FRST Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 31-08-2026
durchgeführt von Kevin (Administrator) auf MSI (Micro-Star International Co., Ltd. GV72 8RD) (01-09-2026 09:55:44)
Gestartet von C:\Users\Kevin\Desktop\FRST64.exe
Geladene Profile: Kevin
Plattform: Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe
(C:\Program Files\WindowsApps\MSTeams_26213.1006.5014.9784_x64__8wekyb3d8bbwe\ms-teams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe
(DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxEM.exe
(explorer.exe ->) (Micro-Star International CO., LTD. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\SCM\SCM.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b8a282b80f383656\RtkAudUService64.exe
(Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\151.0.4129.107\msedgewebview2.exe <15>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_a55aa2cd52a3429d\LMS.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe
(services.exe ->) (Micro-Star International Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\SCM\MSIService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b8a282b80f383656\RtkAudUService64.exe
(services.exe ->) (SteelSeries France SASU -> Nahimic) C:\Windows\System32\NahimicService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (Wondershare Technology Group Co.,Ltd -> wondershare) C:\ProgramData\Wondershare\wsServices\WsidService.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(SteelSeries France SASU -> A-Volute) C:\Users\Kevin\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsStore_22607.1401.7.0_x64__8wekyb3d8bbwe\StoreDesktopExtension.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.380.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.26100.9156_none_a546383f7734e5e5\TiWorker.exe
(svchost.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b8a282b80f383656\RtkAudUService64.exe [3431976 2026-04-22] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [IAStorIcon] => C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [320584 2018-01-30] (Intel(R) Rapid Storage Technology -> Intel Corporation)
HKLM\...\Run: [SCM] => C:\Program Files (x86)\SCM\SCM.exe [302360 2017-11-14] (Micro-Star International CO., LTD. -> ) [Datei ist nicht signiert]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [748624 2023-10-04] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [486984 2026-05-08] (AVB Disc Soft, SIA -> Disc Soft Limited)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {EB1B274C-B43A-453F-AAEE-1F768A3BBECA} - System32\Tasks\Dragon_Center_updater => C:\ProgramData\MSI\Dragon -> Center\DragonCenter_Updater.exe DragonCenter
Task: {9F84B428-20FC-4D91-8985-2C486BA8FDCA} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1326720 2026-08-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {3C58C430-85FB-49D6-B7D3-F7942B61B0E9} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-19967659-193145539-2483159501-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1326720 2026-08-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {370D42C3-1FB8-4D5E-9B67-2C4928405367} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-08-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {A3EB4569-24ED-47B1-A8E8-F1D41BC381A1} - System32\Tasks\MSI_Dragon Center => C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe [5668632 2018-04-11] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) [Datei ist nicht signiert]
Task: {C461373E-8FE7-402E-9015-9B59BB0805F3} - System32\Tasks\NahimicSvc32Run => C:\WINDOWS\SysWOW64\NahimicSvc32.exe [1118128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {10BEE7BC-A5E1-4C8C-8131-3B8D57E1DEC5} - System32\Tasks\NahimicSvc64Run => C:\WINDOWS\system32\NahimicSvc64.exe [1438128 2024-06-20] (SteelSeries France SASU -> Nahimic)
Task: {0840189F-BABF-4317-ABC9-85A1D31F0F1C} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [519240 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\NvContainer\-d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {C2520B5F-C865-489B-BB09-B190D58A35A3} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1930312 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {36B2A14B-0D19-4302-AD0B-FE965B9DEAD7} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [968264 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\NvNode\--launcher=TaskScheduler
Task: {C39E6DFD-8BEA-4F15-AFAA-631F355F1FED} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D2E8F24F-311A-4150-8054-25CCD991422E} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [660040 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {87F7E11E-F961-40E4-A344-C2A2DDEB6BBD} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [524360 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DF63A715-2C08-43DF-ACA7-EB107F373E70} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12CA7994-9780-4329-971D-DA552670102B} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [746056 2018-03-09] (NVIDIA Corporation -> NVIDIA Corporation) -> C:\Program Files (x86)\NVIDIA Corporation\Update Core\--logon
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{75758434-6ecc-4b1c-b820-11b70114e081}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\64259445A51205F6775627C696E6560253430354: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\64259445A51224F687027353830302A43423F5235485: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\64259445A51224F687027353830302A43423F5235485: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\65F6461666F6E6560284F6D6563707F647: [DhcpNameServer] 176.95.16.230 176.95.16.231
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\65F6461666F6E656D243436314: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\7456D69637368647563702841636B6C20226563747563702841636B6: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{f1451696-8537-40f4-bf94-eefce30db32c}\7456D69637368647563702841636B6C20226563747563702841636B6: [DhcpDomain] fritz.box
FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: 7r8yykek.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\jycip7rk.default [2026-08-29]
FF ProfilePath: C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7r8yykek.default-release [2026-09-01]
FF Homepage: Mozilla\Firefox\Profiles\7r8yykek.default-release -> hxxps://browser.services/?B=FH&id=19103
FF Extension: (New Tab) - C:\Users\Kevin\AppData\Roaming\Mozilla\Firefox\Profiles\7r8yykek.default-release\Extensions\newtab@mozilla.org.xpi [2026-08-29]
