...\{FD722BB1-4960-455F-89C6-EFAEB79527EF}) (Version: 4.4.131 - The Open-Shell Team)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Project64 version 2.3.2.202 (HKLM-x32\...\{BEB5FB69-4080-466F-96C4-F15DF271718B}_is1) (Version: 2.3.2.202 - )
PuTTY release 0.73 (64-bit) (HKLM\...\{44F7642C-AB7E-4468-B028-E8D08A0CBB0E}) (Version: 0.73.0.0 - Simon Tatham)
Quartus II Programmer and SignalTap II 13.1.0.162 (HKLM-x32\...\Quartus II Programmer and SignalTap II 13.1.0.162) (Version: 13.1 - Altera Corporation)
ReaPlugs/x64 (HKLM\...\ReaPlugs) (Version: - )
RetroArch 2020-01-15 (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\RetroArch) (Version: 2020-01-15 - libretro)
ScummVM 1.7.0 (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
Skype Version 8.53 (HKLM-x32\...\Skype_is1) (Version: 8.53 - Skype Technologies S.A.)
Skype™ 7.23 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.23.105 - Skype Technologies S.A.)
Snaz Version 1.12.7.0 (HKLM-x32\...\{70A76031-FDC6-4F9B-BB5C-33776703F45A}_is1) (Version: 1.12.7.0 - JimsApps)
Sound Blaster Z-Series (HKLM-x32\...\{0DF9A219-C781-49A7-B77F-F648698F54AD}) (Version: 1.01.05 - Creative Technology Limited)
Sound Blaster Z-Series Extras (HKLM-x32\...\{9D9DB4BA-E352-4AC8-AD2B-B10104F5AB80}) (Version: 1.0 - Creative Technology Limited)
Spotify (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\Spotify) (Version: 1.1.38.558.g4b100958 - Spotify AB)
Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.8.68.0 - Safer-Networking Ltd.)
StarCraft (HKLM-x32\...\StarCraft) (Version: - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
StreamElements OBS.Live (HKLM-x32\...\StreamElements OBS.Live) (Version: 20.5.3.629 - StreamElements)
StreamFX for OBS Studio version 0.8.0.0 (HKLM-x32\...\{DE56A03A-C8A4-474B-83B0-CFD270262D38}}_is1) (Version: 0.8.0.0 - Xaymars Technology Workshop)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.6.7 - TeamViewer)
Trillian (HKLM-x32\...\Trillian) (Version: 6.3.0.5 - Cerulean Studios, LLC)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
VBCABLE, The Virtual Audio Cable (HKLM\...\VB:VBCABLE {87459874-1236-4469}) (Version: - VB-Audio Software)
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23-Hotfix-2 - IDRIX)
VLC media player (HKLM-x32\...\VLC media player) (Version: 3.0.8 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version: - VB-Audio Software)
WhatsApp (HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\WhatsApp) (Version: 2.2031.4 - WhatsApp)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.71 (64-bit) (HKLM\...\WinRAR archiver) (Version: 5.71.0 - win.rar GmbH)
WinSCP 5.15.2 (HKLM-x32\...\winscp3_is1) (Version: 5.15.2 - Martin Prikryl)
Packages:
=========
@{Microsoft.Wasserburg_1.81.7678.2_x64__8wekyb3d8bbwe?ms-resource://Microsoft.Wasserburg/Resources/PackageName} -> C:\Program Files\WindowsApps\Microsoft.Wasserburg_1.81.7678.2_x64__8wekyb3d8bbwe [2019-03-13] (0)
Instagram -> C:\Program Files\WindowsApps\Facebook.InstagramBeta_42.0.2.0_neutral__8xx8rvfyw5nnt [2019-12-19] (Instagram)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-01-20] (Microsoft Corporation) [MS Ad]
Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.7162.0_x64__8wekyb3d8bbwe [2020-07-22] (Microsoft Studios) [MS Ad]
Minecraft for Windows 10 -> C:\Program Files\WindowsApps\Microsoft.MinecraftUWP_1.16.1002.0_x64__8wekyb3d8bbwe [2020-07-22] (Microsoft Studios)
MPEG-2-Videoerweiterung -> C:\Program Files\WindowsApps\Microsoft.MPEG2VideoExtension_1.0.22661.0_x64__8wekyb3d8bbwe [2020-01-03] (Microsoft Corporation)
MSN Finanzen -> C:\Program Files\WindowsApps\Microsoft.BingFinance_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
MSN Reisen -> C:\Program Files\WindowsApps\Microsoft.BingTravel_3.0.4.336_x64__8wekyb3d8bbwe [2015-08-02] (Microsoft Corporation) [MS Ad]
MSN Sport -> C:\Program Files\WindowsApps\Microsoft.BingSports_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
MSN Wetter -> C:\Program Files\WindowsApps\Microsoft.BingWeather_4.36.20714.0_x64__8wekyb3d8bbwe [2020-03-25] (Microsoft Corporation) [MS Ad]
Player for YouTube HD -> C:\Program Files\WindowsApps\42731GoodMediaGroup.SimplePlayerforYouTube_1.1.17.0_x64__wzw6dymc89v9p [2020-01-28] (Good Media Group) [MS Ad]
Xbox Insider Hub -> C:\Program Files\WindowsApps\Microsoft.FlightDashboard_474.2007.28001.0_x64__8wekyb3d8bbwe [2020-07-30] (Microsoft Corporation)
Xbox Zubehör -> C:\Program Files\WindowsApps\Microsoft.XboxDevices_300.1911.1001.0_x64__8wekyb3d8bbwe [2019-11-23] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001_Classes\CLSID\{a3d7e084-b0df-4d14-8e0a-27a572a6332c}\localserver32 -> "C:\Program Files\Sony\Imaging Edge Desktop\ied.exe" -ToastActivated => Keine Datei
CustomCLSID: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001_Classes\CLSID\{C4F0910E-E0B4-4E68-8086-452730C7A26A}\InprocServer32 -> C:\Users\Jan Behrens\AppData\Local\Autodesk\webdeploy\production\d329faf365c350668f1b0d009520835a9e1834a8\NPreview10.dll (Autodesk, Inc. -> )
CustomCLSID: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A} -> [Dropbox] => C:\Users\Jan Behrens\Dropbox [2014-11-16 18:38]
CustomCLSID: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B} -> [JayAwesome87 Dropbox] => C:\Users\Jan Behrens\JayAwesome87 Dropbox0
ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [Datei ist nicht signiert]
ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Open-Shell\ClassicExplorer64.dll [2018-08-18] (Open-Shell) [Datei ist nicht signiert]
