Windows 10: Datenübertragung schwankt sehr stark und Chrome friert immer wieder ein.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-02-2021
durchgeführt von Volker (Administrator) auf VOLKER-LAPTOP (Packard Bell EasyNote LM86) (08-02-2021 16:20:19)
Gestartet von C:\Users\Volker\Desktop
Geladene Profile: Volker
Platform: Windows 10 Home Version 20H2 19042.789 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Acer Incorporated -> Acer Incorporated) C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Acer Incorporated -> Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Acer Incorporated -> Acer) C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cnext.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(Alcor Micro Corp.) [Datei ist nicht signiert] C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe
(Audials AG -> ) C:\Program Files (x86)\Audials\MusicTube 2020\AudialsNotifier.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DTAgent.exe
(AVB Disc Soft, SIA -> Disc Soft Ltd) C:\Program Files\DAEMON Tools Ultra\DTShellHlp.exe
(Bitrix, Inc. -> ) C:\Program Files (x86)\Bitrix24\BDisk\BDisk.exe
(Bitrix, Inc. -> Bitrix) C:\Program Files (x86)\Bitrix24\Bitrix24.exe <13>
(Brother Industries, Ltd. -> Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCcUxSys.exe
(Brother Industries, Ltd. -> Brother Industries, Ltd.) C:\Program Files (x86)\ControlCenter4\BrCtrlCntr.exe
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(CyberLink -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMworker.exe
(Dritek System Inc. -> Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <15>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Innovative Solutions Grup SRL -> Innovative Solutions GRUP SRL) C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Intel Corporation-Wireless Connectivity Solutions -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(Intel(R) Driver & Support Assistant -> Intel) C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDCountdown.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDPOP3.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDRSS.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\ArxApplets\Discord\logitechg_discord.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(MAGIX AG) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
(NewTech Infosystems, Inc -> NewTech Infosystems, Inc.) C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe
(Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(TeamViewer GmbH -> TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TomTom) [Datei ist nicht signiert] C:\Program Files\TomTom HOME\TTHOMEService.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [9643552 2009-12-11] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Acer ePower Management] => C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe [860192 2010-02-05] (Acer Incorporated -> Acer Incorporated)
HKLM\...\Run: [AmIcoSinglun64] => C:\Program Files (x86)\AmIcoSingLun\AmIcoSinglun64.exe [323584 2009-09-23] (Alcor Micro Corp.) [Datei ist nicht signiert]
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [17987704 2017-10-20] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [StartCN] => C:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [3951280 2017-12-30] (Synaptics Incorporated -> Synaptics Incorporated)
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284696 2009-12-23] (Intel Corporation -> Intel Corporation)
HKLM-x32\...\Run: [LManager] => C:\Program Files (x86)\Launch Manager\LManager.exe [1288784 2010-02-24] (Dritek System Inc. -> Dritek System Inc.)
HKLM-x32\...\Run: [BackupManagerTray] => C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\BackupManagerTray.exe [263936 2010-01-12] (NewTech Infosystems, Inc -> NewTech Infosystems, Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => "C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe"
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [146584 2017-11-07] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [2976256 2018-01-19] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [DSATray] => C:\Program Files (x86)\Intel Driver and Support Assistant\DsaTray.exe [137464 2018-07-30] (Intel(R) Driver & Support Assistant -> Intel)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-04-21] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2013-05-01] (Apple Inc.) [Datei ist nicht signiert]
HKLM\...\Policies\Explorer: [EnableShellExecuteHooks] 1
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [swg] => C:\Program Files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe [39408 2017-12-30] (Google Inc -> Google Inc.)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [VLC Update] => C:\Users\Volker\AppData\Roaming\VLC Update\Updater.exe [194440 2018-12-20] (Arne Koenig -> ) <==== ACHTUNG
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [Directory Opus Desktop Dblclk] => C:\Program Files\GPSoftware\Directory Opus\dopusrt.exe [712432 2019-01-22] (GP Software -> GP Software)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [24552064 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3412696 2021-02-05] (Valve -> Valve Corporation)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [AudialsNotifier] => C:\Program Files (x86)\Audials\MusicTube 2020\AudialsNotifier.exe [2200280 2019-12-17] (Audials AG -> )