FF Plugin: @java.com/DTPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.391.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin HKU\S-1-5-21-19967659-193145539-2483159501-1001: SkypeForBusinessPlugin-16.2 -> C:\Users\Kevin\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-19967659-193145539-2483159501-1001: SkypeForBusinessPlugin64-16.2 -> C:\Users\Kevin\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\npGatewayNpapi-x64.dll [2019-08-03] (Microsoft Corporation -> Microsoft Corporation)
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Kevin\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-29]
Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
Edge DefaultSearchKeyword: Default -> bing.com
Edge DefaultNewTabURL: Default -> {bing:baseURL}chrome/newtab
Edge DefaultSuggestURL: Default -> {bing:baseURL}qbox?query={searchTerms}&language={language}&{bing:partner}{bing:cvid}{bing:msb}{bing:ig}{bing:baseQuery}{google:inputType}{google:cursorPosition}{google:pageClassification}{bing:features}{bing:flights}
Edge Extension: (Google Docs Offline) - C:\Users\Kevin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-22]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Kevin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-06-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Kevin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24]
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 DFWSIDService; C:\ProgramData\Wondershare\wsServices\WsidService.exe [3963120 2024-03-18] (Wondershare Technology Group Co.,Ltd -> wondershare)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4919880 2026-05-08] (AVB Disc Soft, SIA -> Disc Soft Limited)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11671792 2026-08-27] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-08-27] (Malwarebytes Inc -> Malwarebytes)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MpDefenderCoreService.exe [2113568 2026-08-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Micro Star SCM; C:\Program Files (x86)\SCM\MSIService.exe [160768 2017-11-14] (Micro-Star International Co., Ltd.) [Datei ist nicht signiert]
R2 NahimicService; C:\WINDOWS\System32\NahimicService.exe [1910704 2024-06-20] (SteelSeries France SASU -> Nahimic)
S3 NOBU; C:\Program Files (x86)\Symantec\Norton Online Backup\NOBuAgent.exe [4362568 2015-06-18] (Symantec Corporation -> Symantec Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\NisSrv.exe [5183648 2026-08-05] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26070.9-0\MsMpEng.exe [291352 2026-08-05] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ccSet_NARA; C:\WINDOWS\system32\drivers\NARAx64\0406000.00C\ccSetx64.sys [173808 2015-06-25] (Symantec Corporation -> Symantec Corporation)
R1 ESProtectionDriver; \??\C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-08-27] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 hidgamepad; C:\WINDOWS\System32\DriverStore\FileRepository\hidgamepad.inf_amd64_f555c80b4ded7bb8\hidgamepad.sys [65536 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-23] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-08-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-08-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217192 2026-08-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [132712 2026-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [246376 2026-08-27] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; \??\C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-08-29] (Malwarebytes Inc -> )
R3 Nahimic_Mirroring; C:\WINDOWS\System32\drivers\Nahimic_Mirroring.sys [94784 2022-06-02] (A-Volute SAS -> Windows (R) Win 7 DDK provider)
S3 NvStreamKms; \??\C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30280 2018-03-09] (NVIDIA Corporation -> )
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-08-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21632 2026-08-05] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [625688 2026-08-05] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [111640 2026-08-05] (Microsoft Windows -> Microsoft Corporation)
R3 WINIO; \??\C:\Program Files (x86)\MSI\Dragon Center\winio64.sys [15160 2015-06-11] (Micro-Star Int'l Co. Ltd. -> )
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-03-01] (Microsoft Windows -> Microsoft Corporation)
S3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_bce55ac535cb3902\WSDScan.sys [61440 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
==================== SvcHost (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-08-31 16:55 - 2026-09-01 09:53 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-08-29 13:50 - 2026-08-29 13:50 - 000746592 _____ C:\WINDOWS\system32\perfh007.dat
2026-08-29 13:50 - 2026-08-29 13:50 - 000158156 _____ C:\WINDOWS\system32\perfc007.dat
2026-08-29 13:44 - 2026-09-01 01:51 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-08-29 13:44 - 2026-08-29 13:44 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-08-29 13:34 - 2026-09-01 09:55 - 000000000 ____D C:\Users\Kevin\Desktop\FRST-OlderVersion
2026-08-29 13:34 - 2026-08-29 13:43 - 000466480 _____ C:\Users\Kevin\Desktop\Fixlog.txt
2026-08-27 19:32 - 2026-08-27 19:32 - 000001412 _____ C:\Users\Kevin\Desktop\MBAM.txt
2026-08-27 18:48 - 2026-09-01 09:58 - 000000000 ____D C:\Users\Kevin\AppData\Local\Malwarebytes
2026-08-27 18:48 - 2026-08-27 18:48 - 000002100 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-08-27 18:48 - 2026-08-27 18:48 - 000002088 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-08-27 18:48 - 2026-08-27 18:48 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-08-27 18:40 - 2026-08-27 18:42 - 000000000 ____D C:\AdwCleaner
2026-08-27 18:39 - 2026-08-27 18:40 - 009630992 _____ (Malwarebytes) C:\Users\Kevin\Desktop\adwcleaner.exe
2026-08-27 16:51 - 2026-09-01 09:58 - 000022097 _____ C:\Users\Kevin\Desktop\FRST.txt
2026-08-27 16:51 - 2026-09-01 09:57 - 000000000 ____D C:\FRST
2026-08-27 16:51 - 2026-09-01 09:55 - 002450944 _____ (Farbar) C:\Users\Kevin\Desktop\FRST64.exe
2026-08-27 14:15 - 2026-08-27 18:39 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-08-19 21:01 - 2026-08-27 16:13 - 000002128 _____ C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-13 14:09 - 2026-08-13 14:09 - 000038723 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-08-13 14:09 - 2026-08-13 14:09 - 000038723 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-08-10 13:19 - 2026-08-10 13:19 - 000000000 ____D C:\Users\Kevin\AppData\Local\WindowsOobeAppHost
