Code:
Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 02.01.2026
Scan-Zeit: 20:37
Protokolldatei: 88e4a5dc-e812-11f0-908f-74563cb95d70.json
-Softwaredaten-
Version: 5.4.5.226
Komponentenversion: 146.0.5441
Version des Aktualisierungspakets: 1.0.106101
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 11 (Build 26200.7462)
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-36P160C\KaCy
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 208374
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 1 Min., 46 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 0
(keine bösartigen Elemente erkannt)
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
WMI: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
# -------------------------------
# Malwarebytes AdwCleaner 8.7.0.619
# -------------------------------
# Build: 12-17-2025
# Database: 2025-12-16.1 (Cloud)
# Support: https://help.malwarebytes.com/
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 01-02-2026
# Duration: 00:00:00
# OS: Windows 11 (Build 26200.7462)
# Cleaned: 1
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|GIMP Updater
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner[S00].txt - [1500 octets] - [02/01/2026 20:43:36]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-11-2025
durchgeführt von KaCy (Administrator) auf DESKTOP-36P160C (Gigabyte Technology Co., Ltd. B650 AORUS PRO AX) (02-01-2026 20:45:10)
Gestartet von C:\Users\KaCy\Desktop\FRST64.exe
Geladene Profile: KaCy
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe
(explorer.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Users\KaCy\Desktop\adwcleaner.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <16>
(Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2508.38.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <2>
(services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\System32\GameInputSvc.exe <2>
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe [3495808 2022-06-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [SteelSeriesGG] => C:\Program Files\SteelSeries\GG\SteelSeriesGG.exe [17665928 2025-07-16] (SteelSeries ApS -> SteelSeries A/S)
HKLM\...\Run: [Stream Deck] => C:\Program Files\Elgato\StreamDeck\StreamDeck.exe [18214480 2024-08-28] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [185384 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [684256 2025-09-15] (Geek Software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-12] (Logitech, Inc. -> Logitech Inc.)
HKLM-x32\...\Run: [AMD Radeon RX 7900 XTX Series RGB LED] => C:\Program Files (x86)\AMD\AMD Radeon RX 7900 XTX Series RGB LED\AMD_Radeon_RX_7900_XTX_Series_RGB_LED_HID_x64.exe [2661960 2023-01-31] (Cooler Master Co., Ltd. -> AMD)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [MicrosoftEdgeAutoLaunch_A71F778B3640C4FD80334655423A2C67] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4228688 2025-12-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Steam] => D:\Programme\Steam\steam.exe [5750936 2025-12-23] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Discord] => C:\Users\KaCy\AppData\Local\Discord\Update.exe [1525024 2024-03-18] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [NZXT.CAM] => C:\Program Files\NZXT CAM\NZXT CAM.exe [186398128 2025-12-30] (NZXT, Inc. -> NZXT, Inc.)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [EpicGamesLauncher] => C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [39520672 2025-11-29] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Synapse3] => C:\Program Files (x86)\Razer\Synapse3\WPFUI\Framework\Razer Synapse 3 Host\Razer Synapse 3.exe [3600072 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Volume Controller SD plugin] => C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServerWatcher.exe [108072 2023-09-18] (Corsair Memory, Inc. -> )
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [KYOCERA Client Tool] => C:\Program Files\Kyocera\ClientTool\KMSTMVM.exe [321024 2024-05-31] (KYOCERA Document Solutions Inc.) [Datei ist nicht signiert]
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Teams] => C:\Users\KaCy\AppData\Local\Microsoft\WindowsApps\MSTeams_8wekyb3d8bbwe\ms-teams.exe [0 0] () [symlink -> ]
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Opera GX Stable] => C:\Users\KaCy\AppData\Local\Programs\Opera GX\opera.exe [2016200 2025-12-26] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\KaCy\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [4864456 2025-12-10] (Opera Norway AS -> Opera Software)
HKLM\...\Print\Monitors\KM Language Monitor: C:\Windows\system32\KMPJL64.DLL [123736 2022-03-23] (Microsoft Windows Hardware Compatibility Publisher -> KYOCERA MITA Corporation)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ROCCAT Swarm Monitor.lnk [2024-09-08]
ShortcutTarget: ROCCAT Swarm Monitor.lnk -> C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\ROCCAT_Swarm_Monitor.exe (Voyetra Turtle Beach, Inc. -> ROCCAT)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {ECD40D01-E9CD-40BA-B375-8D434AF820D5} - System32\Tasks\AMD Install Manager - Check For Updates => C:\Program Files\AMD\AMDInstallManager\AMDInstallManager.exe [55986448 2025-12-03] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) -> C:\Program Files\AMD\AMDInstallManager\\-CheckForUpdates
Task: {81A1814C-EF64-4D14-90AC-784987AB29E0} - System32\Tasks\GCC => C:\Program Files\GIGABYTE\Control Center\GCC.exe [35228272 2023-12-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> ) -> C:\Program Files\GIGABYTE\Control Center\\-b
Task: {8A377124-00DE-4B72-AB71-45D7A6B9CA32} - System32\Tasks\Microsoft\Windows\AppxDeploymentClient\AppInstallerUpdater => C:\Windows\system32\rundll32.exe [98304 2025-12-10] (Microsoft Windows -> Microsoft Corporation) -> %windir%\system32\AppxDeploymentClient.dll,AppInstallerUpdateAllTask
Task: {27D840BF-502C-4324-9EE2-3EFAA9BB1E17} - System32\Tasks\Microsoft\Windows\Clip\ClipESU => %SystemRoot%\system32\clipesu.exe (Keine Datei)
Task: {3FF03505-0D18-4E24-A31A-E6966CF301C3} - System32\Tasks\Microsoft\Windows\Clip\ClipESUConsumer => %SystemRoot%\system32\ClipESUConsumer.exe -evaluateEligibility (Keine Datei)
Task: {890F4F51-8536-4AF7-86DF-17957EEC59BB} - System32\Tasks\Microsoft\Windows\Clip\ClipEsuConsumerProcessPreOrder => %SystemRoot%\system32\ClipESUConsumer.exe -postProcessPreOrder (Keine Datei)
Task: {B77CEDF4-8FAA-4FEA-9D90-663ADF80BEC4} - System32\Tasks\Microsoft\Windows\Clip\ClipEsuConsumerProcessRefund => %SystemRoot%\system32\ClipESUConsumer.exe -processRefund (Keine Datei)
Task: {601F14F6-2A63-45ED-A728-8A8FD306E612} - System32\Tasks\Microsoft\Windows\Clip\EnableClipESU => %SystemRoot%\system32\clipesu.exe -e (Keine Datei)
Task: {E88D9B2C-DDEA-47B2-9582-085153004DB5} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (Keine Datei)
Task: {6194EEEB-B894-4374-B5DE-A948DB1F4602} - System32\Tasks\Microsoft\Windows\Setup\PITRTask => {093cb270-c282-4c22-b2ea-7d2bf1c30bbf} C:\WINDOWS\system32\oobe\PITRTask.dll [118784 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
Task: {CAB76809-EDC0-40D2-A888-AD9BEDF4E88A} - System32\Tasks\Microsoft\Windows\UNP\RunUpdateNotificationMgr => %windir%\System32\UNP\UpdateNotificationMgr.exe (Keine Datei)
Task: {BA05A797-3C60-457E-B9EF-B702C24CF048} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\MusUx_UpdateInterval => %systemroot%\system32\MusNotification.exe Display (Keine Datei)
Task: {52EA9EC9-B5C3-49F5-8FD8-929AC1EE052F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (Keine Datei)
Task: {F3ADCAD9-1BF7-4D17-B097-0989A791DCC6} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (Keine Datei)
Task: {2EE781FA-1F3B-4AA5-A9AA-2E6594D81A68} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5570CE61-082B-45CC-A85B-72C33301FAAA} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {79FEC499-FD63-4485-A1EA-AC4281F54CE4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {AB505452-376B-4B1F-9473-88D7D105CF05} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpCmdRun.exe [1803016 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9F3AFEF3-FC21-4588-91FB-283C38C08CC5} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3729264202-1610036436-1823616988-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [696960 2025-12-12] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {32AA1C7B-2AD5-4726-A991-72EE9842EB21} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2025-12-12] (Mozilla Corporation -> Mozilla Foundation)