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Keine Datei
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2019-01-27] (Notepad++ -> )
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Keine Datei
ContextMenuHandlers1: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers1: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2020-07-30] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers1: [Image Resizer] -> {51B4D7E5-7568-4234-B4BB-47FB3C016A69} => C:\Program Files\Image Resizer for Windows\ShellExtensions.dll [2018-05-26] (Open Source Developer, Brice Lambson -> Brice Lambson)
ContextMenuHandlers1: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2020-07-30] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-08-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Keine Datei
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Keine Datei
ContextMenuHandlers4: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.43.0.dll [2020-07-08] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2017-03-17] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2019-12-07] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Keine Datei
ContextMenuHandlers6: [ESET Security Shell] -> {B089FE88-FB52-11D3-BDF1-0050DA34150D} => C:\Program Files\ESET\ESET NOD32 Antivirus\shellExt.dll [2020-07-30] (ESET, spol. s r.o. -> ESET)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-08-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [SDECon32] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [SDECon64] -> {44176360-2BBF-4EC1-93CE-384B8681A0BC} => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDECon64.dll [2019-04-15] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
ContextMenuHandlers6: [StartMenuExt] -> {E595F05F-903F-4318-8B0A-7F633B520D2B} => C:\WINDOWS\system32\StartMenuHelper64.dll [2018-08-18] (Open-Shell) [Datei ist nicht signiert]
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2019-04-27] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2020-03-28 14:18 - 2020-03-28 14:18 - 000440320 ____N () [Datei ist nicht signiert] [Datei wird verwendet] C:\Users\Jan Behrens\AppData\Local\Temp\e713f5b240042fc8d8e9b43ad49e386d\aa72afbbe68477755587acf4c7ad99ab.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000118272 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libexpat.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000014848 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libgif.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000195072 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libpng16.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000072192 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libtinyxml2.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000074240 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\zlib.dll
2019-07-31 19:10 - 2019-07-31 19:10 - 000454656 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\VB\Voicemeeter\mp3lame\lame_enc.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 000038400 _____ () [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\giflib5.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 000098816 _____ () [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\QtZeroConf.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 000720384 _____ () [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\turbojpeg.dll
2019-06-10 13:21 - 2019-06-10 13:21 - 000668160 _____ () [Datei ist nicht signiert] C:\Program Files\EqualizerAPO\EqualizerAPO.dll
2017-07-08 12:52 - 2017-07-08 12:52 - 002983917 _____ () [Datei ist nicht signiert] C:\Program Files\EqualizerAPO\libfftw3f-3.dll
2015-11-22 22:05 - 2015-11-22 22:05 - 001530880 _____ () [Datei ist nicht signiert] C:\Program Files\EqualizerAPO\libsndfile-1.dll
2016-04-29 14:22 - 2016-04-29 14:22 - 000009728 _____ () [Datei ist nicht signiert] c:\users\jan behrens\appdata\roaming\trillian\languages\de\buddy.dll
2016-04-29 14:22 - 2016-04-29 14:22 - 000006144 _____ () [Datei ist nicht signiert] c:\users\jan behrens\appdata\roaming\trillian\languages\de\talk.dll
2016-04-29 14:22 - 2016-04-29 14:22 - 000001536 _____ () [Datei ist nicht signiert] c:\users\jan behrens\appdata\roaming\trillian\languages\de\toolkit.dll
2012-11-28 09:21 - 2012-11-28 09:21 - 000005632 _____ () [Datei ist nicht signiert] c:\users\jan behrens\appdata\roaming\trillian\languages\de\trillian.dll
2020-03-29 23:27 - 2013-10-24 04:25 - 000032768 _____ () [Datei ist nicht signiert] d:\altera\13.1\qprogrammer\bin64\ccl_ver.dll
2020-03-29 23:27 - 2013-10-24 03:21 - 000879616 _____ () [Datei ist nicht signiert] d:\altera\13.1\qprogrammer\bin64\dinkum_alt.dll
2019-08-13 18:55 - 2009-03-18 16:00 - 000151552 ____N (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\ShareDLL\CADI\CTCadiEP.dll
2014-07-03 17:22 - 2014-07-03 17:22 - 000555008 _____ (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\CTAudEp.dll
2011-09-16 17:04 - 2011-09-16 17:04 - 000238080 _____ (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\CTLoadRs.dll
2013-02-27 11:29 - 2013-02-27 11:29 - 000251904 _____ (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Sound Blaster Z-Series\Sound Blaster Z-Series Control Panel\HKDetect.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000439808 _____ (hxxp://hunspell.github.io/) [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libhunspell.dll