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2026-09-01 09:55 - 2022-02-11 01:34 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-09-01 09:53 - 2019-04-10 18:13 - 000000000 __SHD C:\Users\Kevin\IntelGraphicsProfiles
2026-09-01 01:51 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-09-01 01:51 - 2018-03-09 09:25 - 000000000 ____D C:\ProgramData\NVIDIA
2026-08-31 19:05 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-08-31 19:05 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-08-31 18:30 - 2025-03-01 19:33 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-08-29 23:07 - 2019-04-14 11:21 - 000000000 ____D C:\Users\Kevin\AppData\Local\CrashDumps
2026-08-29 13:50 - 2025-03-01 22:42 - 001727442 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-08-29 13:50 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-08-29 13:44 - 2026-03-27 00:21 - 000000000 ____D C:\ProgramData\Realtek
2026-08-29 13:44 - 2025-03-01 19:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-08-29 13:44 - 2025-03-01 19:34 - 000009052 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-08-29 13:44 - 2025-03-01 18:42 - 000000000 ____D C:\Users\Kevin\AppData\Roaming\Microsoft\Windows
2026-08-29 13:44 - 2024-04-01 09:21 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2026-08-29 13:44 - 2020-10-11 00:07 - 000012288 ___SH C:\DumpStack.log.tmp
2026-08-29 13:44 - 2018-03-09 09:23 - 000000000 ____D C:\Intel
2026-08-29 13:43 - 2024-04-01 09:26 - 000000000 ____D C:\Users\Default\AppData\Roaming\Microsoft\Windows
2026-08-29 13:38 - 2020-11-30 21:30 - 000000000 ____D C:\Users\Kevin\AppData\Roaming\discord
2026-08-29 13:38 - 2019-04-14 00:47 - 000000000 ____D C:\Users\Kevin\AppData\Local\Steam
2026-08-29 13:34 - 2023-01-16 23:59 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2026-08-29 13:34 - 2020-06-21 20:03 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-08-29 13:33 - 2025-03-01 19:37 - 000003580 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-19967659-193145539-2483159501-1001
2026-08-29 13:33 - 2025-03-01 19:37 - 000003558 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-19967659-193145539-2483159501-1001
2026-08-29 13:33 - 2025-03-01 19:37 - 000003350 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-19967659-193145539-2483159501-1001
2026-08-29 13:33 - 2020-10-09 18:33 - 000002382 _____ C:\Users\Kevin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-08-27 18:54 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-08-27 18:48 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-08-27 18:48 - 2019-10-23 12:09 - 000000000 ____D C:\Program Files\Malwarebytes
2026-08-27 18:42 - 2019-12-13 13:51 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-08-27 18:42 - 2019-12-13 13:51 - 000001000 _____ C:\Users\Public\Desktop\Firefox.lnk
2026-08-27 18:39 - 2019-12-13 13:51 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-08-27 18:37 - 2019-04-14 00:46 - 000000000 ____D C:\Program Files (x86)\Steam
2026-08-27 17:57 - 2019-07-15 01:45 - 000000000 ____D C:\Users\Kevin\AppData\Local\D3DSCache
2026-08-27 16:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat
2026-08-23 12:36 - 2025-03-01 19:37 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-08-23 12:36 - 2025-03-01 19:37 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-08-14 15:10 - 2025-03-01 19:33 - 000335416 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-08-14 15:09 - 2025-12-18 01:35 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-08-14 15:09 - 2025-07-16 21:48 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-08-14 15:09 - 2024-04-01 18:35 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-08-14 15:09 - 2024-04-01 18:35 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\DDFs
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-08-14 15:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-08-14 15:08 - 2026-05-17 03:49 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-08-14 15:08 - 2024-04-01 18:35 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files\Windows Defender
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ___RD C:\Program Files (x86)\Windows Defender
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\DiagTrack
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-08-14 15:08 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-08-14 15:08 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-08-14 10:59 - 2019-04-14 00:30 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-08-14 10:56 - 2019-04-14 00:30 - 228836432 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-08-13 14:07 - 2025-03-01 19:35 - 003375104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-08-11 13:56 - 2026-06-16 00:30 - 000000000 ____D C:\Users\Kevin\AppData\Roaming\bright-vpn
2026-08-11 13:56 - 2026-06-16 00:30 - 000000000 ____D C:\Program Files (x86)\Bright VPN
2026-08-06 01:31 - 2019-04-21 15:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
Addition Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 31-08-2026
durchgeführt von Kevin (01-09-2026 10:01:47)
Gestartet von C:\Users\Kevin\Desktop
Microsoft Windows 11 Home Version 25H2 26200.9168 (X64) (2025-03-01 20:35:32)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-19967659-193145539-2483159501-500 - Administrators - Disabled)
DefaultAccount (S-1-5-21-19967659-193145539-2483159501-503 - Limited - Disabled)
Gast (S-1-5-21-19967659-193145539-2483159501-501 - Limited - Disabled)
Kevin (S-1-5-21-19967659-193145539-2483159501-1001 - Administrators - Enabled) => C:\Users\Kevin
WDAGUtilityAccount (S-1-5-21-19967659-193145539-2483159501-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Malwarebytes (Enabled - Up to date) {A537353A-1D6A-F6B5-9153-CE1CF80FBE66}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
AR8171 Driver Installation (HKLM-x32\...\{1E672F6A-B698-48A2-AE8C-427F97AF8F0E}) (Version: 1.0.0.36 - Rivet Networks)
AR8171 Drivers (HKLM\...\{4B3F9387-F539-4430-8714-9641D741D0D8}) (Version: 1.0.0.36 - Rivet Networks) Hidden
Battery Calibration (HKLM-x32\...\InstallShield_{634AC01E-49DB-4AD2-B87C-90D4DCC6AFA1}) (Version: 1.0.1801.1701 - Micro-Star International Co., Ltd.)
