Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 10.04.2024 durchgeführt von Tester (Administrator) auf TEST-PC (Micro-Star International Co., Ltd. MS-7A33) (13-04-2024 22:10:37) Gestartet von C:\Users\Tester\Downloads\FRST64.exe Geladene Profile: Tester Plattform: Microsoft Windows 10 Enterprise Version 22H2 19045.4291 (X64) Sprache: Deutsch (Deutschland) Standard-Browser: Chrome Start-Modus: Normal ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.235.663.0_x64__zpdnekdrzrea0\Spotify.exe <6> (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe (C:\Program Files (x86)\AnyViewer\RCService.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AnyViewer\AVCore.exe (C:\Program Files (x86)\AnyViewer\RCService.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AnyViewer\RCClient.exe (C:\Program Files (x86)\AnyViewer\RCService.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AnyViewer\ScreanCap.exe (C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\EncoderServer.exe (C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSSHooksLoader64.exe (C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe (C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe (C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.CpuIdRemote64.exe (C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.DisplayAdapter.exe (C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.235.663.0_x64__zpdnekdrzrea0\Spotify.exe ->) (THS) [Datei ist nicht signiert] F:\SteamLibrary\SteamApps\common\Lossless Scaling\LosslessScaling.exe (cmd.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe (Discord Inc. -> Discord Inc.) C:\Users\Tester\AppData\Local\Discord\app-1.0.9041\Discord.exe <6> (DriverStore\FileRepository\u0401205.inf_amd64_d7b3299b598b3a95\B401180\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0401205.inf_amd64_d7b3299b598b3a95\B401180\atieclxx.exe (explorer.exe ->) () [Datei ist nicht signiert] C:\Users\Tester\Desktop\OpenRGB Windows 64-bit\OpenRGB.exe (explorer.exe ->) () [Datei ist nicht signiert] C:\Users\Tester\Downloads\FB-Traffic_v1.1.7314.41\FB-Traffic.exe (explorer.exe ->) (Appwork GmbH -> AppWork GmbH) C:\Users\Tester\AppData\Local\JDownloader 2.0\JDownloader2.exe (explorer.exe ->) (Armin Osaj -> AutoDarkMode) C:\Users\Tester\AppData\Local\Programs\AutoDarkMode\adm-app\AutoDarkModeSvc.exe (explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft FZE LLC) C:\Program Files\DAEMON Tools Lite\DTAgent.exe (explorer.exe ->) (AVB Disc Soft, SIA -> Disc Soft FZE LLC) C:\Program Files\DAEMON Tools Lite\DTShellHlp.exe (explorer.exe ->) (DFCA8587-B6FA-4F7D-9B35-1ABB74757F2E -> Petrroll) C:\Program Files\WindowsApps\28671Petrroll.PowerPlanSwitcher_0.4.4.0_x86__ge82akyxbc7z4\PowerSwitcher.TrayApp.exe (explorer.exe ->) (F.lux Software LLC -> f.lux Software LLC) C:\Users\Tester\AppData\Local\FluxSoftware\Flux\flux.exe (explorer.exe ->) (File-New-Project -> File-New-Project) C:\Program Files\WindowsApps\40459File-New-Project.EarTrumpet_2.3.0.20_x86__725pr5jq8wr8a\EarTrumpet\EarTrumpet.exe (explorer.exe ->) (Firebit OU -> Rainmeter) C:\Program Files\Rainmeter\Rainmeter.exe (explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <21> (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <11> (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World) C:\Program Files\CrystalDiskInfo\DiskInfo64.exe (Rémi Mercier) [Datei ist nicht signiert] C:\Users\Tester\Downloads\Fan56Control\FanControl.exe (services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0401205.inf_amd64_d7b3299b598b3a95\B401180\atiesrxx.exe (services.exe ->) (AOMEI International Network Limited -> AOMEI International Network Limited) C:\Program Files (x86)\AnyViewer\RCService.exe (services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe (services.exe ->) (AVB Disc Soft, SIA -> Disc Soft FZE LLC) C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe (services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe (services.exe ->) (Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe (services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2> (services.exe ->) (GuinpinSoft inc) [Datei ist nicht signiert] C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe (services.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe (services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe (services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe (services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) C:\Windows\System32\CorsairGamingAudioCfgService64.exe (services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordUpdater\NordUpdateService.exe (services.exe ->) (nordvpn s.a. -> nordvpn S.A.) C:\Program Files\NordVPN\nordvpn-service.exe (services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9b2689b4e3586127\RtkAudUService64.exe <2> (services.exe ->) (voidtools -> voidtools) C:\Program Files\Everything\Everything.exe <2> (services.exe ->) (Windscribe Limited -> Windscribe Limited) C:\Program Files\Windscribe\WindscribeService.exe (services.exe ->) (WireGuard LLC -> WireGuard LLC) C:\Program Files\WireGuard\wireguard.exe (services.exe ->) (Zhou Huabing -> com.carriez) C:\Program Files\RustDesk\rustdesk.exe <2> (svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2413.1.0_x64__cv1g1gvanyjgm\WhatsApp.exe (svchost.exe ->) (83564403-0B26-46B8-9D84-040F43691D31 -> Realtek Semiconductor) C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.44.299.0_x64__dt26b99r8h8gj\RtkUWP.exe (svchost.exe ->) (Huizhou Tuling Zhixian Technology Co., Ltd. -> ) C:\Users\Tester\Desktop\Turing USB Monitor Smart\35inchENG\UsbMonitor.exe (svchost.exe ->) (LibreHardwareMonitor) [Datei ist nicht signiert] C:\Users\Tester\Downloads\LibreHardwareMonitor-net472\LibreHardwareMonitor.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2403.1001.2.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2403.1001.2.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.3191.0_x64__8wekyb3d8bbwe\GameBar.exe (svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.124.3191.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3> (svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Windows.Media.BackgroundPlayback.exe (svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> ) C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe ==================== Registry (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [StartIsBackTR] => C:\Program Files (x86)\StartIsBack\SIBTR.exe (Keine Datei) HKLM\...\Run: [AdobePSE19AutoAnalyzer] => C:\Program Files\Adobe\Elements 2021 Organizer\Elements Auto Creations 2021.exe [2653808 2020-08-27] (Adobe Inc. -> Adobe) HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18725336 2022-05-12] (Logitech Inc -> Logitech Inc.) HKLM\...\Run: [XboxStat] => C:\Program Files\Microsoft Xbox 360 Accessories\XboxStat.exe [825184 2009-09-30] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrotray.exe [6957520 2022-10-13] (Adobe Inc. -> Adobe Systems Inc.) [Datei ist nicht signiert] HKLM\...\Run: [] => [X] HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3476184 2022-07-27] (Adobe Inc. -> Adobe Systems, Incorporated) HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_9b2689b4e3586127\RtkAudUService64.exe [1673008 2023-05-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor) HKLM\...\Run: [Everything] => C:\Program Files\Everything\Everything.exe [2265096 2023-05-26] (voidtools -> voidtools) HKLM\...\Run: [CORSAIR iCUE 4 Software] => C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUE Launcher.exe [185384 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.) HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [645976 2024-03-05] (Geek Software GmbH -> geek software GmbH) HKLM\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3302288 2024-02-04] (Open Source Developer, Dominik Reichl -> Dominik Reichl) HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 0000-00-00] () <==== ACHTUNG [Null Byte Datei/Ordner] HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133728 2017-09-12] (Wondershare Technology Co.,Ltd -> Wondershare) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [750680 2023-12-19] (Oracle America, Inc. -> Oracle Corporation) HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2022-05-30] (Adobe Inc. -> ) HKLM\...\Policies\Explorer: [NoThumbnailCache] 0 HKLM\...\Policies\Explorer: [DisableThumbnailCache] 0 HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Microsoft\MRT: Beschränkung <==== ACHTUNG HKLM\Software\Policies\...\system: [EnableActivityFeed] 0 HKLM\Software\Policies\...\system: [PublishUserActivities] 0 HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 HKLM\Software\Policies\...\system: [UploadUserActivities] 0 HKLM\Software\Policies\...\system: [AllowClipboardHistory] 0 HKLM\Software\Policies\...\system: [AllowCrossDeviceClipboard] 0 HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [FB-Traffic.exe] => C:\Users\Tester\Downloads\FB-Traffic_v1.1.7314.41\FB-Traffic.exe [253952 2020-01-10] () [Datei ist nicht signiert] HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [Discord] => C:\Users\Tester\AppData\Local\Discord\Update.exe [1512616 2022-02-17] (Discord Inc. -> GitHub) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [f.lux] => C:\Users\Tester\AppData\Local\FluxSoftware\Flux\flux.exe [1528952 2024-02-22] (F.lux Software LLC -> f.lux Software LLC) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [MicrosoftEdgeAutoLaunch_C7742FC1E51C95A1A28BD5E0912D94BB] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4113856 2023-06-02] (Microsoft Corporation -> Microsoft Corporation) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45285792 2024-03-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [DAEMON Tools Lite Automount] => C:\Program Files\DAEMON Tools Lite\DTAgent.exe [482128 2023-05-25] (AVB Disc Soft, SIA -> Disc Soft FZE LLC) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [GalaxyClient] => [X] HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [WingetUI] => C:\Program Files\WingetUI\WingetUI.exe [192080 2024-03-16] (Marti Climent -> WingetUI) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [AutoDarkMode] => C:\Users\Tester\AppData\Local\Programs\AutoDarkMode\adm-app\AutoDarkModeSvc.exe [292992 2023-09-24] (Armin Osaj -> AutoDarkMode) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4384104 2024-03-06] (Valve Corp. -> Valve Corporation) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [AMDNoiseSuppression] => C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe [145800 2023-06-14] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Run: [LosslessScaling] => F:\SteamLibrary\SteamApps\common\Lossless Scaling\LosslessScaling.exe [982016 2024-04-07] (THS) [Datei ist nicht signiert] HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1 HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Policies\Explorer: [NoThumbnailCache] 0 HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\Policies\Explorer: [DisableThumbnailCache] 0 HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\MountPoints2: {0fa334a7-60fd-11ed-a6c7-309c2389f455} - "G:\LaunchU3.exe" -a HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\MountPoints2: {226c2dd8-faf8-11ed-a6ff-309c2389f455} - "H:\setup.exe" HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\MountPoints2: {226c2df3-faf8-11ed-a6ff-309c2389f455} - "K:\setup.exe" HKU\S-1-5-21-1689134086-1293215690-2280209554-1001\...