2015-06-23 16:00 - 2015-06-23 16:00 - 000285696 _____ (Intel Corporation) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\PsiData.dll
2015-06-23 16:00 - 2015-06-23 16:00 - 000562688 _____ (Intel Corporation) [Datei ist nicht signiert] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\ISDI2.dll
2020-07-16 14:00 - 2020-07-16 14:00 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-07-16 14:00 - 2020-07-16 14:00 - 000000000 ____L (Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2018-08-18 23:57 - 2018-08-18 23:57 - 000880128 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\ClassicExplorer64.dll
2018-08-18 23:57 - 2018-08-18 23:57 - 003447808 _____ (Open-Shell) [Datei ist nicht signiert] C:\Program Files\Open-Shell\StartMenuDLL.dll
2018-08-18 23:57 - 2018-08-18 23:57 - 000301568 _____ (Open-Shell) [Datei ist nicht signiert] C:\WINDOWS\system32\StartMenuHelper64.dll
2017-09-07 20:26 - 2017-09-07 20:26 - 000097792 _____ (Rivet Networks) [Datei ist nicht signiert] C:\Program Files\Killer Networking\Killer Control Center\KillerNetworkServicePS.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 001742848 _____ (SQLite Development Team) [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\sqlite3.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000242688 _____ (The Independent JPEG Group) [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libjpeg.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 002542592 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libcrypto-1_1.dll
2020-05-21 00:00 - 2020-05-21 00:00 - 000534528 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\Trillian\libssl-1_1.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 002696704 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\libcrypto-1_1-x64.dll
2020-05-22 18:38 - 2020-05-22 18:38 - 000642560 _____ (The OpenSSL Project, hxxps://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Elgato\StreamDeck\libssl-1_1-x64.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ==========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com
IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com
IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com
IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com
IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com
IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com
IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com
IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com
Da befinden sich 7942 mehr Seiten.
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\007guard.com -> install.007guard.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\008i.com -> 008i.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\008k.com -> www.008k.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\00hq.com -> www.00hq.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\010402.com -> 010402.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\0scan.com -> www.0scan.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\1-2005-search.com -> www.1-2005-search.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\1-domains-registrations.com -> www.1-domains-registrations.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\1000gratisproben.com -> www.1000gratisproben.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\1001namen.com -> www.1001namen.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\100888290cs.com -> mir.100888290cs.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\100sexlinks.com -> www.100sexlinks.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\10sek.com -> www.10sek.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\12-26.net -> user1.12-26.net
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\12-27.net -> user1.12-27.net
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\123fporn.info -> www.123fporn.info
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\123haustiereundmehr.com -> www.123haustiereundmehr.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\123moviedownload.com -> www.123moviedownload.com
IE restricted site: HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\123simsen.com -> www.123simsen.com
Da befinden sich 7946 mehr Seiten.
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2016-05-15 14:05 - 2020-08-01 01:51 - 000455119 ____R C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
127.0.0.1 123fporn.info
127.0.0.1 www.123fporn.info
127.0.0.1 123haustiereundmehr.com
127.0.0.1 www.123haustiereundmehr.com
127.0.0.1 123moviedownload.com
127.0.0.1 www.123moviedownload.com
Da befinden sich 15620 zusätzliche Einträge.
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Common Files\Intel\Shared Libraries\redist\intel64\compiler;c:\windows\system32;c:\windows;c:\windows\system32\wbem;c:\windows\system32\windowspowershell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files (x86)\Skype\Phone\;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Windows Live\Shared;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\PuTTY\
HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\Control Panel\Desktop\\Wallpaper ->
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\StartupApproved\Run: => "SpybotPostWindows10UpgradeReInstall"
