Trojaner-Board - Windows 11: PUP "Trojaner erkannt" Fenster rechts lassen sich nicht schließen

Hallo,
nach vielen Jahren muss ich mich mal wieder hier bei euch melden:
Ich habe heute anscheinend einen falschen Link geöffnet.
Plötzlich erscheinen auf der rechten Seite übereinander mehrere Popoup Fenster,
die das Arbeiten erschweren, und sich nicht wegklicken lassen.
Ich habe vermutlich auf 1-2 der Fenster auf 'Virus jetzt entfernen' geklickt,
natürlich ohne den gewünschten Effekt.
In allen Fenstern sind unterschiedliche Links aufgeführt, die alle mit:
' ...datacoreworks.co.in' enden

- Ich habe Malwarebytes (leider noch ohne Echtzeitschutz) drüber laufen lassen, Die 11 'Bedrohungen' in die Quarantäne verschoben, und jetzt gelöscht. Ich finde keine Berichtsfunktion.

MS Defender habe ich jetzt erst eingeschaltet, war ausgeschaltet.
Daher habe ich keine Logdateien von anderen Sicherheits Programmen.

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2026

durchgeführt von hduel (Administrator) auf LENOVO-YOGA-14S (LENOVO 21DM) (29-05-2026 13:11:46)

Gestartet von C:\Users\hduel\Downloads\FRST64.exe

Geladene Profile: hduel & IntelTelemetryAgent

Plattform: Microsoft Windows 11 Pro Version 25H2 26200.8524 (X64) Sprache: Englisch (Vereinigte Staaten) -> Deutsch (Deutschland)

Standard-Browser: Brave

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe

(C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSATray.exe

(C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\LenovoSmartNote.exe

(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericMessagingAddin).exe

(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericTelemetryAddin).exe

(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(IdeaNotebookAddin).exe

(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(SettingsWidgetAddin).exe

(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(VantageCoreAddin).exe

(C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\Intel Graphics Software\PresentMonService.exe

(C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe ->) (8F32EFB2-B494-4AEC-A27C-4B0736252363 -> Lenovo Limited Company) C:\Program Files\WindowsApps\E046963F.AIMeetingManager_3.1.18.0_x64__k1h2ywk1493x8\AIMeetingManager\AIMeetingManager.exe

(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\FaceBeautify.exe

(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe

(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe

(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe

(C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe ->) (Mega Limited -> ) C:\Users\hduel\AppData\Local\MEGAsync\mega-desktop-app-gfxworker.exe

(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe

(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>

(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe

(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\LenovoOobePlugin.exe

(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\MessagingPlugin.exe

(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDCUserAgent.exe

(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe

(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe

(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyCapsLKNumLK.exe

(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyUtility.exe

(explorer.exe ->) (AceBIT GmbH -> AceBIT) C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe

(explorer.exe ->) (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe

(explorer.exe ->) (Lenovo -> Lenovo Limited Company) C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe

(explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe

(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE

(explorer.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\ooditray.exe

(explorer.exe ->) (Surfshark B.V. -> Surfshark) C:\Program Files\Surfshark\Surfshark.exe

(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe

(Lenovo -> Lenovo) C:\ProgramData\Lenovo\Vantage\Addins\BatteryWidgetAddin\3.0.0.191\BatteryWidgetHost\BatteryWidgetHost.exe

(LNBITSSvc.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\AutoModeDetect.exe

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <15>

(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe

(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\CollectorService\collector_service.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_92899f2b73e871b4\IntelCpHDCPSvc.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe

(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_9d96bfc242ae9e60\WMIRegistrationService.exe

(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe

(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe

(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe

(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe

(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\LNBITSSvc.exe

(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\YMC.exe

(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe

(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe

(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe

(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe

(services.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe

(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe <2>

(services.exe ->) (Shenzhen Goodix Technology Co., Ltd. -> Goodix) C:\Windows\System32\drivers\SessionService.exe

(services.exe ->) (Surfshark B.V. -> Surfshark.Service) C:\Program Files\Surfshark\Surfshark.Service.exe

(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe

(services.exe ->) (Wacom Co., Ltd. -> Wacom Technology, Corp.) C:\Windows\System32\DriverStore\FileRepository\wtabletserviceisd.inf_amd64_578c2abb4f6ab065\WTabletServiceISD.exe <2>

(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2616.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe

(svchost.exe ->) (Lenovo -> ) C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe

(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [AMMW] => C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe [706400 2021-12-20] (Lenovo -> Lenovo Limited Company)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe [1631096 2022-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [OODITRAY.EXE] => C:\Program Files\OO Software\DiskImage\ooditray.exe [8060688 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Datei ist nicht signiert]

HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Datei ist nicht signiert]

HKLM-x32\...\Run: [Intel® Graphics Software] => C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe [448688 2026-03-11] (Intel Corporation -> Intel Corporation)

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [BraveSoftware Update] => C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\BraveUpdateCore.exe [199696 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Password Depot] => C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe [28077256 2022-11-24] (AceBIT GmbH -> AceBIT)

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Surfshark] => C:\Program Files\Surfshark\Surfshark.exe [282368 2026-05-27] (Surfshark B.V. -> Surfshark)

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [176128 2026-04-01] (Microsoft Windows -> Microsoft Corporation)

HKLM\...\Windows x64\Print Processors\OPLAPP3: C:\Windows\System32\spool\prtprocs\x64\OPLAPP3.dll [43520 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)

HKLM\...\Print\Monitors\Common XP64 Language Monitor: C:\WINDOWS\system32\oppflm64.dll [24064 2020-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Oki Electric Industry Co., Ltd.)

HKLM\...\Print\Monitors\Oki Common XP64 Language Monitor: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)

HKLM\...\Print\Monitors\Oki Language Monitor v2 x64: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\148.0.7778.179\Installer\chrmstp.exe [7621272 2026-05-22] (Google LLC -> Google LLC)

Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2025-06-29]

ShortcutTarget: MEGAsync.lnk -> C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)

Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sclhelper.lnk [2025-12-05] <==== ACHTUNG

ShortcutTarget: sclhelper.lnk -> C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) <==== ACHTUNG

Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2026-02-19]

ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {E31F6AF0-D6D1-4AB8-8488-31711197F848} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005Core{95A73FE5-3A6D-41D0-8E3F-B590EB9AAF6E} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {0EF163AE-3FD5-4384-AC90-A0F633DF7460} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005UA{B8135846-5CE9-4603-A139-CBEF16C146EE} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)

Task: {F1394801-624A-471B-BCC8-432339027A75} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem149.0.7814.0{54E4157F-1202-4112-ACCE-B3BE9DB2EFE3} => C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe [8770200 2026-04-28] (Google LLC -> Google LLC)

Task: {0156E26A-A5A4-4A5D-97D7-58DDE0D00D6B} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)

Task: {802FA72D-0076-4091-AFC3-3C1ACCBF21CC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)

Task: {1FE94625-240B-4FFC-9CDB-A3E8F5A423D1} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)

Task: {6B460D53-2DFE-4486-9634-FBF7EAB773ED} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService

Task: {062840A8-94BE-4809-99F8-CEC52FFCCBE4} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32

Task: {A2BA731F-847B-4154-B999-EEC6C38828A2} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\716a16a1-5006-498b-95a4-cd3d08007a19 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)

Task: {5B7481B4-5634-4314-9BA0-61D0ECD33497} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\94f9125b-4199-4acb-8652-e060a3d414de => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)

Task: {8B456EA8-49C8-4BF5-B05A-67C94C10F423} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a859f106-2531-482f-bd1b-9d325494c4a0 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)

Task: {6CDD40FB-DA8E-4B68-9190-F922F2A2DC14} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [94032 2026-04-29] (Lenovo (Beijing) Limited -> Lenovo Group Limited)

Task: {5251F79A-2C55-459B-B84C-65ECF5750B08} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [468448 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task

Task: {C5B46F4C-4F48-48BA-AD98-05812D410AB8} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo)

Task: {DAA9FEF2-C810-4050-806F-740E65881B17} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)

Task: {1404CD9B-D544-418A-8D7D-94DAE2A2046B} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210

Task: {65D0A3A3-A246-45C7-8B82-095DE378CAD3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [91024 2026-04-01] (Lenovo -> Lenovo Group Ltd.) -> C:\windows\system32\drivers\Lenovo\udc\Service\/onidle

Task: {CD43D809-C72D-4013-9817-7BBC8A652E90} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221

Task: {C815B070-B8D1-4072-850B-8D742FF5D276} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220

Task: {7BA1380E-5377-4D9D-B6B1-349FCD901047} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [257936 2026-04-01] (Lenovo -> Lenovo Group Ltd.)