\MountPoints2: {226c2f31-faf8-11ed-a6ff-309c2389f455} - "Q:\launch.exe" HKU\S-1-5-21-1689134086-1293215690-2280209554-1002\...\Run: [OPENVPN-GUI] => C:\Program Files\OpenVPN\bin\openvpn-gui.exe (Keine Datei) HKU\S-1-5-21-1689134086-1293215690-2280209554-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Tester2\AppData\Local\Microsoft\Teams\Update.exe [2587432 2023-03-27] (Microsoft 3rd Party Application Component -> Microsoft Corporation) HKU\S-1-5-21-1689134086-1293215690-2280209554-1002\...\Run: [MicrosoftEdgeAutoLaunch_C215C1736E915C227D6055F001778604] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4113856 2023-06-02] (Microsoft Corporation -> Microsoft Corporation) HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [203936 2022-09-28] (Adobe Inc. -> Adobe Systems Inc) HKLM\...\Print\Monitors\HP1100LM: C:\Windows\system32\HP1100LM.DLL [288768 2012-08-31] (Microsoft Windows Hardware Compatibility Publisher -> ) HKLM\...\Print\Monitors\PDF-XChange5-ABBYY-FR15: C:\Windows\system32\pxc50pmaf15.dll [57328 2018-12-04] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.) HKLM\Software\...\AppCompatFlags\Custom\GXSetup.exe: [{0e82bf4c-b906-4635-a97e-6a9740686b33}.sdb] -> Rayman 2: The Great Escape HKLM\Software\...\AppCompatFlags\InstalledSDB\{0e82bf4c-b906-4635-a97e-6a9740686b33}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{0e82bf4c-b906-4635-a97e-6a9740686b33}.sdb [2023-04-09] HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\122.0.6261.112\Installer\chrmstp.exe [2024-03-12] (Google LLC -> Google LLC) HKLM\Software\Microsoft\Active Setup\Installed Components: [{E5931AF4-2A8F-48A5-AFC8-87C09FBC99F1}] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f IFEO\CompatTelRunner.exe: [Debugger] %windir%\System32\taskkill.exe IFEO\mpcmdrun.exe: [Debugger] C:\WINDOWS\System32\systray.exe Startup: C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenRGB.lnk [2022-11-16] ShortcutTarget: OpenRGB.lnk -> C:\Users\Tester\Desktop\OpenRGB Windows 64-bit\OpenRGB.exe () [Datei ist nicht signiert] Startup: C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Rainmeter.lnk [2023-08-03] ShortcutTarget: Rainmeter.lnk -> C:\Program Files\Rainmeter\Rainmeter.exe (Firebit OU -> Rainmeter) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RustDesk Tray.lnk [2023-11-28] ShortcutTarget: RustDesk Tray.lnk -> C:\Program Files\RustDesk\rustdesk.exe (Zhou Huabing -> com.carriez) Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScpToolkit Tray Notifications.lnk [2023-07-02] ShortcutTarget: ScpToolkit Tray Notifications.lnk -> C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpTrayApp.exe (Scarlet.Crush Productions) [Datei ist nicht signiert] GroupPolicy: Beschränkung ? <==== ACHTUNG Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG HKLM\SOFTWARE\Policies\Microsoft\Edge: Beschränkung <==== ACHTUNG ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {E46C26CD-34CD-4208-8388-66642F1C561C} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1552376 2022-09-26] (Adobe Inc. -> Adobe Inc.) Task: {1BEAC7C1-D9C9-43ED-B048-B41E64ED95D3} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3476184 2022-07-27] (Adobe Inc. -> Adobe Systems, Incorporated) Task: {340B5C5B-EB06-48B4-8E2C-7E0D51A4A31F} - System32\Tasks\AMDAutoUpdate => C:\Program Files\AMD\AutoUpdate\AMDAutoUpdate.exe [669320 2022-03-23] (Advanced Micro Devices Inc. -> ) Task: {488F7EBE-FF20-42EA-8613-8278C354EA27} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {E4C9915B-51F8-4AB5-84CD-A634E892A3C9} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {A0DA40F7-C3F1-4A81-8B90-47E3DA7F56EB} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [182096 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {4D9FD5BC-F2FE-4C5D-90B5-54380D1F9692} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe (Keine Datei) Task: {3CBF6825-79A6-4D89-BB3F-5D35661BB74E} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe (Keine Datei) Task: {780C4420-5A9E-4EF6-9270-E4624FB2F32B} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe (Keine Datei) Task: {D29073AB-E188-4F58-AD4A-E6AB4C540479} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2024-03-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {A28D2133-5107-4604-904D-334DA432641F} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [5074848 2024-03-11] (PIRIFORM SOFTWARE LIMITED -> Gen Digital Inc. All rights reserved.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "725911f5-a983-4cf2-b165-727b0caf4882" --version "6.22.10977" --silent Task: {6A5D3D3B-198E-4980-8D5B-1C3B26844935} - System32\Tasks\CCleanerSkipUAC - Tester => C:\Program Files\CCleaner\CCleaner.exe [39024544 2024-03-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) Task: {0318A293-CFFC-49C7-962A-DBBC7A0A8A26} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\Windows\explorer.exe [5656192 2024-04-09] (Microsoft Windows -> Microsoft Corporation) Task: {2F9E023D-AA3F-491E-AF7A-A75AF97869CD} - System32\Tasks\CrystalDiskInfo => C:\Program Files\CrystalDiskInfo\DiskInfo64.exe [2849312 2023-11-21] (Open Source Developer, Noriyuki Miyazaki -> Crystal Dew World) Task: {12860A9E-8B8C-48D8-827B-92F0179D2297} - System32\Tasks\FanControl => C:\Windows\system32\cmd.exe [289792 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> C:\Users\Tester\Downloads\Fan56Control\\/C start /B FanControl.exe Task: {09018A9A-2C75-4B45-9283-87501F4A939D} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-23] (Google LLC -> Google LLC) Task: {A8AC0A81-ED5E-41B2-9984-897CE751B569} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-23] (Google LLC -> Google LLC) Task: {B11C3259-C251-479F-8C8E-3BDD35DBCEA3} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194056 2024-04-05] (Adobe Inc. -> Adobe Inc.) Task: {61072FDE-0741-4E1E-97B9-69A23318080D} - System32\Tasks\LibreHardwareMonitor => C:\Users\Tester\Downloads\LibreHardwareMonitor-net472\LibreHardwareMonitor.exe [1197056 2023-12-31] (LibreHardwareMonitor) [Datei ist nicht signiert] Task: {C7742EE6-FD2F-4257-8657-3FE9DDA2DC2F} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28491744 2024-03-07] (Microsoft Corporation -> Microsoft Corporation) Task: {1F8398F7-6124-4DFC-B5BB-F092E4E5E68C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28491744 2024-03-07] (Microsoft Corporation -> Microsoft Corporation) Task: {834CF2C0-CDC9-4A4B-BBFA-63854B8420DC} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309184 2024-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {6773AAA5-8BAC-411D-A271-704EC5A5F815} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [309184 2024-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {AFD2A945-40DD-4DA9-B0A1-18D497B2A779} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [170136 2024-03-18] (Microsoft Corporation -> Microsoft Corporation) Task: {B47CF72A-FA79-4CF9-8EAF-4C87C41DCCE0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {078005DC-065F-4BF8-9997-C1C6DAA6C0AF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {8D729478-A07B-485C-9D80-24AC93D9474D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {2C6554AC-6C54-4672-A3EA-8D545F8A1869} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2108.7-0\MpCmdRun.exe [851472 2021-10-05] (Microsoft Windows Publisher -> Microsoft Corporation) Task: {388FBCA0-D57C-4A80-8695-AC40DF518EAB} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1030584 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {1ABF752D-8795-4540-AE56-1DEFF50AAB15} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671136 2024-04-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen). Task: {214BC8A4-F8F9-42C4-8505-B3A4AA545F96} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1689134086-1293215690-2280209554-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671136 2024-04-08] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen). Task: {F5A91009-29AA-4372-99B0-DE3B00FF6E5D} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34720 2024-04-08] (Mozilla Corporation -> Mozilla Foundation) Task: {287B6E40-FD67-4FEC-96F6-F5CC8AB910BA} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [804312 2023-04-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) Task: {5506C64A-D463-4FCC-A6E0-460F9A9C4AD9} - System32\Tasks\Online_KMS_Activation_Script-Renewal => C:\WINDOWS\Online_KMS_Activation_Script\Online_KMS_Activation_Script-Renewal.cmd [65959 2019-11-02] () [Datei ist nicht signiert] -> Task: {AB4A2429-CAFF-49B1-8C77-7EDB99C2675F} - System32\Tasks\Open Hardware Monitor\Startup => C:\Users\Tester\Downloads\OpenHardwareMonitor\OpenHardwareMonitor.exe (Keine Datei) Task: {3128EE55-00D0-4173-87AD-A04CCA85E473} - System32\Tasks\RTSS => C:\Program Files (x86)\RivaTuner Statistics Server\RTSS.exe [525696 2024-03-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> ) Task: {8179E347-1665-4FBC-84FC-7EED5525FFE4} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [58704 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {DE31C744-828A-4A7E-ADAD-C4A9405529EC} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [322384 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) Task: {4701B551-3F25-4675-B410-21B81625CD44} - System32\Tasks\TeamViewer PopupKiller Updates => "C:\Users\Tester\AppData\Local\Temp\Rar$EXa22552.31321\TeamViewer Popup Killer.exe" /autoupdate (Keine Datei) <==== ACHTUNG Task: {9A737173-D4B6-4DCB-8B65-30AEEC0EE8E9} - System32\Tasks\updater => C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpUpdater.exe [464384 2016-01-10] (Nefarius Software Solutions) [Datei ist nicht signiert] Task: {973D057E-8FBB-467B-AEA9-33DF0B5CD9E9} - System32\Tasks\UsbMonitor => C:\Users\Tester\Desktop\Turing USB Monitor Smart\35inchENG\UsbMonitor.exe [1161272 2023-03-24] (Huizhou Tuling Zhixian Technology Co., Ltd. -> ) Task: {729B5AE2-08C1-46F2-8F3A-29C80BDDAFB6} - System32\Tasks\ViGEmBus_Updater => C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\ViGEmBus_Updater.exe [1117096 2022-09-27] (Nefarius Software Solutions e.U. -> Nefarius Software Solutions e.U.) -> C:\Program Files\Nefarius Software Solutions\ViGEm Bus Driver\\/silent (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.0.109 Tcpip\..