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [DAEMON Tools Ultra Automount] => C:\Program Files\DAEMON Tools Ultra\DTAgent.exe [483184 2020-01-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [Bitrix24] => C:\Program Files (x86)\Bitrix24\Bitrix24.exe [16275544 2021-01-28] (Bitrix, Inc. -> Bitrix)
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Run: [Paco] => C:\Users\Volker\AppData\Roaming\Paco\Paco.exe
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2742161540-95534113-2615291607-1006\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2742161540-95534113-2615291607-1008\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Print\Monitors\pdfcmon: C:\WINDOWS\system32\pdfcmon.dll [116736 2019-07-07] (pdfforge GmbH) [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\88.0.4324.150\Installer\chrmstp.exe [2021-02-08] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\Users\Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk [2018-05-06]
ShortcutTarget: OneNote 2010 Bildschirmausschnitt- und Startprogramm.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy\User: Beschränkung ? <==== ACHTUNG
HKU\S-1-5-21-2742161540-95534113-2615291607-1001\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0B24BDAD-D480-407F-B568-4ADD2941E214} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\explorer.exe /NOUACCHECK
Task: {1290313B-5D1B-4D73-AFC6-DF984A006788} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {13DBE7F8-A3B5-4064-BC95-6AD1EFFCA449} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {14ED9B02-04B9-4B21-A854-E898A97E5D21} - System32\Tasks\klcp_update => C:\Program Files (x86)\K-Lite Codec Pack\Tools\CodecTweakTool.exe [1706496 2020-08-12] () [Datei ist nicht signiert]
Task: {1716314E-0151-4DBC-AC35-4A6DCBE7FDE0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-30] (Google Inc -> Google Inc.)
Task: {1DE8DE21-2351-4717-B78F-4298FC2BE636} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {22A752E3-C0A6-4AA2-BE3F-36A95829C0DE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2495F40A-C5F7-4A66-A2CE-73E7E6DCB7D4} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {24C5A14E-95A7-4610-9219-EFF624C69009} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2AC9AF5D-DC6E-4E67-94FB-491EFDE99CD9} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {2FAB8ED5-8C8A-4980-8DC0-C0998E9DD9D5} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [18458752 2019-10-14] (Piriform Software Ltd -> Piriform Ltd)
Task: {32037862-B2BA-4F73-A8DE-00EED550800C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {32D59BBF-8AB6-4AB7-A0D3-4D7237575E4B} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {36379A36-25C9-4CA8-9488-1A154C83B30F} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {3F454FCE-EF68-4329-967F-10AA336F3731} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {3FE03C20-1C62-4EB6-8F2D-50C8789DDCCC} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {44846341-30E2-474B-B069-7640185A27FE} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {471F2E1E-0BA2-49E3-9C94-A06CFA9643C0} - System32\Tasks\UninstallMonitor => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe [18587288 2020-07-29] (Innovative Solutions Grup SRL -> Innovative Solutions GRUP SRL)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4E32F7FC-ED88-4A41-AC78-4D2C64E8FEFB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5C6F35CB-2013-4137-ABB7-3942A8A512A2} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {68630A66-71EA-4B00-9308-5959AF6325FD} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {6BF82019-C2FF-4D11-9294-9F18169BBEFB} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {71FB55A7-C047-4596-A8AA-012B7F85A6DF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2017-12-30] (Google Inc -> Google Inc.)
Task: {73DE0B32-76CA-4165-8F6A-593013C47AE1} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {773551A0-8C86-4824-8EAD-65771F379800} - System32\Tasks\Health-Check-deep => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [6894232 2020-07-29] (Innovative Solutions Grup SRL -> Innovative Solutions)
Task: {7A046145-0A43-465F-A29B-965A47AD4BE6} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {9125AE5C-E0D6-441C-9CFB-A0B203529CEC} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {97E8EF20-8B6C-4DE2-A806-48538E41285D} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A09F0753-BEF7-4235-8913-C64A9FBF1E8C} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A1D73B71-20D4-4A30-8025-67986654012C} - System32\Tasks\SidebarExecute => C:\Program Files\Windows Sidebar\sidebar.exe
Task: {AE9251A9-0DA7-46B0-BD49-36BF5834E9B3} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [18168 2017-07-13] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B0FE3E9B-FF54-4886-A630-E304B94A4958} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B302F196-546D-428B-971D-E6F3E7D7BA7F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B683395A-8B35-4EC6-9AC7-49E5716904F6} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {B7F0AA75-9C3A-4E89-BE8E-D4F05BBD9EFE} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BFFE61BB-C346-464E-A7EE-B6A87F6FB72F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [608384 2019-10-14] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {C2792DBE-2CE8-4B6E-9993-8A2950707DC8} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [569416 2016-02-23] (Apple Inc. -> Apple Inc.)