BurnRecovery (HKLM-x32\...\{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1801.1701 - Application) Hidden
BurnRecovery (HKLM-x32\...\InstallShield_{92A6B009-1343-4C44-AFB1-8849137CA3F0}) (Version: 5.0.1801.1701 - Application)
DAEMON Tools Lite (HKLM\...\DAEMON Tools Lite) (Version: 12.6.0.2451 - Disc Soft Ltd)
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
DownloadHelper CoApp (HKLM-x32\...\DownloadHelper CoApp) (Version: 2.0.19.0 - ACLAP)
Dragon Center (HKLM-x32\...\InstallShield_{C65B26BC-5A6F-4135-9678-55A877655471}) (Version: 2.1.1804.1102 - Micro-Star International Co., Ltd.)
Help Desk (HKLM-x32\...\InstallShield_{7E8181AF-9679-49B3-B133-C265709B6927}) (Version: 1.0.1802.0501 - Micro-Star International Co., Ltd.)
Intel(R) Chipset Device Software (HKLM\...\{C844CC39-BC28-46CA-8239-3F37D8FE2A59}) (Version: 10.1.17541.8066 - Intel Corporation) Hidden
Intel(R) Chipset Device Software (HKLM-x32\...\{55d73ea7-6354-42db-8831-02d048ae57f8}) (Version: 10.1.17541.8066 - Intel(R) Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 1805.12.0.1097 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{A6D99F91-2039-4560-A476-1E8B954E0C70}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{BF1D4FDD-6613-4F36-AE24-EDE3D7E30CF4}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Management Engine Driver (HKLM\...\{50DC6FA9-9221-495B-B9BF-EF39D7BC4FDE}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{2417522A-EB8B-406E-87D1-87AEFFBB443A}) (Version: 16.0.1.1018 - Intel Corporation) Hidden
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 16.0.1.1018 - Intel Corporation)
Intel(R) Trusted Connect Service Client x64 (HKLM\...\{C9552825-7BF2-4344-BA91-D3CD46F4C442}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Service Client x86 (HKLM-x32\...\{C9552825-7BF2-4344-BA91-D3CD46F4C441}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Trusted Connect Services Client (HKLM-x32\...\{66129f84-d3f0-4884-ac54-369ae6fc2cf6}) (Version: 1.48.197.0 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{00000030-0200-1033-84C8-B8D95FA3C8C3}) (Version: 20.30.0 - Intel Corporation)
Intel® PROSet/Wireless Software (HKLM-x32\...\{ba25c46f-28f8-4449-97ab-7bb20f3f9a9c}) (Version: 20.30.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{86BC0F23-2560-4635-A7DE-95B174D7A95E}) (Version: 20.30.0.1296 - Intel Corporation) Hidden
Java 8 Update 391 (64-bit) (HKLM\...\{71324AE4-039E-4CA4-87B4-2F64180391F0}) (Version: 8.0.3910.13 - Oracle Corporation)
KB9X Radio Switch Driver (HKLM\...\3498B7189B13CBC3673674CD226F4540F628CCB8) (Version: 1.1.5.0 - ENE TECHNOLOGY INC.)