\Interfaces\{1436c2b1-dd12-45e1-953f-ee4e925d15f3}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{29cc8454-e56d-4d36-b92e-eb6a4bd9f562}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{730efc9a-949b-4dc8-987c-21c2ac9c2b76}: [DhcpNameServer] 192.168.0.2 Tcpip\..\Interfaces\{730efc9a-949b-4dc8-987c-21c2ac9c2b76}: [DhcpDomain] fritz.box Tcpip\..\Interfaces\{7489eb0e-005e-4c0e-bb32-f5dad070f866}: [NameServer] 192.168.0.109 Tcpip\..\Interfaces\{7489eb0e-005e-4c0e-bb32-f5dad070f866}: [DhcpNameServer] 192.168.0.2 Tcpip\..\Interfaces\{7489eb0e-005e-4c0e-bb32-f5dad070f866}: [DhcpDomain] fritz.box Tcpip\..\Interfaces\{9bd8fac8-c5ae-47f2-a178-6263c5e45dc0}: [DhcpNameServer] 192.168.0.109 Tcpip\..\Interfaces\{9bd8fac8-c5ae-47f2-a178-6263c5e45dc0}: [DhcpDomain] fritz.box Tcpip\..\Interfaces\{a0a38086-8263-4443-abe0-ffbbecb8da1a}: [DhcpNameServer] 192.168.2.138 Tcpip\..\Interfaces\{ab849790-a229-42d4-9965-7fee2ff9e2ae}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{ff7ad59d-6552-4f55-a9b0-ef98030e169b}: [DhcpNameServer] 192.168.2.1 Tcpip\..\Interfaces\{ff7ad59d-6552-4f55-a9b0-ef98030e169b}: [DhcpDomain] zyxel.box Edge: ======= Edge Profile: C:\Users\Tester\AppData\Local\Microsoft\Edge\User Data\Default [2024-04-11] Edge Extension: (Hola Free VPN Proxy Unblocker - Best VPN) - C:\Users\Tester\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\eibinhpjpbkmjeohlclnebmkhdfehpbf [2024-02-10] Edge Extension: (Edge relevant text changes) - C:\Users\Tester\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-24] FireFox: ======== FF DefaultProfile: f9lin8w8.default-1578646621455 FF ProfilePath: C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455 [2024-04-13] FF Session Restore: Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455 -> ist aktiviert. FF Extension: (TunnelBear VPN) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\browser@tunnelbear.com.xpi [2023-07-23] FF Extension: (Honey) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\jid1-93CWPmRbVPjRQA@jetpack.xpi [2022-12-23] FF Extension: (Bypass Paywalls Clean (c)) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\magnolia_limited_permissions@12.34.xpi [2024-04-08] [UpdateUrl:hxxps://gitlab.com/magnolia1234/bypass-paywalls-firefox-clean/-/raw/master/updates_custom.json] FF Extension: (Multithreaded Download Manager) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\multithreaded-download-manager@qw.linux-2g64.local.xpi [2019-06-07] FF Extension: (NordVPN - A VPN Proxy Extension for Firefox) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\nordvpnproxy@nordvpn.com.xpi [2023-08-15] FF Extension: (Recordify Title Discover) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\{8C679308-89F3-402C-9323-8D9B3B6D57B2}.xpi [2019-07-01] FF Extension: (Bypass Paywalls Clean) - C:\Users\Tester\AppData\Roaming\Mozilla\Firefox\Profiles\f9lin8w8.default-1578646621455\Extensions\{d133e097-46d9-4ecc-9903-fa6a722a6e0e}.xpi [2022-11-12] FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01] FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [] [ist nicht signiert] FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi FF Plugin: @java.com/DTPlugin,version=11.401.2 -> C:\Program Files\Java\jre-1.8\bin\dtplugin\npDeployJava1.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.401.2 -> C:\Program Files\Java\jre-1.8\bin\plugin2\npjp2.dll [2023-12-19] (Oracle America, Inc. -> Oracle Corporation) FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-03-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin: @videolan.org/vlc,version=3.0.17.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN) FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-09-28] (Adobe Inc. -> Adobe Systems Inc.) FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-03-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-03-18] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation) FF Plugin-x32: @videolan.org/vlc,version=3.0.10 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.11 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.12 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.7 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] FF Plugin-x32: @videolan.org/vlc,version=3.0.8 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [Keine Datei] Chrome: ======= CHR Profile: C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default [2024-04-13] CHR DownloadDir: C:\Users\Tester\Downloads CHR Notifications: Default -> hxxps://forums.libretro.com; hxxps://joecomp.com; hxxps://kiwiirc.com; hxxps://www.businessinsider.de; hxxps://www.eqpassion.de CHR HomePage: Default -> hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome CHR StartupUrls: Default -> "chrome://apps/","hxxp://google.de/" CHR Session Restore: Default -> ist aktiviert. CHR Extension: (Show YouTube Video Upload Date) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\amdebbajoolgbbgdhdnkhmgkkdlbkdgi [2024-03-11] CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2024-04-08] CHR Extension: (uBlock Origin) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2024-04-08] CHR Extension: (Tampermonkey) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhdgffkkebhmkfjojejmpbldmpobfkfo [2024-03-26] CHR Extension: (Ocean Pacific) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\ecaabliejjdikjnkahhikeelbblahgoi [2021-10-23] CHR Extension: (Session Buddy) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2024-04-08] CHR Extension: (ARC Welder) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\emfinbmielocnlhgmfkkmkngdoccbadn [2021-10-23] CHR Extension: (Urban VPN Proxy) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\eppiocemhmnlbhjplcgkofciiegomcon [2024-04-02] CHR Extension: (I don't care about cookies) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\fihnjjcciajhdojfnbdddfaoknhalnja [2023-11-30] CHR Extension: (NordVPN - VPN proxy for privacy and security) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2024-04-11] CHR Extension: (Tampermonkey BETA) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcalenpjmijncebpfijmoaglllgpjagf [2024-04-02] CHR Extension: (Return YouTube Dislike) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\gebbhagfogifgggkldgodflihgfeippi [2023-12-13] CHR Extension: (Google Docs Offline) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-03-21] CHR Extension: (Hola VPN - The Website Unblocker) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkojfkhlekighikafcpjkiklfbnlmeio [2024-04-10] CHR Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\hnmpcagpplmpfojmgmnngilcnanddlhb [2022-12-29] CHR Extension: (Disconnect) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeoacafpbcihiomhlakheieifhpjdfeo [2021-10-23] CHR Extension: (SponsorBlock für YouTube – Überspringe gesponserte Videosegmente) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\mnjggcdmjocbbbhaepdhchncahnbgone [2024-03-19] CHR Extension: (Fakespot Fake Amazon Reviews and eBay Sellers) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\nakplnnackehceedgkgkokbgbmfghain [2024-03-15] CHR Extension: (Keepa - Amazon Price Tracker) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\neebplgakaahbhdphmkckjjcegoiijjo [2024-04-02] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Tester\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-23] CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp] ==================== Dienste (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S4 ABBYY.Licensing.FineReader.15.0; C:\Program Files (x86)\Common Files\ABBYY\FineReader\15\Licensing\NetworkLicenseServer.exe [1050864 2020-08-06] (ABBYY Production LLC -> ABBYY Production LLC) S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2022-09-26] (Adobe Inc. -> Adobe Inc.) S3 agent_ovpnconnect; C:\Program Files\OpenVPN Connect\agent_ovpnconnect_1706702535874.exe [4698216 2024-01-31] (OpenVPN Inc. -> ) S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3863256 2022-07-27] (Adobe Inc. -> Adobe Systems, Incorporated) S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3701464 2022-07-27] (Adobe Inc. -> Adobe Systems, Incorporated) S3 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [5216584 2024-03-21] (AnyDesk Software GmbH -> AnyDesk Software GmbH) S3 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.02.12\atkexComSvc.exe [457544 2022-02-10] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) S3 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\AsusCertService.exe [181576 2021-09-30] (ASUSTeK Computer Inc. -> ASUSTek COMPUTER INC.) S3 CAMService; C:\Program Files\NZXT CAM\resources\app.asar.unpacked\node_modules\@nzxt\cam-core\dist\target\x86_64-pc-windows-msvc\release\service.exe [611712 2024-02-28] (NZXT, Inc. -> ) S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1081248 2024-03-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd) R2 CdRomArbiterService; C:\Program Files\Common Files\cdarbsvc\cdarbsvc_v1.2.0_x64.exe [9728 2022-01-03] (GuinpinSoft inc) [Datei ist nicht signiert] R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14097992 2024-03-07] (Microsoft Corporation -> Microsoft Corporation) R2 CorsairGamingAudioConfig; C:\Windows\System32\CorsairGamingAudioCfgService64.exe [614432 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R2 CorsairLLAService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueLLAccessService.exe [238632 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.) R2 CorsairService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\Corsair.Service.exe [84008 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.) S2 CorsairUniwillService; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CueUniwillService.exe [108072 2023-01-20] (Corsair Memory, Inc. -> Corsair Memory, Inc.) S3 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [5751024 2022-03-30] (devolo AG -> devolo AG) R3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusServiceLite.exe [4978000 2023-05-25] (AVB Disc Soft, SIA -> Disc Soft FZE LLC) S3 Ds3Service; C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpService.exe [389632 2016-01-10] (Scarlet.Crush Productions) [Datei ist nicht signiert] S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [47716384 2023-08-28] (Electronic Arts, Inc. -> Electronic Arts) S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [12200040 2024-04-07] (Electronic Arts, Inc. -> Electronic Arts) S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803952 2022-01-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd) S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-08-02] (Epic Games Inc. -> Epic Games, Inc.) R2 Everything; C:\Program Files\Everything\Everything.exe [2265096 2023-05-26] (voidtools -> voidtools) S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [347408 2023-03-06] (Underwriters Laboratories Inc. -> Futuremark) S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [2350048 2023-10-25] (GOG sp. z o.o -> GOG.com) S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7173088 2023-10-25] (GOG sp. z o.o -> GOG.com) S3 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [Datei ist nicht signiert] S3 HPSIService; C:\WINDOWS\system32\HPSIsvc.exe [126880 2012-09-27] (Hewlett-Packard Company -> HP) S4 ICCS; C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [160256 2012-02-01] (Intel Corporation) [Datei ist nicht signiert] S3 iCUEDevicePluginHost; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\iCUEDevicePluginHost.exe [462888 2023-01-20] (Corsair Memory, Inc. -> Corsair) R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206808 2022-05-12] (Logitech Inc -> Logitech Inc.) S3 NativePushService; C:\Users\Tester\AppData\Local\Wondershare\Wondershare NativePush\WsNativePushService.exe [595352 2023-08-22] (Wondershare Technology Group Co.,Ltd -> Wondershare) S3 nordsec-threatprotection-service; C:\Program Files\NordVPN\NordSec ThreatProtection\nordsec-threatprotection-service.exe [320088 2023-09-25] (nordvpn s.a. -> nordvpn S.A.) R2 NordUpdaterService; C:\Program Files\NordUpdater\NordUpdateService.exe [297848 2023-01-04] (nordvpn s.a. -> nordvpn S.A.) R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [263256 2023-09-25] (nordvpn s.a. -> nordvpn S.A.) S3 OO FileDirect; C:\Program Files\OO Software\FileDirect\oofdag.exe [4311104 2017-05-18] (O&O Software GmbH -> O&O Software GmbH) S3 ovpnhelper_service; C:\Program Files\OpenVPN Connect\ovpnhelper_service.exe [4534888 2024-01-31] (OpenVPN Inc. -> ) R2 PDF24; C:\Program Files\PDF24\pdf24.exe [645976 2024-03-05] (Geek Software GmbH -> geek software GmbH) R2 RCService; C:\Program Files (x86)\AnyViewer\RCService.exe [966640 2024-01-25] (AOMEI International Network Limited -> AOMEI International Network Limited) R2 RustDesk; C:\Program Files\RustDesk\RustDesk.exe [272560 2023-11-28] (Zhou Huabing -> com.carriez) S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [522184 2024-04-09] (Microsoft Windows Publisher -> Microsoft Corporation) S3 smartd; C:\Program Files\smartmontools for Windows\bin\smartd.exe [1095680 2017-11-05] (www.smartmontools.org) [Datei ist nicht signiert] S3 TunnelBearMaintenance; C:\Program Files (x86)\TunnelBear\TunnelBear.Maintenance.exe [140424 2024-04-04] (TunnelBear (McAfee Canada ULC) -> TunnelBear) S3 TwitchService; C:\Program Files\Common Files\Twitch\TwitchService.exe [345400 2023-08-09] (Twitch Interactive, Inc. -> ) S3 updater; C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpUpdater.exe [464384 2016-01-10] (Nefarius Software Solutions) [Datei ist nicht signiert] S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [807352 2024-01-15] (Oracle Corporation -> Oracle and/or its affiliates) S4 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\NisSrv.exe [2855512 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) S4 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2109.6-0\MsMpEng.exe [128392 2021-10-06] (Microsoft Windows Publisher -> Microsoft Corporation) R2 WindscribeService; C:\Program Files\Windscribe\WindscribeService.exe [1062248 2024-03-21] (Windscribe Limited -> Windscribe Limited) R2 WireGuardTunnel$wg_server; C:\Program Files\WireGuard\wireguard.exe [8185648 2021-12-22] (WireGuard LLC -> WireGuard LLC) ===================== Treiber (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [46704 2024-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [36928 2022-09-16] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc) R2 AMDRyzenMasterDriverV20; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [58952 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices) S2 AMDRyzenMasterDriverV22; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [58952 2024-03-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices) R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_54807f69fe156f14\amdsafd.sys [113088 2023-04-13] (Advanced Micro Devices Inc. -> Advanced Micro Devices) R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0401205.inf_amd64_d7b3299b598b3a95\B401180\amdkmdag.sys [100115392 2024-03-20] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [61888 2023-05-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2023-11-06] (CHENGDU AOMEI Tech Co., Ltd. -> ) S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.) R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [34384 2022-02-10] (ASUSTeK Computer Inc. -> ) R1 Asusgio3; C:\WINDOWS\system32\drivers\AsIO3.sys [43168 2021-09-30] (ASUSTeK Computer Inc. -> ) S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [63008 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R2 CorsairLLAccessC2D033F14715AA7325305EA42FBFC65BF867CC1D; C:\Program Files\Corsair\CORSAIR iCUE 4 Software\CorsairLLAccess64.sys [21752 2023-01-20] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.) R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47032 2022-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [22968 2022-09-21] (Microsoft Windows Hardware Compatibility Publisher -> Corsair) R3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2024-04-13] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ACHTUNG S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2023-11-06] (CHENGDU AOMEI Tech Co., Ltd. -> ) R3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [42256 2023-05-25] (AVB Disc Soft, SIA -> Disc Soft Ltd) R3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [63696 2023-05-25] (AVB Disc Soft, SIA -> Disc Soft Ltd) S3 HidHide; C:\WINDOWS\System32\drivers\HidHide.sys [66584 2022-06-27] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.) R1 HWiNFO_152; C:\WINDOWS\system32\drivers\HWiNFO64A_152.SYS [63208 2020-12-11] (Martin Malik - REALiX -> REALiX(tm)) R1 HWiNFO_161; C:\Windows\system32\drivers\HWiNFO64A_161.SYS [64528 2021-05-26] (Martin Malik - REALiX -> REALiX(tm)) R1 HWiNFO_165; C:\WINDOWS\system32\drivers\HWiNFO64A_165.SYS [56888 2021-12-22] (Microsoft Windows Hardware Compatibility Publisher -> REALiX(tm)) R1 HWiNFO_167; C:\WINDOWS\system32\drivers\HWiNFO64A_167.SYS [57376 2022-03-28] (Microsoft Windows Hardware Compatibility Publisher -> REALiX(tm)) R1 HWiNFO_171; C:\WINDOWS\system32\drivers\HWiNFO64A_171.SYS [56864 2022-06-08] (Microsoft Windows Hardware Compatibility Publisher -> REALiX(tm)) R3 HWiNFO_175; C:\Users\Tester\AppData\Local\Temp\HWiNFO64A_175.SYS [57376 2024-04-13] (Microsoft Windows Hardware Compatibility Publisher -> REALiX(tm)) <==== ACHTUNG R1 HWiNFO_190; C:\WINDOWS\system32\drivers\HWiNFO64A_190.SYS [57936 2023-12-27] (Microsoft Windows Hardware Compatibility Publisher -> REALiX) R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2022-07-05] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk]) R3 LGBusEnum; C:\WINDOWS\system32\drivers\LGBusEnum64.sys [46264 2022-05-12] (Logitech Inc -> Logitech Inc.) R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech) R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore64.sys [76480 2022-05-12] (Logitech Inc -> Logitech Inc.) S3 LGVirHid; C:\WINDOWS\system32\drivers\LGVirHid64.sys [34496 2022-05-12] (Logitech Inc -> Logitech Inc.) S3 libusbK; C:\WINDOWS\System32\drivers\libusbK.sys [47928 2018-04-30] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net) R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd) S3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377232 2017-03-11] (Windows Central Build Account - X -> MediaTek Inc.) S3 mvusbews; C:\WINDOWS\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.) R2 NDivert; C:\Program Files\NordVPN\7.21.2.0\Drivers\NDivert.sys [131472 2024-03-14] (nordvpn s.a. -> Nordvpn S.A.) R2 NPF_devolo; C:\WINDOWS\sysWOW64\drivers\npf_devolo.sys [36496 2022-03-30] (devolo AG -> Riverbed Technology, Inc.) R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [91696 2024-03-21] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc) S3 polarbear-split-tunneling; C:\Program Files (x86)\TunnelBear\Drivers\x64\SplitTunnelingDriver.sys [29176 2023-07-10] (Microsoft Windows Hardware Compatibility Publisher -> ) U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [80264 2023-03-05] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com) R0 PxHlpa64; C:\WINDOWS\System32\drivers\PxHlpa64.sys [56336 2013-09-03] (Corel Corporation -> Corel Corporation) R3 R0LibreHardwareMonitor; C:\Users\Tester\Downloads\LibreHardwareMonitor-net472\LibreHardwareMonitor.sys [14544 2024-04-13] (Noriyuki MIYAZAKI -> OpenLibSys.org) R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions) R0 secnvme; C:\WINDOWS\System32\drivers\secnvme.sys [133944 2020-01-20] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd) S3 SIVDriver; C:\Windows\system32\Drivers\SIVX64.sys [204544 2020-11-11] (RH Software Ltd -> Ray Hinchliffe) R2 SSGDIO; C:\WINDOWS\SysWOW64\DRIVERS\ssgdio64.sys [14608 2022-07-22] (ATI Technologies, Inc -> ATI Technologies Inc.) R3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2023-07-10] (TunnelBear, Inc. -> The OpenVPN Project) S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39936 2020-10-02] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [49744 2021-06-13] (nordvpn s.a. -> The OpenVPN Project) S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [57768 2023-03-19] (Windscribe Limited -> The OpenVPN Project) R3 tap_ovpnconnect; C:\WINDOWS\System32\drivers\tap_ovpnconnect.sys [40448 2024-01-31] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project) R3 VBoxNetAdp; C:\WINDOWS\System32\drivers\VBoxNetAdp6.sys [254664 2024-01-15] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxNetLwf; C:\WINDOWS\system32\DRIVERS\VBoxNetLwf.sys [265536 2024-01-15] (Oracle Corporation -> Oracle and/or its affiliates) R1 VBoxSup; C:\WINDOWS\system32\DRIVERS\VBoxSup.sys [1064064 2024-01-15] (Oracle Corporation -> Oracle and/or its affiliates) S3 VBoxUSB; C:\WINDOWS\System32\Drivers\VBoxUSB.sys [175800 2022-03-22] (Oracle Corporation -> Oracle Corporation) R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [817672 2022-03-01] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX) R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [249400 2022-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.) R3 VoiceAIDriver; C:\WINDOWS\System32\DriverStore\FileRepository\voiceaidriver.inf_amd64_214d6aacf9c41414\voiceaidriver.sys [73640 2022-12-29] (Voice AI LLC -> Windows (R) Win 7 DDK provider) S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48520 2021-10-06] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation) S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.) S4 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [434424 2021-10-06] (Microsoft Windows -> Microsoft Corporation) S4 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [86264 2021-10-06] (Microsoft Windows -> Microsoft Corporation) S3 WindscribeSplitTunnel; C:\WINDOWS\system32\DRIVERS\WindscribeSplitTunnel.sys [38152 2024-03-21] (Windscribe Limited -> ) S3 windtun420; C:\WINDOWS\System32\drivers\windtun420.sys [47544 2023-03-19] (Windscribe Limited -> WireGuard LLC) R3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2023-03-05] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC) S3 cpuz152; \??