HKU\S-1-5-21-4111253365-1997517826-1648085879-1001\...\StartupApproved\Run: => "PretzelSaltHelper"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{CC63D06C-D2A4-426D-9B37-8F0A08E00F15}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{37C85557-60F2-4D6E-B54D-46CEF3DB8AB0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [UDP Query User{30989385-8E6B-4F11-985F-B43C8C9B235B}C:\users\jan behrens\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan behrens\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{C995642A-94D6-48BE-ABA4-013937DD385E}C:\users\jan behrens\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\jan behrens\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [UDP Query User{E9B1321A-55A0-4A76-AA18-72DD69053409}C:\program files (x86)\vb\voicemeeter\voicemeeter8.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeter8.exe (Vincent Burel -> VB-AUDIO Software)
FirewallRules: [TCP Query User{063D01BD-BC43-4175-8832-FE9B32FB6E8F}C:\program files (x86)\vb\voicemeeter\voicemeeter8.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeeter8.exe (Vincent Burel -> VB-AUDIO Software)
FirewallRules: [UDP Query User{14CE444A-C95C-4571-A5CE-5C75AA43E858}C:\program files (x86)\vb\voicemeeter\voicemeetermacrobuttons.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeetermacrobuttons.exe (Vincent Burel -> Audio Mechanic & Sound Breeder)
FirewallRules: [TCP Query User{E32A6A67-7C0F-46C8-97BE-424C666352D9}C:\program files (x86)\vb\voicemeeter\voicemeetermacrobuttons.exe] => (Allow) C:\program files (x86)\vb\voicemeeter\voicemeetermacrobuttons.exe (Vincent Burel -> Audio Mechanic & Sound Breeder)
FirewallRules: [UDP Query User{42BD249F-FD52-4855-9754-A93D6CFE1143}D:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) D:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [TCP Query User{A95E7AE7-D278-4B9B-8D86-4237964FACB8}D:\program files (x86)\overwatch\_retail_\overwatch.exe] => (Allow) D:\program files (x86)\overwatch\_retail_\overwatch.exe (Blizzard Entertainment, Inc. -> Blizzard Entertainment)
FirewallRules: [UDP Query User{76C60B48-55E8-4EFE-9EE7-D7E41C6E6528}C:\users\jan behrens\appdata\roaming\usbhelperlauncher\patched.exe] => (Allow) C:\users\jan behrens\appdata\roaming\usbhelperlauncher\patched.exe => Keine Datei
FirewallRules: [TCP Query User{D5274235-5195-4B02-B66D-04C6B975C8C3}C:\users\jan behrens\appdata\roaming\usbhelperlauncher\patched.exe] => (Allow) C:\users\jan behrens\appdata\roaming\usbhelperlauncher\patched.exe => Keine Datei
FirewallRules: [UDP Query User{1A1C26FE-1E3A-4E8F-A0DE-1B737DC66038}C:\users\jan behrens\appdata\roaming\usbhelperlauncher\usbhelperlauncher.exe] => (Allow) C:\users\jan behrens\appdata\roaming\usbhelperlauncher\usbhelperlauncher.exe => Keine Datei
FirewallRules: [TCP Query User{6820B4C5-7595-4552-A5C0-671939E7BFF4}C:\users\jan behrens\appdata\roaming\usbhelperlauncher\usbhelperlauncher.exe] => (Allow) C:\users\jan behrens\appdata\roaming\usbhelperlauncher\usbhelperlauncher.exe => Keine Datei
FirewallRules: [UDP Query User{AC759003-7AC9-447A-9DE9-C02F206E08B9}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{4B64E5FD-1191-4748-9CE1-2E83AABE5D53}C:\program files\lghub\lghub_agent.exe] => (Block) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{4EF2DE46-3825-491E-94DD-C7554CFC7715}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [TCP Query User{CD6AA33A-2597-4DE8-9F8B-1B0BD9D96656}C:\program files\lghub\lghub_agent.exe] => (Allow) C:\program files\lghub\lghub_agent.exe (Logitech Inc -> Logitech, Inc.)
FirewallRules: [UDP Query User{EA8B0863-C415-468A-9391-FBBAA65C5B7D}D:\program files (x86)\steam\steamapps\common\fallout 4\fallout4.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\fallout 4\fallout4.exe => Keine Datei
FirewallRules: [TCP Query User{F14468D5-B593-4144-9410-D2C5CE8963B2}D:\program files (x86)\steam\steamapps\common\fallout 4\fallout4.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\fallout 4\fallout4.exe => Keine Datei
FirewallRules: [{E9BF252B-A45F-4656-9472-0ED12A436806}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{1CB6D3B4-1588-4C74-93F4-CD10BE823C53}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori\ori.exe () [Datei ist nicht signiert]
FirewallRules: [{D4F4303D-6AE3-4DE8-9CD9-03292316E911}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [{B20B62D8-BA86-42E4-B945-55066C9D944A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori DE\oriDE.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{22E70544-874D-4B2F-8F3E-C29C88C5E787}C:\program files\streamlabs obs\streamlabs obs.exe] => (Allow) C:\program files\streamlabs obs\streamlabs obs.exe => Keine Datei
FirewallRules: [TCP Query User{D881959E-FD8C-4630-8114-F88C00FA546F}C:\program files\streamlabs obs\streamlabs obs.exe] => (Allow) C:\program files\streamlabs obs\streamlabs obs.exe => Keine Datei
FirewallRules: [{5E0B6D60-CC43-477A-98BA-5A3940B52C39}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> )
FirewallRules: [{0E209FCD-9D4F-4D06-8D4C-69C13BB6BA1A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\wallpaper_engine\launcher.exe (Kristjan Skutta -> )
FirewallRules: [{C1705AFA-6576-4AD2-BB81-F46694C745BF}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{A3C22F3E-5629-46D7-880D-7E70707C794F}] => (Allow) D:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [UDP Query User{E081C067-7DD9-494A-BA8E-622B54DE58D2}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{B21CCA18-0658-4E26-A783-3F15DC8A71DD}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{77318A92-D253-4361-8433-632E5DAF000B}C:\program files (x86)\trillian\trillian.exe] => (Allow) C:\program files (x86)\trillian\trillian.exe (Cerulean Studios, LLC -> Cerulean Studios)