Task: {C2E861AC-3BFD-487A-B0CD-42B3D551EC22} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {C375BDB3-DFE9-41B0-8EE3-F78C9A9B054E} - System32\Tasks\AupAvUpdate => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\updAvTask.exe
Task: {C628F72D-FDB3-4832-98D3-9D4EC8A78D60} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CACD807C-04A5-4624-8C64-DC919563346C} - System32\Tasks\Health-Check => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [6894232 2020-07-29] (Innovative Solutions Grup SRL -> Innovative Solutions)
Task: {D089FA88-F623-46F9-A580-2ED41BBE94D1} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2488664 2021-01-11] (Overwolf Ltd -> Overwolf LTD)
Task: {DA38A8C2-66A1-450C-958E-4B3B2B36A043} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {DA7BC825-C293-42FB-B2EC-86F2490CBBEA} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {DE4EB5D2-044E-46CF-870F-AA872BCDE26A} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E3A17930-433B-4880-9C40-837C648F3678} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EDBB7409-976A-49CB-9030-747F5042EABF} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F58B2AA1-AAF9-4F52-85E2-64F186A70FD9} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {F5B24A6F-BCB8-4DCE-AFB0-DEE988BD84CB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Health-Check-deep.job => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe
Task: C:\WINDOWS\Tasks\Health-Check.job => C:\Program Files (x86)\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

AutoConfigURL: [S-1-5-21-2742161540-95534113-2615291607-1001] => 
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{096d7df9-5901-48f8-ab40-64926b2dabf0}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{51853892-e491-4f2e-a2c8-138ae5023c7b}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{6e810c01-91d5-46c9-a7e6-b47aeb9bdbd2}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{a2bff9e2-0e45-4d15-95d2-3c6bf840dcd3}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Volker\AppData\Local\Microsoft\Edge\User Data\Default [2021-02-08]
Edge StartupUrls: Default -> "hxxps://www.google.de/?gws_rd=ssl"
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: if1xf4jl.default
FF ProfilePath: C:\Users\Volker\AppData\Roaming\Mozilla\Firefox\Profiles\if1xf4jl.default [2021-02-08]
FF Homepage: Mozilla\Firefox\Profiles\if1xf4jl.default -> hxxps://www.google.de/?gws_rd=ssl
FF Extension: (Browser Securos) - C:\Users\Volker\AppData\Roaming\Mozilla\Firefox\Profiles\if1xf4jl.default\Extensions\addon@browsersecuros.com.xpi [2019-11-21]
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default [2021-02-08]
CHR Notifications: Default -> hxxps://www.daemon-tools.cc; hxxps://www.facebook.com
CHR Extension: (Präsentationen) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-05-21]
CHR Extension: (Docs) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-05-21]
CHR Extension: (Google Drive) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-25]
CHR Extension: (YouTube) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-05-21]
CHR Extension: (Slate) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmhmcmgkegfffbbfobhjpdbimgmoohap [2019-05-26]
CHR Extension: (MyJDownloader Browser Erweiterung) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2020-12-07]
CHR Extension: (Tabellen) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-05-21]
CHR Extension: (Google Docs Offline) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-11-16]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2021-02-08]
CHR Extension: (Recordify Title Discover) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgbclpocodjecojibeaaglcgndegljl [2020-11-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Extension: (Google Mail) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-22]
CHR Extension: (Chrome Media Router) - C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-01-30]
CHR Profile: C:\Users\Volker\AppData\Local\Google\Chrome\User Data\Guest Profile [2019-10-19]
CHR Profile: C:\Users\Volker\AppData\Local\Google\Chrome\User Data\System Profile [2019-10-19]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
R3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [314368 2018-01-18] (Brother Industries, Ltd.) [Datei ist nicht signiert]
S2 CLKMSVC10_99E320F5; C:\Program Files (x86)\Cyberlink\PowerDVD12\Common\NavFilter\kmsvc.exe [303544 2015-07-02] (CyberLink Corp. -> CyberLink)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-03-22] (Digital Wave Ltd -> Digital Wave Ltd.)