\C:\WINDOWS\temp\cpuz152\cpuz152_x64.sys [X] <==== ACHTUNG S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X] S1 nordlwf; \SystemRoot\system32\DRIVERS\nordlwf.sys [X] ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-04-13 22:10 - 2024-04-13 22:10 - 002394112 _____ (Farbar) C:\Users\Tester\Downloads\FRST64.exe 2024-04-13 22:10 - 2024-04-13 22:10 - 000060090 _____ C:\Users\Tester\Downloads\FRST.txt 2024-04-13 22:10 - 2024-04-13 22:10 - 000000000 ____D C:\FRST 2024-04-13 21:23 - 2024-04-13 21:23 - 000003112 _____ C:\WINDOWS\system32\Tasks\RTSS 2024-04-13 21:23 - 2024-04-13 21:23 - 000003104 _____ C:\WINDOWS\system32\Tasks\AMDInstallLauncher 2024-04-13 21:23 - 2024-04-13 21:23 - 000003096 _____ C:\WINDOWS\system32\Tasks\AMDLinkUpdate 2024-04-13 09:48 - 2024-04-13 09:48 - 186160816 _____ C:\Users\Tester\Downloads\Plex-1.90.1.118-a4bc1429-x86_64.exe 2024-04-13 09:48 - 2024-04-13 09:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex 2024-04-12 23:00 - 2024-04-12 23:48 - 1971431240 _____ C:\Users\Tester\Desktop\Das.Erwachen.Der.Jaegerin.2023.mkv 2024-04-12 22:50 - 2024-04-12 22:50 - 000003268 _____ C:\Users\Tester\Downloads\dfaeff7d9edf165fe02a3641da276a74870d1567.dlc 2024-04-12 22:37 - 2024-04-12 22:37 - 000000000 ____D C:\Users\Tester\AppData\Roaming\TRX 2024-04-12 22:36 - 2024-04-12 22:36 - 000000954 _____ C:\Users\Public\Desktop\Tomb Raider I-III Remastered Starring Lara Croft.lnk 2024-04-12 22:36 - 2024-04-12 22:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tomb Raider I-III Remastered Starring Lara Croft 2024-04-12 22:30 - 2024-04-12 22:30 - 000001648 _____ C:\Users\Tester\Downloads\25671u_5.dlc 2024-04-12 22:29 - 2024-04-12 22:29 - 000001008 _____ C:\Users\Tester\Downloads\8723u_5.dlc 2024-04-12 21:01 - 2016-10-12 04:36 - 000149888 _____ (ASMedia Technology Inc) C:\WINDOWS\system32\Drivers\asmthub3.sys 2024-04-12 20:58 - 2024-04-12 20:58 - 000002032 _____ C:\Users\Tester\Downloads\5375178a6d930ca42c8f9c97fc0fa54b4e465ad6.dlc 2024-04-12 00:02 - 2024-04-12 00:02 - 002635828 _____ C:\Users\Tester\Downloads\redream.x86_64-windows-v1.5.0-1124-g9c1dd35.zip 2024-04-11 21:50 - 2024-04-11 21:50 - 000001048 _____ C:\Users\Tester\Downloads\8717u_5.dlc 2024-04-11 21:38 - 2024-04-11 21:38 - 000002224 _____ C:\Users\Tester\Downloads\f31ee37573f241c31000429e1f4f55173e0662a0.dlc 2024-04-11 21:38 - 2024-04-11 21:38 - 000001860 _____ C:\Users\Tester\Downloads\fdef2bf2acc5fab9c4330be0c2260d436d3d4d70.dlc 2024-04-10 22:43 - 2024-04-10 22:43 - 000000823 _____ C:\Users\Public\Desktop\Horizon Forbidden West.lnk 2024-04-10 22:43 - 2024-04-10 22:43 - 000000000 ____D C:\Users\Tester\Documents\Horizon Forbidden West Complete Edition 2024-04-10 22:43 - 2024-04-10 22:43 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Guerrilla Games 2024-04-10 22:43 - 2024-04-10 22:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Horizon Forbidden West 2024-04-10 21:38 - 2024-04-10 21:38 - 000000811 _____ C:\Users\Public\Desktop\The Callisto Protocol.lnk 2024-04-10 21:38 - 2024-04-10 21:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Callisto Protocol 2024-04-10 21:26 - 2024-04-10 21:26 - 001525042 _____ C:\Users\Tester\Downloads\XBOX 2 Microsoft account _ Bestellverlauf.mhtml 2024-04-10 21:20 - 2024-04-10 21:20 - 011797109 _____ C:\Users\Tester\Downloads\XBOX Microsoft account _ Bestellverlauf.mhtml 2024-04-10 20:19 - 2024-04-10 20:19 - 000001053 _____ C:\Users\Tester\Desktop\Telegram.lnk 2024-04-10 19:54 - 2024-04-10 19:54 - 000001860 _____ C:\Users\Tester\Downloads\7df30a5095f3deea1e77a4d06795a2527ad4d1dd.dlc 2024-04-10 15:15 - 2024-04-10 15:15 - 000036420 _____ C:\Users\Tester\Downloads\c9a33ae0727bc6ff6251c1d7f7f3d9a2ff97bf8b.dlc 2024-04-10 15:10 - 2024-04-10 15:10 - 000001375 _____ C:\Users\Tester\Desktop\Spotify.lnk 2024-04-10 14:42 - 2024-04-10 14:42 - 000118972 _____ C:\Users\Tester\Downloads\fotto77@2024_4_10 (1).json 2024-04-10 14:39 - 2024-04-10 14:39 - 001203865 _____ C:\Users\Tester\Downloads\fotto77@2024_4_10.json 2024-04-10 14:38 - 2024-04-10 14:38 - 047346238 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024410123313683.dmp 2024-04-10 14:35 - 2024-04-10 14:35 - 000098710 _____ C:\Users\Tester\Downloads\spotify backup plexihexi@2024_4_10.json 2024-04-10 14:31 - 2024-04-10 14:31 - 000000000 ___HD C:\$WinREAgent 2024-04-10 00:48 - 2024-04-10 00:48 - 046567703 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202449224342315.dmp 2024-04-09 23:34 - 2024-04-09 23:34 - 000020861 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json 2024-04-09 23:34 - 2024-04-09 23:34 - 000020861 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json 2024-04-09 23:27 - 2024-04-09 23:27 - 046649623 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202449212235336.dmp 2024-04-09 22:54 - 2024-04-09 22:54 - 003372010 _____ C:\Users\Tester\Downloads\Selbsteinschätzung_ Welches Maß an Selbstkritik bringt uns wirklich weiter_ - DER SPIEGEL.mhtml 2024-04-09 22:17 - 2024-04-09 22:17 - 000004228 _____ C:\Users\Tester\Downloads\0b2b059d2be39393fcef689f44dd4cd9cefcd3b7.dlc 2024-04-08 22:52 - 2024-04-08 22:52 - 004234980 _____ C:\Users\Tester\Downloads\Langzeitbeziehungen Warum manche Paare für immer zusammenbleiben – und andere nicht - DER SPIEGEL.pdf 2024-04-08 22:41 - 2024-04-08 22:41 - 001864874 _____ C:\Users\Tester\Downloads\Langzeitbeziehungen Warum manche Paare für immer zusammenbleiben – und andere nicht - DER SPIEGEL.htm 2024-04-08 22:41 - 2024-04-08 22:41 - 000000000 ____D C:\Users\Tester\Downloads\Langzeitbeziehungen Warum manche Paare für immer zusammenbleiben – und andere nicht - DER SPIEGEL-Dateien 2024-04-08 20:58 - 2024-04-08 20:58 - 000001880 _____ C:\Users\Tester\Downloads\b504b7eeb7fcb2756213c62be5e1007bddd061c8.dlc 2024-04-08 18:00 - 2024-04-08 18:00 - 046697032 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202448155517253.dmp 2024-04-08 17:56 - 2024-04-08 17:56 - 016711119 _____ C:\Users\Tester\Downloads\[Guru3D.com]-RTSS (1).zip 2024-04-08 17:53 - 2024-04-11 19:33 - 000000444 _____ C:\Users\Tester\Documents\chrome 2024 links.txt 2024-04-07 22:27 - 2024-04-07 22:27 - 000001540 _____ C:\Users\Tester\Downloads\70ffaf810eb8a3ba90be82d71f002bfe9bca3772.dlc 2024-04-07 22:24 - 2024-04-07 22:24 - 000002372 _____ C:\Users\Tester\Downloads\24315u_5.dlc 2024-04-07 21:28 - 2024-04-07 21:28 - 000020824 _____ C:\Users\Tester\Downloads\26111u_5.dlc 2024-04-07 20:41 - 2024-04-07 20:41 - 000002210 _____ C:\Users\Tester\Desktop\WeMod.lnk 2024-04-07 20:41 - 2024-04-07 20:41 - 000000000 ____D C:\Users\Tester\AppData\Local\WeMod 2024-04-07 20:39 - 2024-04-07 20:39 - 000001982 _____ C:\Users\Public\Desktop\TunnelBear.lnk 2024-04-07 20:39 - 2024-04-07 20:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TunnelBear 2024-04-07 20:38 - 2024-04-07 20:39 - 000000000 ____D C:\Program Files (x86)\TunnelBear 2024-04-07 20:38 - 2024-04-07 20:38 - 000000000 ____D C:\Users\Tester\AppData\Roaming\PolarBear 2024-04-07 20:36 - 2024-04-07 20:36 - 000002076 _____ C:\Users\Public\Desktop\OpenVPN Connect.lnk 2024-04-07 20:36 - 2024-04-07 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenVPN Connect 2024-04-07 20:36 - 2024-04-07 20:36 - 000000000 ____D C:\Program Files\Common Files\ovpn-dco 2024-04-07 20:34 - 2024-04-10 20:25 - 000002922 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1689134086-1293215690-2280209554-1001 2024-04-07 20:34 - 2024-04-07 20:34 - 000002412 _____ C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2024-04-07 20:34 - 2024-04-07 20:34 - 000000835 _____ C:\Users\Public\Desktop\Mp3tag.lnk 2024-04-07 20:34 - 2024-04-07 20:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mp3tag 2024-04-07 20:31 - 2024-04-07 20:31 - 000001118 _____ C:\Users\Tester\Desktop\HD Tune Pro.lnk 2024-04-07 20:31 - 2024-04-07 20:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HandBrake 2024-04-05 20:54 - 2024-04-05 20:54 - 000001446 _____ C:\Users\Tester\Documents\toxische beziehung kommentar merkur.txt 2024-04-05 20:24 - 2024-04-13 21:23 - 000003554 _____ C:\WINDOWS\system32\Tasks\Launch Adobe CCXProcess 2024-04-05 19:56 - 2024-04-05 19:56 - 000000000 ____D C:\Users\Public\Documents\AdobeInstalledCodecsTier2 2024-04-05 19:54 - 2024-04-05 19:54 - 000001164 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2024.lnk 2024-04-05 19:54 - 2024-04-05 19:54 - 000000000 ____D C:\Users\Public\Documents\Adobe 2024-04-05 19:47 - 2024-04-05 19:50 - 2196980046 _____ C:\Users\Tester\Downloads\Adobe Premiere Pro 2024 (v24.3.0.059) Multilingual [FileCR].zip 2024-04-05 19:42 - 2024-04-05 19:42 - 000000000 ____D C:\Users\Tester\AppData\Local\fontconfig 2024-04-05 19:36 - 2024-04-05 19:42 - 000000000 ____D C:\Users\Tester\Documents\Camtasia 2024-04-05 19:36 - 2024-04-05 19:37 - 000000000 ____D C:\Users\Tester\AppData\Local\TechSmith 2024-04-05 19:36 - 2024-04-05 19:36 - 000000115 _____ C:\Users\Public\Documents\Techsmith_Snagit_Jasi2169.lic 2024-04-05 19:36 - 2024-04-05 19:36 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Techsmith 2024-04-05 19:34 - 2024-04-05 19:45 - 000000000 ____D C:\ProgramData\TechSmith 2024-04-05 19:34 - 2024-04-05 