Task: {20CC96F8-0E2C-48A4-95CC-58198B2BDA49} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService

Task: {B700FF21-9331-4A15-92AA-61B8CF2CE9D4} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {23125073-12AC-42FC-A10F-4644168B40BF} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {93160EAE-9B6B-4422-AC27-F5CC4168C37A} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {4CD0C5B1-6276-4CB7-B960-5B36952603A3} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {0709AF7C-51A5-4578-B304-1009BC72171E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {D056AD18-32EB-41B3-920C-E6A03B1AC347} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {529412F0-792D-4C22-B5E1-7714DB5EFB75} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {051A35F9-C1F4-40CB-A59F-E84C02D82423} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {E9AF3537-6AEA-4E28-BD90-362DAA523483} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.SScan => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {CC0CCEEE-3731-4C16-B27A-C70BD5845CDE} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {D0F92AC3-8FBC-4D45-9A8E-47C9585B4F64} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {ECB4BE4E-FC6E-4808-8F24-30028A8AEFFF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {A7A7F4EA-8EF1-4D85-AFFC-0F57CAAE6CA8} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {FE3388D3-ED57-4DD1-AA07-BE4AECD8F4FF} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {189158B1-9094-4B23-9AB6-14C645B18B0B} - System32\Tasks\Lenovo\Vantage\Schedule\SmartLock.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {8FA97119-B992-44A8-BE06-18F3F20684B4} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {CE6CE30F-C612-4B79-A7AE-74492E17AABA} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {0FB32116-56A8-4179-A428-BB4BCFC95323} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.32\x86\IdleScheduleEventAction.exe [173536 2026-05-22] (Lenovo -> )

Task: {88669291-5FC5-428E-BE74-9ED5133E84D5} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)

Task: {FEC6AAF2-EA2A-415E-BC24-A1B21FCE763E} - System32\Tasks\LSNUpdater => C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe [33120 2021-12-10] (Lenovo -> )

Task: {6C2ADB0C-F4B3-4FFB-A8D8-CEBFF8F408A7} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\MEGAsync\MEGAupdater.exe [1951760 2026-05-22] (Mega Limited -> )

Task: {C4F7482A-A723-4205-9FCB-DE3B237945A2} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {2B66F825-1C99-4ADB-B427-846628007389} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {3895FD3E-3A75-4F57-B136-673D370B6BE3} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73648 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {1ABB98FC-E12E-4418-B962-4BFC6064170F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)

Task: {B0D46D4E-1B88-4B15-863F-26FB29450DC5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {271A2A7B-5263-48DC-AA7D-582E546C4946} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {254EDEFB-4551-4F8A-8B8B-1D83FA4C14C0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1366888 2026-04-23] (Microsoft Corporation -> Microsoft Corporation)

Task: {FB5E746C-7B23-46CE-B1ED-CDAA2FBD86CD} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)

Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)

Task: {0B589E44-3D4E-4664-BF5A-76D7CEE9474B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {564C5811-BFF6-4622-AC65-2D8AEE76A0C4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {3519DCDB-5367-4E38-97A0-3497B48116F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {F09D853D-9F64-4B58-A038-BC4B89EF81E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

Task: {B4DA6A4D-1B55-483F-A1AF-11EFF827FEA8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3382910964-3051966042-937846204-1005 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-05-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).

Task: {20C9EBDA-94CF-4806-8C26-AA7B80AF3CAB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-05-27] (Mozilla Corporation -> Mozilla Foundation)

Task: {55D2B620-5917-42AC-8B15-25EA5ABEF66F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)

Task: {87D1556F-EE38-4D24-86D6-3D18C0DA83E5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)

Task: {BF423E74-C1C5-428B-860D-04E742F13503} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)

Task: {390425A1-7A79-4BCC-A3E5-0D3A1102445E} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)

Task: {85592341-D847-441F-8CDB-6CBFF560FBC9} - System32\Tasks\OO DiskImage {080533e5-4d27-4e0a-8db7-ad8feb1d7519} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {E9C8BAC3-D333-4929-A3DB-87284918F5AB} - System32\Tasks\OO DiskImage {087009a6-ffad-4f61-a03b-96ae987f3ad2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {80B3F13C-3094-485A-BBD8-1F76A6D7F875} - System32\Tasks\OO DiskImage {19b83258-1b16-47dc-bf2f-ba92280d21e7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {8F4864CD-B778-4C2E-91AE-55120CF186DA} - System32\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {0CEE552B-422A-4093-8201-BE9BA2C4A557} - System32\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {7905AACA-1E4B-41C9-AB8F-A67B85ED77A0} - System32\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {A02FB61A-23D7-4E27-92C2-10F670D5F352} - System32\Tasks\OO DiskImage {40889dea-cc7f-4277-984e-81ffd98ccbfe} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {5735471D-365B-44A2-9799-A62306F3011C} - System32\Tasks\OO DiskImage {4470a695-74ff-4698-8a4a-265f1faddf88} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {193850FB-B5A5-4A25-BE18-DEE04E58D4FD} - System32\Tasks\OO DiskImage {58ccbf24-062d-41bc-86fc-e5fdecba9f0a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {490A2C39-6147-4DEE-BD50-860280B53129} - System32\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {5323EA76-3595-4A26-B51D-78A474A18578} - System32\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {3C649E58-BF84-41C8-BE5E-970D88A9C871} - System32\Tasks\OO DiskImage {6c9f7822-bc8a-44f5-9614-88da1f17de79} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {23F84720-4BAD-4F65-8F88-1C7D4306B0E8} - System32\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {C3B98C42-3D9C-4D7B-9915-95B853DE7FA6} - System32\Tasks\OO DiskImage {7c149ff3-183e-47f3-b4d2-0048350ebbb2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {C21A81BA-06C2-420C-BDBA-77D21A964F44} - System32\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {8E68914D-EE07-4E43-9AB2-B53A2DAC4AB7} - System32\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {B4C5AB36-FE43-4195-A4FC-4CB64186F549} - System32\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {D59C73C0-78DD-4666-A6BE-DB51D51EB236} - System32\Tasks\OO DiskImage {abf92fba-ee22-4f6a-9d45-7b619f0272b6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {73CEA15B-4FDB-4834-A5D0-0CCDEAFC93DE} - System32\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {068F0BC6-3749-4678-A98C-B67F06EC354D} - System32\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {31FB6184-6C8E-461C-AA35-370FA28F5E09} - System32\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {0FEDB132-0DAD-48BF-B765-F0E5E9901692} - System32\Tasks\OO DiskImage {cb0d08bf-5dee-4c25-be90-2eb3dc5eb93f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {C8939A4B-9B0F-4BF2-A221-FDFBDA90AAFA} - System32\Tasks\OO DiskImage {d1042081-19c2-44e8-8ab7-2acf148ae34c} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {55450491-456E-44BE-A3F1-3AE587898710} - System32\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {906F3F64-A478-4F64-8BF1-E56B0A1212DA} - System32\Tasks\OO DiskImage {f2eb5178-6552-4ebf-ad52-a0dcc434bf34} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {AA4EFF63-B3D0-495A-991C-B14D54DA278B} - System32\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {682220AF-7507-43AC-AE2E-C0530B948E65} - System32\Tasks\OO DiskImage {fd9b7c9f-2c66-41a6-916e-868099eeeaa6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

Task: {CA9AC1E7-1F58-467B-B990-0E3C77BBA1DF} - System32\Tasks\SoftMakerUpdater => C:\Program Files\SoftMaker Office 2018\SoftMakerUpdaterTool.exe [6367440 2019-03-04] (SoftMaker Software GmbH -> )

Task: {BC359F39-32CA-4D58-8AE4-EF7BE228255A} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )

Task: {2FD86584-EBD2-4736-A855-48E318E41354} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )

Task: {82091FF4-0120-4418-B466-1237C37B9AF5} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\Intel\SUR\QUEENCREEK\x64\-Command "Start-Process -WindowStyle Hidden task.bat"
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

Task: C:\WINDOWS\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {1f8635c8-e78b-4506-befb-c6bb9ccc1967}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250524.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {2ec4eff5-a084-442c-9285-dfb73b969b8a}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250622.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {34450140-638d-4780-8b4e-f0b3259a1e29}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250918.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {633ff0ed-bc74-462b-b271-4bd56fe23b85}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250420.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {68b38391-1cfa-410a-8a44-1d42952efc40}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928[1].xml

Task: C:\WINDOWS\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {6dfd33dd-cfd6-4262-90d3-8c45500cac52}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251119.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {99d297da-4565-4bf1-b42e-a32359900bdb}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250510.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250831.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {a1326641-f5c5-4f34-92aa-a45623ad15d7}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250723.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {ae436785-635c-477d-8983-091064a70787}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250611.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250504.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {c60e5c85-c04f-4d4b-98c1-186055bb2eda}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250516.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {d481ac3b-f10e-4cb6-89aa-56903952e178}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251027.xml

Task: C:\WINDOWS\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {f852ba26-43cf-4ab9-8f05-911b0a246c1f}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928.xml
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{27080194-2dfc-48fe-9973-59daf5f4c445}: [DhcpNameServer] 192.168.40.12 192.168.40.1

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpDomain] fritz.box

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpNameServer] 192.168.2.1

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpDomain] Speedport_W_921V_1_48_000

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\960586F6E6560267F6E602865627D616E6E602822392: [DhcpNameServer] 172.20.10.1

Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\A54554F55374F59347A7A72673: [DhcpNameServer] 192.168.1.1

Tcpip\..\Interfaces\{94c4241e-7070-4b03-b530-98aa8d4ee789}: [DhcpNameServer] 192.168.40.24 192.168.40.1
 

FireFox:

========

FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox

FF DefaultProfile: i13zqc65.default-release -> 308046B0AF4A39CB

FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\vwlb9ebn.default [2025-04-29]

FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\i13zqc65.default-release [2026-05-29]

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-02-01] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)
 

Edge: 

=======

Edge DefaultProfile: Default

Edge Profile: C:\Users\hduel\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-29]

Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
 

Chrome: 

=======

CHR Profile: C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default [2026-05-29]

CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://d8cm5ge071bc73bf6t8g.datacoreworks.co.in; hxxps://de.aliexpress.com; hxxps://forum.kinesis.money; hxxps://gab.com; hxxps://ii1c4fst6drl7e.datacoreworks.co.in; hxxps://kundenbereich.check24.de; hxxps://meet.google.com; hxxps://www.mydealz.de,*"; hxxps://www.trip.com; hxxps://www.turkishairlines.com; hxxps://www.youtube.com

CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}

CHR DefaultSearchKeyword: Default -> duckduckgo.com

CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab

CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list

CHR Extension: (AdBlocker Expert) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjpkhfbhcikhabnieacjihhhhdlnfpa [2026-05-29]

CHR Extension: (WOT Website-Sicherheit und Schutz für sicheres Surfen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2026-03-23]

CHR Extension: (DuckDuckGo) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2026-05-27]

CHR Extension: (Ecosia) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2026-04-17]

CHR Extension: (Avast Passwords) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2025-05-28]

CHR Extension: (McAfee® WebAdvisor) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-05-26]

CHR Extension: (Google Docs Offline) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-05-28]

CHR Extension: (Malwarebytes Browser Guard) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-05-19]

CHR Extension: (Magical: Text Expander & Autofill) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibninhmiggehlcdolcilmhacighjamp [2026-04-17]

CHR Extension: (WEB.DE MailCheck) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2025-05-28]

CHR Extension: (Cisco Webex Extension) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2025-05-28]

CHR Extension: (Tag Assistant) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2026-05-26]

CHR Extension: (PowerPoint Online) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2025-05-28]