Malwarebytes version 5.6.5.306 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 5.6.5.306 - Malwarebytes)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 152.0.4191.53 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 151.0.4129.107 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\OneDriveSetup.exe) (Version: 26.150.0804.0011 - Microsoft Corporation)
Microsoft Teams Meeting Add-in for Microsoft Office (HKLM\...\{A7AB73A3-CB10-4AA5-9D38-6AEFFBDE4C91}) (Version: 1.26.20101 - Microsoft)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft VC++ redistributables repacked. (HKLM\...\{484EF395-8BDF-417B-AF02-35777C5AFC32}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft VC++ redistributables repacked. (HKLM-x32\...\{C79060C7-3052-431F-92F9-609B83317A77}) (Version: 12.0.0.0 - Intel Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211 (HKLM-x32\...\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2015-2022 Redistributable (x86) - 14.44.35211 (HKLM-x32\...\{0b5169e3-39da-4313-808e-1f9c0407f3bf}) (Version: 14.44.35211.0 - Microsoft Corporation)
Microsoft Visual C++ 2022 X64 Additional Runtime - 14.44.35211 (HKLM\...\{86AB2CC9-08BD-4643-B0F9-F82D006D72FF}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211 (HKLM\...\{43B0D101-A022-48F4-9D04-BA404CEB1D53}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Additional Runtime - 14.44.35211 (HKLM-x32\...\{C18FB403-1E88-43C8-AD8A-CED50F23DE8B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2022 X86 Minimum Runtime - 14.44.35211 (HKLM-x32\...\{922480B5-CAEB-4B1B-AAA4-9716EFDCE26B}) (Version: 14.44.35211 - Microsoft Corporation) Hidden
Microsoft Windows Application Compatibility Fix Database (HKLM\...\{22221111-1111-1111-1111-111111111111}.sdb) (Version: - )
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox) (Version: 154.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 71.0 - Mozilla)
MSI Feature Navigator (HKLM-x32\...\InstallShield_{2BD90BC2-5B5C-4493-8633-66D0CADF8B33}) (Version: 1.0.1709.1301 - Micro-Star International Co., Ltd.)
MSI Remind Manager Service (HKLM-x32\...\InstallShield_{3E23F267-3E35-40F9-B6BF-BC034D214717}) (Version: 1.0.1802.0501 - Micro-Star International Co., Ltd.)
MuseScore 3 (HKLM\...\{BD41AF4C-5EDC-41C5-8E1C-3572C3F46F16}) (Version: 3.3.4.9066 - Werner Schweer and Others)
Norton Online Backup (HKLM-x32\...\{652C1CDF-C61D-4525-9348-8C272CC2DB24}) (Version: 2.10.2.7 - Symantec Corporation)
Norton Online Backup (HKLM-x32\...\NARA) (Version: 4.6.0.12 - Symantec Corporation) Hidden
NVIDIA GeForce Experience 3.12.0.84 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.12.0.84 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{8B922CF8-8A6C-41CE-A858-F1755D7F5D29}) (Version: 9.12.1031 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.6 (HKLM-x32\...\{3651624F-019F-4B39-8AE4-A2423CE1986F}) (Version: 4.16.9790 - Apache Software Foundation)
Paradox Launcher v2 (HKLM\...\{986898D9-7C26-4E7F-814C-9B5472FA3209}) (Version: 2.0.0.0 - Paradox Interactive)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.16299.31239 - Realtek Semiconductor Corp.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8383 - Realtek Semiconductor Corp.)
SCM (HKLM\...\{BA252D12-1A6A-4CC0-9B47-63256CD836BC}) (Version: 13.017.11141 - Application)
Sierra Utilities (HKLM-x32\...\Sierra Utilities) (Version: - )
Skype Meetings App (HKLM-x32\...\{BC1D9E47-8927-4AA1-A891-7763BC2475B7}) (Version: 16.2.0.511 - Microsoft Corporation)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
The Movies + Stunts & Effects (HKLM-x32\...\The Movies + Stunts & Effects) (Version: 1.0 - )
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
Update for Windows 10 for x64-based Systems (KB4480730) (HKLM\...\{2E8B8BDD-03DF-4C1C-8C99-E6A4BCBF43CE}) (Version: 2.51.0.0 - Microsoft Corporation)
Vulkan Run Time Libraries 1.0.65.0 (HKLM\...\VulkanRT1.0.65.0) (Version: 1.0.65.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.65.1 (HKLM\...\VulkanRT1.0.65.1) (Version: 1.0.65.1 - LunarG, Inc.) Hidden
Windows-PC-Integritätsprüfung (HKLM\...\{68C9C2A4-C212-4310-AB68-12F97050A416}) (Version: 3.2.2110.14001 - Microsoft Corporation)
WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)
Packages:
=========
@{MicrosoftWindows.55182690.Taskbar_1000.26100.3775.0_x64__cw5n1h2txyewy?ms-resource://MicrosoftWindows.55182690.Taskbar/Resources/ProductPkgDisplayName} -> C:\WINDOWS\SystemApps\SxS\MicrosoftWindows.55182690.Taskbar_cw5n1h2txyewy [2025-06-19] ()
Malwarebytes Anti-Malware -> C:\Program Files\Malwarebytes\Anti-Malware [2026-08-27] ()
Microsoft Access -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Access_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2019-04-10] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2019-04-10] (Microsoft Corporation) [MS Ad]
Microsoft Excel -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Excel_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft Office Desktop Apps -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft Outlook -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Outlook_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft PowerPoint -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.PowerPoint_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft Publisher -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Publisher_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
Microsoft Word -> C:\Program Files\WindowsApps\Microsoft.Office.Desktop.Word_16051.19127.20622.0_x86__8wekyb3d8bbwe [2026-05-24] (Microsoft Corporation)
PowerDirector14 for MSI -> C:\Program Files\WindowsApps\CyberLink.PowerDirector14forMSI_14.0.5226.0_x64__jtmmp2jxy9gb6 [2019-04-13] (CyberLink)
Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.53.394.0_x64__dt26b99r8h8gj [2026-06-18] (Realtek Semiconductor Corp)
Remotedesktop -> C:\Program Files\WindowsApps\Microsoft.RemoteDesktop_10.2.4012.0_x64__8wekyb3d8bbwe [2025-09-16] (Microsoft Corporation)
Samsung Printer Experience -> C:\Program Files\WindowsApps\SAMSUNGELECTRONICSCO.LTD.SamsungPrinterExperience_1.3.15.0_x64__3c1yjt4zspk6g [2019-04-20] (Samsung Electronics Co. Ltd.)