FirewallRules: [TCP Query User{24643D4D-A5A7-4BCC-99BF-14E1F566473C}C:\program files (x86)\trillian\trillian.exe] => (Allow) C:\program files (x86)\trillian\trillian.exe (Cerulean Studios, LLC -> Cerulean Studios)
FirewallRules: [{4E693FB7-60CE-4D0E-AF4D-88F8DDB62C24}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe (Valve -> )
FirewallRules: [{F56714E9-486F-4D91-8A5E-97B626BEEE7D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Half-Life 2\hl2.exe (Valve -> )
FirewallRules: [{88E8803E-0FBB-4603-B310-B634B1344316}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{18704BE4-A7C7-4158-8D5D-9DEE1B9314B6}] => (Allow) D:\Program Files (x86)\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [TCP Query User{44A2B9A8-797B-4F5F-BD95-8655BEF413DA}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [UDP Query User{164EC7BF-EC73-43C6-AAD0-D46220509E14}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8F963E4A-63BC-4550-856B-A4C9CE9B9223}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{F15F0A9B-9183-4811-8338-3D5834C8D243}] => (Allow) LPort=2869
FirewallRules: [{AA042E52-E4CE-4C90-842B-6617C5B4DD53}] => (Allow) LPort=1900
FirewallRules: [{9EFB8C19-937C-44D9-984B-9722435B5FB0}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{E8C463D6-66A4-4150-9460-46D1771FBF66}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{068AA092-48D9-45B1-B16E-5BB2581CEEEE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{2A16A022-9AC8-4687-B476-E2515AD93077}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{27F600CC-3C04-4BBA-BAB2-4EB22B1C96FF}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Tricky Towers\TrickyTowers.exe () [Datei ist nicht signiert]
FirewallRules: [{A31DDF9C-8FD0-40F6-A37E-57591B12D185}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Tricky Towers\TrickyTowers.exe () [Datei ist nicht signiert]
FirewallRules: [{92D32821-9DDF-4F6B-8DC0-890BF1D3DFF3}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D8486DEF-1224-4DC0-BFF2-62397E2B7C05}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D037A973-FF45-44E2-A58A-16E3E3CC5CE0}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{12AA8834-E016-4E7E-887E-18588D1A27F8}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{4F8A8E27-DFDF-4820-B3BE-410B2FA7E38F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Black Mesa\bms.exe () [Datei ist nicht signiert]
FirewallRules: [{6A3AF3A8-5C45-419F-B865-17AA1BE0692F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Black Mesa\bms.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{9989DA63-D9FE-4F64-ACE4-FCBBD78FE4F5}C:\users\jan behrens\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\jan behrens\appdata\local\jdownloader v2.0\jdownloader2.exe (AppWork GmbH -> AppWork GmbH)
FirewallRules: [UDP Query User{C01474C2-3745-411E-A360-CE94286B74AB}C:\users\jan behrens\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\jan behrens\appdata\local\jdownloader v2.0\jdownloader2.exe (AppWork GmbH -> AppWork GmbH)
FirewallRules: [TCP Query User{3CD1F1B9-4366-40E7-8DEC-D6CC0F3D3034}D:\program files (x86)\premierepro\adobe premiere pro 2020\dvaaudiofilterscan.exe] => (Block) D:\program files (x86)\premierepro\adobe premiere pro 2020\dvaaudiofilterscan.exe (Adobe Inc. -> Adobe)
FirewallRules: [UDP Query User{8783C470-19EB-4ED5-BE31-54520C78F3BC}D:\program files (x86)\premierepro\adobe premiere pro 2020\dvaaudiofilterscan.exe] => (Block) D:\program files (x86)\premierepro\adobe premiere pro 2020\dvaaudiofilterscan.exe (Adobe Inc. -> Adobe)
FirewallRules: [TCP Query User{EB9FCAC3-7A99-4E26-9B55-4FD74B97F994}C:\users\jan behrens\appdata\local\temp\jivexviewer\jre\bin\jivex dicom cd viewer] => (Allow) C:\users\jan behrens\appdata\local\temp\jivexviewer\jre\bin\jivex dicom cd viewer => Keine Datei
FirewallRules: [UDP Query User{8AEF5196-45D4-43EC-97A1-7CC992E826E3}C:\users\jan behrens\appdata\local\temp\jivexviewer\jre\bin\jivex dicom cd viewer] => (Allow) C:\users\jan behrens\appdata\local\temp\jivexviewer\jre\bin\jivex dicom cd viewer => Keine Datei
FirewallRules: [{85E04ADB-1476-40D8-B706-F90B2CF3B6F8}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori and the Will of the Wisps\oriwotw.exe () [Datei ist nicht signiert]
FirewallRules: [{03E78677-F31A-49DF-AFB4-EC6E5954861D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Ori and the Will of the Wisps\oriwotw.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{777EC042-A488-4C28-99DE-BDF996AACB65}C:\program files\adiirc\adiirc.exe] => (Allow) C:\program files\adiirc\adiirc.exe (AdiIRC.com) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{978421B8-6867-4A80-81E1-A2188A8FA665}C:\program files\adiirc\adiirc.exe] => (Allow) C:\program files\adiirc\adiirc.exe (AdiIRC.com) [Datei ist nicht signiert]
FirewallRules: [{AC86590F-8238-46CC-B54A-5B65547CCC27}] => (Allow) D:\altera\13.1\qprogrammer\bin64\jtagserver.exe () [Datei ist nicht signiert]