CHR Extension: (Boomerang for Gmail) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2026-05-27]

CHR Extension: (MetaMask) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-29]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-05-28]

CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM\...\Chrome\Extension: [ggojliohohbachojmcgelnjmnjmjgidn]

CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]

CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
 

Brave: 

=======

BRA DefaultProfile: Default

BRA Profile: C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-05-28]

BRA Extension: (MetaMask) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-28]

BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-05-08]

BRA Extension: (Brave Local Data Files Updater) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-05-28]

BRA Extension: (Brave NTP background images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-04-27]

BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-05-28]

BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-05-28]

BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2026-02-02]

BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-04-27]

BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-05-28]

BRA Extension: (Brave Ads Resources) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2026-05-07]

BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-05-28]

BRA Extension: (Brave Ad Block Updater (German website ad blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2026-05-28]

BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-05-28]

BRA Extension: (Brave User Agent) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-05-28]

BRA Extension: (Brave NTP sponsored images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2026-05-28]

BRA Extension: (P3A Configuration) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2025-08-08]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13353792 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)

R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe [2356792 2022-11-29] (Dolby Laboratories, Inc. -> Dolby Laboratories)

R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-11-15] (Intel Corporation -> Intel Corporation)

R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2026-03-24] (Intel Corporation -> Intel)

R2 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2026-03-24] (Intel Corporation -> Intel)

R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [326592 2022-09-01] (Microsoft Windows Hardware Compatibility Publisher -> )

R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)

S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)

R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe [528928 2022-12-13] (Intel Corporation -> Intel)

R2 IntelCollectorService; C:\Program Files\Intel\CollectorService\collector_service.exe [8480464 2026-04-16] (Intel Corporation -> Intel Corporation)

R2 IntelGraphicsSoftwareService; C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe [323760 2026-03-11] (Intel Corporation -> Intel Corporation)

R2 IntelTelemetryAgent; C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe [5432528 2026-04-16] (Intel Corporation -> Intel Corporation)

R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-11-11] (Intel Corporation -> Intel Corporation)

R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe [199744 2026-03-09] (Lenovo -> Lenovo)

R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe [34368 2026-05-20] (Lenovo -> Lenovo)

R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1872000 2025-10-23] (Lenovo -> Lenovo)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11481048 2026-05-01] (Malwarebytes Inc -> Malwarebytes)

S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-02] (Malwarebytes Inc. -> Malwarebytes)

R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [999552 2026-05-27] (McAfee, LLC -> McAfee, LLC)

R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe [2096384 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

R2 PresentMonSharedService; C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe [3444296 2026-01-15] (Intel Corporation -> Intel(R) Corporation)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 SmartAppearanceAISVC; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe [55136 2021-11-04] (Lenovo -> Lenovo)

R2 SmartNoteService; C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe [92000 2021-12-10] (Lenovo -> Lenovo)

R2 Surfshark Service; C:\Program Files\Surfshark\Surfshark.Service.exe [174336 2026-05-27] (Surfshark B.V. -> Surfshark.Service)

R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [26931024 2026-05-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72592 2026-04-01] (Lenovo -> Lenovo Group Ltd.)

R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe [4484680 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe [290704 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 YMC; C:\WINDOWS\System32\YMC.exe [927784 2025-09-07] (Lenovo -> Lenovo)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R0 bhtsddr; C:\WINDOWS\System32\drivers\bhtsddr.sys [175320 2022-08-22] (BayHub Technology Inc. -> BayHubTech)

S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]

S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]

R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)

R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)

R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88784 2022-08-09] (Intel Corporation -> Intel Corporation)

R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-11-11] (Intel Corporation -> Intel Corporation)

R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-11-11] (Intel Corporation -> Intel Corporation)

R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-11-11] (Intel Corporation -> Intel Corporation)

R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)

R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [236136 2026-05-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-02] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)

R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [131984 2025-03-03] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)

S3 rtu53cx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx22x64.inf_amd64_191dda4f2e7775ce\rtu53cx22x64.sys [1082176 2023-08-03] (Realtek Semiconductor Corp. -> Realtek Corporation)

S3 SharkDivert; C:\Program Files\Surfshark\Resources\x64\sharkdivert.sys [184480 2026-03-04] (Microsoft Windows Hardware Compatibility Publisher -> Surfshark)

R3 WacHIDRouterISDF; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)

S3 WacHIDRouterISDFV; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)

S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-05-20] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606600 2026-05-20] (Microsoft Windows -> Microsoft Corporation)

R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100784 2026-05-20] (Microsoft Windows -> Microsoft Corporation)

R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_24ebe64bf61b0c49\WiManHu\WiManHu.sys [206448 2022-05-02] (Intel Corporation -> Intel Corporation)

S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2025-11-18] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)

R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-04-05] (Microsoft Windows -> Microsoft Corporation)

S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.4.0.15\LenovoDiagnosticsDriver.sys (Keine Datei)
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2026-05-29 13:12 - 2026-05-29 13:12 - 000748376 _____ C:\WINDOWS\system32\perfh007.dat

2026-05-29 13:12 - 2026-05-29 13:12 - 000159426 _____ C:\WINDOWS\system32\perfc007.dat

2026-05-29 13:11 - 2026-05-29 13:12 - 000061928 _____ C:\Users\hduel\Downloads\FRST.txt

2026-05-29 13:11 - 2026-05-29 13:12 - 000000000 ____D C:\FRST

2026-05-29 13:10 - 2026-05-29 13:10 - 002449408 _____ (Farbar) C:\Users\hduel\Downloads\FRST64.exe

2026-05-29 13:07 - 2026-05-29 13:07 - 000001417 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt

2026-05-29 12:34 - 2026-05-29 12:59 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job

2026-05-29 12:33 - 2026-05-29 13:07 - 000000000 ____D C:\WINDOWS\pss

2026-05-28 23:57 - 2026-05-28 23:57 - 000869204 _____ C:\Users\hduel\Documents\Eva Air FlugplanungWarenkorb.pdf

2026-05-28 22:01 - 2026-05-28 22:01 - 000000987 _____ C:\Users\Public\Desktop\Surfshark.lnk

2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Surfshark

2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\Program Files\Common Files\ovpn-dco

2026-05-27 23:22 - 2026-05-29 09:24 - 000000000 ____D C:\WINDOWS\CbsTemp

2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json

2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json

2026-05-27 11:13 - 2026-05-27 11:13 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json

2026-05-27 10:10 - 2026-05-27 23:23 - 000000000 ____D C:\Program Files\Mozilla Firefox

2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.006

2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\TEMP.Font Driver Host.006

2026-05-19 20:48 - 2026-05-19 20:48 - 000003600 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK

2026-05-19 20:48 - 2026-04-24 12:14 - 000049648 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\semav6msr64.sys

2026-05-19 08:35 - 2026-05-19 08:36 - 000000000 ____D C:\Users\hduel\Documents\Ausweisdokumente

2026-05-19 08:35 - 2026-05-19 08:35 - 000000000 ____D C:\Users\hduel\Documents\Neuer Ordner

2026-05-17 15:47 - 2026-05-17 15:47 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

2026-05-13 00:04 - 2026-05-13 00:04 - 000000000 ____D C:\WINDOWS\SecureBoot

2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.005

2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\TEMP.Font Driver Host.005

2026-05-03 10:22 - 2026-05-03 10:22 - 000190976 _____ C:\Users\hduel\Downloads\Gmail - Deine Bestellung bei medimops (# 262487461 ).pdf

2026-05-01 21:45 - 2026-05-01 21:45 - 000000000 ____D C:\Users\hduel\AppData\Local\Sentry

2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\SysWOW64\ctac.json

2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\system32\ctac.json

2026-04-30 07:46 - 2026-04-30 07:46 - 008715231 _____ C:\Users\hduel\Downloads\Keumgang Short.mp4
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2026-05-29 13:12 - 2025-11-19 00:20 - 000000000 ____D C:\ProgramData\Surfshark

2026-05-29 13:12 - 2025-04-05 06:09 - 001729568 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2026-05-29 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp

2026-05-29 13:12 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF

2026-05-29 13:11 - 2025-12-10 21:51 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\19c27d4cc46ac3fd6df4e439370b45bad0160b30816e254c560d4dd8b88c330a

2026-05-29 13:11 - 2025-06-07 16:43 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\862d29cda0e11323204b0e9107710543301e63bae4f898f932473a92e9ddbb08

2026-05-29 13:09 - 2025-11-19 00:20 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Surfshark

2026-05-29 13:09 - 2025-04-29 13:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38

2026-05-29 13:08 - 2025-04-04 23:27 - 000013140 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2

2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState

2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2026-05-29 13:07 - 2026-01-11 22:52 - 000000000 ____D C:\Program Files\TeamViewer

2026-05-29 13:07 - 2025-04-04 23:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2026-05-29 13:07 - 2024-04-01 09:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI

2026-05-29 13:07 - 2024-03-21 13:54 - 000000000 ____D C:\ProgramData\Goodix

2026-05-29 13:07 - 2021-09-29 23:08 - 000012288 ___SH C:\DumpStack.log.tmp

2026-05-29 13:04 - 2025-06-07 16:44 - 000013496 _____ C:\Users\hduel\AppData\LocalLow\e6863278dac5c92b8de9c3587a83e7caf83b0c86fe3d61c204aabf43494b2647

2026-05-29 13:04 - 2025-06-07 16:39 - 000055450 _____ C:\Users\hduel\AppData\LocalLow\db0e362fc5496b848e455e3b37be69d99a54d0f25c1bea2043cf543ccca00332

2026-05-29 12:35 - 2025-04-02 12:21 - 000000000 ____D C:\Users\hduel\AppData\Local\CrashDumps

2026-05-29 12:33 - 2025-04-02 12:16 - 000000000 ____D C:\Users\hduel\AppData\Local\Malwarebytes

2026-05-29 12:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness

2026-05-29 11:58 - 2025-04-02 12:22 - 000000000 ____D C:\Users\hduel\Documents\Password Depot

2026-05-29 08:39 - 2025-06-08 13:35 - 000167000 _____ C:\Users\hduel\AppData\LocalLow\69e7b4fd919b7d417e92cf35a6c07323b9890426afe8a4147a911cff7fd7b1d0