Task: {3F8CF863-4847-4C63-AFD8-1FDF731EAE3A} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1766754644 => C:\Users\KaCy\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [6243784 2025-12-22] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --installdir="C:\Users\KaCy\AppData\Local\Programs\Opera GX\assistant" --producttype=assistant $(Arg0)
Task: {950B9120-0188-40A8-A0D2-2EC791065975} - System32\Tasks\Opera GX scheduled Autoupdate 1764277289 => C:\Users\KaCy\AppData\Local\Programs\Opera GX\autoupdate\opera_autoupdate.exe [6243784 2025-12-22] (Opera Norway AS -> Opera Software)
Task: {0AF62CE1-5DCC-4D21-8AEC-969493B3D423} - System32\Tasks\ROCCAT DEVICE SERVICE => C:\Program Files (x86)\ROCCAT\ROCCAT SWARM\ROCCAT_dev_service.exe [459216 2025-10-08] (Voyetra Turtle Beach, Inc. -> ROCCAT)
Task: {A9A16D64-451A-484D-B9D6-184E12C0EF01} - System32\Tasks\Updater Task FM => C:\Users\KaCy\AppData\Local\FiveMods\FiveMods.exe [165912088 2024-07-26] (Danylo Babenko -> FiveMods)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2b210d33-03e4-4d4b-ac66-22b0b59b570e}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2b210d33-03e4-4d4b-ac66-22b0b59b570e}\65F6461666F6E6560284F6473707F647: [DhcpNameServer] 176.95.16.230 176.95.16.231
Tcpip\..\Interfaces\{2b210d33-03e4-4d4b-ac66-22b0b59b570e}\65F6461666F6E6560284F6D6563707F647: [DhcpNameServer] 176.95.16.230 176.95.16.231
Tcpip\..\Interfaces\{9e2a654b-7a9e-4d46-a45a-80266f3ddaa0}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{9e2a654b-7a9e-4d46-a45a-80266f3ddaa0}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default [2026-01-02]
Edge HomePage: Default -> hxxp://google.com/
Edge StartupUrls: Default -> "hxxp://google.de/"
Edge Extension: (7TV) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ammjkodgmmoknidbanneddgankgfejfh [2025-11-20]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2025-12-09]
Edge Extension: (Google Docs Offline) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-22]
Edge Extension: (BetterTTV) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\icllegkipkooaicfmdfaloehobmglglb [2025-10-18]
Edge Extension: (Dark Reader) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ifoakfbpdcdoeenechcleahebpibofpc [2025-12-09]
Edge Extension: (Edge relevant text changes) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-03-31]
Edge Extension: (AdBlock − blockieren Sie Werbung im Internet) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-12-17]
Edge Extension: (uBlock Origin) - C:\Users\KaCy\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2025-11-28]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF DefaultProfile: 103v1r2y.default
FF ProfilePath: C:\Users\KaCy\AppData\Roaming\Mozilla\Firefox\Profiles\103v1r2y.default [2025-08-16]
FF ProfilePath: C:\Users\KaCy\AppData\Roaming\Mozilla\Firefox\Profiles\uvlxpm1c.default-release [2025-11-24]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
Opera:
=======
StartMenuInternet: (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001) Opera GXStable - "C:\Users\KaCy\AppData\Local\Programs\Opera GX\opera.exe"
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S2 amd3dvcacheSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcacheSvc.exe [188528 2025-09-29] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc)
S2 AmdPpkgSvc; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkgSvc.exe [515480 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20352680 2025-07-22] (BattlEye Innovations e.K. -> )
S2 CAMService; C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\cam-core\dist\service.exe [573872 2025-12-30] (NZXT, Inc. -> )
S2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [614432 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [238632 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [84008 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S2 CorsairUniwillService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueUniwillService.exe [108072 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1137904 2025-01-05] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [959216 2025-10-01] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071904 2025-11-29] (Epic Games Inc. -> Epic Games, Inc.)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [1604112 2025-04-08] (Epic Games Inc. -> Epic Games, Inc.)
R3 iCUEDevicePluginHost; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe [462888 2023-01-20] (Corsair Memory, Inc. -> Corsair)
R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [497568 2021-10-25] (Logitech Inc -> Logitech)
S2 LogService; C:\Program Files\Kyocera\ClientTool\WFH\logsettings\logservice\LogService.exe [28160 2024-05-31] () [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11207664 2025-12-18] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-06-22] (Malwarebytes Inc. -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MpDefenderCoreService.exe [2063376 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [684256 2025-09-15] (Geek Software GmbH -> geek software GmbH)
S2 Razer Chroma SDK Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKServer.exe [1884808 2025-05-28] (Razer USA Ltd. -> Razer Inc.)
S2 Razer Chroma SDK Service; C:\Program Files (x86)\Razer Chroma SDK\bin\RzSDKService.exe [249480 2025-05-27] (Razer USA Ltd. -> Razer Inc.)
S2 Razer Chroma Stream Server; C:\Program Files (x86)\Razer Chroma SDK\bin\RzChromaStreamServer.exe [1268176 2024-07-18] (Razer USA Ltd. -> Razer Inc.)
S2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [256256 2024-10-15] (Razer USA Ltd. -> Razer Inc)
S2 Razer Synapse Service; C:\Program Files (x86)\Razer\Synapse3\Service\Razer Synapse Service.exe [300232 2025-07-15] (Razer USA Ltd. -> Razer Inc.)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [4828136 2024-11-20] (Rockstar Games, Inc. -> Rockstar Games)
S2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [513672 2025-04-28] (Razer USA Ltd. -> Razer Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803088 2025-11-12] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SteelSeriesGGUpdateServiceProxy; C:\Program Files\SteelSeries\GG\SteelSeriesGGUpdateServiceProxy.exe [1587712 2025-03-13] (GN Hearing A/S -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\NisSrv.exe [4426832 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25110.6-0\MsMpEng.exe [290704 2025-12-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 GigabyteUpdateService; C:\WINDOWS\system32\GigabyteUpdateService.exe [590072 2025-12-31] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 amd3dvcache; C:\WINDOWS\System32\DriverStore\FileRepository\amd3dvcache.inf_amd64_0ee9fc510270aa43\amd3dvcache.sys [43384 2025-09-29] (Advanced Micro Devices -> Advanced Micro Devices, Inc)
R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_444858a7b12b1743\amdfendrmgr.sys [37272 2025-11-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [43400 2025-09-10] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
R3 AmdPpkg; C:\WINDOWS\System32\DriverStore\FileRepository\amdppkg.inf_amd64_27762fb4b4d122d3\AmdPpkg.sys [35224 2025-11-19] (Advanced Micro Devices -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys [112952 2024-06-15] (AMD Test Build -> Advanced Micro Devices)
R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 amduw23g-196284-dd24e58f; C:\WINDOWS\System32\DriverStore\FileRepository\u0196284.inf_amd64_a2c2c8c98234e928\B025541\amdkmdag.sys [109762576 2025-12-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 amduw23g-420421-41d8ada4; C:\WINDOWS\System32\DriverStore\FileRepository\u0420421.inf_amd64_8465bc45599a509e\B419571\amdkmdag.sys [101886416 2025-10-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
S3 AsrDrv106; C:\Windows\SysWOW64\Drivers\AsrDrv106.sys [49984 2024-04-14] (ASROCK INC. -> ASRock Incorporation)
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63008 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2025-12-31] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ACHTUNG