SynMsiDApp -> C:\Program Files\WindowsApps\SynapticsIncorporated.SynMsiDApp_19005.31005.0.0_x64__807d65c4rvak2 [2019-06-27] (Synaptics Incorporated)
WhatsApp -> C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2632.100.0_x64__cv1g1gvanyjgm [2026-08-20] (WhatsApp Inc.) [Startup Task]
WinAppRuntime.Singleton -> C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_8002.4.0.0_x64__8wekyb3d8bbwe [2026-08-27] (Microsoft Corp.)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-19967659-193145539-2483159501-1001_Classes\CLSID\{3E3AD4BD-346A-460A-80E8-90699B75C00B}\InprocServer32 -> C:\Users\Kevin\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\GatewayActiveX-x64.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-19967659-193145539-2483159501-1001_Classes\CLSID\{80172dde-4e20-4df0-81a2-0a48553e80bb}\localserver32 -> C:\Users\Kevin\AppData\Local\NhNotifSys\nahimic\nahimicNotifSys.exe (SteelSeries France SASU -> A-Volute)
CustomCLSID: HKU\S-1-5-21-19967659-193145539-2483159501-1001_Classes\CLSID\{EABAE40C-B27C-455A-B672-F234DD780948}\InprocServer32 -> C:\Users\Kevin\AppData\Local\Microsoft\TeamsMeetingAdd-in\1.26.20101\x64\Microsoft.Teams.MeetingAddin.DLL (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-19967659-193145539-2483159501-1001_Classes\CLSID\{FE2EC208-BECF-4E83-8BF4-E35DBA4EB6A1}\localserver32 -> C:\Users\Kevin\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.511\GatewayVersion-x64.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Keine Datei
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => -> Keine Datei
ContextMenuHandlers1: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Keine Datei
ContextMenuHandlers1: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Programme\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Programme\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers2: [DaemonShellExtDriveLite] -> {C06369D6-E77D-4626-9656-1256312BD576} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2026-05-08] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers2: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [DaemonShellExtImageLite] -> {1D1B5D7B-0FC9-452E-902C-12BACD4FBC20} => C:\Program Files\DAEMON Tools Lite\dtshl64.dll [2026-05-08] (AVB Disc Soft, SIA -> Disc Soft Limited)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-08-27] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers3: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers3: [{4A7C4306-57E0-4C0C-83A9-78C1528F618C}] -> {4A7C4306-57E0-4C0C-83A9-78C1528F618C} => -> Keine Datei
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => -> Keine Datei
ContextMenuHandlers4: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Kevin\AppData\Local\MEGAsync\ShellExtX64.dll -> Keine Datei
ContextMenuHandlers4: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\igdlh64.inf_amd64_e6797382daf01d86\igfxDTCM.dll [2022-07-29] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\system32\nvshext.dll [2018-04-18] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [BriefcaseMenu] -> {85BBD920-42A0-1069-A2E4-08002B30309D} => -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2026-08-27] (Malwarebytes Inc -> Malwarebytes)
ContextMenuHandlers6: [Offline Files] -> {474C98EE-CF3D-41f5-80E3-4AAB0AB04301} => -> Keine Datei
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => D:\Programme\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => D:\Programme\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Drivers32: [vidc.VP60] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2023-02-14] (Electronic Arts -> On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\WINDOWS\SysWOW64\vp6vfw.dll [447752 2023-02-14] (Electronic Arts -> On2.com)
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2017-12-27 11:00 - 2017-12-27 11:00 - 000105984 _____ (A-Volute) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Dragon Center\YooMixCOM.dll
2015-06-11 19:35 - 2015-06-11 19:35 - 000047816 _____ (MICRO-STAR INTERNATIONAL CO., LTD -> www.internals.com) [Datei ist nicht signiert] C:\Program Files (x86)\MSI\Dragon Center\WinIo64.dll
2017-11-15 01:13 - 2017-11-15 01:13 - 001598464 _____ (Micro-Star International Co., Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\SCM\MSIWmiAcpi.dll
2024-03-19 20:32 - 2023-09-12 11:52 - 008382976 _____ (wondershare) [Datei ist nicht signiert] C:\ProgramData\Wondershare\wsServices\WsidClient.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) =============
HKU\S-1-5-21-19967659-193145539-2483159501-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://oem17win10.msn.com/?pc=NMTE
HKU\S-1-5-21-19967659-193145539-2483159501-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://oem17win10.msn.com/?pc=NMTE
SearchScopes: HKU\S-1-5-21-19967659-193145539-2483159501-1001 -> DefaultScope {F01EC8C7-ADDA-4E61-BDB6-42F7A78F40D1} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre-1.8\bin\ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre-1.8\bin\jp2ssv.dll [2023-10-04] (Oracle America, Inc. -> Oracle Corporation)
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2017-09-29 15:46 - 2026-08-29 13:37 - 000000027 _____ C:\WINDOWS\system32\drivers\etc\hosts
127.0.0.1 localhost
2021-01-02 16:31 - 2021-01-02 16:31 - 000000493 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.137.246 COM-MID1.mshome.net # 2021 1 6 9 14 31 16 752
192.168.137.1 MSI.mshome.net # 2026 1 4 1 14 31 16 752
==================== Network ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
DNS Servers: 192.168.0.1
ist aktiviert.