2026-05-29 08:39 - 2025-06-08 13:35 - 000000298 _____ C:\Users\hduel\AppData\LocalLow\c0b0a919203ae87adfc9f4627f6c1c9e1e873aafeee3d34d3b8f4fdd74446a60

2026-05-29 08:39 - 2025-06-07 16:39 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\b6e15e59adf65281d0253e2636f29e82013e92027a2d7aa9e338ccf745fc5014

2026-05-29 07:59 - 2025-06-07 16:43 - 000319397 _____ C:\Users\hduel\AppData\LocalLow\86edfdf5bd824465412ccbcaa84e9ecac77630ec05d77dc79aaf55dbd04a431a

2026-05-28 22:06 - 2025-04-02 12:00 - 000002622 _____ C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave.lnk

2026-05-28 22:06 - 2025-04-02 12:00 - 000002585 _____ C:\Users\hduel\Desktop\Brave.lnk

2026-05-28 22:01 - 2025-11-19 00:19 - 000000000 ____D C:\Program Files\Surfshark

2026-05-28 13:05 - 2025-12-10 21:51 - 000651939 _____ C:\Users\hduel\AppData\LocalLow\bbf76672888b767211ac2ed00d5fd77a880425cf39a68791d89947e7a8bd9a44

2026-05-28 07:57 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\D3DSCache

2026-05-28 07:49 - 2025-06-07 16:42 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\d18c7cecdddbcdb04ba86fcda501b25d77b715442f87c259c61456169a0430d6

2026-05-27 23:26 - 2025-04-04 23:23 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK

2026-05-27 23:24 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps

2026-05-27 23:23 - 2025-04-24 11:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2026-05-27 23:23 - 2025-04-04 23:23 - 000505304 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2026-05-27 23:22 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr

2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System

2026-05-27 23:22 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing

2026-05-27 22:04 - 2025-06-07 16:45 - 000002264 _____ C:\Users\hduel\AppData\LocalLow\4223439fc4b2af89111f38c20246a29fbcacb124c56847ecf354f94e14b44acd

2026-05-27 22:02 - 2025-06-07 16:39 - 000000026 _____ C:\Users\hduel\AppData\LocalLow\72e8ee8127e83811ef1b3dfc180ec191271c2508131e6705908b94b528984ce2

2026-05-27 17:10 - 2025-04-29 13:10 - 000001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2026-05-27 11:18 - 2025-04-04 23:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2026-05-27 11:12 - 2025-04-04 23:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll

2026-05-27 10:10 - 2026-02-04 14:00 - 000392320 _____ (Mozilla Foundation) C:\Users\hduel\Desktop\Firefox.exe

2026-05-26 14:43 - 2025-11-28 17:47 - 000000000 ____D C:\Users\hduel\Documents\ATU

2026-05-26 12:42 - 2025-06-08 08:56 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\fe35852a2006dce95e9b7137a925e330333bec4e151c973f6616d0159ca2c579

2026-05-26 08:59 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\Packages

2026-05-26 08:36 - 2025-10-18 07:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH

2026-05-25 23:03 - 2025-06-08 08:56 - 000080555 _____ C:\Users\hduel\AppData\LocalLow\de59740c052e2827fd84e8070e9a4c77f0651984687b766aa7f88a0a8262325f

2026-05-24 21:21 - 2025-06-18 08:18 - 000106753 _____ C:\Users\hduel\AppData\LocalLow\958686ab2b834bf192b725c1aaa2eba6764ecb25ef121e647d36ce887f103ac7

2026-05-24 11:15 - 2025-08-24 09:25 - 000000000 ____D C:\Users\hduel\Documents\Solaranlage

2026-05-23 22:27 - 2021-09-29 23:09 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2026-05-22 20:08 - 2025-06-29 23:59 - 000000000 ____D C:\Users\hduel\AppData\Local\MEGAsync

2026-05-22 20:08 - 2023-01-06 13:04 - 000000000 ____D C:\ProgramData\Packages

2026-05-22 06:53 - 2025-05-28 09:39 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2026-05-22 06:53 - 2025-05-28 09:39 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2026-05-20 20:53 - 2025-11-28 09:16 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Telegram Desktop

2026-05-20 09:10 - 2021-09-29 23:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

2026-05-19 20:48 - 2022-06-01 22:41 - 000000000 ____D C:\Program Files\Intel

2026-05-18 08:40 - 2025-06-04 09:31 - 000000000 ____D C:\Users\hduel\Documents\Wärmepumpe

2026-05-17 15:44 - 2022-06-01 22:36 - 000000000 ____D C:\Program Files\Microsoft Office

2026-05-17 15:17 - 2025-04-24 11:20 - 000000000 ____D C:\Users\hduel\Documents\SoftMaker

2026-05-17 00:25 - 2025-04-04 23:24 - 000000000 ____D C:\Users\hduel

2026-05-15 14:19 - 2025-11-28 12:12 - 000000000 ____D C:\Users\hduel\Downloads\Telegram Desktop

2026-05-15 14:16 - 2025-04-24 17:12 - 000000000 ____D C:\Users\hduel\Documents\KIA

2026-05-14 19:04 - 2025-05-08 08:35 - 000000000 ____D C:\Users\hduel\AppData\Local\LenovoServiceBridge

2026-05-13 13:40 - 2026-03-05 18:05 - 000000000 ____D C:\Users\hduel\Documents\Hausverwaltung

2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\SysWOW64\de

2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\system32\de

2026-05-13 00:04 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET

2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA

2026-05-12 23:57 - 2023-01-06 13:13 - 000000000 ____D C:\WINDOWS\system32\MRT

2026-05-12 23:51 - 2023-01-06 13:13 - 220340424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2026-05-12 19:58 - 2025-09-21 14:28 - 000000432 _____ C:\WINDOWS\BRWMARK.INI

2026-05-12 13:07 - 2025-07-05 16:51 - 000206672 _____ C:\Users\hduel\AppData\LocalLow\ee0b3fd139baf022c59877657128b2116b2e69b0155adf8732a4ded74261b1f1

2026-05-08 09:17 - 2025-04-16 18:01 - 000000000 ____D C:\Users\hduel\Documents\DAK

2026-05-07 15:32 - 2025-04-21 07:45 - 000000000 ____D C:\Users\hduel\Documents\Kinesis

2026-05-05 18:55 - 2025-12-10 21:50 - 000074858 _____ C:\Users\hduel\AppData\LocalLow\de8f38afd23996add4871c35de10c91d8534eab617f698cb8660702056cd76f5

2026-05-02 17:32 - 2025-07-09 22:05 - 000000000 ____D C:\WINDOWS\system32\ruxim

2026-05-02 17:32 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps

2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2026-05-01 06:59 - 2025-04-04 23:30 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2026-05-01 06:59 - 2025-04-04 23:30 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2026-04-29 16:22 - 2025-07-04 06:42 - 000000000 ____D C:\Users\hduel\Documents\Fenitzerplatz
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

--- --- ---

FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 22-05-2026

durchgeführt von hduel (29-05-2026 13:13:51)

Gestartet von C:\Users\hduel\Downloads

Microsoft Windows 11 Pro Version 25H2 26200.8524 (X64) (2025-04-05 04:02:34)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

Administrator (S-1-5-21-3382910964-3051966042-937846204-500 - Administrators - Disabled)

DefaultAccount (S-1-5-21-3382910964-3051966042-937846204-503 - Limited - Disabled)

Gast (S-1-5-21-3382910964-3051966042-937846204-501 - Limited - Disabled)

hduel (S-1-5-21-3382910964-3051966042-937846204-1005 - Administrators - Enabled) => C:\Users\hduel

WDAGUtilityAccount (S-1-5-21-3382910964-3051966042-937846204-504 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Ai Meeting Manager Service (HKLM\...\{3D0711FE-B992-4424-8825-9D495CD8FCCA}_is1) (Version: 1.0.0.2 - Lenovo Group Ltd.)

Audials COMPUTER BILD Edition2026 (HKLM\...\{AA9A615C-B1DA-4F58-A8A6-5677072982AE}) (Version: 26.0.40.0 - Audials AG)

AusweisApp (HKLM\...\{E5B4307B-B88A-46E3-84FE-B85E9864162A}) (Version: 2.3.2 - Governikus GmbH & Co. KG)

Bandicam (HKLM-x32\...\Bandicam) (Version: 7.1.1.2158 - Bandicam.com)

Bandicam MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandicam.com)

Brave (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\BraveSoftware Brave-Browser) (Version: 148.1.90.128 - Die Brave-Autoren)

Brother MFL-Pro Suite MFC-9320CW (HKLM-x32\...\{A1BBEE16-49B1-42F2-95B8-54C8C6A1C0C3}) (Version: 3.0.3.0 - Brother Industries, Ltd.)