R3 Disc Soft Ultra Bus Service; C:\Program Files\DAEMON Tools Ultra\DiscSoftBusServiceUltra.exe [7262064 2020-01-06] (AVB Disc Soft, SIA -> Disc Soft Ltd)
R2 DSAService; C:\Program Files (x86)\Intel Driver and Support Assistant\DSAService.exe [23288 2018-07-30] (Intel(R) Driver & Support Assistant -> Intel)
R2 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [865824 2010-02-05] (Acer Incorporated -> Acer Incorporated)
R2 Fabs; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\FABS.exe [1858048 2012-01-23] (MAGIX AG) [Datei ist nicht signiert]
S3 FirebirdServerMAGIXInstance; C:\Program Files (x86)\Common Files\MAGIX Services\Database\bin\fbserver.exe [2702848 2011-04-26] (MAGIX®) [Datei ist nicht signiert]
R2 Greg_Service; C:\Program Files (x86)\Packard Bell\Registration\GregHSRW.exe [1150496 2009-08-28] (Acer Incorporated -> Acer Incorporated)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [225400 2017-10-20] (Logitech Inc -> Logitech Inc.)
R2 NTI IScheduleSvc; C:\Program Files (x86)\NewTech Infosystems\Packard Bell MyBackup\IScheduleSvc.exe [255744 2010-01-06] (NewTech Infosystems, Inc -> NewTech Infosystems, Inc.)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2488664 2021-01-11] (Overwolf Ltd -> Overwolf LTD)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [390672 2012-08-08] (CyberLink -> )
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [11665136 2019-01-16] (TeamViewer GmbH -> TeamViewer GmbH)
R2 TTHOMEService; C:\Program Files\TomTom HOME\TTHOMEService.exe [97792 2019-04-17] (TomTom) [Datei ist nicht signiert]
R2 Updater Service; C:\Program Files\Packard Bell\Packard Bell Updater\UpdaterService.exe [240160 2009-07-03] (Acer Incorporated -> Acer)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WsDrvInst; C:\Program Files (x86)\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe [105064 2018-06-12] (Wondershare Technology Co.,Ltd -> Wondershare)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 amdkmafd; C:\WINDOWS\System32\drivers\amdkmafd.sys [23240 2016-02-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 ampa; C:\WINDOWS\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 ddmdrv; C:\WINDOWS\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )
R1 dokan1; C:\WINDOWS\System32\DRIVERS\dokan1.sys [102376 2017-11-28] (ISLOG -> Dokan Project)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2018-05-27] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2018-05-27] (Disc Soft Ltd -> Disc Soft Ltd)
S3 FWLANUSB; C:\WINDOWS\system32\DRIVERS\fwlanusb.sys [460800 2010-10-22] (AVM GmbH) [Datei ist nicht signiert]
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2017-10-20] (Logitech Inc -> Logitech Inc.)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [207344 2019-06-08] (Disc Soft Ltd -> Duplex Secure Ltd)
R2 TurboB; C:\WINDOWS\System32\DRIVERS\TurboB.sys [13784 2009-11-02] (Intel(R) Extreme Tuning Utility -> )
R1 UimBus; C:\WINDOWS\System32\drivers\uimbus.sys [109504 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
R1 Uim_DEVIM; C:\WINDOWS\System32\drivers\uimdevim.sys [46016 2018-11-27] (Paragon Software GmbH -> Paragon Software GmbH)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2020-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-07] (Microsoft Windows -> Microsoft Corporation)
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files (x86)\CyberLink\PowerDVD9\000.fcl [146928 2010-01-22] (CyberLink -> CyberLink Corp.)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-02-08 16:20 - 2021-02-08 16:21 - 000034216 _____ C:\Users\Volker\Desktop\FRST.txt
2021-02-08 16:19 - 2021-02-08 16:21 - 000000000 ____D C:\FRST
2021-02-08 16:19 - 2021-02-08 16:18 - 002297344 _____ (Farbar) C:\Users\Volker\Desktop\FRST64.exe
2021-02-08 16:18 - 2021-02-08 16:18 - 002297344 _____ (Farbar) C:\Users\Volker\Downloads\FRST64.exe
2021-02-08 16:05 - 2021-02-08 16:05 - 000000000 ____D C:\Users\Volker\Downloads\Freigabe