R3 cpuz161; C:\ProgramData\CPUID Software\sdk\V6qfO147JoG [44680 2025-12-31] (Microsoft Windows Hardware Compatibility Publisher -> CPUID)
R1 CTIIO; C:\Windows\system32\drivers\CtiIo64.sys [34512 2024-03-31] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [175824 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 e2fexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e2f.inf_amd64_bf51b653ec31b8ab\e2f.sys [531568 2023-07-03] (Intel Corporation -> Intel Corporation)
R3 gdrv3; C:\Windows\system32\drivers\gdrv3.sys [51520 2024-03-31] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [333192 2025-11-18] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234088 2025-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-06-22] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245336 2025-10-22] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MTKBTFilterX64; C:\WINDOWS\system32\DRIVERS\mtkbtfilterx.sys [303048 2022-03-23] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
R3 mtkwlex; C:\WINDOWS\System32\drivers\mtkwl6ex.sys [1559944 2022-03-30] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)
S3 rrcflt; C:\WINDOWS\System32\DRIVERS\rrcflt.sys [37936 2025-04-25] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
R3 RzCommon; C:\WINDOWS\System32\drivers\RzCommon.sys [64168 2022-08-18] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_00cb; C:\WINDOWS\System32\drivers\RzDev_00cb.sys [64760 2024-07-29] (Razer USA Ltd. -> Razer Inc)
R3 RzDev_0287; C:\WINDOWS\System32\drivers\RzDev_0287.sys [65760 2023-03-24] (Razer USA Ltd. -> Razer Inc)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [43568 2025-02-25] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174264 2024-10-17] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_4a7a0876e89a4ff8\SteelSeries-Sonar-VAD.sys [95840 2025-05-14] (GN Hearing A/S -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21928 2025-12-18] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [635272 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [102792 2025-12-18] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz160; \??\C:\WINDOWS\temp\cpuz160\cpuz160_x64.sys [X] <==== ACHTUNG
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-02 20:42 - 2026-01-02 20:44 - 000000000 ____D C:\AdwCleaner
2026-01-02 20:42 - 2026-01-02 20:42 - 009629128 _____ (Malwarebytes) C:\Users\KaCy\Desktop\adwcleaner.exe
2026-01-02 20:41 - 2026-01-02 20:41 - 000001427 _____ C:\Users\KaCy\Desktop\Malwarebytes Scan-Bericht 2026-01-02 193755.txt
2026-01-02 17:31 - 2026-01-02 17:32 - 000059929 _____ C:\Users\KaCy\Desktop\Addition.txt
2026-01-02 17:29 - 2026-01-02 20:45 - 000027242 _____ C:\Users\KaCy\Desktop\FRST.txt
2026-01-02 17:29 - 2026-01-02 20:45 - 000000000 ____D C:\FRST
2026-01-02 17:27 - 2026-01-02 17:27 - 002444288 _____ (Farbar) C:\Users\KaCy\Desktop\FRST64.exe
2026-01-02 14:04 - 2026-01-02 14:04 - 000707760 _____ C:\WINDOWS\system32\perfh007.dat
2026-01-02 14:04 - 2026-01-02 14:04 - 000150734 _____ C:\WINDOWS\system32\perfc007.dat
2025-12-26 14:10 - 2025-12-26 14:10 - 000004522 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1766754644
2025-12-22 20:40 - 2026-01-02 16:00 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-12-18 15:14 - 2025-12-18 15:14 - 000013262 _____ C:\Users\KaCy\AppData\Local\recently-used.xbel
2025-12-16 23:47 - 2025-12-16 23:47 - 000123918 _____ C:\Users\KaCy\Desktop\Schreibtisch.odt
2025-12-16 23:08 - 2025-12-18 15:36 - 000000000 ____D C:\Users\KaCy\Desktop\DeadByDaylight
2025-12-11 01:06 - 2025-12-11 01:06 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2025-12-10 21:41 - 2025-12-10 21:41 - 000049563 _____ C:\Users\KaCy\Downloads\DHL-Paketmarke_PAKPCRKDX3XE_Patrick_McManaman.pdf
2025-12-10 20:58 - 2025-12-10 20:58 - 000035602 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-12-10 20:58 - 2025-12-10 20:58 - 000035602 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-12-10 20:47 - 2025-12-10 20:47 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMDInstallManager
2025-12-10 20:45 - 2025-12-06 10:38 - 000631312 _____ C:\WINDOWS\system32\GameManager64.dll
2025-12-10 20:45 - 2025-12-06 10:38 - 000526352 _____ C:\WINDOWS\system32\EEURestart.exe
2025-12-10 20:45 - 2025-12-06 10:38 - 000479240 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 005275664 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 004988424 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 002432016 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 002432016 _____ C:\WINDOWS\system32\vulkaninfo.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 002204168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001933840 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 001933840 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 001841168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001841168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001724592 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001402048 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001329168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001185808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 001068048 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000999440 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000801808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000787984 _____ C:\WINDOWS\system32\hiprt0200064.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000678920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000606472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000592392 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000559632 _____ C:\WINDOWS\system32\atieah64.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000549384 _____ C:\WINDOWS\system32\dgtrayicon.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000543248 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000473608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000471568 _____ C:\WINDOWS\system32\amdlogum.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000450064 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000422408 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000347152 _____ C:\WINDOWS\system32\clinfo.exe
2025-12-10 20:44 - 2025-12-06 10:37 - 000247312 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000212496 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000200720 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000190992 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000182360 _____ C:\WINDOWS\system32\amdmiracast.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000169856 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000159472 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000159472 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000150544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000147472 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000145216 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000142728 _____ C:\WINDOWS\system32\amdxc64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000131248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000131248 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000122384 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000118744 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000051728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2025-12-10 20:44 - 2025-12-06 10:37 - 000048656 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2025-12-10 20:43 - 2025-12-06 10:37 - 121146888 _____ C:\WINDOWS\system32\amd_comgr_2.dll
2025-12-10 20:43 - 2025-12-06 10:37 - 115282440 _____ C:\WINDOWS\system32\amd_comgr_3.dll
2025-12-10 20:43 - 2025-12-06 10:37 - 096945168 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2025-12-10 20:43 - 2025-12-06 10:37 - 000431704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendr.stz
2025-12-10 20:43 - 2025-12-06 10:37 - 000056920 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendrmgr.stz
2025-12-10 20:43 - 2025-12-06 10:36 - 000177160 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2025-12-10 20:43 - 2025-12-06 10:36 - 000145936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2025-12-10 20:43 - 2025-12-06 10:00 - 124697968 _____ C:\WINDOWS\system32\amdxc64.so