Network Binding:
=============
WLAN: Intel(R) Wireless-AC 9462 -> Netwtw08.sys
Ethernet: Qualcomm Atheros AR8171/8175 PCI-E Gigabit Ethernet Controller (NDIS 6.30) -> L1C63x64.sys
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\iCLS\;C:\Program Files\Intel\Intel(R) Management Engine Components\iCLS\;C:\Windows\system32;C:\Windows;C:\Windows\System32\Wbem;C:\Windows\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\
HKU\S-1-5-21-19967659-193145539-2483159501-1001\Control Panel\Desktop\\Wallpaper ->
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows Defender\Features => (TamperProtection: 5) (TamperProtectionSource: )
HKLM\SOFTWARE\Microsoft\Windows Defender\Real-Time Protection => (DpaDisabled: 0)
HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths|C:\Program Files (x86)\Origin Games\FIFA Manager 13
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKLM\...\StartupApproved\Run32: => "Dropbox"
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\StartupApproved\Run: => "DAEMON Tools Lite Automount"
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\StartupApproved\Run: => "Discord"
HKU\S-1-5-21-19967659-193145539-2483159501-1001\...\StartupApproved\Run: => "EADM"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [EdgeWebView2-MDNS-In-UDP] => (Allow) C:\WINDOWS\system32\Microsoft-Edge-WebView\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
==================== Fehlerhafte Geräte im Gerätemanager ============
Name: DAEMON Tools Lite Virtual USB Bus
Description: DAEMON Tools Lite Virtual USB Bus
Class Guid: {36fc9e60-c465-11cf-8056-444553540000}
Manufacturer: Disc Soft Ltd
Service: dtliteusbbus
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
Name: DAEMON Tools Lite Virtual SCSI Bus
Description: DAEMON Tools Lite Virtual SCSI Bus
Class Guid: {4d36e97b-e325-11ce-bfc1-08002be10318}
Manufacturer: Disc Soft Ltd
Service: dtlitescsibus
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (08/29/2026 11:07:24 PM) (Source: Application Error) (EventID: 1000) (User: MSI)
Description: Fehlerhafter Anwendungsname: Dragon Center.exe, Version: 2.1.1804.1102, Zeitstempel: 0x5acdf914
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.8972, Zeitstempel: 0x59a29eb0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x0000000000112165
Fehlerhafte Prozess-ID: 0x2bdc
Fehlerhafte Anwendungsstartzeit: 0x1dd37f9c43c188a
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 798d7266-108c-4785-99d2-bd2926b365a4
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (08/27/2026 06:46:58 PM) (Source: Firefox Launcher) (EventID: 52) (User: )
Description: Event-ID 52
Error: (08/27/2026 04:13:31 PM) (Source: Firefox Default Browser Agent) (EventID: 1140) (User: )
Description: Event-ID 1140
Error: (08/27/2026 04:13:31 PM) (Source: Firefox Default Browser Agent) (EventID: 1140) (User: )
Description: Event-ID 1140
Error: (08/24/2026 09:01:49 PM) (Source: Application Error) (EventID: 1000) (User: MSI)
Description: Fehlerhafter Anwendungsname: Dragon Center.exe, Version: 2.1.1804.1102, Zeitstempel: 0x5acdf914
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.8972, Zeitstempel: 0x59a29eb0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x0000000000112165
Fehlerhafte Prozess-ID: 0x4934
Fehlerhafte Anwendungsstartzeit: 0x1dd33fa60bc73fb
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 07a49b97-714f-4814-b632-0afc1af97df3
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (08/24/2026 12:32:14 AM) (Source: Application Error) (EventID: 1000) (User: MSI)
Description: Fehlerhafter Anwendungsname: Dragon Center.exe, Version: 2.1.1804.1102, Zeitstempel: 0x5acdf914
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.8972, Zeitstempel: 0x59a29eb0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x0000000000112165
Fehlerhafte Prozess-ID: 0x3088
Fehlerhafte Anwendungsstartzeit: 0x1dd334e9ba917b3
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 2e01cf8e-5348-478d-b656-8dd96f6dc2c8
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (08/20/2026 05:12:58 PM) (Source: Application Error) (EventID: 1000) (User: MSI)
Description: Fehlerhafter Anwendungsname: Dragon Center.exe, Version: 2.1.1804.1102, Zeitstempel: 0x5acdf914
Fehlerhafter Modulname: ntdll.dll, Version: 10.0.26100.8972, Zeitstempel: 0x59a29eb0
Ausnahmecode: 0xc0000374
Fehleroffset: 0x0000000000112165
Fehlerhafte Prozess-ID: 0x54c4
Fehlerhafte Anwendungsstartzeit: 0x1dd30b5c5b470ab
Fehlerhafter Anwendungspfad: C:\Program Files (x86)\MSI\Dragon Center\Dragon Center.exe
Fehlerhafter Modulpfad: C:\WINDOWS\SYSTEM32\ntdll.dll