2021-02-08 14:32 - 2021-02-08 16:02 - 000000374 _____ C:\WINDOWS\Tasks\Health-Check-deep.job
2021-02-08 14:32 - 2021-02-08 16:02 - 000000366 _____ C:\WINDOWS\Tasks\Health-Check.job
2021-02-08 14:32 - 2021-02-08 15:47 - 000004112 _____ C:\WINDOWS\system32\Tasks\AupAvUpdate
2021-02-08 14:32 - 2021-02-08 15:40 - 000003826 _____ C:\WINDOWS\system32\Tasks\UninstallMonitor
2021-02-08 14:32 - 2021-02-08 14:32 - 000003002 _____ C:\WINDOWS\system32\Tasks\Health-Check-deep
2021-02-08 14:32 - 2021-02-08 14:32 - 000002984 _____ C:\WINDOWS\system32\Tasks\Health-Check
2021-02-08 14:31 - 2021-02-08 14:32 - 000000000 ____D C:\Users\Volker\AppData\Local\Innovative Solutions
2021-02-08 14:31 - 2021-02-08 14:31 - 000001724 _____ C:\Users\Volker\Desktop\Advanced Uninstaller PRO 13.lnk
2021-02-08 14:31 - 2021-02-08 14:31 - 000000000 ____D C:\Program Files (x86)\Innovative Solutions
2021-02-08 14:30 - 2021-02-08 14:31 - 010698976 _____ (Innovative Solutions ) C:\Users\Volker\Downloads\Advanced_Uninstaller13.exe
2021-02-08 14:12 - 2010-10-22 01:00 - 000480632 ____N (AVM Berlin) C:\WINDOWS\instwcli.dex
2021-02-08 04:16 - 2021-02-08 04:29 - 000000000 ____D C:\Users\Volker\AppData\LocalLow\IGDump
2021-02-08 04:15 - 2021-02-08 04:15 - 000000000 ____D C:\Users\Volker\AppData\Local\mbam
2021-02-08 04:11 - 2021-02-08 04:11 - 008457584 _____ (Malwarebytes) C:\Users\Volker\Downloads\adwcleaner_8.0.9.1.exe
2021-02-08 03:57 - 2021-02-08 04:01 - 000000000 ____D C:\AdwCleaner
2021-02-08 03:57 - 2021-02-08 03:57 - 000001174 _____ C:\Users\Volker\Desktop\Amazon.lnk
2021-02-08 03:41 - 2021-02-08 03:41 - 000007605 _____ C:\Users\Volker\AppData\Local\Resmon.ResmonCfg
2021-02-08 03:37 - 2021-02-08 04:07 - 000002389 _____ C:\Users\Volker\Desktop\Google Chrome.lnk
2021-02-08 03:27 - 2021-02-08 03:27 - 001304160 _____ (Google LLC) C:\Users\Volker\Downloads\ChromeSetup.exe
2021-02-07 04:06 - 2021-02-07 04:44 - 000000000 ____D C:\Users\Volker\Desktop\G13Profile
2021-02-06 22:12 - 2021-02-06 22:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-02-06 22:12 - 2021-02-06 22:12 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-02-06 22:11 - 2021-02-06 22:11 - 001314112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-02-06 22:11 - 2021-02-06 22:11 - 000231232 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-02-06 22:11 - 2021-02-06 22:11 - 000010908 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-02-06 14:56 - 2021-02-06 15:16 - 000000000 ____D C:\Users\Volker\Desktop\Stick
2021-02-03 23:05 - 2021-02-03 23:05 - 000000032 _____ C:\Users\Volker\Desktop\Neues Textdokument (2).txt
2021-02-03 22:54 - 2021-02-03 22:54 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2021-02-01 17:54 - 2021-02-01 19:24 - 000010160 _____ C:\Users\Volker\Desktop\Strom 2020.xlsx
2021-01-28 17:41 - 2021-01-28 18:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-01-28 17:39 - 2021-01-28 17:41 - 115625224 _____ (Bitrix, Inc) C:\Users\Volker\Downloads\bitrix24_desktop (2).exe
2021-01-24 18:18 - 2021-01-24 18:18 - 000286851 _____ C:\Users\Volker\Downloads\BlueSteel.vlt
2021-01-24 14:45 - 2021-01-24 15:01 - 000016633 _____ C:\Users\Volker\index.html
2021-01-24 14:44 - 2021-01-24 15:01 - 000000128 _____ C:\Users\Volker\AppData\Local\PUTTY.RND
2021-01-24 14:40 - 2021-01-24 15:02 - 000000000 ____D C:\Users\Volker\AppData\Roaming\FileZilla
2021-01-24 14:40 - 2021-01-24 14:53 - 000000000 ____D C:\Users\Volker\AppData\Local\FileZilla
2021-01-24 14:40 - 2021-01-24 14:40 - 000000821 _____ C:\Users\Volker\Downloads\filezilla_u47439106.xml
2021-01-24 14:40 - 2021-01-24 14:40 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2021-01-24 14:39 - 2021-01-24 14:40 - 011321472 _____ (Tim Kosse) C:\Users\Volker\Downloads\FileZilla_3.52.2_win64-setup.exe