2025-12-05 23:45 - 2025-12-05 23:45 - 000375388 _____ C:\Users\KaCy\Desktop\Urlaub2026.xcf
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-01-02 20:44 - 2024-08-18 11:51 - 000000000 ____D C:\Users\KaCy\AppData\Roaming\FiveMods
2026-01-02 20:44 - 2024-04-13 16:00 - 000000000 ____D C:\Users\KaCy\AppData\Roaming\NZXT CAM
2026-01-02 20:44 - 2024-04-01 13:25 - 000000000 ____D C:\Users\KaCy\AppData\Roaming\discord
2026-01-02 20:44 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-01-02 20:39 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-01-02 20:35 - 2025-06-22 20:28 - 000000000 ____D C:\Users\KaCy\AppData\Local\Malwarebytes
2026-01-02 20:01 - 2024-04-01 13:25 - 000000000 ____D C:\Users\KaCy\AppData\Local\Discord
2026-01-02 14:05 - 2024-12-14 02:15 - 000000000 ____D C:\Users\KaCy\AppData\Roaming\EasyAntiCheat
2026-01-02 14:04 - 2025-10-09 15:48 - 001637736 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-01-02 14:04 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-01-02 14:01 - 2025-10-08 21:30 - 000003446 _____ C:\WINDOWS\system32\Tasks\GCC
2026-01-01 13:02 - 2024-08-13 11:13 - 000000000 ____D C:\Users\KaCy\AppData\Local\CrashDumps
2026-01-01 03:19 - 2025-10-08 21:04 - 000000000 ____D C:\Users\KaCy
2026-01-01 03:06 - 2025-10-08 21:24 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-12-31 20:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-12-31 15:16 - 2024-04-01 05:23 - 000089336 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteDownloadAssistant.exe
2025-12-31 15:05 - 2025-10-08 21:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-12-31 15:05 - 2025-10-08 21:26 - 000003212 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-12-31 15:05 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2025-12-31 15:04 - 2025-11-25 22:54 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-12-31 15:04 - 2025-08-16 03:54 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-12-31 15:04 - 2024-04-01 05:21 - 000617816 _____ C:\WINDOWS\system32\wpbbin.exe
2025-12-31 15:04 - 2024-04-01 05:21 - 000590072 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) C:\WINDOWS\system32\GigabyteUpdateService.exe
2025-12-31 15:04 - 2024-04-01 05:21 - 000012288 ___SH C:\DumpStack.log.tmp
2025-12-30 13:54 - 2024-04-13 15:59 - 000000000 ____D C:\Program Files\NZXT CAM
2025-12-29 18:57 - 2024-04-01 00:10 - 000000000 ____D C:\Users\KaCy\AppData\Local\Steam
2025-12-29 18:17 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-12-26 14:10 - 2025-11-27 22:01 - 000004258 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1764277289
2025-12-26 14:10 - 2025-11-27 22:01 - 000001416 _____ C:\Users\KaCy\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2025-12-22 20:36 - 2024-03-31 23:17 - 000000000 ____D C:\Users\KaCy\AppData\Local\D3DSCache
2025-12-22 20:18 - 2025-10-08 21:30 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-12-22 20:18 - 2025-10-08 21:30 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-12-20 11:35 - 2024-04-01 05:21 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-12-18 22:02 - 2024-04-06 10:55 - 000000000 ____D C:\Users\KaCy\AppData\Local\babl-0.1
2025-12-18 15:14 - 2024-04-06 11:02 - 000000000 ____D C:\Users\KaCy\AppData\Local\gtk-2.0
2025-12-18 12:19 - 2024-04-01 05:21 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2025-12-12 20:55 - 2025-08-16 03:54 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-12-11 19:13 - 2024-03-31 23:21 - 000000000 ____D C:\AMD
2025-12-11 19:09 - 2025-10-08 21:01 - 000000000 ____D C:\WINDOWS\system32\AMD
2025-12-11 01:11 - 2024-04-01 08:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-12-11 01:08 - 2025-10-08 21:24 - 000334584 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-12-11 01:06 - 2025-10-08 20:56 - 000000000 ____D C:\WINDOWS\system32\ruxim
2025-12-11 01:06 - 2024-04-01 17:37 - 000000000 ____D C:\WINDOWS\InboxApps
2025-12-11 01:06 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files\Windows Defender
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-12-11 01:06 - 2024-04-01 08:26 - 000000000 ____D C:\Program Files\Common Files\System
2025-12-11 01:06 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2025-12-10 20:57 - 2025-10-09 15:45 - 003276800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-12-10 20:51 - 2024-04-01 11:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2025-12-10 20:50 - 2024-04-01 11:34 - 218369424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2025-12-04 23:02 - 2025-11-27 22:01 - 000001420 _____ C:\Users\KaCy\Desktop\Browser Opera GX.lnk
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2024-10-28 11:00 - 2024-10-28 11:00 - 009217656 _____ () C:\Users\KaCy\altv.exe
2024-08-12 02:28 - 2024-08-18 00:07 - 000000015 _____ () C:\Users\KaCy\AppData\Roaming\obs-virtualcam.txt
2025-12-18 15:14 - 2025-12-18 15:14 - 000013262 _____ () C:\Users\KaCy\AppData\Local\recently-used.xbel
2024-08-10 23:41 - 2025-08-09 21:05 - 000007603 _____ () C:\Users\KaCy\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20-11-2025
durchgeführt von KaCy (02-01-2026 20:46:39)
Gestartet von C:\Users\KaCy\Desktop
Microsoft Windows 11 Pro Version 25H2 26200.7462 (X64) (2025-10-09 14:45:08)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-3729264202-1610036436-1823616988-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3729264202-1610036436-1823616988-503 - Limited - Disabled)
Gast (S-1-5-21-3729264202-1610036436-1823616988-501 - Limited - Disabled)
KaCy (S-1-5-21-3729264202-1610036436-1823616988-1001 - Administrator - Enabled) => C:\Users\KaCy
WDAGUtilityAccount (S-1-5-21-3729264202-1610036436-1823616988-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
alt:V Multiplayer (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\altV Multiplayer) (Version: - altMP)
AMD 3D V-Cache Performance Optimizer Driver (HKLM-x32\...\{4537278A-8E70-4021-A866-38CE644D92F8}) (Version: 1.0.0.12 - Advanced Micro Devices, Inc.) Hidden
AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.)
AMD GPIO2 Driver (HKLM-x32\...\{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}) (Version: 2.2.0.134 - Advanced Micro Devices, Inc.) Hidden
AMD I2C Driver (HKLM-x32\...\{B31D92D9-2914-46B0-9738-F668A563DE73}) (Version: 1.2.0.126 - Advanced Micro Devices, Inc.) Hidden
AMD Install Manager (HKLM\...\{4A09C500-303A-4D4A-AC1F-B6FD3779E76A}) (Version: 25.20.25337.1650 - Advanced Micro Devices, Inc.)
AMD PPM Provisioning File Driver (HKLM-x32\...\{3665A5DE-D07C-46D7-9207-713E8E9FEF32}) (Version: 8.0.0.59 - Advanced Micro Devices, Inc.) Hidden
AMD PSP Driver (HKLM-x32\...\{988F14B8-79A8-475D-BAC7-83F96AD3D821}) (Version: 5.40.0.0 - Advanced Micro Devices, Inc.) Hidden
AMD Radeon RX 7900 XTX Series RGB LED Settings software (HKLM-x32\...\{1A3E3EA7-5A7C-4292-8A13-B0DE1BF49E13}_AMD_VGA_RX 7900 XTX) (Version: 1.05 - Cooler Master Co., Ltd)
AMD SBxxx SMBus Driver (HKLM-x32\...\{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}) (Version: 5.12.0.44 - Advanced Micro Devices, Inc.) Hidden
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 25.12.1 - Advanced Micro Devices, Inc.)
AMD_Chipset_Drivers (HKLM-x32\...\{a2c5e97a-dd0d-4a8c-b1fc-dfcaf9a0a4a2}) (Version: 7.11.26.2142 - Advanced Micro Devices, Inc.) Hidden
ASRRGBLED v2.0.132 (HKLM-x32\...\ASRock RGB LED_is1) (Version: 2.0.132 - ASRock Inc.)
AusweisApp (HKLM\...\{E5B4307B-B88A-46E3-84FE-B85E9864162A}) (Version: 2.3.2 - Governikus GmbH & Co. KG)
blender (HKLM\...\{932B2E6B-7F23-4F97-B9DA-148C3CB3FDB4}) (Version: 4.2.1 - Blender Foundation)
CameraHelperMsi (HKLM-x32\...\{15634701-BACE-4449-8B25-1567DA8C9FD3}) (Version: 13.51.815.0 - Logitech) Hidden
CORSAIR iCUE 4 Software (HKLM\...\{444A58EF-FD29-4558-BD8B-F4839576463C}) (Version: 4.33.138 - Corsair)
CrystalDiskInfo 9.3.2 (HKLM\...\CrystalDiskInfo_is1) (Version: 9.3.2 - Crystal Dew World)
Discord (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Discord) (Version: 1.0.9219 - Discord Inc.)
DroidCam OBS Plugin (HKLM-x32\...\OBSDroidCam) (Version: 2.3.2 - Dev47Apps)
Elgato Stream Deck (HKLM\...\{A8E9A2C0-949B-497A-ADA7-ABCE8A58C1E0}) (Version: 6.7.3.21005 - Corsair Memory, Inc.)