FirewallRules: [{5ABF1005-0C81-49E8-BB05-C8FE2458D38B}] => (Allow) D:\altera\13.1\qprogrammer\bin64\jtagserver.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3FF8F49B-7070-4433-B1B8-D70C1CC057E9}D:\altera\13.1\qprogrammer\bin\quartus_pgmw.exe] => (Allow) D:\altera\13.1\qprogrammer\bin\quartus_pgmw.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{AD709627-FD48-430D-A522-758842562E88}D:\altera\13.1\qprogrammer\bin\quartus_pgmw.exe] => (Allow) D:\altera\13.1\qprogrammer\bin\quartus_pgmw.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{B93251DD-16D4-4E8D-9B12-DD961A899950}D:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [UDP Query User{3A6BD7A4-6A6F-4A29-A33F-2CC45505EF22}D:\program files (x86)\call of duty modern warfare\modernwarfare.exe] => (Allow) D:\program files (x86)\call of duty modern warfare\modernwarfare.exe (Activision Publishing Inc -> Activision)
FirewallRules: [{6E27FD2C-352E-4091-A5C6-5811E2AE1A7A}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D Twentieth Anniversary World Tour\duke3d.exe () [Datei ist nicht signiert]
FirewallRules: [{167C2060-68A4-451D-8FB8-40644A791654}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Duke Nukem 3D Twentieth Anniversary World Tour\duke3d.exe () [Datei ist nicht signiert]
FirewallRules: [{E7782F32-FC19-4399-A23D-89AD0A52D675}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Bloodstained Ritual of the Night\BloodstainedRotN.exe () [Datei ist nicht signiert]
FirewallRules: [{454A3697-D7A0-44D5-A142-5CF97ED62AA8}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Bloodstained Ritual of the Night\BloodstainedRotN.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{F451130F-E5B2-4EF6-B44C-CBA6A8E49AF3}D:\program files (x86)\steam\steamapps\common\bloodstained ritual of the night\bloodstainedrotn\binaries\win64\bloodstainedrotn-win64-shipping.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\bloodstained ritual of the night\bloodstainedrotn\binaries\win64\bloodstainedrotn-win64-shipping.exe (ArtPlay) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{D1240888-38FC-4AF7-A84B-1DF5996A184F}D:\program files (x86)\steam\steamapps\common\bloodstained ritual of the night\bloodstainedrotn\binaries\win64\bloodstainedrotn-win64-shipping.exe] => (Allow) D:\program files (x86)\steam\steamapps\common\bloodstained ritual of the night\bloodstainedrotn\binaries\win64\bloodstainedrotn-win64-shipping.exe (ArtPlay) [Datei ist nicht signiert]
FirewallRules: [{186E0A29-5A44-4A00-9B74-1A564EB4FCB6}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{DDEC404C-150C-4A2B-85C1-7317231466FC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{6D43DD66-38C9-4220-B8F6-B381FDEA1A74}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [{10D7479E-BAA4-4764-A475-E877082A7601}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)
FirewallRules: [TCP Query User{F8EE4958-3E1C-4CDD-A9BA-B94D0C6F4590}D:\users\jan behrens\downloads\downloader_diablo2_lord_of_destruction_dede.exe] => (Allow) D:\users\jan behrens\downloads\downloader_diablo2_lord_of_destruction_dede.exe => Keine Datei
FirewallRules: [UDP Query User{9914CA3B-10EF-4B3E-88C0-EF3F133C3E2C}D:\users\jan behrens\downloads\downloader_diablo2_lord_of_destruction_dede.exe] => (Allow) D:\users\jan behrens\downloads\downloader_diablo2_lord_of_destruction_dede.exe => Keine Datei
FirewallRules: [TCP Query User{74E807B5-C8E2-494E-9319-26BA1A82851A}D:\users\jan behrens\downloads\downloader_diablo2_dede.exe] => (Allow) D:\users\jan behrens\downloads\downloader_diablo2_dede.exe => Keine Datei
FirewallRules: [UDP Query User{9875B469-C39D-4B80-9490-20093C5C9C49}D:\users\jan behrens\downloads\downloader_diablo2_dede.exe] => (Allow) D:\users\jan behrens\downloads\downloader_diablo2_dede.exe => Keine Datei
FirewallRules: [TCP Query User{5FBFD9B1-3B89-4A35-9293-E44A0986424A}D:\users\jan behrens\downloads\v4.6_portable\v4.6_portable\arduino ide portable\java\bin\javaw.exe] => (Allow) D:\users\jan behrens\downloads\v4.6_portable\v4.6_portable\arduino ide portable\java\bin\javaw.exe
FirewallRules: [UDP Query User{EF704ECC-3C7A-4281-8038-C12E6B458494}D:\users\jan behrens\downloads\v4.6_portable\v4.6_portable\arduino ide portable\java\bin\javaw.exe] => (Allow) D:\users\jan behrens\downloads\v4.6_portable\v4.6_portable\arduino ide portable\java\bin\javaw.exe
FirewallRules: [{A77EE76B-2C95-428E-8814-7DC80387F2FC}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe (Valve -> )
FirewallRules: [{97201482-DE52-4C0F-8E0B-CC74D3DD6C4F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Portal\hl2.exe (Valve -> )
FirewallRules: [{60A62741-E8DE-4A1A-B2E0-122C99E899C7}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{D19C470A-6A72-4E8F-BFAD-679FB8D7A93C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Portal 2\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{EF3FA96C-8D0D-4487-BBB6-9D0E6389E338}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{5A0A8BFC-DE1F-4B0A-9D2E-B17B8B4A1553}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{2924D19F-B709-44A5-9BC8-32A602F754B4}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{36F5FEB1-001A-4E41-8793-F138488E49B7}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Thinking with Time Machine\bin\SDKLauncher.exe (Valve -> )
FirewallRules: [{643FE428-671A-493D-BC84-EE8C49C41372}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{063B1061-FE8D-41B8-BC7A-3430FF116B53}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\The Witcher 3\bin\x64\witcher3.exe (CD Projekt Red) [Datei ist nicht signiert]
FirewallRules: [{2B2CA9F9-13AB-4363-9406-0D4B5A09B54D}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe () [Datei ist nicht signiert]
FirewallRules: [{6857BE75-7527-480E-818E-360A23705953}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe () [Datei ist nicht signiert]