2021-01-20 19:45 - 2021-01-20 19:45 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-01-20 19:45 - 2021-01-20 19:45 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-01-20 19:45 - 2021-01-20 19:45 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-01-20 19:45 - 2021-01-20 19:45 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-01-20 19:45 - 2021-01-20 19:45 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-01-20 19:45 - 2021-01-20 19:45 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-01-20 19:45 - 2021-01-20 19:45 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-01-20 19:45 - 2021-01-20 19:45 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-01-20 19:45 - 2021-01-20 19:45 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-01-20 19:45 - 2021-01-20 19:45 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-01-20 19:45 - 2021-01-20 19:45 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-01-20 19:45 - 2021-01-20 19:45 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-01-20 19:45 - 2021-01-20 19:45 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-01-20 19:44 - 2021-01-20 19:44 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-01-20 19:44 - 2021-01-20 19:44 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-01-20 19:44 - 2021-01-20 19:44 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-01-20 19:44 - 2021-01-20 19:44 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-01-20 19:44 - 2021-01-20 19:44 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-01-20 19:44 - 2021-01-20 19:44 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-01-20 19:44 - 2021-01-20 19:44 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-01-20 19:44 - 2021-01-20 19:44 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-01-20 19:44 - 2021-01-20 19:44 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-01-20 19:44 - 2021-01-20 19:44 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-01-20 19:44 - 2021-01-20 19:44 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-01-20 19:44 - 2021-01-20 19:44 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-01-20 19:44 - 2021-01-20 19:44 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-01-20 19:44 - 2021-01-20 19:44 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-01-20 19:43 - 2021-01-20 19:43 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-01-20 19:43 - 2021-01-20 19:43 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-01-20 19:43 - 2021-01-20 19:43 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-01-20 19:43 - 2021-01-20 19:43 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-01-20 19:43 - 2021-01-20 19:43 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-01-20 19:42 - 2021-01-20 19:42 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-01-20 19:42 - 2021-01-20 19:42 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-01-20 19:23 - 2021-01-20 19:25 - 115607048 _____ (Bitrix, Inc) C:\Users\Volker\Downloads\bitrix24_desktop (1).exe

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-02-08 16:19 - 2017-12-30 22:43 - 000000000 ____D C:\Users\Volker\AppData\LocalLow\Mozilla
2021-02-08 16:12 - 2017-12-31 03:43 - 000000000 ____D C:\Users\Volker\AppData\Local\JDownloader v2.0
2021-02-08 16:10 - 2020-11-14 05:21 - 001722788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-02-08 16:10 - 2019-12-07 15:50 - 000744788 _____ C:\WINDOWS\system32\perfh007.dat
2021-02-08 16:10 - 2019-12-07 15:50 - 000150174 _____ C:\WINDOWS\system32\perfc007.dat
2021-02-08 16:10 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-02-08 16:04 - 2019-12-03 21:44 - 000000000 ____D C:\Program Files (x86)\Steam
2021-02-08 16:02 - 2020-11-14 05:26 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-02-08 16:02 - 2020-11-14 05:10 - 000008192 ___SH C:\DumpStack.log.tmp
2021-02-08 16:02 - 2020-07-28 17:42 - 000190664 ____N (CyberLink Corp.) C:\WINDOWS\system32\Drivers\rikvm_99E320F5.sys
2021-02-08 16:02 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2021-02-08 16:02 - 2019-02-09 15:24 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-02-08 16:01 - 2020-11-14 04:01 - 000000000 ____D C:\Users\Volker