ENE Video Capture Box HAL (HKLM\...\{A096611D-BA11-4A1A-8D09-0A0462D7C8F2}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE Video Capture Box HAL (HKLM-x32\...\{974259bf-3ed1-4cd6-9ed1-40c7f601a786}) (Version: 1.0.5.15 - Ene Tech.) Hidden
ENE_AIC_Marvell_HAL (HKLM\...\{085E2365-0A70-4230-B664-02D5E4FE7E9C}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_AIC_Marvell_HAL (HKLM-x32\...\{887e18fb-6bc3-4cd4-b34e-32d9ff71bbae}) (Version: 1.0.7.0 - ENE TECHNOLOGY INC.) Hidden
ENE_DRAM_RGB_AIO (HKLM\...\{5B5CE185-F845-487D-824D-9D02A8B778FB}) (Version: 1.0.9.1 - Ene Tech.) Hidden
ENE_DRAM_RGB_AIO (HKLM-x32\...\{661c7ac8-4c45-4772-ba1d-090085dde688}) (Version: 1.0.9.1 - Ene Tech.) Hidden
ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden
ENE_EHD_M2_HAL (HKLM-x32\...\{3f5a70c6-60da-4ae9-8072-a51aa4dc08ee}) (Version: 1.0.12.2 - ENE TECHNOLOGY INC.) Hidden
ENE_External_Device_HAL (HKLM\...\{2B8E611F-0B51-4FAC-87BB-AF50D82E7DDA}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_External_Device_HAL (HKLM-x32\...\{a7b1cf47-d8f0-423d-9494-568195f1c864}) (Version: 1.0.12.7 - ENE Tech) Hidden
ENE_MousePad_HAL (HKLM\...\{9E97178A-ADB8-4778-BE60-7E28E2A72721}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_MousePad_HAL (HKLM-x32\...\{c2c794a4-7986-4c45-884d-d4ca43b88df9}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
ENE_X_AIC_HAL (HKLM-x32\...\{c662a481-d76a-4188-95d2-6eb4ffd55542}) (Version: 1.0.6.3 - ENE TECHNOLOGY INC.) Hidden
Epic Games Launcher (HKLM-x32\...\{9483ABD9-C772-487B-ADF8-09347CF8F2D2}) (Version: 1.3.93.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Epic Online Services (HKLM-x32\...\{57A956AB-4BCC-45C6-9B40-957E4E125568}) (Version: 2.0.44.0 - Epic Games, Inc.)
erLT (HKLM-x32\...\{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}) (Version: 1.20.138.34 - Logitech, Inc.) Hidden
FiveM (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\CitizenFX_FiveM) (Version: - Cfx.re)
FiveMods 0.1.58 (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\4dff2cb0-28b6-5dce-b844-e0150747007e) (Version: 0.1.58 - FiveMods)
GBT_rgbMotherboard_UC 24.02.05.02 (HKLM\...\GBT_rgbMotherboard_UC) (Version: 24.02.05.02 - GIGABYTE)
GIGABYTE Control Center 24.01.20.01 (HKLM\...\GIGABYTE Control Center) (Version: 24.01.20.01 - GIGABYTE)
GIMP 2.10.36 (HKLM\...\GIMP-2_is1) (Version: 2.10.36 - The GIMP Team)
Hue Sync (HKLM\...\{23EA4BC6-0324-4C9C-B197-90FA68C105D8}) (Version: 1.12.3.73 - Signify Netherlands B.V.)
KYOCERA Client Tool (HKLM\...\KYOCERA Client Tool) (Version: 1.4.31.23 - KYOCERA Document Solutions Inc.)
Kyocera Product Library (HKLM\...\Kyocera Product Library) (Version: 6.0.3128 - KYOCERA Document Solutions Inc.)
Kyocera TWAIN Driver GX (HKLM\...\Kyocera TWAIN Driver GX) (Version: 2.3.1011 - KYOCERA Document Solutions Inc.)
Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Logitech Capture (HKLM\...\Capture) (Version: 2.08.11 - Logitech)
Logitech Kameraeinstellungen (HKLM-x32\...\LogiUCDPP) (Version: 2.12.20.0 - Logitech Europe S.A.)
Logitech Webcam-Software (HKLM-x32\...\{D40EB009-0499-459c-A8AF-C9C110766215}) (Version: 2.80 - Logitech Inc.)
LWS Facebook (HKLM-x32\...\{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}) (Version: 13.50.854.0 - Logitech) Hidden
LWS Gallery (HKLM-x32\...\{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}) (Version: 13.51.827.0 - Logitech) Hidden
LWS Help_main (HKLM-x32\...\{1651216E-E7AD-4250-92A1-FB8ED61391C9}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Launcher (HKLM-x32\...\{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}) (Version: 13.51.828.0 - Logitech) Hidden
LWS Motion Detection (HKLM-x32\...\{71E66D3F-A009-44AB-8784-75E2819BA4BA}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Pictures And Video (HKLM-x32\...\{08610298-29AE-445B-B37D-EFBE05802967}) (Version: 13.51.815.0 - Logitech) Hidden
LWS Twitter (HKLM-x32\...\{174A3B31-4C43-43DD-866F-73C9DB887B48}) (Version: 13.30.1346.0 - Logitech) Hidden
LWS Webcam Software (HKLM-x32\...\{8937D274-C281-42E4-8CDB-A0B2DF979189}) (Version: 13.51.815.0 - Logitech) Hidden
LWS WLM Plugin (HKLM-x32\...\{9DAEA76B-E50F-4272-A595-0124E826553D}) (Version: 1.30.1201.0 - Logitech) Hidden
LWS YouTube Plugin (HKLM-x32\...\{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}) (Version: 13.31.1038.0 - Logitech) Hidden
Malwarebytes version 5.4.5.226 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.4.5.226 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 143.0.3650.96 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 143.0.3650.96 - Microsoft Corporation) Hidden
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.25.24601 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{1FC1A6C2-576E-489A-9B4A-92D21F542136}) (Version: 3.74.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022.218 (HKLM-x32\...\{E503B4BF-F7BB-3D5F-8BC8-F694B1CFF942}) (Version: 9.0.21022.218 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 146.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 141.0.3 - Mozilla)
NightLight Desktop (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\NightLight Desktop) (Version: 1.2.0 - NightLight)
NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)
NZXT CAM 4.75.7 (HKLM\...\ac0666ae-ee66-5310-ac01-9d6348133b2d) (Version: 4.75.7 - NZXT, Inc.)
OBS Studio (HKLM-x32\...\OBS Studio) (Version: 31.0.3 - OBS Project)
OpenIV (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\OpenIV) (Version: 4.1.1502 - .black/OpenIV Team)
OpenOffice 4.1.15 (HKLM-x32\...\{D8DD7A6F-CB70-43AF-9A0C-9A5A4C195068}) (Version: 4.115.9813 - Apache Software Foundation)
Opera GX Stable 125.0.5729.58 (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\Opera GX 125.0.5729.58) (Version: 125.0.5729.58 - Opera Software)
PDF24 Creator 11.28.2 (HKLM\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 11.28.2 - Geek Software GmbH)
posterXXL DE Fotobücher (HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\{07C27E89-4C84-40F8-886B-FE711F0805E4}_is1) (Version: 25.4.1.10186 - posterXXL DE)
Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 3.0.3.0 - Advanced Micro Devices, Inc.) Hidden
Razer Synapse (HKLM-x32\...\Razer Synapse) (Version: 3.10.0730.071519 - Razer Inc.)
Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.9373.1 - Realtek Semiconductor Corp.)
Revo Registry Cleaner 1.5.2 (HKLM\...\{4DC8CC27-2130-4986-95E7-0C8266F5B82B}_is1) (Version: 1.5.2 - VS Revo Group, Ltd.)
Revo Uninstaller 2.6.0 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.0 - VS Revo Group, Ltd.)
RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.24.0318.1 - Gigabyte)
ROCCAT SWARM (HKLM-x32\...\{E9CA669A-8FB1-4F3D-A771-2E0767D20F89}) (Version: 1.94.790 - ROCCAT GmbH) Hidden
ROCCAT SWARM (HKLM-x32\...\InstallShield_{E9CA669A-8FB1-4F3D-A771-2E0767D20F89}) (Version: 1.94.790 - ROCCAT GmbH)
Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.98.2208 - Rockstar Games)
Rockstar Games SDK (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.3.8.0 - Rockstar Games)
RoomSketcher (HKLM-x32\...\RoomSketcher 1.0) (Version: 1.0 - RoomSketcher)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SteelSeries GG 90.0.0 (HKLM\...\SteelSeries GG) (Version: 90.0.0 - SteelSeries ApS)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.6.2 - TeamSpeak Systems GmbH)
Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 168.1.12922 - Ubisoft)
Update for x64-based Windows Systems (KB5001716) (HKLM\...\{B8D93870-98D1-4980-AFCA-E26563CDFB79}) (Version: 8.94.0.0 - Microsoft Corporation)
Verbatim_SureFireGaming_Product (HKLM\...\{35CB65C6-A7E3-4EE7-AD40-738D70A72164}) (Version: 1.0.3.11 - Verbatim) Hidden
Verbatim_SureFireGaming_Product (HKLM-x32\...\{d601832a-0d94-46ce-9b19-78e8a5887313}) (Version: 1.0.3.11 - Verbatim) Hidden
WD P40 Game Drive (HKLM\...\{EE55DBAE-ECDD-4ADD-AAB5-23DE848B0996}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WD P40 Game Drive (HKLM-x32\...\{72b1a866-fc31-4381-bff3-fa6cd8823777}) (Version: 1.0.2.18 - Western Digital Corporation) Hidden
WinRAR 7.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 7.01.0 - win.rar GmbH)
Packages:
=========
@{MicrosoftWindows.58683691.InpApp_1000.26100.6899.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.58683691.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.58683691.InpApp_cw5n1h2txyewy [2025-12-11] ()
@{MicrosoftWindows.59379618.InpApp_1000.26100.7171.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.59379618.InpApp/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
Crosshair V2 -> C:\Program Files\WindowsApps\47492CenterpointGaming.CrosshairV2_1.1.28.0_neutral__rz8d8f65gztyc [2025-05-28] (CenterPoint Gaming)
Hue Sync -> C:\Program Files\Hue Sync [2025-07-03] (Signify Netherlands B.V.) [Startup Task]
Lively Wallpaper -> C:\Program Files\WindowsApps\12030rocksdanister.LivelyWallpaper_1.0.160.0_x64__97hta09mmv6hy [2025-11-29] (rocksdanister) [Startup Task]
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2025-12-18] ()
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.36.273.0_x64__dt26b99r8h8gj [2024-03-31] (Realtek Semiconductor Corp)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.9.0_x64__cv1g1gvanyjgm [2025-12-20] (WhatsApp Inc.) [Startup Task]
WinDbg -> C:\Program Files\WindowsApps\Microsoft.WinDbg_1.2508.27001.0_x64__8wekyb3d8bbwe [2025-09-05] (Microsoft Corporation)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.57242383.Tasbar_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.59379618.InpApp_cw5n1h2txyewy [2025-12-11] (Microsoft Windows)
WinRAR -> C:\Program Files\WinRAR [2025-10-13] (win.rar GmbH)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3729264202-1610036436-1823616988-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\KaCy\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.25.24601\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} => -> Keine Datei
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-12-18] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2025-12-18] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2024-05-12] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [vidc.i420] => lvcod64.dll
HKLM\...\Drivers32: [MidisrvTransferComplete] => 0
HKLM\...\Drivers32-x32: [vidc.i420] => lvcodec2.dll
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2023-01-17 13:13 - 2023-01-17 13:13 - 000090112 _____ (Silicon Laboratories, Inc.) [Datei ist nicht signiert] C:\Program Files\Corsair\CORSAIR iCUE 4 Software\SiUSBXp.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 8.8.8.8 - 8.8.4.4
ist aktiviert.
Network Binding:
=============
Bluetooth-Netzwerkverbindung: Bluetooth Device (Personal Area Network) -> bthpan.sys
Ethernet: Intel(R) Ethernet Controller I225-V -> e2f.sys
WLAN 2: RZ616 Wi-Fi 6E 160MHz #2 -> mtkwl6ex.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Razer Chroma SDK\bin;C:\Program Files\Razer Chroma SDK\bin;C:\Program Files (x86)\Razer\ChromaBroadcast\bin;C:\Program Files\Razer\ChromaBroadcast\bin;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Windows\System32\OpenSSH\;C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\WindowsApps;;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\KaCy\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run: => "Stream Deck"
HKLM\...\StartupApproved\Run: => "SteelSeriesGG"
HKLM\...\StartupApproved\Run32: => "AMD Radeon RX 7900 XTX Series RGB LED"
HKLM\...\StartupApproved\Run32: => "LWS"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "MicrosoftEdgeAutoLaunch_A71F778B3640C4FD80334655423A2C67"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "AMDNoiseSuppression"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "KYOCERA Client Tool"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "EpicGamesLauncher"
HKU\S-1-5-21-3729264202-1610036436-1823616988-1001\...\StartupApproved\Run: => "Volume Controller SD plugin"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{AAC00C63-44F6-49CA-9EF6-48158B182734}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{9D5A3D1B-D6FE-4DC4-88D0-C788F9248A16}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{F3C2F6D1-661F-40B9-952C-7BCB23EEC833}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404Addon.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [{419578FA-D412-4170-A2E3-3744EFC8262F}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404 - History Edition\Anno1404Addon.exe (Ubisoft Blue Byte GmbH -> Ubisoft)
FirewallRules: [UDP Query User{DE147AA3-7BD9-4321-8B20-529BBB600446}E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe] => (Allow) E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{073E3E30-2DE3-4512-8EB7-24FD281FC861}E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe] => (Allow) E:\steamlibrary\steamapps\common\7 days to die\7daystodie.exe () [Datei ist nicht signiert]
FirewallRules: [{28DDAD18-A79D-42BB-8896-963615F7149A}] => (Allow) D:\Programme\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe => Keine Datei
FirewallRules: [{6883061B-EAEE-45C4-91B4-73C9D3AA008A}] => (Allow) D:\Programme\Steam\steamapps\common\Anno 1800\Bin\Win64\Anno1800.exe => Keine Datei
FirewallRules: [{518EF5BC-8522-44D1-9314-3975563DC494}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{88AE7E2A-9B57-4580-9166-7AC4E7B0E855}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{ECC1C687-2FCF-4D7F-9C01-3DBB43C89BD3}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties, LLC -> Epic Games, Inc.)
FirewallRules: [{BBE3E0D1-181D-4475-9332-A6699DB267D7}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe (Wildcard Properties, LLC -> Epic Games, Inc.)
FirewallRules: [{D546A07A-BD7C-4A30-AB53-8B12B9B37A43}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{B3CFFC2F-C89B-462D-8381-87496A744C6D}] => (Allow) D:\Programme\Steam\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{ED72EAB0-6D58-4242-92B9-AA5A8DDA8238}] => (Allow) E:\SteamLibrary\steamapps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{D1C9D10A-17E7-4E19-AECA-7CC1A13F2B4B}] => (Allow) E:\SteamLibrary\steamapps\common\7 Days To Die\7dLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{31CDA5C2-08C2-430A-98A6-26A79A09F6A4}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)
FirewallRules: [{B838099D-5C5E-462A-90AC-BD8E738D292F}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe () [Datei ist nicht signiert]
FirewallRules: [{C5BF51C1-FA78-42C2-B2ED-2C5891E98154}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Together\Supermarket Together.exe () [Datei ist nicht signiert]
FirewallRules: [{7238D4DE-AB05-4279-99E0-8454EA33F44B}] => (Allow) D:\Programme\Steam\steamapps\common\Enshrouded\enshrouded.exe => Keine Datei
FirewallRules: [{863A9ABA-514D-4FC3-BD39-7DB016B63106}] => (Allow) D:\Programme\Steam\steamapps\common\Enshrouded\enshrouded.exe => Keine Datei
FirewallRules: [{A9906BF3-98B1-4333-A500-8DD917ACB218}] => (Allow) D:\Programme\Steam\steamapps\common\Palworld\Palworld.exe => Keine Datei
FirewallRules: [{E59AC343-2378-4AD6-ACC5-50FC30B81A54}] => (Allow) D:\Programme\Steam\steamapps\common\Palworld\Palworld.exe => Keine Datei
FirewallRules: [{E72BA754-145A-4359-ADDA-08C89160B5A1}] => (Allow) C:\Program Files\Elgato\StreamDeck\node\node20.exe (OpenJS Foundation -> Node.js)
FirewallRules: [{FA5D9AC6-7A36-4487-BDC9-9334DFB6910A}] => (Allow) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe (Corsair Memory, Inc. -> Corsair Memory, Inc.)