19:34 - 000000000 ____D C:\Users\Public\TechSmith 2024-04-05 19:34 - 2024-04-05 19:34 - 000000000 ____D C:\Program Files\TechSmith 2024-04-05 19:33 - 2024-04-05 19:33 - 338902431 _____ C:\Users\Tester\Downloads\Techsmith Camtasia 2023 v23.4.5.52812 (x64) Multilingual [FileCR].zip 2024-04-04 20:41 - 2024-04-04 20:41 - 000001668 _____ C:\Users\Tester\Downloads\b757613c885ae15d442d22fb024ecd6dbb43f70e.dlc 2024-04-04 20:40 - 2024-04-04 20:40 - 000006276 _____ C:\Users\Tester\Downloads\e96b457af63ad49e1acff4530f64b958a97c9096.dlc 2024-04-04 20:40 - 2024-04-04 20:40 - 000005380 _____ C:\Users\Tester\Downloads\7a843e86c05d0b0fbbc58cbbece308726a73eb86.dlc 2024-04-03 18:55 - 2024-04-03 18:55 - 001646944 _____ C:\Users\Tester\Downloads\loader.dol 2024-04-02 22:21 - 2024-04-02 22:21 - 047553791 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202442201622944.dmp 2024-04-02 00:44 - 2024-04-02 00:44 - 000000000 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_20244122393437.dmp 2024-03-28 23:24 - 2024-03-28 23:24 - 000000000 ____D C:\Users\Tester\Downloads\sys-patch-1.5.1 2024-03-28 23:24 - 2024-03-28 23:24 - 000000000 ____D C:\Users\Tester\Downloads\Firmware 18.0.0 2024-03-28 23:23 - 2024-03-28 23:23 - 339261750 _____ C:\Users\Tester\Downloads\Firmware 18.0.0.zip 2024-03-28 23:21 - 2024-03-28 23:21 - 000175804 _____ C:\Users\Tester\Downloads\sys-patch-1.5.1.zip 2024-03-27 00:28 - 2024-03-27 00:28 - 047350334 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024326222311586.dmp 2024-03-26 23:31 - 2024-03-26 23:31 - 320821087 _____ C:\Users\Tester\Downloads\Microsoft.GamingApp_2403.1001.2.0_neutral_~_8wekyb3d8bbwe.Msixbundle 2024-03-26 23:31 - 2024-03-26 23:31 - 050841215 _____ C:\Users\Tester\Downloads\Microsoft.XboxDevices_2403.2403.11002.0_neutral_~_8wekyb3d8bbwe.AppxBundle 2024-03-26 23:28 - 2024-03-26 23:28 - 000227045 _____ C:\Users\Tester\Downloads\HUK-COBURG_Rechnung_536-314472-Z_22-02-2024.pdf 2024-03-26 23:20 - 2024-03-26 23:20 - 070005150 _____ C:\Users\Tester\Downloads\Microsoft.WindowsStore_22402.1401.4.0_neutral_~_8wekyb3d8bbwe.Msixbundle 2024-03-26 23:18 - 2024-03-26 23:18 - 258177599 _____ C:\Users\Tester\Downloads\Microsoft.DesktopAppInstaller_2024.307.343.0_neutral_~_8wekyb3d8bbwe.Msixbundle 2024-03-26 22:25 - 2024-03-26 22:25 - 104299611 _____ C:\Users\Tester\Downloads\5319275A.WhatsAppDesktop_2.2411.4.0_neutral_~_cv1g1gvanyjgm.Msixbundle 2024-03-26 22:20 - 2024-03-27 00:07 - 000000000 ____D C:\Users\Tester\AppData\Local\WhatsApp 2024-03-26 22:19 - 2024-03-26 22:20 - 164026592 _____ (WhatsApp) C:\Users\Tester\Downloads\WhatsAppSetup.exe 2024-03-26 22:11 - 2024-04-11 20:02 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp 2024-03-26 22:11 - 2024-03-27 00:07 - 000000000 ____D C:\Users\Tester\AppData\Roaming\WhatsApp 2024-03-26 22:11 - 2024-03-26 22:11 - 161853664 _____ (WhatsApp) C:\Users\Tester\Downloads\WhatsApp387Setup.exe 2024-03-26 22:11 - 2024-03-26 22:11 - 000002216 _____ C:\Users\Tester\Desktop\WhatsApp.lnk 2024-03-26 22:06 - 2024-03-26 22:06 - 000015780 _____ C:\Users\Tester\Downloads\Windows-Store-Fixer-master.zip 2024-03-26 22:06 - 2024-03-26 22:06 - 000000000 ____D C:\Users\Tester\Downloads\Windows-Store-Fixer-master 2024-03-26 22:05 - 2024-03-26 22:05 - 073363577 _____ C:\Users\Tester\Downloads\Win 10 2004-22H2 x64 0x800f0988 v5 Fix (2).7z 2024-03-26 21:49 - 2024-03-26 21:49 - 067725554 _____ C:\Users\Tester\Downloads\Ms_Store.zip 2024-03-26 21:47 - 2024-03-26 21:47 - 005503485 _____ C:\Users\Tester\Downloads\Store_Apps_repair_tool.zip 2024-03-26 21:47 - 2024-03-26 21:47 - 005503485 _____ C:\Users\Tester\Downloads\Store_Apps_repair_tool (1).zip 2024-03-26 21:46 - 2024-03-26 21:46 - 047344511 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024326194156360.dmp 2024-03-26 20:58 - 2024-03-26 20:58 - 000060312 _____ C:\Users\Tester\Downloads\2024-03-26 17.22.33.ogg 2024-03-25 22:38 - 2024-03-25 22:38 - 000000000 ____D C:\Users\Tester\AppData\Local\HellbladeGame 2024-03-25 22:37 - 2024-03-25 22:37 - 000001236 _____ C:\Users\Public\Desktop\Hellblade Senuas Sacrifice.lnk 2024-03-25 22:37 - 2024-03-25 22:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hellblade Senuas Sacrifice 2024-03-25 22:04 - 2024-03-25 22:05 - 000000000 ____D C:\ProgramData\ChocolateyHttpCache 2024-03-24 15:50 - 2024-03-24 15:50 - 047460942 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202432413452342.dmp 2024-03-24 15:00 - 2024-03-24 15:00 - 048745835 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202432214281920.dmp 2024-03-24 15:00 - 2024-01-24 18:05 - 006121416 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys 2024-03-24 15:00 - 2016-10-12 04:36 - 000453504 _____ (ASMedia Technology Inc) C:\WINDOWS\system32\Drivers\asmtxhci.sys 2024-03-24 15:00 - 2016-10-12 04:36 - 000028032 _____ C:\WINDOWS\system32\asmtxhcicoinstaller.dll 2024-03-24 14:59 - 2024-02-18 20:19 - 001315816 _____ (Realtek ) C:\WINDOWS\system32\Drivers\rt640x64.sys 2024-03-24 14:59 - 2023-11-13 09:27 - 000525744 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdtee_api.dll 2024-03-24 14:59 - 2023-11-13 09:27 - 000397232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdtee_api.dll 2024-03-24 14:59 - 2023-11-13 09:27 - 000062392 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\Drivers\amdpsp.sys 2024-03-24 14:55 - 2024-03-24 15:00 - 000000000 ____D C:\Users\Tester\Downloads\SDI_R2309 2024-03-21 23:33 - 2024-03-21 23:33 - 047387198 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024321212830544.dmp 2024-03-21 23:27 - 2024-03-24 15:16 - 000000361 _____ C:\Users\Tester\Documents\youtube 2024 backlog.txt 2024-03-21 22:06 - 2024-04-05 22:32 - 000000000 ____D C:\Users\Tester\AppData\LocalLow\AMD 2024-03-21 22:02 - 2024-04-05 21:47 - 000001507 _____ C:\Users\Tester\Desktop\Wondershare Filmora 13.lnk 2024-03-21 22:02 - 2024-03-21 22:02 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Wondershare 2024-03-21 21:58 - 2024-03-21 21:58 - 000001178 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinSCP.lnk 2024-03-21 21:58 - 2024-03-21 21:58 - 000001166 _____ C:\Users\Public\Desktop\WinSCP.lnk 2024-03-21 21:57 - 2024-03-21 21:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windscribe 2024-03-21 21:56 - 2024-03-21 23:28 - 000000000 ____D C:\Program Files\Windscribe 2024-03-21 21:56 - 2024-03-21 21:56 - 000091696 _____ (OpenVPN, Inc) C:\WINDOWS\system32\Drivers\ovpn-dco.sys 2024-03-21 21:56 - 2024-03-21 21:56 - 000038152 _____ C:\WINDOWS\system32\Drivers\WindscribeSplitTunnel.sys 2024-03-21 21:56 - 2024-03-21 21:56 - 000001076 _____ C:\Users\Public\Desktop\Windscribe.lnk 2024-03-21 21:56 - 2024-03-21 21:56 - 000000000 ____D C:\Program Files (x86)\WindowsInstallationAssistant 2024-03-21 21:51 - 2024-03-21 21:51 - 000001163 _____ C:\Users\Public\Desktop\Oracle VM VirtualBox.lnk 2024-03-21 21:51 - 2024-03-21 21:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox 2024-03-21 21:51 - 2024-01-15 08:35 - 001064064 _____ (Oracle and/or its affiliates) C:\WINDOWS\system32\Drivers\VBoxSup.sys 2024-03-21 21:51 - 2024-01-15 08:35 - 000204328 _____ (Oracle and/or its affiliates) C:\WINDOWS\system32\Drivers\VBoxUSBMon.sys 2024-03-21 21:48 - 2024-03-21 21:48 - 000002058 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk 2024-03-21 21:48 - 2024-03-21 21:48 - 000001009 _____ C:\Users\Public\Desktop\Firefox.lnk 2024-03-21 21:48 - 2024-03-21 21:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\nGlide 2024-03-21 21:47 - 2024-03-21 21:47 - 000001214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KeePass 2.lnk 2024-03-21 21:43 - 2024-03-21 21:43 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Sun 2024-03-21 21:43 - 2024-03-21 21:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2024-03-21 21:43 - 2024-03-21 21:43 - 000000000 ____D C:\Program Files\Java 2024-03-21 21:43 - 2023-12-19 14:01 - 000200320 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll 2024-03-21 21:42 - 2024-03-21 21:42 - 000000887 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\blobsaver.lnk 2024-03-21 21:42 - 2024-03-21 21:42 - 000000875 _____ C:\Users\Public\Desktop\blobsaver.lnk 2024-03-21 21:41 - 2024-03-21 21:41 - 000001971 _____ C:\Users\Public\Desktop\AnyDesk.lnk 2024-03-21 21:41 - 2024-03-21 21:41 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AnyDesk 2024-03-21 21:39 - 2024-03-21 21:39 - 000000869 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WingetUI .lnk 2024-03-21 21:39 - 2024-03-21 21:39 - 000000863 _____ C:\Users\Public\Desktop\WingetUI .lnk 2024-03-20 22:42 - 2024-04-10 20:25 - 000002464 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask 2024-03-20 22:42 - 2024-03-20 22:42 - 000003484 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate 2024-03-20 22:42 - 2024-03-20 22:42 - 000003152 _____ C:\WINDOWS\system32\Tasks\StartCN 2024-03-20 22:42 - 2024-03-20 22:42 - 000003072 _____ C:\WINDOWS\system32\Tasks\StartDVR 2024-03-20 22:42 - 2024-03-20 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition 2024-03-20 22:42 - 2024-03-20 22:42 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool 2024-03-20 22:42 - 2024-03-13 22:13 - 002938560 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\AMDBugReportTool.exe 2024-03-20 22:41 - 2024-03-20 12:17 - 002090944 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe 2024-03-20 22:41 - 2024-03-20 12:17 - 002090944 _____ C:\WINDOWS\system32\vulkaninfo.exe 2024-03-20 22:41 - 2024-03-20 12:17 - 001649088 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe 2024-03-20 22:41 - 2024-03-20 12:17 - 001649088 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2024-03-20 22:41 - 2024-03-20 12:17 - 001456080 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 001456080 _____ C:\WINDOWS\system32\vulkan-1.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 001297424 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 001297424 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 000721344 _____ C:\WINDOWS\system32\hiprt0200064.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 000597952 _____ C:\WINDOWS\system32\GameManager64.