CheckDrive 2026 (HKLM-x32\...\{B83513EC-2E4D-4621-816D-4CCF397BE702}_is1) (Version: 7 - Abelssoft)

Copilot (HKLM-x32\...\Microsoft Copilot) (Version: 148.0.3967.70 - Microsoft Corporation)

Dolby Vision Provisioning Utility (HKLM-x32\...\provisiondolbyvision1_1-20200601_is1) (Version: 2.0.0.2 (2024 August Data a) - Lenovo Group Limited)

EVEREST Home Edition v2.20 (HKLM-x32\...\EVEREST Home Edition_is1) (Version: 2.20 - Lavalys Inc)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 148.0.7778.179 - Google LLC)

IMI Hydronic Engineering EasyPlan Version 10.0.6 (HKLM-x32\...\IMI Hydronic Engineering EasyPlan_is1) (Version: 10.0.6 - ConSoft GmbH)

Intel Driver && Support Assistant (HKLM-x32\...\{D2AEE0A6-F202-4C62-BE2B-AC0C9E00A941}) (Version: 26.1.0.2 - Intel) Hidden

Intel(R) Chipset Device Software (HKLM\...\{C6A1126A-6ED6-4231-BA48-4DA77986FA1C}) (Version: 10.1.18950.8298 - Intel Corporation) Hidden

Intel(R) Chipset Device Software (HKLM-x32\...\{db747e10-c752-4e5a-b099-922800123b36}) (Version: 10.1.18950.8298 - Intel(R) Corporation)

Intel(R) Computing Improvement Program (HKLM\...\{3687AB9B-8CD2-4BA0-B762-511DEA578DE7}) (Version: 2.4.11211 - Intel Corporation)

Intel(R) Graphics Software & Drivers (HKLM\...\Intel(R) Graphics Software & Drivers) (Version: 1.0.1198.0 - Intel(R) Corporation)

Intel® Driver & Support Assistant (HKLM-x32\...\{C8093AA3-B113-4F81-9A87-B1C41929B346}) (Version: 26.1.0.2 - Intel)

Intel® Graphics Software (HKLM\...\{5039689A-9995-417C-A5A3-A3F1A761E3F2}) (Version: 26.4.2155.3 - Intel Corporation)

Intel® Graphics Software (HKLM\...\{8037CB31-8466-4B66-ABCF-853FBB335583}) (Version: 26.4.2155.3 - Intel Corporation) Hidden

Ledger Wallet 2.132.0 (HKLM\...\c62032b2-0bca-5abc-b458-fd67cfc9e49b) (Version: 2.132.0 - Ledger Wallet Team)

Lenovo Now (HKLM-x32\...\{622FA116-13E7-4BB6-839C-A3E0E3ECDFE6}_is1) (Version: 4.6.0.44 - Lenovo)

Lenovo Service Bridge (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\{2C74547D-EF88-47F4-85F5-BE46A31E26B7}_is1) (Version: 5.0.2.21 - Lenovo)

Lenovo Smart Appearance Components (HKLM-x32\...\{13E9CBF6-6E32-40D0-874A-018DFEFB0851}_is1) (Version: 2.0.0.0 - Lenovo)

Lenovo System Update (HKLM-x32\...\TVSU_is1) (Version: 5.08.03.59 - Lenovo)

Lenovo Vantage Service (HKLM-x32\...\VantageSRV_is1) (Version: 4.2601.31.0 - Lenovo Group Ltd.)

Malwarebytes version 5.5.4.252 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.5.4.252 - Malwarebytes)

MEGAsync (HKLM-x32\...\MEGAsync) (Version:  - Mega Limited)

Microsoft .NET Host - 10.0.1 (x64) (HKLM\...\{9A3CDC3E-B643-4C13-8F8B-1E7F999A0C61}) (Version: 80.4.44025 - Microsoft Corporation) Hidden

Microsoft .NET Host - 8.0.14 (x86) (HKLM-x32\...\{CB771E25-82B7-435C-B8CF-1DAF85D9A373}) (Version: 64.56.29490 - Microsoft Corporation) Hidden

Microsoft .NET Host - 8.0.17 (x64) (HKLM\...\{F9A48374-07E7-499E-AFD5-345FB3B78C09}) (Version: 64.68.34370 - Microsoft Corporation) Hidden

Microsoft .NET Host - 9.0.7 (x64) (HKLM\...\{0419550D-D358-47EE-A7D3-6FBDFD416E98}) (Version: 72.28.35968 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 10.0.1 (x64) (HKLM\...\{12D4B30A-B8DE-496F-ABBA-8E355A7E2652}) (Version: 80.4.44025 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 8.0.14 (x64) (HKLM\...\{B2E7F2C8-73CD-4269-B7BC-11B7D8BB7A37}) (Version: 64.56.29490 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 8.0.14 (x86) (HKLM-x32\...\{455AA7CD-6D99-4039-95D2-FF1A437FD444}) (Version: 64.56.29490 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 8.0.17 (x64) (HKLM\...\{B73795E1-2391-49EB-A3E8-C2E16B2CEAC4}) (Version: 64.68.34370 - Microsoft Corporation) Hidden

Microsoft .NET Host FX Resolver - 9.0.7 (x64) (HKLM\...\{1E4FA106-E70C-42C1-8F95-1E9364563D50}) (Version: 72.28.35968 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 10.0.1 (x64) (HKLM\...\{DD248F59-C0EC-48F9-B8DB-CB8268F9E028}) (Version: 80.4.44025 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 8.0.14 (x64) (HKLM\...\{6C817CE3-32BC-4C6B-8B1A-E6F71EDAFFCC}) (Version: 64.56.29490 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 8.0.14 (x64) (HKLM-x32\...\{a6918640-3436-4607-9108-9b6038e680d6}) (Version: 8.0.14.34611 - Microsoft Corporation)

Microsoft .NET Runtime - 8.0.14 (x86) (HKLM-x32\...\{6E39BE88-1272-4732-A962-9B34A31EE12C}) (Version: 64.56.29490 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 8.0.17 (x64) (HKLM\...\{685320E7-FDFC-4BC6-91B3-E16746AFA1A0}) (Version: 64.68.34370 - Microsoft Corporation) Hidden

Microsoft .NET Runtime - 9.0.7 (x64) (HKLM\...\{1E385F99-81C4-4738-9336-4CB107EE3ECC}) (Version: 72.28.35968 - Microsoft Corporation) Hidden

Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.19929.20172 - Microsoft Corporation)

Microsoft ASP.NET Core 8.0.14 - Shared Framework (x86) (HKLM-x32\...\{b4843496-41d3-405c-b4c6-2ff39b7609ed}) (Version: 8.0.14.25112 - Microsoft Corporation)

Microsoft ASP.NET Core 8.0.14 Shared Framework (x86) (HKLM-x32\...\{BBD33465-6641-37D3-9444-5CCD7FE71A79}) (Version: 8.0.14.25112 - Microsoft Corporation) Hidden

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 148.0.3967.83 - Microsoft Corporation)

Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 148.0.3967.83 - Microsoft Corporation) Hidden

Microsoft OneNote - en-us (HKLM\...\OneNoteFreeRetail - en-us) (Version: 16.0.19929.20172 - Microsoft Corporation)

Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.24.31301 - Microsoft)

Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)

Microsoft Visual C++ 2022 X64 Additional Runtime - 14.50.35710 (HKLM\...\{9393725C-A0DA-47F1-8DB9-D1C223A0DD5A}) (Version: 14.50.35710 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.50.35710 (HKLM\...\{0BCFDDE2-AA44-4087-8E77-E0025551AC6E}) (Version: 14.50.35710 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden

Microsoft Visual C++ v14 Redistributable (x64) - 14.50.35710 (HKLM-x32\...\{b2f5e2cc-18af-40da-9bb9-c296da1cb96c}) (Version: 14.50.35710.0 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 10.0.1 (x64) (HKLM\...\{E83798A0-54B2-4BF4-AFD2-53F5FD087C95}) (Version: 80.4.44025 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{F12CDBC1-172E-4413-829C-B5234E386262}) (Version: 64.56.29521 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 8.0.14 (x86) (HKLM-x32\...\{f70d61fa-5d61-4582-bf8d-07dec8e4fcda}) (Version: 8.0.14.34613 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 8.0.17 (x64) (HKLM\...\{64AB07EF-120F-4A5A-A356-61D6D8966457}) (Version: 64.68.34385 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 8.0.17 (x64) (HKLM-x32\...\{5b3e202b-e0c9-4d25-84df-5f687c3b7c47}) (Version: 8.0.17.34917 - Microsoft Corporation)

Microsoft Windows Desktop Runtime - 9.0.7 (x64) (HKLM\...\{56FCF501-A7CF-42F8-B159-6B9F19090AED}) (Version: 72.28.35985 - Microsoft Corporation) Hidden

Microsoft Windows Desktop Runtime - 9.0.7 (x64) (HKLM-x32\...\{59aa3818-803e-4002-9605-c9c98f3366ea}) (Version: 9.0.7.35017 - Microsoft Corporation)

Microsoft Windows Desktop Runtime 10.0.1 (x64) (HKLM-x32\...\{F14BFF87-249C-40A3-8DCD-EC608C3FF361}) (Version: 10.0.1.50000 - Microsoft Corporation)

Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 151.0.2 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 137.0.2 - Mozilla)

Mozilla Thunderbird 52.9.1 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 52.9.1 (x86 de)) (Version: 52.9.1 - Mozilla)

O&O DiskImage (HKLM\...\{8D2B57CE-FD80-410B-AE9C-9014B5CC4BD5}) (Version: 20.1.336 - O&O Software GmbH)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.19929.20172 - Microsoft Corporation) Hidden

OKI Network Extension (HKLM-x32\...\{38ADB9A6-798C-11D6-A855-00105A80791C}) (Version: 1.00.000 - Okidata)

oneAPI Level Zero (HKLM\...\{2BA535F4-FEF9-45E1-9FF6-66C4E0F629FF}) (Version: 1.24.0 - Intel)

Password Depot 16 (HKLM\...\{6305E0DC-CC0E-44D1-8D60-8B85BE2D91C4}_is1) (Version: 16.0.8 - AceBIT GmbH)

PROGmatic (HKLM-x32\...\{C3439F0C-A8EF-469F-94C4-AC8B5444EC18}) (Version: 1.0.7 - Eurotronic Technology GmbH) Hidden

PROGmatic (HKLM-x32\...\PROGmatic 1.0.7) (Version: 1.0.7 - Eurotronic Technology GmbH)

Skype Version 8.138 (HKLM-x32\...\Skype_is1) (Version: 8.138 - Skype Technologies S.A.)