FirewallRules: [{F1DB24F2-0FE1-4822-BC9B-A9EAD29F6F62}] => (Allow) C:\Program Files\obs-studio\bin\64bit\obs64.exe (OBS Project, LLC -> OBS)
FirewallRules: [{3D8B5BE6-76A9-48E6-B872-47502971F03E}] => (Allow) C:\Program Files\Elgato\Volume Controller\ElgatoAudioControlServer.exe (Corsair Memory, Inc. -> )
FirewallRules: [UDP Query User{81591EF8-7061-4BF0-8217-19983042E89F}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{28819304-FB63-4DD1-8C12-C42758C62D9F}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_chromebrowser (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{F9080EEA-72A5-4383-9513-576A90AD2114}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{4D6F0981-2293-41EC-911A-189BD63B8512}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0B143BF7-0159-4DFD-BDB6-7F2846B18A6E}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe => Keine Datei
FirewallRules: [TCP Query User{417578F0-3664-4EE8-9D57-7CBEF38C151E}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2944_gtaprocess.exe => Keine Datei
FirewallRules: [UDP Query User{67D0F5FA-C20F-4492-93FB-54E058704515}D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe => Keine Datei
FirewallRules: [TCP Query User{8B8327E7-78CF-47C0-BBA4-428338C4B5B1}D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe => Keine Datei
FirewallRules: [UDP Query User{2C3A28C1-F903-4E5C-89AC-3CBE82E2F836}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe => Keine Datei
FirewallRules: [TCP Query User{38E55EF8-72E5-4C53-B8A0-0576B38CF417}D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) D:\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe => Keine Datei
FirewallRules: [UDP Query User{31197FD9-BE9D-4D87-8AEB-157B5E59B5E0}D:\fivem\fivem (3).exe] => (Allow) D:\fivem\fivem (3).exe => Keine Datei
FirewallRules: [TCP Query User{E44113F1-1811-4163-84BE-4FC63DE1E618}D:\fivem\fivem (3).exe] => (Allow) D:\fivem\fivem (3).exe => Keine Datei
FirewallRules: [UDP Query User{C86E91E7-0359-413D-B41D-993D22414288}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6D2A9E02-F2DB-4674-A3EC-DC7D53DEBDFC}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_b2699_gtaprocess.exe (Cfx.re) [Datei ist nicht signiert]
FirewallRules: [{FCA08AF7-270F-4C79-9C34-A2C6884E4B1D}] => (Allow) C:\Users\KaCy\AppData\Local\altv\backup\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{6FAFBC6C-D766-4667-AF0A-027375EFAA10}] => (Allow) C:\Users\KaCy\AppData\Local\altv\backup\GTA5.exe (Rockstar Games, Inc. -> Rockstar Games)
FirewallRules: [{D0100485-0321-4974-82D8-705943F2C612}] => (Allow) D:\Programme\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe => Keine Datei
FirewallRules: [{B6651216-CB01-4D3F-BAE3-59C096F7F21F}] => (Allow) D:\Programme\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe => Keine Datei
FirewallRules: [UDP Query User{FF5A5D29-7D62-43B9-BE84-65722D201555}C:\users\kacy\appdata\local\fivemods\fivemods.exe] => (Allow) C:\users\kacy\appdata\local\fivemods\fivemods.exe (Danylo Babenko -> FiveMods)
FirewallRules: [TCP Query User{F5B73DF1-9CE3-4EC0-A2F3-6A16D5D59E1F}C:\users\kacy\appdata\local\fivemods\fivemods.exe] => (Allow) C:\users\kacy\appdata\local\fivemods\fivemods.exe (Danylo Babenko -> FiveMods)
FirewallRules: [UDP Query User{9A0FF43E-B8A3-4038-B388-39A9B493976A}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [TCP Query User{7E1A73F0-CB7C-4BE4-9851-B539372A5705}C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.app\data\cache\subprocess\fivem_steamchild.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [UDP Query User{D436F890-E8D6-4704-9F7F-78CEC54C87A3}C:\users\kacy\appdata\local\fivem\fivem.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [TCP Query User{B5EE7878-FF0A-417F-82B3-8D84F05CD42D}C:\users\kacy\appdata\local\fivem\fivem.exe] => (Allow) C:\users\kacy\appdata\local\fivem\fivem.exe (Rockstar Games, Inc. -> Cfx.re)
FirewallRules: [{A3480D9C-FDF7-448A-9319-58734DA22B0A}] => (Allow) E:\SteamLibrary\steamapps\common\Soundpad\Soundpad.exe => Keine Datei
FirewallRules: [{4437ABE8-5190-4FE3-8028-448D34E153A7}] => (Allow) E:\SteamLibrary\steamapps\common\Soundpad\Soundpad.exe => Keine Datei
FirewallRules: [{FC21B12D-B00B-40F4-9BD0-879E83C80539}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Keine Datei
FirewallRules: [{87DD953C-0EC8-4C59-85E6-64095DF0F8C2}] => (Allow) E:\SteamLibrary\steamapps\common\Supermarket Simulator\Supermarket Simulator.exe => Keine Datei
FirewallRules: [{C02D1CDA-5C8A-4E54-A665-0042A50AF918}] => (Allow) E:\SteamLibrary\steamapps\common\Dominion\Dominion.exe => Keine Datei
FirewallRules: [{D05866C0-0917-4D27-9134-3876D3BDAEEC}] => (Allow) E:\SteamLibrary\steamapps\common\Dominion\Dominion.exe => Keine Datei
FirewallRules: [{14C5FE19-B08E-403A-AB35-CE1AA63327FC}] => (Allow) E:\SteamLibrary\steamapps\common\Farm Together 2\FarmTogether2.exe () [Datei ist nicht signiert]
FirewallRules: [{D18A0272-192A-4A34-9B25-F672B80DD121}] => (Allow) E:\SteamLibrary\steamapps\common\Farm Together 2\FarmTogether2.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{C84D17F4-6A8E-483A-AD84-1795F2579812}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)
FirewallRules: [TCP Query User{BD492B0D-8C47-4AE0-BCCF-987392876ABD}C:\program files\hue sync\huesync.exe] => (Allow) C:\program files\hue sync\huesync.exe (Signify Netherlands B.V. -> Signify Netherlands B.V.)
FirewallRules: [{6C8C4C0B-9E37-4EFA-B9A7-8B9660F4460F}] => (Allow) E:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{4D124DF5-729B-4173-8958-BFC398D83C94}] => (Allow) E:\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> Epic Games, Inc.)
FirewallRules: [{B7F33A35-D90F-41A5-A028-9F964D74EDBC}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{705A6C99-AF86-4643-B7E2-1EE2C4E3C147}] => (Allow) D:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{9F2C45B6-44A4-424D-B50F-FA4A27422CDB}] => (Allow) D:\Programme\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{57FE8E25-08BF-4A74-BD3B-F9DFD8F67171}] => (Allow) D:\Programme\Steam\Steam.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{5600126F-4EE7-4107-AC92-5A0BC95B680E}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{604B3023-1D99-4D5B-9DCB-43E9101CCEAE}] => (Allow) C:\Program Files\GIGABYTE\Control Center\GCC.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )
FirewallRules: [{FF78C245-2D6D-4AE4-96DF-953C05C3B126}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{D9397312-8CE6-4E06-A6A7-F9B506A081F6}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{A0E452AC-0EC6-46F7-AD2F-D9F31958C698}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended.exe => Keine Datei
FirewallRules: [{35FD5AF1-01C3-436E-9246-19836BD892DA}] => (Allow) D:\Programme\Steam\steamapps\common\ARK Survival Ascended\ShooterGame\Binaries\Win64\ArkAscended.exe => Keine Datei
FirewallRules: [{607EC4BC-FC8C-467F-A0B6-94C9968A1936}] => (Allow) E:\SteamLibrary\steamapps\common\ItTakesTwo\Nuts\Binaries\Win64\ItTakesTwo.exe (Hazelight Studios AB -> Hazelight Studios)
FirewallRules: [{558CE7E6-AD94-4C18-B8B1-059E92D156DC}] => (Allow) E:\SteamLibrary\steamapps\common\ItTakesTwo\Nuts\Binaries\Win64\ItTakesTwo.exe (Hazelight Studios AB -> Hazelight Studios)
FirewallRules: [TCP Query User{C419CBAA-1C35-4E40-820C-7234999E165E}C:\users\kacy\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\kacy\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [UDP Query User{C1BE5E5C-A283-439E-B65F-B5A5C6771C7F}C:\users\kacy\appdata\local\programs\opera gx\opera.exe] => (Block) C:\users\kacy\appdata\local\programs\opera gx\opera.exe (Opera Norway AS -> Opera Software)
FirewallRules: [TCP Query User{05CA6B5E-87C0-48A3-A86A-0FC5E6E96D29}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [UDP Query User{E118FA0F-C268-4702-BAF4-66FA6C57424A}C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe] => (Block) C:\program files (x86)\epic games\launcher\portal\binaries\win64\epicgameslauncher.exe (Epic Games Inc. -> Epic Games, Inc.)