2021-02-08 15:51 - 2019-04-14 19:55 - 000000000 ____D C:\Users\Volker\Desktop\Dateien
2021-02-08 15:01 - 2018-12-16 15:53 - 000000000 ____D C:\Users\Volker\AppData\Local\CrashDumps
2021-02-08 14:28 - 2019-10-18 22:16 - 000000000 ____D C:\Program Files\CCleaner
2021-02-08 13:59 - 2020-11-14 05:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-02-08 05:21 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-02-08 05:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-02-08 04:29 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-02-08 04:13 - 2017-12-30 03:37 - 000000000 ____D C:\Users\Volker\AppData\Roaming\vlc
2021-02-08 03:13 - 2018-02-01 22:32 - 000000000 ____D C:\Users\Volker\Documents\Outlook-Dateien
2021-02-07 20:35 - 2020-11-14 05:26 - 000004166 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{9F605D13-3D1F-4A50-97A2-D2B3E99D3083}
2021-02-06 22:56 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-06 22:46 - 2020-11-14 05:10 - 000493120 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-02-06 22:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-02-06 22:29 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-02-06 21:58 - 2020-11-14 01:29 - 000000000 ___HD C:\$WinREAgent
2021-02-06 14:39 - 2020-11-14 05:26 - 000003630 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-02-06 14:39 - 2020-11-14 05:26 - 000003506 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-02-03 22:56 - 2017-12-30 02:49 - 000000000 ____D C:\Users\Volker\AppData\Local\Adobe
2021-02-03 22:55 - 2018-02-01 18:05 - 000000000 ____D C:\Users\Volker\AppData\LocalLow\Adobe
2021-02-03 22:54 - 2017-12-30 09:02 - 000000000 ____D C:\Users\Volker\AppData\Local\Packages
2021-02-03 22:54 - 2017-12-30 02:49 - 000000000 ____D C:\Users\Volker\AppData\Roaming\Adobe
2021-02-03 22:53 - 2017-12-30 02:47 - 000000000 ____D C:\Program Files (x86)\Adobe
2021-02-03 17:51 - 2017-12-31 03:46 - 000000000 ____D C:\Users\Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2021-02-01 17:42 - 2019-09-09 00:35 - 000000000 ____D C:\Program Files (x86)\Bitrix24
2021-01-29 22:00 - 2018-02-07 16:20 - 000000000 ____D C:\Users\Volker\AppData\Roaming\ControlCenter4
2021-01-29 21:58 - 2017-12-30 22:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-01-28 17:44 - 2018-02-07 15:25 - 000000000 ____D C:\Program Files (x86)\Browny02
2021-01-28 17:43 - 2018-02-07 15:25 - 000000000 ____D C:\Program Files (x86)\ControlCenter4
2021-01-28 17:41 - 2019-09-09 00:37 - 000000000 ____D C:\Users\Volker\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitrix24
2021-01-24 15:13 - 2018-01-01 06:38 - 000000000 ____D C:\Program Files (x86)\Overwolf
2021-01-24 15:04 - 2018-01-01 02:37 - 000000350 _____ C:\WINDOWS\BRRBCOM.INI
2021-01-24 12:59 - 2017-12-30 12:45 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-01-20 19:50 - 2020-11-14 03:30 - 000000000 ___SD C:\WINDOWS\system32\lxss
2021-01-20 19:50 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-01-20 19:50 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2021-01-20 19:50 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-01-20 19:42 - 2020-11-14 05:11 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-01-20 19:21 - 2017-12-30 12:43 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-20 19:09 - 2020-12-15 10:09 - 000003606 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6ba3d49e44208
2021-01-20 19:09 - 2020-11-14 05:26 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-01-20 19:06 - 2017-12-30 12:43 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-01-03 22:43 - 2018-01-05 23:43 - 000000052 _____ () C:\Users\Volker\AppData\Local\anAHOVcpCJ
2021-01-24 14:44 - 2021-01-24 15:01 - 000000128 _____ () C:\Users\Volker\AppData\Local\PUTTY.RND
2021-02-08 03:41 - 2021-02-08 03:41 - 000007605 _____ () C:\Users\Volker\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================