Smart Note (HKLM\...\{E2715359-FAFC-4C28-8064-526EB44096AD}_is1) (Version: 1.0.13.1121 - Lenovo Group Limited)

Smart View (HKLM-x32\...\{C7B50A89-F1D6-41C1-9375-0AF0C4CFE66F}) (Version: 1.0.0.0 - Samsung )

SoftMaker Office 2018 (HKLM\...\{02B0F09C-4914-4F64-BB8A-F22606E9E320}) (Version: 18.0.4914 - SoftMaker Software GmbH)

Surfshark (HKLM\...\{BC58C700-901B-40CB-859D-BFE56C62F7A8}) (Version: 6.10.0999 - Surfshark) Hidden

Surfshark (HKLM\...\Surfshark 6.10.0999) (Version: 6.10.0999 - Surfshark)

SYSCLEANER (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\SYSCLEANER) (Version: 1.1.5.0 - ) <==== ACHTUNG

TeamViewer (HKLM\...\TeamViewer) (Version: 15.78.3 - TeamViewer)

Telegram Desktop (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\{53F49750-6209-4FBF-9CA8-7A333C87D1ED}_is1) (Version: 6.8.2 - Telegram FZ-LLC)

Thinkpad USB Ethernet Adapter Driver (HKLM-x32\...\{04201224-2B34-4EE7-862B-B7BBF89DB3AB}) (Version: 11.13.0420.2023 - Lenovo)

Trezor Suite 25.12.2 (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\978be57b-9286-5cd7-a60b-54c81352a986) (Version: 25.12.2 - SatoshiLabs)

WebAdvisor von McAfee (HKLM-x32\...\{35ED3F83-4BDC-4c44-8EC6-6A8301C7413A}) (Version: 4.1.1.1123 - McAfee, LLC)
 

Chrome apps:

============

Google Passwortmanager (HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\9977bf12f6be2ec5e81df92b83cab66d) (Version: 1.0 - Google\Chrome)
 

Packages:

=========

@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-10] ()

AI Meeting Manager -> C:\Program Files\WindowsApps\E046963F.AIMeetingManager_3.1.18.0_x64__k1h2ywk1493x8 [2025-04-02] (LENOVO INC.)

Dolby Access -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAccess_3.27.10030.0_x64__rz1tebttyb220 [2026-05-26] (Dolby Laboratories)

Dolby Audio -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyAudio_3.30201.210.0_x64__rz1tebttyb220 [2025-04-02] (Dolby Laboratories)

Dolby Vision -> C:\Program Files\WindowsApps\DolbyLaboratories.DolbyVisionHDR_2.20400.722.0_x64__rz1tebttyb220 [2025-04-02] (Dolby Laboratories)

Glance by Mirametrix® -> C:\Program Files\WindowsApps\MirametrixInc.GlancebyMirametrix_11.43.256.0_x64__17mer8kcn3j54 [2026-02-21] (Mirametrix Inc.) [Startup Task]

Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1082.2350.0_x64__8wekyb3d8bbwe [2025-12-20] (Microsoft Corporation)

Ink.Handwriting.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.de-DE.1.0_0.1082.2350.0_x86__8wekyb3d8bbwe [2025-12-20] (Microsoft Corporation)

Ink.Handwriting.Main.de-DE.1.0 -> C:\Program Files\WindowsApps\Microsoft.Ink.Handwriting.Main.de-DE.1.0_0.1082.2350.0_x64__8wekyb3d8bbwe [2025-12-22] (Microsoft Corporation)

Lenovo Hotkeys -> C:\Program Files\WindowsApps\E0469640.LenovoUtility_4.7.18.0_x64__5grkq8ppsgwt4 [2025-05-16] (LENOVO INC) [Startup Task]

Lenovo Pen Settings -> C:\Program Files\WindowsApps\WacomTechnologyCorp.157535B83C264_8.2.8.0_neutral__ss941bf8mfs8a [2025-04-03] (Wacom Technology Corp.)

Lenovo Smart Appearance -> C:\Program Files\WindowsApps\E0469640.SmartAppearance_2.3.54.0_x64__5grkq8ppsgwt4 [2025-04-03] (LENOVO INC) [Startup Task]

Lenovo Vantage -> C:\Program Files\WindowsApps\E046963F.LenovoCompanion_10.2603.12.0_x64__k1h2ywk1493x8 [2026-04-27] (LENOVO INC.)

Local AI Manager for Microsoft 365 -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\AI [2026-05-17] ()

Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-05-01] ()

MEGAsync -> C:\Users\hduel\AppData\Local\MEGAsync [2026-05-22] (MEGAsync)

Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_56.20201.588.0_x64__8wekyb3d8bbwe [2026-02-11] (Microsoft Corporation)

Microsoft.AIFabric.CBS.1.6 -> C:\WINDOWS\SystemApps\Microsoft.AIFabric.CBS.1.6_8wekyb3d8bbwe [2026-05-27] (Microsoft Corporation)

Microsoft.Office.ActionsServer -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\ActionsServer [2026-05-17] ()

OfficePushNotificationsUtility -> C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16 [2026-05-17] ()

OneNote Virtual Printer -> C:\Program Files\WindowsApps\Microsoft.Office.OneNoteVirtualPrinter_1.0.0.0_x64__8wekyb3d8bbwe [2026-02-19] (Microsoft Corporation)

Smart Microphone Settings -> C:\Program Files\WindowsApps\ElevocTechnologyCo.Ltd.SmartMicrophoneSettings_1.1.51.0_x64__ttaqwwhyt5s6t [2025-04-02] (Elevoc Technology Co., Ltd.)

WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2616.100.0_x64__cv1g1gvanyjgm [2026-05-08] (WhatsApp Inc.) [Startup Task]
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B4CA0}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{0295691A-D674-4904-805C-BDFE165B771B}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{06B74C04-E813-4DD4-A972-172836EFA8D6}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{06C9646D-2807-44C0-97D2-6DA0DB623DB4}\localserver32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\Application\148.1.90.128\notification_helper.exe (Brave Software, Inc. -> Brave Software, Inc.)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{2928B1E6-08F1-4898-A955-9DEBA592BAA8}\localserver32 -> c:\program files\intel\intel graphics software\intelgraphicssoftware.exe (Intel Corporation -> Intel Corporation)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{30291A01-707C-11d0-B457-4446490043BF}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{399254F2-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{399254F3-670F-11D1-8092-0080ADB44B5C}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{8a087491-5264-11d4-95F6-00A0CC3CCA14}\localserver32 -> C:\Program Files\SoftMaker Office 2018\PlanMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{9DFA9DB2-FC69-4E0B-9A1D-7450AFCF00BC}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{bf608490-5373-11d0-8efb-4446490043bf}\localserver32 -> C:\Program Files\SoftMaker Office 2018\TextMaker.exe (SoftMaker Software GmbH -> SoftMaker Software GmbH)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{DFF20505-B08F-455B-AD70-4FBD055088E0}\localserver32 -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe (Google LLC -> Google LLC)

CustomCLSID: HKU\S-1-5-21-3382910964-3051966042-937846204-1005_Classes\CLSID\{F6E536F5-F795-49CE-A85D-2DA66503C6F1}\InprocServer32 -> C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\psuser_64.dll (Brave Software, Inc. -> BraveSoftware Inc.)

ShellIconOverlayIdentifiers: [ MEGA (NotFound)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890635} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\hduel\AppData\Local\MEGAsync\ShellExtX64.dll [2026-05-22] (Mega Limited -> )

ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ShellIconOverlayIdentifiers: [OODIIcon] -> {14A94384-BBED-47ed-86C0-6BF63FD892D0} => C:\Program Files\OO Software\DiskImage\oodishi.dll [2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei

ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei

ContextMenuHandlers1-x32: [pdShellExt32] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA2} => C:\Program Files\AceBIT\Password Depot 16\pdShell32.dll [2022-11-24] (AceBIT GmbH -> AceBIT)

ContextMenuHandlers1: [pdShellExt64] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA3} => C:\Program Files\AceBIT\Password Depot 16\pdShell64.dll [2022-11-24] (AceBIT GmbH -> AceBIT)

ContextMenuHandlers2: [OODIDismount] -> {BF5F9978-5B95-4F2E-BB19-5D95234187EE} => C:\Program Files\OO Software\DiskImage\oodishd.dll [2025-01-16] (O&O Software GmbH -> O&O Software GmbH)

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-01] (Malwarebytes Inc -> Malwarebytes)

ContextMenuHandlers4-x32: [pdShellExt32] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA2} => C:\Program Files\AceBIT\Password Depot 16\pdShell32.dll [2022-11-24] (AceBIT GmbH -> AceBIT)

ContextMenuHandlers4: [pdShellExt64] -> {404FAB0A-9C2E-4638-BB2E-89792E95FBA3} => C:\Program Files\AceBIT\Password Depot 16\pdShell64.dll [2022-11-24] (AceBIT GmbH -> AceBIT)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-05-01] (Malwarebytes Inc -> Malwarebytes)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Drivers32: [vidc.mjpg] => C:\WINDOWS\system32\bdmjpeg64.dll [75248 2017-01-26] (Bandicam Company -> )

HKLM\...\Drivers32: [vidc.mpeg] => C:\WINDOWS\system32\bdmpegv64.dll [75272 2017-01-26] (Bandicam Company -> )

HKLM\...\Drivers32: [msacm.bdmpeg] => C:\WINDOWS\system32\bdmpega64.acm [75784 2017-01-26] (Bandicam Company -> )

HKLM\...\Drivers32: [vidc.mjpg] => C:\Windows\SysWOW64\bdmjpeg.dll [71152 2017-01-26] (Bandicam Company -> )

HKLM\...\Drivers32: [vidc.mpeg] => C:\Windows\SysWOW64\bdmpegv.dll [71176 2017-01-26] (Bandicam Company -> )

HKLM\...\Drivers32: [msacm.bdmpeg] => C:\Windows\SysWOW64\bdmpega.acm [71176 2017-01-26] (Bandicam Company -> )
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\hduel\Desktop\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd

ShortcutWithArgument: C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Web Applications\_crx_kajebgjangihfbkjfejcanhanjmmbcfd\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd

ShortcutWithArgument: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Google Passwortmanager.lnk -> C:\Program Files\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=kajebgjangihfbkjfejcanhanjmmbcfd
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2025-09-21 14:28 - 2009-02-27 16:38 - 000139264 ____R () [Datei ist nicht signiert] C:\Program Files (x86)\Brother\BrUtilities\BrLogAPI.dll

2022-06-01 22:46 - 2021-11-04 13:57 - 000229376 _____ () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\freeglut.dll

2022-06-01 22:46 - 2021-11-04 13:57 - 000364032 _____ () [Datei ist nicht signiert] C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\glew32.dll

2025-09-21 14:28 - 2005-04-22 13:36 - 000143360 ____N () [Datei ist nicht signiert] C:\WINDOWS\system32\BrSNMP64.dll