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 000542144 _____ C:\WINDOWS\system32\libamdsmi_guest.dll 2024-03-20 22:41 - 2024-03-20 12:17 - 000523200 _____ C:\WINDOWS\system32\libamdsmi_host.dll 2024-03-20 22:41 - 2024-03-20 12:16 - 000492480 _____ C:\WINDOWS\system32\EEURestart.exe 2024-03-20 22:41 - 2024-03-20 12:16 - 000451008 _____ C:\WINDOWS\SysWOW64\GameManager32.dll 2024-03-20 22:41 - 2024-03-20 12:16 - 000186416 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll 2024-03-20 22:41 - 2024-03-20 12:16 - 000174016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll 2024-03-20 22:41 - 2024-03-20 12:16 - 000137152 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 002120640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 001631168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 001631168 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 000988712 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe 2024-03-20 22:41 - 2024-03-20 12:15 - 000525872 _____ C:\WINDOWS\system32\atieah64.exe 2024-03-20 22:41 - 2024-03-20 12:15 - 000463296 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 000394688 _____ C:\WINDOWS\SysWOW64\atieah32.exe 2024-03-20 22:41 - 2024-03-20 12:15 - 000256560 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 000217128 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll 2024-03-20 22:41 - 2024-03-20 12:15 - 000065072 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 011516568 _____ C:\WINDOWS\system32\amdsmi.exe 2024-03-20 22:41 - 2024-03-20 12:14 - 007549888 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 007329728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 002212400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 001305024 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 001244608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 001045440 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 001029568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000791488 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000558528 _____ C:\WINDOWS\system32\amdgfxinfo64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000422336 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000128960 _____ C:\WINDOWS\system32\amdxc64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000105008 _____ C:\WINDOWS\SysWOW64\amdxc32.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000041408 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll 2024-03-20 22:41 - 2024-03-20 12:14 - 000038336 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 001701040 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 001378448 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000668608 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000533440 _____ C:\WINDOWS\system32\dgtrayicon.exe 2024-03-20 22:41 - 2024-03-20 12:13 - 000515120 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000461248 _____ C:\WINDOWS\system32\amdlogum.exe 2024-03-20 22:41 - 2024-03-20 12:13 - 000351280 _____ C:\WINDOWS\system32\clinfo.exe 2024-03-20 22:41 - 2024-03-20 12:13 - 000155976 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000148680 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000125736 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll 2024-03-20 22:41 - 2024-03-20 12:13 - 000120552 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 105795112 _____ C:\WINDOWS\system32\amd_comgr_2.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 105422888 _____ C:\WINDOWS\system32\amd_comgr.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 089163824 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 018434608 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64_6.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 000379952 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 000166848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 000156072 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 000135616 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll 2024-03-20 22:41 - 2024-03-20 12:12 - 000125840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll 2024-03-20 22:41 - 2024-03-20 12:11 - 021752368 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll 2024-03-20 22:41 - 2024-03-20 12:11 - 000553392 _____ C:\WINDOWS\system32\amdmiracast.dll 2024-03-20 22:41 - 2024-03-20 12:11 - 000165928 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll 2024-03-20 22:41 - 2024-03-20 12:10 - 000140256 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll 2024-03-20 22:41 - 2024-03-19 13:15 - 105728848 _____ C:\WINDOWS\system32\amdxc64.so 2024-03-19 21:51 - 2024-03-19 21:51 - 000000000 ____D C:\Users\Tester\Downloads\ventoy-1.0.97-windows 2024-03-19 21:43 - 2024-03-19 21:43 - 047333966 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024319193816113.dmp 2024-03-18 22:20 - 2024-03-18 22:20 - 000000000 ____D C:\Program Files\Common Files\DESIGNER 2024-03-18 22:19 - 2024-03-18 22:19 - 000002515 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Project.lnk 2024-03-16 23:10 - 2024-03-16 23:10 - 047350350 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202431621547534.dmp 2024-03-16 22:55 - 2024-03-16 22:55 - 000000717 _____ C:\Users\Public\Desktop\Doom 3 BFG Edition.lnk 2024-03-16 22:55 - 2024-03-16 22:55 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bethesda Softworks 2024-03-16 22:13 - 2024-03-16 23:05 - 000000666 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job 2024-03-16 22:13 - 2024-03-16 22:14 - 000003014 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting 2024-03-16 22:13 - 2024-03-16 22:13 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update 2024-03-16 22:13 - 2024-03-16 22:13 - 000000000 ____D C:\ProgramData\Piriform 2024-03-16 22:13 - 2024-03-16 22:13 - 000000000 ____D C:\ProgramData\Norton 2024-03-15 22:31 - 2024-03-15 22:31 - 047352061 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_2024315202631734.dmp 2024-03-15 22:29 - 2024-03-15 22:29 - 000000222 _____ C:\Users\Tester\Desktop\Lossless Scaling.url 2024-03-15 22:02 - 2024-03-15 22:02 - 000001046 _____ C:\Users\Public\Desktop\Steam.lnk 2024-03-15 00:05 - 2024-03-15 00:05 - 046592263 _____ C:\WINDOWS\Dump_OOFDAG_1.0.275_202431422040359.dmp 2024-03-14 23:26 - 2024-03-14 23:26 - 012271304 _____ C:\Users\Tester\Downloads\20240314_2213351.mp4 ==================== Ein Monat (geänderte) ================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2024-04-13 21:53 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft 2024-04-13 21:40 - 2018-04-13 00:25 - 000000000 ____D C:\Users\Tester\AppData\Local\JDownloader 2.0 2024-04-13 21:34 - 2019-08-23 07:32 - 000000000 ____D C:\Users\Tester\AppData\Local\Plex 2024-04-13 21:30 - 2021-10-04 12:12 - 000005810 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2024-04-13 21:30 - 2019-12-07 16:50 - 004226450 _____ C:\WINDOWS\system32\perfh007.dat 2024-04-13 21:30 - 2019-12-07 16:50 - 001153132 _____ C:\WINDOWS\system32\perfc007.dat 2024-04-13 21:24 - 2022-02-21 19:26 - 000000000 ____D C:\Users\Tester\AppData\Roaming\discord 2024-04-13 21:24 - 2022-02-21 19:26 - 000000000 ____D C:\Users\Tester\AppData\Local\Discord 2024-04-13 21:23 - 2023-05-30 19:48 - 000008192 ___SH C:\DumpStack.log.tmp 2024-04-13 21:23 - 2022-07-05 20:40 - 000000000 ____D C:\Users\Tester\Downloads\LibreHardwareMonitor-net472 2024-04-13 21:23 - 2021-10-04 12:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2024-04-13 21:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness 2024-04-13 21:23 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2024-04-13 21:23 - 2018-04-13 04:01 - 000000000 ____D C:\Users\Tester\AppData\Local\Everything 2024-04-13 21:23 - 2018-04-13 02:57 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Everything 2024-04-13 21:23 - 2018-04-13 00:40 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server 2024-04-13 21:22 - 2021-10-04 12:05 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2024-04-13 09:48 - 2019-08-23 07:32 - 000000000 ____D C:\Program Files\Plex 2024-04-13 00:09 - 2019-04-22 10:04 - 000000000 ____D C:\Users\Tester\AppData\Roaming\vlc 2024-04-12 23:48 - 2018-06-08 17:13 - 000000000 ____D C:\Users\Tester\AppData\Roaming\HandBrake 2024-04-12 23:07 - 2019-10-24 15:56 - 000000128 _____ C:\Users\Tester\AppData\Local\PUTTY.RND 2024-04-12 22:44 - 2023-06-06 12:20 - 000000000 ____D C:\Users\Tester\AppData\Local\AMD_Common 2024-04-12 21:01 - 2022-10-05 20:36 - 000000000 ____D C:\Users\Tester\AppData\Local\CrashDumps 2024-04-12 21:01 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF 2024-04-12 20:56 - 2023-06-06 12:19 - 000000000 ____D C:\Users\Tester\AppData\Local\D3DSCache 2024-04-12 16:11 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps 2024-04-11 20:36 - 2020-12-11 01:51 - 000000000 ____D C:\Users\Tester\AppData\Roaming\LosslessCut 2024-04-11 20:25 - 2022-10-13 14:37 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData 2024-04-11 19:30 - 2018-04-16 18:37 - 000000000 ____D C:\Program Files (x86)\Steam 2024-04-10 20:25 - 2021-10-04 12:10 - 000003744 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA 2024-04-10 20:25 - 2021-10-04 12:10 - 000003520 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore 2024-04-10 20:25 - 2021-10-04 12:10 - 000002316 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - Tester 2024-04-10 20:25 - 2018-11-07 14:23 - 000000000 ____D C:\Program Files\CCleaner 2024-04-10 20:19 - 2022-10-12 22:46 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Telegram Desktop 2024-04-10 20:19 - 2022-10-12 22:46 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Telegram Desktop 2024-04-10 20:19 - 2018-04-13 01:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC-BE x64 2024-04-10 20:19 - 2018-04-13 01:09 - 000000000 ____D C:\Program Files\MPC-BE x64 2024-04-10 15:10 - 2020-01-21 12:28 - 000000000 ____D C:\Users\Tester\AppData\Local\Spotify 2024-04-10 14:53 - 2018-04-12 11:39 - 000000000 ____D C:\Users\Tester\AppData\Local\Packages 2024-04-10 14:41 - 2024-01-06 12:36 - 000000070 _____ C:\Users\Tester\Documents\spotify account konto.txt 2024-04-10 14:33 - 2021-10-04 12:05 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK 2024-04-10 00:44 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2024-04-10 00:43 - 2024-01-04 23:53 - 000000000 ____D C:\WINDOWS\InboxApps 2024-04-10 00:43 - 2021-10-04 12:05 - 000641832 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2024-04-10 00:43 - 2021-10-01 02:20 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\PrintDialog 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\DDFs 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\appraiser 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning 2024-04-10 00:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr 2024-04-09 23:35 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp 2024-04-09 23:34 - 2021-10-04 12:06 - 003017216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll 2024-04-09 23:25 - 2021-10-25 23:28 - 000000000 ____D