FirewallRules: [{C47FAE29-D66C-4D18-A963-B7AE3C23497E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{0C0A39E6-8645-4DAA-8801-E5217D3F9160}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{8C8CE388-827E-4726-B738-794D1E0F67E6}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{A0713B89-CBBA-48BE-A53B-E428CE2C2F4C}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
FirewallRules: [{6BB7E49E-A924-49C8-816A-EEB24F055059}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Doom 64\DOOM64_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{24DBE8E4-F9E4-4BD5-8D31-17E3F14DBC4F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\Doom 64\DOOM64_x64.exe () [Datei ist nicht signiert]
FirewallRules: [{25054CCC-93C8-40A0-8B22-DD1B09F997BA}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{AABAF89A-D5E8-4820-8AF2-1BCF853F870F}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\DOOMEternal\idTechLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{8A2E8115-9C7E-4A11-965A-E0D49249654F}] => (Allow) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe (Corsair Memory, Inc. -> Corsair Memory, Inc)
FirewallRules: [{6D2B02ED-2E82-4508-8A49-0EFF979C66FF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{504F8B24-34F1-43CC-AA47-D5EA586DB208}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{2450E9C3-8F04-46F5-BD14-E06FFC06B4B0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{D0FCE70B-6913-4758-82A7-9902D26B81E8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [TCP Query User{36561211-36F5-4CC6-8D2E-60ED97574995}C:\program files (x86)\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\program files (x86)\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [UDP Query User{69EEDCF9-5835-41CB-82E7-652E9EEBCD44}C:\program files (x86)\obs-studio\bin\64bit\obs64.exe] => (Allow) C:\program files (x86)\obs-studio\bin\64bit\obs64.exe (Hugh Bailey -> OBS)
FirewallRules: [{15B6B7E3-6A63-4235-AA98-B12CE98287F4}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E735FFEC-6D4C-4DA7-BBD0-00B8E47B8759}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{7B5BFC28-1CFD-41EF-9960-B5BC342C39AA}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{AFAB72F4-1F79-4A4B-9BA4-067E8450F405}] => (Allow) LPort=52050
FirewallRules: [{D9385404-4469-46DB-8920-04055D301B49}] => (Allow) LPort=52050
FirewallRules: [{044D31F4-43FF-4FB2-84E7-2A626EC3EC57}] => (Allow) LPort=52050
FirewallRules: [{BD3A2157-A081-4BAC-BF9C-8B645B8612D7}] => (Allow) LPort=52051
FirewallRules: [{20BD9AEB-6133-418C-8139-CAEE53FC5C3E}] => (Allow) LPort=52051
FirewallRules: [{AFA9777B-543F-4542-8C60-D63BDE9C81B4}] => (Allow) LPort=52051
FirewallRules: [TCP Query User{FD6FBD83-FA75-4B37-8C76-87DCEB7D050B}D:\users\jan behrens\downloads\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe] => (Allow) D:\users\jan behrens\downloads\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe => Keine Datei
FirewallRules: [UDP Query User{D6DE876C-72A4-4EA8-A83E-70717816C6D4}D:\users\jan behrens\downloads\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe] => (Allow) D:\users\jan behrens\downloads\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe => Keine Datei
FirewallRules: [TCP Query User{0DB31AAF-A2DF-45D6-B9B5-6CCE7A4E8DA2}D:\twitch\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe] => (Allow) D:\twitch\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe (Lioran) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{3E91C729-B51C-4806-A4C7-A0CC7B792BED}D:\twitch\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe] => (Allow) D:\twitch\lioranboard\lioranboard receiver(pc)\lioranboard receiver.exe (Lioran) [Datei ist nicht signiert]
FirewallRules: [{59BDF4BF-37DD-4BCD-BCDD-88C0CE783DC2}] => (Allow) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{438D5EC2-8C48-430D-AE80-F5DA3BD11F96}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> )
FirewallRules: [{83D3B86F-419D-451F-905E-785BC3FD7A7C}] => (Allow) D:\Program Files (x86)\Steam\SteamApps\common\wallpaper_engine\bin\diagnostics32.exe (Kristjan Skutta -> )
FirewallRules: [{8752A4A6-62DD-45CB-B57D-0E7F72E4E28A}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access
StandardProfile\AuthorizedApplications: [C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:118.38 GB) (Free:27.48 GB) (23%)
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (08/01/2020 02:54:29 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: Alpha)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Error: (08/01/2020 02:52:56 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (08/01/2020 02:48:56 AM) (Source: Microsoft-Windows-PerfNet) (EventID: 2004) (User: Alpha)
Description: Das Serverdienst-Leistungsobjekt kann nicht geöffnet werden. Die ersten vier Bytes (DWORD) des Datenabschnitts enthalten den Statuscode.
Error: (08/01/2020 02:47:29 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (08/01/2020 02:47:29 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (08/01/2020 02:47:29 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.
.
Error: (08/01/2020 02:47:29 AM) (Source: VSS) (EventID: 13) (User: )
Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.
]
Error: (08/01/2020 02:45:08 AM) (Source: ESENT) (EventID: 455) (User: )
Description: svchost (4912,R,98) TILEREPOSITORYS-1-5-18: Fehler -1023 (0xfffffc01) beim Öffnen von Protokolldatei C:\WINDOWS\syswow64\config\systemprofile\AppData\Local\TileDataLayer\Database\EDB.log.