2025-04-02 12:21 - 2022-11-24 11:21 - 005273288 _____ (AceBIT) [Datei ist nicht signiert] C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn64.dll

2025-09-21 14:28 - 2010-03-10 18:16 - 000770048 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccDCtl.dll

2025-09-21 14:28 - 2012-10-09 15:30 - 000372736 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccFCtl.dll

2025-09-21 14:28 - 2010-03-29 04:53 - 000159744 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccger.dll

2025-09-21 14:28 - 2009-09-28 13:38 - 005390336 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\brccimg.dll

2025-09-21 14:28 - 2012-07-05 20:32 - 000084480 ____N (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\WINDOWS\system32\BrNetSti.dll

2025-09-21 14:28 - 2003-06-30 00:00 - 000259584 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTDIS12n.dll

2025-09-21 14:28 - 2005-07-05 00:00 - 000131584 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTFIL12n.DLL

2025-09-21 14:28 - 2003-06-30 00:00 - 000406016 ____N (LEAD Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\LTKRN12n.dll

2022-06-01 22:37 - 2022-06-01 22:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll

2022-06-01 22:37 - 2022-06-01 22:37 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll

2025-04-04 21:47 - 2015-01-28 11:15 - 001722368 _____ (Oki Data Corporation) [Datei ist nicht signiert] C:\WINDOWS\system32\spool\DRIVERS\x64\3\okW_u04N.dll

2026-04-24 12:14 - 2026-04-24 12:14 - 003033088 _____ (SQLite Development Team) [Datei ist nicht signiert] C:\Program Files\Intel\SUR\QUEENCREEK\x64\sqlite3.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\hduel\Downloads\bandicam_setup.exe:MBAM.Zone.Identifier [60]

AlternateDataStreams: C:\Users\hduel\Downloads\everest_home_220.exe:MBAM.Zone.Identifier [60]

AlternateDataStreams: C:\Users\hduel\Downloads\LenovoServiceBridgeSetup.exe:MBAM.Zone.Identifier [63]

AlternateDataStreams: C:\Users\hduel\Downloads\OKW3S04N103_90367.exe:MBAM.Zone.Identifier [56]

AlternateDataStreams: C:\Users\hduel\Downloads\OKW3X04N103_90397.exe:MBAM.Zone.Identifier [56]

AlternateDataStreams: C:\Users\hduel\Downloads\Skype-8.138.0.214.exe:MBAM.Zone.Identifier [58]

AlternateDataStreams: C:\Users\hduel\Downloads\WhatsApp Installer.exe:MBAM.Zone.Identifier [61]

AlternateDataStreams: C:\Users\hduel\Documents\Privat_Brief_Color_000.doc:com.dropbox.attributes [168]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
 

BHO: Password Depot -> {CFC4FC07-1F20-4705-8629-03B15B0E2351} -> C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn64.dll [2022-11-24] (AceBIT) [Datei ist nicht signiert]

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2026-02-01] (Microsoft Corporation -> Microsoft Corporation)

BHO-x32: Password Depot -> {9F79B165-70F7-4C46-B1A5-8828E2FF21F9} -> C:\Program Files\AceBIT\Password Depot 16\pdIEAddOn32.dll [2022-11-24] (AceBIT) [Datei ist nicht signiert]

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2021-06-05 14:08 - 2021-06-05 14:08 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
 

2025-11-20 20:58 - 2025-11-28 09:50 - 000000506 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
 

==================== Network ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

DNS Servers: 192.168.178.1

 ist aktiviert.
 

Network Binding:

=============

OpenVPN Data Channel Offload for Surfshark: OpenVPN Data Channel Offload -> ovpn-dco.sys

WLAN 2: Realtek RTL8852BE WiFi 6 802.11ax PCIe Adapter -> rtwlane601.sys
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-3382910964-3051966042-937846204-1005\Control Panel\Desktop\\Wallpaper -> C:\Users\hduel\Pictures\2026 NASA Science Planning Guide (print resolution)26.jpg

HKU\S-1-5-80-863171341-2975503981-1811344707-3769924460-3995132968\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0.jpg

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 1) (TamperProtectionSource: 5)

HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{6BA13B4E-76CB-428A-86D2-3B6CF9F47677}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25059.1703.3489.334_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{9E5E565E-735F-417E-8437-9786900E0188}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_25059.1703.3489.334_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{4E924E44-95C9-43C2-A655-5055695950BD}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{4BBF6F6B-CB53-4415-90A3-3FAC1B5844EA}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [UDP Query User{F53010AA-AE99-449F-9A27-5DDAB3205118}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Allow) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [TCP Query User{301AD267-9860-48EF-93E8-EFFA8F7704A3}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Allow) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{4D86B2BF-5546-44CD-BCF5-5917F0BD4CCC}] => (Allow) C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe (AceBIT GmbH -> AceBIT)

FirewallRules: [{318017E8-DC46-4071-BC79-1F070E7D3882}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)

FirewallRules: [{CA7C2572-CEA4-4E3E-90FE-C13EC51A2CA4}] => (Allow) C:\Program Files (x86)\Lenovo\System Update\uncserver.exe (Lenovo -> Lenovo)

FirewallRules: [{5D4F4BCF-41E6-4921-85DA-1CF12451F774}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe => Keine Datei

FirewallRules: [TCP Query User{0492E59E-59CE-4871-BFF6-9E6CE33EE0C0}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [UDP Query User{79BE0DB9-7F75-43F8-8132-1021793F9306}C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe] => (Block) C:\users\hduel\appdata\local\bravesoftware\brave-browser\application\brave.exe (Brave Software, Inc. -> Brave Software, Inc.)

FirewallRules: [{97A13596-3C50-480B-B795-78886DD321A8}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{ECC3D3E1-E12C-4798-BE7D-535D4E5D0229}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{AE632503-9F75-4D1F-8EBB-2A269ABF546C}] => (Allow) C:\Program Files (x86)\Brother\Brmfl08j\FAXRX.exe (Brother Industries Ltd.) [Datei ist nicht signiert]

FirewallRules: [{04DA22DA-5583-4FF4-BCC8-1233C4909C5D}] => (Allow) C:\Program Files (x86)\Brother\Brmfl08j\FAXRX.exe (Brother Industries Ltd.) [Datei ist nicht signiert]

FirewallRules: [{945DFE12-96AA-48C3-B36C-951BF072796B}] => (Allow) LPort=54925

FirewallRules: [{227CE79E-9CEB-45B1-A05B-04E237C39022}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [TCP Query User{4F3358C9-894A-4A6A-9EDA-006E82A9A2AD}C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)

FirewallRules: [UDP Query User{6C76DD60-8BFF-4949-BBCC-E6CECFAAF663}C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe] => (Allow) C:\users\hduel\appdata\local\programs\trezor suite\trezor suite.exe (Trezor Company s.r.o. -> SatoshiLabs)

FirewallRules: [TCP Query User{794BF9B3-7BE6-445D-9B1C-199F7540DD60}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [Datei ist nicht signiert]

FirewallRules: [UDP Query User{23540DE7-6B51-415C-8A30-823DBB115203}C:\program files (x86)\smart view\smart view.exe] => (Allow) C:\program files (x86)\smart view\smart view.exe () [Datei ist nicht signiert]

FirewallRules: [{D114E2FE-3A34-402B-AA62-EC6789AA7762}] => (Allow) LPort=12972

FirewallRules: [{D3653415-DAE6-486F-9C85-8C25F3EFFAB0}] => (Allow) C:\Program Files\Audials\ComputerBild 2026\Audials.exe (Audials AG -> Audials AG)

FirewallRules: [{BCBFB453-17A1-47EE-872E-A59B4997C499}] => (Allow) LPort=14714

FirewallRules: [{9F609B48-492B-449C-AE47-DDEB8B12C9B5}] => (Allow) LPort=31931

FirewallRules: [{4770C195-4898-4245-B5AB-BE00AF6C4701}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{6FF14A23-596F-451A-950A-0C646A1EB465}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{8D46364F-85E4-4502-A0A5-9D9F0A9D00C2}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{E5804F27-DA78-41A3-B1E7-9AF492583E39}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{916D8F20-7F9D-42A4-9945-31047A3A3751}] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)

FirewallRules: [AusweisApp-Firewall-Rule] => (Allow) C:\Program Files\AusweisApp\AusweisApp.exe (Governikus GmbH & Co. KG -> Governikus GmbH & Co. KG)

FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{ADF23265-9589-4385-91CE-B941E875B033}] => (Allow) C:\Program Files (x86)\Microsoft\Copilot\Application\mscopilot.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{40D78D1E-6859-4FAB-81B8-7B539EF2481F}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{7DA9C800-62B9-41EE-B1B7-A291F2688BAF}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{6CDEC80A-AF05-4397-8C80-F846F183228F}] => (Allow) C:\Program Files\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{37FF4D62-EEA4-4ABF-AD28-B94D88588A48}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{AA9734C1-B747-4AB2-A044-FE9AF607E197}] => (Allow) C:\Program Files\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
 

==================== Wiederherstellungspunkte =========================
 

26-05-2026 10:39:43 Windows Update

27-05-2026 11:01:19 Windows Modules Installer

28-05-2026 22:00:40 Installed Surfshark
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (05/29/2026 01:04:45 PM) (Source: Application Error) (EventID: 1000) (User: LENOVO-YOGA-14S)

Description: Fehlerhafter Anwendungsname: Malwarebytes.exe, Version: 5.0.0.1614, Zeitstempel: 0x65d50000

Fehlerhafter Modulname: KERNELBASE.dll, Version: 10.0.26100.8521, Zeitstempel: 0xdd98c8ba

Ausnahmecode: 0xe0434352

Fehleroffset: 0x00000000000c1b6a

Fehlerhafte Prozess-ID: 0x24a0

Fehlerhafte Anwendungsstartzeit: 0x1dcef5acce4a5a9

Fehlerhafter Anwendungspfad: C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

Fehlerhafter Modulpfad: C:\WINDOWS\System32\KERNELBASE.dll

Berichts-ID: 422c3705-2ae4-42f9-93e3-1a3634a4ab00

Vollständiger Name des fehlerhaften Pakets: 

Fehlerhafte paketbezogene Anwendungs-ID:
 