Berichts-ID: 1737ca22-ab37-4140-9371-0e917b2795ef
Vollständiger Name des fehlerhaften Pakets:
Fehlerhafte paketbezogene Anwendungs-ID:
Error: (08/19/2026 09:01:54 PM) (Source: Firefox Default Browser Agent) (EventID: 1140) (User: )
Description: Event-ID 1140
Systemfehler:
=============
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst " Microsoft Edge-Update-Dienst (edgeupdate)" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Micro Star SCM" wurde unerwartet beendet. Dies ist bereits 2 Mal passiert.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Realtek Audio Universal Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Nahimic service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 3000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "NVIDIA Display Container LS" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 1000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (08/29/2026 01:34:27 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows-Sicherheitsdienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Windows Defender:
================
TimeCreated : 27.08.2026 17:57:15
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{9562C80D-91F7-4D0C-84F2-E5C7F97F9E7E}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вЅςнεδųľзδ šςǻń ωåŝ
šĸіρρеð ъεςдŭŝё τĥę ℓαšŧ ŝūčςёşŝƒųľ şčáй шäŝ ẁΐτћΐи τђе ĺãѕť 7 đåγѕ
TimeCreated : 24.08.2026 01:51:14
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{A70727D0-32F3-4252-9968-49C424CA06C4}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вЅςнεδųľзδ šςǻń ωåŝ
šĸіρρеð ъεςдŭŝё τĥę ℓαšŧ ŝūčςёşŝƒųľ şčáй шäŝ ẁΐτћΐи τђе ĺãѕť 7 đåγѕ
TimeCreated : 23.08.2026 19:14:43
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{E14D84ED-68A4-48B3-845F-41181605183F}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
TimeCreated : 21.08.2026 02:17:57
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{9C56B6D0-7413-4C7D-8D4D-527933EDFB93}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
TimeCreated : 21.08.2026 01:56:10
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{4A2F87A1-0078-43DF-90E7-AC03E6B81CF0}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
TimeCreated : 21.08.2026 00:21:08
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{139B5076-151A-4D1D-B884-D4EB92906AA5}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
TimeCreated : 20.08.2026 10:20:00
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{E6C576DA-FA8A-44FF-AB25-63AFA2873DE5}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
TimeCreated : 19.08.2026 21:01:07
Message : Microsoft Defender Antivirus şςάŋ ĥåş ъėĕи śтŏφрєð ъеƒǿяę ċǿmρĺèтιöŋ.%и %τŜ¢ąⁿ
ÌĐ:%ь{488A8DD2-0D6C-41F3-BD7E-48A595CB481A}%ņ %τŜĉαň Ŧÿφê:%вAntimalware%й %τŞćãⁿ
Ρагãmėтéяş:%ьSchnellüberprüfung%ņ %ŧŪѕэя:%ъNT-AUTORITÄT\SYSTEM%ʼn %ťŞţǿρ Ґёāśǿп:%вГΡ€ ćöпņęçτïòņ ŕűŋδõŵи
CodeIntegrity:
===============
Date: 2026-09-01 09:54:07
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SIHClient.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
Date: 2026-09-01 09:53:55
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\Windows\System32\SecurityHealthService.exe) attempted to load \Device\HarddiskVolume3\Program Files\Malwarebytes\Anti-Malware\mbamsi64.dll that did not meet the Windows signing level requirements.
==================== Speicherinformationen ===========================
BIOS: American Megatrends Inc. E179FIMS.10C 05/22/2019
Hauptplatine: Micro-Star International Co., Ltd. MS-179F
Prozessor: Intel(R) Core(TM) i7-8750H CPU @ 2.20GHz
Prozentuale Nutzung des RAM: 72%
Installierter physikalischer RAM: 8038.71 MB
Verfügbarer physikalischer RAM: 2180.23 MB
Summe virtueller Speicher: 10598.71 MB
Verfügbarer virtueller Speicher: 4192.18 MB
==================== Laufwerke ================================
Disk 0 - Drive c: (Windows) (Fixed) (Total:237.08 GB) (Free:110.29 GB) (Model: SAMSUNG MZNLN256HMHQ-00000) NTFS
Disk 1 - Drive d: (Data) (Fixed) (Total:912.34 GB) (Free:794.39 GB) (Model: WDC WD10SPZX-17Z10T0) NTFS
Disk 0 - \\?\Volume{96ca331c-9ffb-4a33-a9a9-632c836200c2}\ () (Fixed) (Total:0.97 GB) (Free:0.1 GB) NTFS
Disk 1 - \\?\Volume{f4793b36-9330-490e-93bd-887fa7a478da}\ (BIOS_RVY) (Fixed) (Total:19.17 GB) (Free:0.69 GB) NTFS
Disk 0 - \\?\Volume{e9991680-aa71-4242-bd7d-1191391bc9ba}\ (SYSTEM) (Fixed) (Total:0.29 GB) (Free:0.25 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 68E1736C)
Partition: GPT.
==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 68E1734A)
Partition: GPT.
==================== Ende von Addition.txt =======================
|