Systemfehler:
=============
Error: (08/01/2020 02:57:13 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:53:39 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:50:06 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:48:24 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:18:43 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{F3B4E234-7A68-4E43-B813-E4BA55A065F6}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:05:10 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 02:04:57 AM) (Source: DCOM) (EventID: 10010) (User: Alpha)
Description: Der Server "Microsoft.SkypeApp_15.61.100.0_x86__kzf8qxf38zg5c!App.AppXtwmqn4em5r5dpafgj4t4yyxgjfe0hr50.mca" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
Error: (08/01/2020 01:50:02 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Spybot Security Center Integration Service" wurde aufgrund folgenden Fehlers nicht gestartet:
Die digitale Signatur dieser Datei kann nicht überprüft werden. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um böswillige Software aus einer unbekannten Quelle handelt, installiert.
Windows Defender:
===================================
Date: 2019-09-26 00:08:51.911
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Adware:JS/InjectorAd.A&threatid=258409&enterprise=0
Name: Adware:JS/InjectorAd.A
ID: 258409
Schweregrad: Hoch
Kategorie: Adware
Pfad: file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005ee8; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f00; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f0a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4b; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f6f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f74; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f76; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f7f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f83; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f8e; file:_C:\Users\Jan Behrens\AppData\Local\Goo
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
Sicherheitsversion: AV: 1.303.147.0, AS: 1.303.147.0, NIS: 1.303.147.0
Modulversion: AM: 1.1.16400.2, NIS: 1.1.16400.2
Date: 2019-09-26 00:05:29.483
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Adware:JS/InjectorAd.A&threatid=258409&enterprise=0
Name: Adware:JS/InjectorAd.A
ID: 258409
Schweregrad: Hoch
Kategorie: Adware
Pfad: file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005ee8; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f00; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f0a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4b; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f6f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f74; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f76; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f7f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f83; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f8e; file:_C:\Users\Jan Behrens\AppData\Local\Goo
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
Sicherheitsversion: AV: 1.303.147.0, AS: 1.303.147.0, NIS: 1.303.147.0
Modulversion: AM: 1.1.16400.2, NIS: 1.1.16400.2
Date: 2019-09-25 23:57:25.931
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Adware:JS/InjectorAd.A&threatid=258409&enterprise=0
Name: Adware:JS/InjectorAd.A
ID: 258409
Schweregrad: Hoch
Kategorie: Adware
Pfad: file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005ee8; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f00; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f0a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4b; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f6f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f74; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f76; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f7f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f83; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f8e; file:_C:\Users\Jan Behrens\AppData\Local\Goo
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
Sicherheitsversion: AV: 1.303.147.0, AS: 1.303.147.0, NIS: 1.303.147.0
Modulversion: AM: 1.1.16400.2, NIS: 1.1.16400.2
Date: 2019-09-25 23:57:24.617
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Adware:JS/InjectorAd.A&threatid=258409&enterprise=0
Name: Adware:JS/InjectorAd.A
ID: 258409
Schweregrad: Hoch
Kategorie: Adware
Pfad: file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005ee8; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f00; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f0a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4b; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f6f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f74; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f76; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f7f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f83; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f8e; file:_C:\Users\Jan Behrens\AppData\Local\Goo
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
Sicherheitsversion: AV: 1.303.147.0, AS: 1.303.147.0, NIS: 1.303.147.0
Modulversion: AM: 1.1.16400.2, NIS: 1.1.16400.2
Date: 2019-09-25 23:57:18.474
Description:
Windows Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Adware:JS/InjectorAd.A&threatid=258409&enterprise=0
Name: Adware:JS/InjectorAd.A
ID: 258409
Schweregrad: Hoch
Kategorie: Adware
Pfad: file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005ee8; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f00; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f0a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4a; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f4b; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f6f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f74; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f76; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f7f; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f83; file:_C:\Users\Jan Behrens\AppData\Local\Google\Chrome\User Data\Default\Cache\f_005f8e; file:_C:\Users\Jan Behrens\AppData\Local\Goo
Erkennungsursprung: Unbekannt
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
Sicherheitsversion: AV: 1.303.147.0, AS: 1.303.147.0, NIS: 1.303.147.0
Modulversion: AM: 1.1.16400.2, NIS: 1.1.16400.2
CodeIntegrity:
===================================
Date: 2020-08-01 03:03:29.968
Description:
Windows is unable to verify the image integrity of the file \Device\HarddiskVolume1\Program Files\ESET\ESET NOD32 Antivirus\eamsi.dll because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.
Date: 2020-08-01 02:59:35.539
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:35.536
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:35.533
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:34.601
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:34.597
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:34.595
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2020-08-01 02:59:19.779
Description:
Code Integrity determined that a process (\Device\HarddiskVolume1\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume1\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. V1.13 02/16/2016
Hauptplatine: MSI Z97 GAMING 5 (MS-7917)
Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 15818.59 MB
Verfügbarer physikalischer RAM: 8352.78 MB
Summe virtueller Speicher: 22730.59 MB
Verfügbarer virtueller Speicher: 13933.23 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:118.38 GB) (Free:27.48 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Daten) (Fixed) (Total:931.51 GB) (Free:119.52 GB) NTFS
Drive e: (Datengrab) (Fixed) (Total:1397.26 GB) (Free:1268.17 GB) NTFS
\\?\Volume{1980bbb7-0000-0000-0000-80981d000000}\ () (Fixed) (Total:0.86 GB) (Free:0.4 GB) NTFS
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (MBR Code: Windows 7/8/10) (Size: 119.2 GB) (Disk ID: 1980BBB7)
Partition 1: (Active) - (Size=118.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=878 MB) - (Type=27)
==========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 4A6EC672)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)
==========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 1397.3 GB) (Disk ID: 05CEE7F6)
Partition 1: (Active) - (Size=1397.3 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================
--- --- --- |