Error: (05/29/2026 01:03:18 PM) (Source: IPF) (EventID: 17) (User: NT-AUTORITÄT)

Description: Event-ID 17
 

Error: (05/29/2026 12:35:27 PM) (Source: Application Error) (EventID: 1000) (User: LENOVO-YOGA-14S)

Description: Fehlerhafter Anwendungsname: Malwarebytes.exe, Version: 5.0.0.1614, Zeitstempel: 0x65d50000

Fehlerhafter Modulname: KERNELBASE.dll, Version: 10.0.26100.8521, Zeitstempel: 0xdd98c8ba

Ausnahmecode: 0xe0434352

Fehleroffset: 0x00000000000c1b6a

Fehlerhafte Prozess-ID: 0x11f0

Fehlerhafte Anwendungsstartzeit: 0x1dcef56d5e6f0a9

Fehlerhafter Anwendungspfad: C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe

Fehlerhafter Modulpfad: C:\WINDOWS\System32\KERNELBASE.dll

Berichts-ID: 8b2c132f-b764-446d-b175-d6fed9cdde94

Vollständiger Name des fehlerhaften Pakets: 

Fehlerhafte paketbezogene Anwendungs-ID:
 

Error: (05/29/2026 12:23:40 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)

Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3

Fehlerhafter Modulname: ucrtbase.dll, Version: 10.0.26100.8521, Zeitstempel: 0xc38f7a35

Ausnahmecode: 0xc0000409

Fehleroffset: 0x00000000000a527e

Fehlerhafte Prozess-ID: 0x5478

Fehlerhafte Anwendungsstartzeit: 0x1dcef5536e77001

Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe

Fehlerhafter Modulpfad: C:\WINDOWS\System32\ucrtbase.dll

Berichts-ID: b8a82902-e143-460b-9cee-822df43f55c1

Vollständiger Name des fehlerhaften Pakets: 

Fehlerhafte paketbezogene Anwendungs-ID:
 

Error: (05/28/2026 10:04:04 PM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)

Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3

Fehlerhafter Modulname: AudioModule.dll, Version: 1.0.10.165, Zeitstempel: 0x69aa406d

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000034aef

Fehlerhafte Prozess-ID: 0x4dc4

Fehlerhafte Anwendungsstartzeit: 0x1dceedd2043a234

Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe

Fehlerhafter Modulpfad: C:\ProgramData\Lenovo\Vantage\Addins\LenovoMachineFixSystemAddin\1.0.10.165\AudioModule.dll

Berichts-ID: 6e38d813-eb9a-48a8-ba0b-f25d322bb70e

Vollständiger Name des fehlerhaften Pakets: 

Fehlerhafte paketbezogene Anwendungs-ID:
 

Error: (05/28/2026 10:04:04 PM) (Source: .NET Runtime) (EventID: 1026) (User: )

Description: Anwendung: LenovoVantage-(LenovoMachineFixSystemAddin).exe

Frameworkversion: v4.0.30319

Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.

Ausnahmeinformationen: Ausnahmecode c0000005, Ausnahmeadresse 00007FFDF15E4AEF
 

Error: (05/27/2026 05:10:25 PM) (Source: Firefox Default Browser Agent) (EventID: 5) (User: )

Description: Event-ID 5
 

Error: (05/27/2026 07:51:32 AM) (Source: Application Error) (EventID: 1000) (User: NT-AUTORITÄT)

Description: Fehlerhafter Anwendungsname: LenovoVantage-(LenovoMachineFixSystemAddin).exe, Version: 4.2601.31.0, Zeitstempel: 0xbfc4eba3

Fehlerhafter Modulname: ucrtbase.dll, Version: 10.0.26100.8328, Zeitstempel: 0x3e0a6430

Ausnahmecode: 0xc0000409

Fehleroffset: 0x00000000000a4aee

Fehlerhafte Prozess-ID: 0x4f98

Fehlerhafte Anwendungsstartzeit: 0x1dced9cdd497efe

Fehlerhafter Anwendungspfad: C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(LenovoMachineFixSystemAddin).exe

Fehlerhafter Modulpfad: C:\WINDOWS\System32\ucrtbase.dll

Berichts-ID: a11e3a28-a657-4578-a21a-9963b38894cc

Vollständiger Name des fehlerhaften Pakets: 

Fehlerhafte paketbezogene Anwendungs-ID:
 
 

Systemfehler:

=============

Error: (05/29/2026 01:09:48 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "System Update" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/29/2026 01:08:51 PM) (Source: Microsoft-Windows-DeviceAssociationService) (EventID: 3509) (User: NT-AUTORITÄT)

Description: Fehler bei der Gerätezuordnung: Zeremonie auswählen.
 

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (05/29/2026 01:07:48 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "PRI-Driver" wurde aufgrund folgenden Fehlers nicht gestartet: 

Das System kann die angegebene Datei nicht finden.
 

Error: (05/29/2026 01:07:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (05/29/2026 01:07:12 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 

Error: (05/29/2026 01:07:11 PM) (Source: Service Control Manager) (EventID: 7001) (User: )

Description: Der Dienst "DNS-Client" ist vom Dienst "Netzwerkspeicher-Schnittstellendienst" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 

Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
 
 

Windows Defender:

================

Date: 2026-05-29 09:41:37

Description: 

Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ŉ %τŠςäп ÎĎ:%ъ{01DCAC44-170F-41A0-A87B-1C7A17B5B485}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ŉ  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 
 

Date: 2026-05-28 12:39:41

Description: 

Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ŉ %τŠςäп ÎĎ:%ъ{A7FE755E-AA42-4BD7-8497-992FA8254933}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ŉ  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъҐРĈ ¢οŋŉéçтĩŏⁿ гυлďŏŵή 
 

Date: 2026-05-27 11:14:52

Description: 

Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ŉ %τŠςäп ÎĎ:%ъ{3639DC0F-3CE8-418E-BFD4-4E2B06EF87C8}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ŉ  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 
 

Date: 2026-05-26 10:39:23

Description: 

Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ŉ %τŠςäп ÎĎ:%ъ{F8D1889F-6953-4331-ADAC-6672EF4B917F}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ŉ  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 
 

Date: 2026-05-25 10:32:37

Description: 

Microsoft Defender Antivirus š¢áŋ ĥăş ьēεň ŝťóφρєď вεƒóŗê čőmрℓëτíòл.%ŉ %τŠςäп ÎĎ:%ъ{99592425-BEB3-4827-8238-9B4EF73A10A5}%ņ %ţŜċдň Тўρé:%ъAntimalware%ⁿ %τŠ¢âń Ρǻяªмεťêřŝ:%ъSchnellüberprüfung%ŉ  %тЦŝėř:%ьNT-AUTORITÄT\SYSTEM%ñ %ťŠŧòφ Ѓëªŝθи:%ъŚċђеďџļéđ šςάⁿ ẅàŝ šќιрφ℮đ ве¢дųŝе τĥе ĺάŝτ ѕϋčċёşŝƒųļ ŝсåп шάś ώîтћΐй тћ℮ ℓáѕţ 7 ðâỳş 

Event[0]
 

Date: 2026-05-29 12:59:28

Description: 

Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.

Feature: Bei Zugriff

Fehlercode: 0x8007043c

Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 

Ursache: Die Antischadsoft-Sicherheitsfunktion wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden. 
 

Date: 2026-05-29 12:34:55

Description: 

Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.

Feature: Bei Zugriff

Fehlercode: 0x8007043c

Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 

Ursache: Die Antischadsoft-Sicherheitsfunktion wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden. 
 

Date: 2026-01-22 14:35:57

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.443.770.0

Update Source: Microsoft Update-Server

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.25110.1

Fehlercode: 0x8024402c

Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".  
 

Date: 2025-08-12 23:51:33

Description: 

Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Sicherheitsinformationen aufgetreten.

Neue Version der Sicherheitsinformationen: 

%Vorherige Version der Sicherheitsinformationen: 1.435.134.0

Update Source: Microsoft Update-Server

Sicherheitstyp: AntiVirus

Updatetyp: Voll

Benutzer: NT-AUTORITÄT\SYSTEM

Aktuelle Modulversion: 

%Vorherige Modulversion: 1.1.25070.4

Fehlercode: 0x80240016

Fehlerbeschreibung: Unerwartetes Problem bei der Überprüfung auf Updates. Informationen zum Installieren von Updates oder zur Problembehandlung finden Sie unter "Hilfe und Support".  
 

CodeIntegrity:

===============

Date: 2026-04-13 09:11:32

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\AI\aimgr.exe) attempted to load \Device\HarddiskVolume3\Program Files\Bandicam\bdcamvk64.dll that did not meet the Microsoft signing level requirements. 
 

Date: 2025-11-05 07:16:36

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.25090.3009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6173ca47e9fde277\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements. 
 
 

==================== Speicherinformationen =========================== 
 

BIOS: LENOVO JFCN51WW(V2.17) 09/06/2024

Hauptplatine: LENOVO LNVNB161216

Prozessor: 12th Gen Intel(R) Core(TM) i7-1255U

Prozentuale Nutzung des RAM: 63%

Installierter physikalischer RAM: 16092.43 MB

Verfügbarer physikalischer RAM: 5924.65 MB

Summe virtueller Speicher: 21212.43 MB

Verfügbarer virtueller Speicher: 9090.23 MB
 

==================== Laufwerke ================================
 

Drive c: (Windows-SSD) (Fixed) (Total:474.72 GB) (Free:325.18 GB) (Model: Micron MTFDKCD512TFK) NTFS
 

\\?\Volume{eb80e848-5acd-4c90-9c0a-eb3af92b74e3}\ (WINRE_DRV) (Fixed) (Total:1.95 GB) (Free:1.07 GB) NTFS

\\?\Volume{c1002e58-9114-4654-b1e9-c13c21323335}\ (SYSTEM_DRV) (Fixed) (Total:0.25 GB) (Free:0.21 GB) FAT32
 

==================== MBR & Partitionstabelle ====================
 

==========================================================

Disk: 0 (Size: 476.9 GB) (Disk ID: F3290C6E)
 

Partition: GPT.
 

==================== Ende von Addition.txt =======================

--- --- ---

Danke vorab,