C:\Program Files\dotnet 2024-04-09 23:25 - 2018-04-13 11:24 - 000000000 ____D C:\ProgramData\Package Cache 2024-04-08 22:53 - 2019-03-22 17:04 - 000000000 ____D C:\Users\Tester\AppData\Local\Ubisoft Game Launcher 2024-04-08 21:10 - 2023-08-30 20:34 - 000000926 _____ C:\Users\Public\Desktop\VLC media player.lnk 2024-04-08 21:09 - 2023-11-19 22:55 - 000001064 _____ C:\Users\Public\Desktop\OBS Studio.lnk 2024-04-08 20:46 - 2019-06-19 08:45 - 000000000 ____D C:\Program Files\Mozilla Firefox 2024-04-08 20:46 - 2018-04-13 00:40 - 000001021 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk 2024-04-08 20:46 - 2018-04-13 00:40 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2024-04-07 21:12 - 2020-11-02 09:38 - 000000000 ____D C:\Users\Tester\AppData\Roaming\OpenVPN Connect 2024-04-07 20:46 - 2021-11-02 22:33 - 000000000 ____D C:\ProgramData\EA Desktop 2024-04-07 20:41 - 2024-01-04 22:35 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WeMod 2024-04-07 20:41 - 2022-02-21 19:26 - 000000000 ____D C:\Users\Tester\AppData\Local\SquirrelTemp 2024-04-07 20:40 - 2023-11-19 22:59 - 000001355 _____ C:\Users\Tester\Desktop\Ubisoft Connect.lnk 2024-04-07 20:37 - 2022-10-05 21:30 - 000000713 _____ C:\Users\Public\Desktop\RetroArch.lnk 2024-04-07 20:36 - 2020-11-02 09:38 - 000000000 ____D C:\Program Files\OpenVPN Connect 2024-04-07 20:35 - 2023-12-20 21:48 - 000000000 ____D C:\ProgramData\obs-studio 2024-04-07 20:34 - 2023-11-19 22:54 - 000000000 ____D C:\Program Files\Mp3tag 2024-04-07 20:33 - 2021-12-16 01:44 - 000000000 ____D C:\WINDOWS\SystemTemp 2024-04-07 20:32 - 2023-11-19 22:54 - 000001074 _____ C:\Users\Tester\Desktop\MakeMKV.lnk 2024-04-07 20:32 - 2018-10-20 11:26 - 000001185 _____ C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MediaInfo.lnk 2024-04-07 20:32 - 2018-04-13 00:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HWiNFO64 2024-04-07 20:32 - 2018-04-13 00:20 - 000000000 ____D C:\Program Files\HWiNFO64 2024-04-07 20:31 - 2022-08-01 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HD Tune Pro 2024-04-07 20:31 - 2022-08-01 19:20 - 000000000 ____D C:\Program Files (x86)\HD Tune Pro 2024-04-07 20:30 - 2020-11-24 11:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskMark8 2024-04-07 20:30 - 2020-11-24 11:50 - 000000000 ____D C:\Program Files\CrystalDiskMark8 2024-04-05 21:47 - 2024-02-19 18:27 - 000002264 _____ C:\Users\Tester\Desktop\Pinokio.lnk 2024-04-05 21:47 - 2023-11-25 14:10 - 000001175 _____ C:\Users\Tester\Desktop\MSI Afterburner.lnk 2024-04-05 21:47 - 2023-11-19 23:00 - 000001179 _____ C:\Users\Tester\Desktop\MuseScore 3.lnk 2024-04-05 21:47 - 2023-11-19 22:45 - 000001043 _____ C:\Users\Tester\Desktop\Core Temp.lnk 2024-04-05 21:47 - 2023-07-02 23:14 - 000001417 _____ C:\Users\Tester\Desktop\SuperDiskFormatter.lnk 2024-04-05 21:47 - 2023-06-13 18:08 - 000002013 _____ C:\Users\Tester\Desktop\Redragon K633CGO-RGB.lnk 2024-04-05 21:47 - 2023-06-10 21:40 - 000002511 _____ C:\Users\Tester\Desktop\Tartube.lnk 2024-04-05 21:47 - 2023-06-10 01:09 - 000002004 _____ C:\Users\Tester\Desktop\Youtube Dowloader P.lnk 2024-04-05 21:47 - 2023-03-24 00:01 - 000001848 _____ C:\Users\Tester\Desktop\NordVPN.lnk 2024-04-05 21:47 - 2023-02-15 21:58 - 000001342 _____ C:\Users\Tester\Desktop\Display Driver Uninstaller.lnk 2024-04-05 21:47 - 2023-01-29 21:30 - 000001085 _____ C:\Users\Tester\Desktop\Tomb1Main - UB.lnk 2024-04-05 21:47 - 2023-01-29 21:30 - 000001073 _____ C:\Users\Tester\Desktop\Tomb1Main.lnk 2024-04-05 21:47 - 2022-11-12 22:02 - 000001397 _____ C:\Users\Tester\Desktop\Fire Toolbox V28.9.lnk 2024-04-05 21:47 - 2022-08-19 10:38 - 000000882 _____ C:\Users\Tester\Desktop\WSCC.lnk 2024-04-05 21:47 - 2022-06-14 17:27 - 000000919 _____ C:\Users\Tester\Desktop\DiskFresh.lnk 2024-04-05 21:47 - 2022-01-25 23:23 - 000001242 _____ C:\Users\Tester\Desktop\Super Mario 64 Plus.lnk 2024-04-05 21:47 - 2021-11-04 22:09 - 000001697 _____ C:\Users\Tester\Desktop\putty.exe - Verknüpfung.lnk 2024-04-05 19:55 - 2018-04-12 11:39 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Adobe 2024-04-05 19:54 - 2022-10-13 14:18 - 000000000 ____D C:\Users\Tester\AppData\Roaming\com.adobe.dunamis 2024-04-05 19:54 - 2020-12-01 10:45 - 000000000 ____D C:\Program Files\Common Files\Adobe 2024-04-05 19:54 - 2020-12-01 10:45 - 000000000 ____D C:\Program Files\Adobe 2024-04-05 19:54 - 2020-12-01 10:45 - 000000000 ____D C:\Program Files (x86)\Adobe 2024-04-05 19:54 - 2019-10-14 12:24 - 000000000 ____D C:\Users\Tester\AppData\LocalLow\Adobe 2024-04-05 19:54 - 2019-06-19 12:39 - 000000000 ____D C:\Users\Tester\Documents\Adobe 2024-04-05 09:24 - 2023-03-24 00:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NordSec 2024-04-05 09:24 - 2023-03-24 00:01 - 000000000 ____D C:\Program Files\NordVPN 2024-04-01 23:21 - 2018-10-29 13:38 - 000000000 ____D C:\Users\Tester\AppData\Roaming\AIMP 2024-03-26 22:11 - 2018-04-12 11:38 - 000000000 ___SD C:\Users\Tester\AppData\Roaming\Microsoft\Credentials 2024-03-26 22:03 - 2019-01-23 13:56 - 000000000 ____D C:\Users\Tester\AppData\Roaming\audacity 2024-03-24 15:13 - 2018-04-13 00:18 - 000000000 ____D C:\Program Files (x86)\Google 2024-03-24 10:57 - 2022-07-02 10:35 - 000000000 ____D C:\Users\Tester\AppData\Local\AMD 2024-03-21 23:28 - 2023-06-06 12:13 - 000000000 ____D C:\AMD 2024-03-21 23:28 - 2022-07-02 10:34 - 000000000 ____D C:\Program Files\AMD 2024-03-21 22:01 - 2023-08-05 11:27 - 000000000 ____D C:\Users\Tester\AppData\Local\Wondershare 2024-03-21 22:01 - 2023-08-05 11:27 - 000000000 ____D C:\ProgramData\Wondershare Filmora 2024-03-21 21:58 - 2019-01-23 13:54 - 000000128 _____ C:\Users\Tester\AppData\Roaming\winscp.rnd 2024-03-21 21:58 - 2018-04-13 03:15 - 000000000 ____D C:\Program Files (x86)\WinSCP 2024-03-21 21:57 - 2018-04-14 16:40 - 000000000 ____D C:\Program Files\Beyond Compare 4 2024-03-21 21:57 - 2018-04-13 01:04 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR 2024-03-21 21:57 - 2018-04-13 01:04 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR 2024-03-21 21:57 - 2018-04-13 01:04 - 000000000 ____D C:\Program Files\WinRAR 2024-03-21 21:56 - 2022-07-28 22:31 - 000001062 _____ C:\Users\Public\Desktop\Winamp.lnk 2024-03-21 21:56 - 2018-04-13 01:06 - 000000000 ____D C:\Program Files (x86)\Winamp 2024-03-21 21:53 - 2022-10-12 22:01 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Python 3.10 2024-03-21 21:53 - 2022-10-12 22:01 - 000000000 ____D C:\Users\Tester\AppData\Local\Package Cache 2024-03-21 21:49 - 2023-05-30 19:46 - 000000000 ____D C:\Program Files (x86)\NS-USBloader 2024-03-21 21:49 - 2020-10-29 10:40 - 000000000 ____D C:\Program Files\NZXT CAM 2024-03-21 21:48 - 2023-01-29 18:45 - 000070537 _____ C:\WINDOWS\SysWOW64\nglide_uninst.exe 2024-03-21 21:48 - 2021-10-05 08:57 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla 2024-03-21 21:47 - 2018-12-30 19:52 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2 2024-03-21 21:42 - 2023-11-25 14:09 - 000001057 _____ C:\Users\Public\Desktop\IrfanView 64.lnk 2024-03-21 21:42 - 2023-11-25 14:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IrfanView 2024-03-21 21:42 - 2022-09-25 00:15 - 000002175 _____ C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\f.lux.lnk 2024-03-21 21:42 - 2022-08-19 23:12 - 000000000 ____D C:\Program Files\blobsaver 2024-03-21 21:41 - 2022-09-16 21:22 - 000000000 ____D C:\ProgramData\AnyDesk 2024-03-21 21:41 - 2022-09-16 21:22 - 000000000 ____D C:\Program Files (x86)\AnyDesk 2024-03-21 21:41 - 2022-09-16 21:21 - 000000000 ____D C:\Users\Tester\AppData\Roaming\AnyDesk 2024-03-21 21:39 - 2023-11-19 22:43 - 000000000 ____D C:\Users\Tester\.wingetui 2024-03-21 21:39 - 2023-11-19 22:43 - 000000000 ____D C:\Program Files\WingetUI 2024-03-21 21:39 - 2018-06-26 09:57 - 000000000 ____D C:\ProgramData\Packages 2024-03-20 21:59 - 2022-10-22 00:55 - 000108136 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe 2024-03-20 21:59 - 2022-10-22 00:55 - 000075368 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe 2024-03-20 21:59 - 2021-12-16 18:44 - 000706152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll 2024-03-20 21:59 - 2021-11-18 00:00 - 000206440 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll 2024-03-20 21:59 - 2021-11-02 23:18 - 002709096 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll 2024-03-20 21:59 - 2021-11-02 23:18 - 000218728 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll 2024-03-20 21:59 - 2021-11-02 23:18 - 000145000 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll 2024-03-19 21:56 - 2023-08-03 20:43 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\LaunchBox 2024-03-18 22:19 - 2020-11-24 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools 2024-03-18 22:19 - 2018-04-14 16:49 - 000000000 ____D C:\Program Files\Microsoft Office 2024-03-18 22:16 - 2018-11-05 13:47 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Word 2024-03-16 22:53 - 2022-04-29 23:08 - 000000000 ____D C:\ProgramData\SupremoRemoteDesktop 2024-03-15 22:42 - 2022-02-11 00:17 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38 2024-03-15 22:29 - 2022-12-28 01:02 - 000000000 ____D C:\Users\Tester\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2024-03-15 22:29 - 2018-04-16 18:51 - 000000000 ____D C:\Users\Tester\AppData\Local\Steam 2024-03-15 22:24 - 2022-10-25 22:25 - 000000000 ____D C:\WINDOWS\Minidump 2024-03-15 22:24 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2024-03-15 22:24 - 2018-10-08 23:25 - 000000000 ____D C:\Users\Tester\AppData\Roaming\TS3Client 2024-03-15 21:53 - 2023-03-23 01:19 - 000000000 ____D C:\Users\Tester\AppData\Local\NordVPN ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======== 2019-01-23 13:54 - 2024-03-21 21:58 - 000000128 _____ () C:\Users\Tester\AppData\Roaming\winscp.rnd 2023-05-25 20:51 - 2023-05-25 20:51 - 000000061 _____ () C:\Users\Tester\AppData\Roaming\~SiMPLEX.ini 2023-01-31 07:24 - 2023-01-31 07:24 - 000005414 _____ () C:\Users\Tester\AppData\Local\93086452306 2019-06-24 04:35 - 2019-06-24 04:35 - 000000000 _____ () C:\Users\Tester\AppData\Local\oobelibMkey.log 2019-10-24 15:56 - 2024-04-12 23:07 - 000000128 _____ () C:\Users\Tester\AppData\Local\PUTTY.RND 2024-02-26 21:35 - 2024-02-26 21:35 - 000000921 _____ () C:\Users\Tester\AppData\Local\recently-used.xbel 2018-09-29 19:47 - 2023-03-05 13:17 - 000007660 _____ () C:\Users\Tester\AppData\Local\Resmon.ResmonCfg ==================== SigCheck ============================ (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) ==================== Ende von FRST.txt ========================