FirewallRules: [{0798AB6E-89CE-41DC-A538-F5D79DB9EAA7}] => (Allow) E:\SteamLibrary\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{C5382C16-97EC-4CBE-AB2E-5E0D89C85E15}] => (Allow) E:\SteamLibrary\steamapps\common\Raft\Raft.exe () [Datei ist nicht signiert]
FirewallRules: [{3293AEB4-5B5B-4C68-B26D-22D26B81D01B}] => (Allow) D:\Programme\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{2EC49867-9C50-4B4E-8443-EA3D5EFEC6A4}] => (Allow) D:\Programme\Steam\bin\cef\cef.win64\steamwebhelper.exe (Valve Corp. -> Valve Corporation)
FirewallRules: [{CBECD319-4D20-4479-8828-7DE8FC38D545}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{158975E7-1A6A-4F58-8AE5-EE22EF445ED8}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{255155AD-D65E-43C7-8313-1B4CE657DBA3}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{83244613-65C3-487A-9CDA-551D03C9C567}] => (Allow) C:\Program Files\WindowsApps\MSTeams_25332.1210.4188.1171_x64__8wekyb3d8bbwe\ms-teams_modulehost.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{EAFF87C9-4598-445A-930A-9E3F39F411C4}] => (Allow) D:\Programme\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
FirewallRules: [{5DDFED58-8A45-42ED-A6D6-C8845F983092}] => (Allow) D:\Programme\Steam\steamapps\common\Counter-Strike Global Offensive\game\bin\win64\cs2.exe (Valve Corp. -> )
==================== Wiederherstellungspunkte =========================
30-12-2025 14:30:57 Geplanter Prüfpunkt
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: WD SES Device USB Device
Description: WD SES Device USB Device
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (01/02/2026 02:01:36 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.
Error: (01/02/2026 04:05:11 AM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)
Error: (01/01/2026 01:02:49 PM) (Source: Application Error) (EventID: 1000) (User: DESKTOP-36P160C)
Description: Fehlerhafter Anwendungsname: iCUE.exe, Version: 4.33.138.0, Zeitstempel: 0x63caad7c
Fehlerhafter Modulname: iCUE.dll, Version: 4.33.138.0, Zeitstempel: 0x63caaca0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000004768b3
Fehlerhafte Prozess-ID: 0x3a2c
Fehlerhafte Anwendungsstartzeit: 0x1dc7b166fdab25a
Fehlerhafter Anwendungspfad: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.exe
Fehlerhafter Modulpfad: C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE.dll
Berichts-ID: b8ffb342-a6f5-4bc9-8f00-29d4f7036337
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (01/01/2026 03:19:46 AM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)
Error: (12/31/2025 01:16:05 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.
Error: (12/29/2025 11:35:38 PM) (Source: CAM Service) (EventID: 1) (User: )
Description: request thread encountered an error: Failed to send result: io error: Die Pipe wird gerade geschlossen. (os error 232)
Error: (12/29/2025 05:06:52 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.
Error: (12/27/2025 03:26:56 PM) (Source: Microsoft-Windows-Perflib) (EventID: 1005) (User: DESKTOP-36P160C)
Description: Fehler beim Suchen der Open-Prozedur "OpenLsaPerformanceData" in der DLL "C:\Windows\System32\Secur32.dll" für den "Lsa"-Dienst mit dem Win32-Fehlercode 127. Für diesen Dienst sind keine Systemleistungsdaten verfügbar.
Systemfehler:
=============
Error: (01/02/2026 08:44:20 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Razer Synapse Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Aufführung des konfigurierten Wiederherstellungsp.
Error: (01/02/2026 08:44:20 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Razer Game Manager" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Razer Central Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Corsair Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Steam Client Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "iCUE device plugin host service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Realtek Audio Universal Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (01/02/2026 08:44:19 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Razer Chroma Stream Server" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
Windows Defender:
================
Date: 2025-12-31 13:37:20
Description:
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{393658AD-7F71-4197-8873-49760149AFA5}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ
Date: 2025-12-30 14:03:52
Description:
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{EB8DC431-DE2E-4A2E-84B5-2909AF220EE0}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ
Date: 2025-12-29 17:16:40
Description:
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{C719D7C6-9ED9-43B1-A064-B46B5F1CF23F}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ
Date: 2025-12-24 16:11:05
Description:
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{F66861A4-9440-4789-A27E-24741D521A81}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ
Date: 2025-12-23 13:34:55
Description:
Microsoft Defender Antivirus šςåπ нăş взéй šţôφρēδ ьëƒθŗé ςőмрŀęтîöп.%ñ %τЅĉàʼn ĪĎ:%ъ{4ECBD180-6AB3-44FC-88D3-CB1B6A592DFD}%ń %ţЅ¢ąη Τўρê:%вAntimalware%п %ţŠćāŋ Рαѓāmзτёŗŝ:%ъSchnellüberprüfung%ʼn %тŰšёŕ:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŞтôφ Ґεªšòŋ:%ъЅćн℮δύŀëđ ѕčåй щąš ŝķïρрĕδ ъеċǻúşε ťĥě łάѕτ śυсĉĕѕšƒџļ ѕ¢āη ώªŝ ẃĩτћïл ţħе ℓãşт 7 ďαуŝ
Event[0]
Date: 2025-10-19 21:04:10
Description:
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support".
Security Intelligence-Version: 1.439.285.0;1.439.285.0
Modulversion: 1.1.25090.3001
CodeIntegrity:
===============
Date: 2026-01-02 14:01:14
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Users\KaCy\AppData\Local\Discord\app-1.0.9219\Discord.exe) attempted to load \Device\HarddiskVolume3\ProgramData\obs-studio-hook\graphics-hook64.dll that did not meet the Microsoft signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends International, LLC. F21 01/10/2024
Hauptplatine: Gigabyte Technology Co., Ltd. B650 AORUS PRO AX
Prozessor: AMD Ryzen 7 7800X3D 8-Core Processor
Prozentuale Nutzung des RAM: 12%
Installierter physikalischer RAM: 64662.16 MB
Verfügbarer physikalischer RAM: 56358.85 MB
Summe virtueller Speicher: 68758.16 MB
Verfügbarer virtueller Speicher: 59892.05 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:222.69 GB) (Free:31.11 GB) (Model: KINGSTON SA400S37240G) NTFS
Drive d: (Ark/GTA) (Fixed) (Total:931.51 GB) (Free:44.69 GB) (Model: Samsung SSD 870 EVO 1TB) NTFS
Drive e: (Programme) (Fixed) (Total:465.76 GB) (Free:142.43 GB) (Model: Samsung SSD 860 EVO 500GB) NTFS
Drive f: (My Passport) (Fixed) (Total:931.48 GB) (Free:839.01 GB) (Model: WD My Passport 082A USB Device) NTFS
\\?\Volume{34fda401-3967-43e4-b7b8-8cba2291cd0b}\ () (Fixed) (Total:0.76 GB) (Free:0.11 GB) NTFS
\\?\Volume{6f72cac7-46e2-4a4e-b9a0-58b9a5910bac}\ () (Fixed) (Total:0.09 GB) (Free:0.06 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Protective MBR) (Size: 223.6 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: B3A24FEC)
Partition: GPT.
==========================================================
Disk: 2 (Protective MBR) (Size: 465.8 GB) (Disk ID: 00000000)
Partition: GPT.
==========================================================
Disk: 3 (MBR Code: Windows XP) (Size: 931.5 GB) (Disk ID: 25962205)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt =======================
|
Lesestoff: