Defender Meldung: PUA:Win32/Presenoker

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-02-2021 01
durchgeführt von madtr (Administrator) auf KITCHEN (09-02-2021 09:39:33)
Gestartet von C:\Users\madtr\OneDrive\Desktop
Geladene Profile: madtr
Platform: Windows 10 Pro Version 20H2 19042.789 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12110.26.53016.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Ashampoo GmbH & Co. KG -> ) C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 10\UI10Guard.exe
(Cisco Systems Inc. -> Cisco Systems, Inc) C:\Users\madtr\AppData\Local\CiscoSparkLauncher\41.2.0.17887_5693e0b0-741e-4521-abeb-3b50655b4e22\dependencies\CiscoCollabHostCef.exe
(Cisco Systems Inc. -> Cisco Systems, Inc) C:\Users\madtr\AppData\Local\CiscoSparkLauncher\CiscoCollabHost.exe <4>
(Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\madtr\AppData\Local\WebEx\ciscowebexstart.exe
(Cisco WebEx LLC -> Cisco Webex LLC) C:\Users\madtr\AppData\Local\WebEx\WebEx\Meetings\atmgr.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(KORG INC. -> KORG Inc.) C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper.exe
(Logitech Inc -> ) C:\Program Files\LGHUB\logi_analytics_client.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub.exe <4>
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\logi_crashpad_handler.exe <2>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\madtr\AppData\Local\Microsoft\OneDrive\21.016.0124.0002\FileCoAuth.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\madtr\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\madtr\AppData\Local\Microsoft\Teams\current\Teams.exe <9>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2011.6-0\NisSrv.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Windows\SysWOW64\muachost.exe <12>
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\Power PDF 21\TwainClientU.exe
(Nuance Communications, Inc. -> Nuance) C:\Program Files (x86)\Nuance\Power PDF 21\bin\NuancePDF.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe <2>
(Open Source Developer, Dominik Reichl -> Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Opera Software AS -> Opera Software) C:\Users\madtr\AppData\Local\Programs\Opera\73.0.3856.344\opera.exe <14>
(Opera Software AS -> Opera Software) C:\Users\madtr\AppData\Local\Programs\Opera\73.0.3856.344\opera_crashreporter.exe
(pCloud AG -> pCloud AG) C:\Program Files\pCloud Drive\pCloud.exe
(Tencent Technology(Shenzhen) Company Limited -> ) C:\Program Files (x86)\Tencent\WeChat\WeChatWeb.exe
(Tencent Technology(Shenzhen) Company Limited -> Tencent) C:\Program Files (x86)\Tencent\WeChat\WeChat.exe
(Tencent Technology(Shenzhen) Company Limited -> The Tencent Authors) C:\Program Files (x86)\Tencent\WeChat\WeChatApp.exe
(Vincent Burel -> Audio Mechanic & Sound Breeder) C:\Program Files (x86)\VB\Voicemeeter\VoicemeeterMacroButtons.exe
(Vincent Burel -> VB-AUDIO Software) C:\Program Files (x86)\VB\Voicemeeter\voicemeeter8.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [PrintDisp] => C:\Windows\system32\PrintDisp.exe [595080 2019-03-21] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [Ashampoo Uninstaller Guard] => C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 10\UI10Guard.exe [4207496 2020-11-26] (Ashampoo GmbH & Co. KG -> )
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3137728 2021-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [PowerPDF Registry Controller] => C:\Program Files (x86)\Nuance\Power PDF 21\RegistryController.exe [274216 2017-05-16] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [710264 2020-06-18] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [KORG USB-MIDI Driver] => C:\Program Files (x86)\KORG\KORG USB-MIDI Driver\EsHelper.exe [394176 2020-07-07] (KORG INC. -> KORG Inc.)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [pCloud] => C:\Program Files\pCloud Drive\pCloud.exe [3863272 2020-09-01] (pCloud AG -> pCloud AG)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [KeePass Password Safe 2] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3137728 2021-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [123792272 2021-01-13] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [Opera Browser Assistant] => C:\Users\madtr\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3154456 2020-11-25] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\madtr\AppData\Local\Microsoft\Teams\Update.exe [2453656 2021-02-09] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [Vivaldi Update Notifier] => C:\Users\madtr\AppData\Local\Vivaldi\Application\update_notifier.exe [3166448 2021-02-05] (Vivaldi Technologies AS -> Vivaldi Technologies AS)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\madtr\AppData\Local\WebEx\ciscowebexstart.exe [2499784 2021-01-30] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [CiscoSpark] => C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webex\Webex.lnk [2056 2021-02-05] () [Datei ist nicht signiert]
HKU\S-1-5-21-1382810180-2329140491-3092258902-1001\...\Run: [Wechat] => C:\Program Files (x86)\Tencent\WeChat\WeChat.exe [559184 2020-11-20] (Tencent Technology(Shenzhen) Company Limited -> Tencent)
HKU\S-1-5-21-1382810180-2329140491-3092258902-1007\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
Startup: C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Macro Buttons (VB-Audio).LNK [2020-08-29]
ShortcutTarget: Macro Buttons (VB-Audio).LNK -> C:\Program Files (x86)\VB\Voicemeeter\VoicemeeterMacroButtons.exe (Vincent Burel -> Audio Mechanic & Sound Breeder)
Startup: C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Voicemeeter (VB-Audio).LNK [2020-08-24]
ShortcutTarget: Voicemeeter (VB-Audio).LNK -> C:\Program Files (x86)\VB\Voicemeeter\voicemeeter8.exe (Vincent Burel -> VB-AUDIO Software)
GroupPolicy: Beschränkung ? <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0696B354-6695-4814-ABF5-85C267023AFD} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142184 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {1D11E4A3-E15F-44F9-A5E4-A2DC33CF7E05} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199272 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {3B54B082-1B26-49B7-A1A6-565ACF73876F} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-11] (Google LLC -> Google LLC)
Task: {3D642A7E-8D75-460F-8462-F037CCEEB422} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {5EC5A6EF-2E1F-4CC7-B516-5CE44275000C} - System32\Tasks\MSISW_Host => C:\Windows\SysWOW64\muachost.exe [1692840 2015-08-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
Task: {630E9BF3-2429-4070-B02B-5EAB7645AC10} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6D575CCC-A198-4D54-9F51-391C4626BBBA} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-09-11] (Google LLC -> Google LLC)
Task: {71B4E446-2DB8-41CE-9746-84C20B04E3C0} - System32\Tasks\Opera scheduled Autoupdate 1595866282 => C:\Users\madtr\AppData\Local\Programs\Opera\launcher.exe [1776280 2021-01-14] (Opera Software AS -> Opera Software)
Task: {7401B964-9969-412E-A501-FAD807050A89} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5199272 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {A960471E-DEF3-462B-BDE0-37BA919712CD} - System32\Tasks\MySQL\Installer\ManifestUpdate => C:\Program Files (x86)\MySQL\MySQL Installer for Windows\MySQLInstallerConsole.exe [70792 2020-08-18] (Oracle America, Inc. -> Oracle Corporation)
Task: {AF71C90E-291A-42E7-83E7-3825BAB849FE} - System32\Tasks\Opera scheduled assistant Autoupdate 1595866288 => C:\Users\madtr\AppData\Local\Programs\Opera\launcher.exe [1776280 2021-01-14] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\madtr\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {BC00853A-4CE5-4B2A-BEE6-822EFE2DC5B6} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [142184 2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {C5D0CA45-06BA-4E98-BDB4-4A20C2DF1390} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4089E2D-ECD7-4F06-B703-709DEC5C3DC3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D7BD0925-0112-44F0-8133-9B3ADABB9E09} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [677344 2021-02-06] (Mozilla Corporation -> Mozilla Foundation)
Task: {E3623019-54B2-4239-8904-3A2F555F613F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MpCmdRun.exe [545704 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {EADD705A-FF34-49DE-9821-2E6CE19231F4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22993288 2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
Task: {FAF536B7-EB46-4280-A81B-563755772396} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [64936 2020-11-13] (Microsoft Corporation -> Microsoft)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.40.1
Tcpip\..\Interfaces\{e42759a3-a987-468f-9d17-615ffc475777}: [DhcpNameServer] 192.168.40.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\madtr\AppData\Local\Microsoft\Edge\User Data\Default [2021-02-09]
Edge Notifications: Default -> hxxps://my.pcloud.com; hxxps://www.youtube.com
Edge Extension: (uBlock Origin) - C:\Users\madtr\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2021-02-03]

FireFox:
========
FF DefaultProfile: bli71bnr.default
FF ProfilePath: C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\bli71bnr.default [2020-08-12]
FF NewTab: Mozilla\Firefox\Profiles\bli71bnr.default -> hxxps://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-08-12 09:39:18&bName=&bitmask=0600
FF ProfilePath: C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release [2021-02-09]
FF NewTab: Mozilla\Firefox\Profiles\h84zj2qb.default-release -> hxxps://defaultsearch.co/homepage?hp=1&pId=JD180501&iDate=2020-08-12 09:39:18&bName=&bitmask=0600
FF Session Restore: Mozilla\Firefox\Profiles\h84zj2qb.default-release -> ist aktiviert.
FF Notifications: Mozilla\Firefox\Profiles\h84zj2qb.default-release -> hxxps://web.whatsapp.com; hxxps://kiwiirc.com; hxxps://u.pcloud.com; hxxps://my.jdownloader.org; hxxps://wordpress.com; hxxps://web.webex.com
FF Extension: (ProxTube) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\ich@maltegoetz.de.xpi [2021-01-11]
FF Extension: (MyJDownloader Browser Erweiterung) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2020-11-26] [UpdateUrl:hxxps://my.jdownloader.org/extensions/firefox.json]
FF Extension: (Kee - Password Manager) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\keefox@chris.tomlinson.xpi [2020-11-24]
FF Extension: (uBlock Origin) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-02-03]
FF Extension: (xBrowserSync) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\{019b606a-6f61-4d01-af2a-cea528f606da}.xpi [2021-01-05]
FF Extension: (ColorZilla) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\{6AC85730-7D0F-4de0-B3FA-21142DD85326}.xpi [2020-11-09]
FF Extension: (ImTranslator: Translator, Dictionary, TTS) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2021-01-26]
FF Extension: (Instapaper) - C:\Users\madtr\AppData\Roaming\Mozilla\Firefox\Profiles\h84zj2qb.default-release\Extensions\{d0210f13-a970-4f1e-8322-0f76ec80adde}.xpi [2021-01-05]
FF HKLM\...\Firefox\Extensions: [sweb2pdfextension.3@nuance.com] - C:\Program Files (x86)\Nuance\Power PDF 21\bin\SFirefoxExtn
FF Extension: (Nuance PDF Create) - C:\Program Files (x86)\Nuance\Power PDF 21\bin\SFirefoxExtn [2020-07-03] []
FF HKLM-x32\...\Firefox\Extensions: [sweb2pdfextension.3@nuance.com] - C:\Program Files (x86)\Nuance\Power PDF 21\bin\SFirefoxExtn
FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-07-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-07-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw.dll [2019-03-14] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files (x86)\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-07-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files (x86)\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-07-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-02-03] (Microsoft Corporation -> Microsoft Corporation)

Opera: 
=======
OPR Profile: C:\Users\madtr\AppData\Roaming\Opera Software\Opera Stable [2021-02-09]
OPR Notifications: Opera Stable -> hxxps://web.whatsapp.com; hxxps://www.youtube.com
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (KeePassHelper Password Manager) - C:\Users\madtr\AppData\Roaming\Opera Software\Opera Stable\Extensions\calafnphoinbmicbijemddahngbpdlke [2020-09-01]
OPR Extension: (Rich Hints Agent) - C:\Users\madtr\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-11-02]
OPR Extension: (uBlock Origin) - C:\Users\madtr\AppData\Roaming\Opera Software\Opera Stable\Extensions\kccohkcpppjjkkjppopfnflnebibpida [2021-01-13]
OPR Extension: (Google Übersetzer) - C:\Users\madtr\AppData\Roaming\Opera Software\Opera Stable\Extensions\mchdgimobfnilobnllpdnompfjkkfdmi [2021-02-02]

Vivaldi: 
=======
VIV Profile: C:\Users\madtr\AppData\Local\Vivaldi\User Data\Default [2021-02-06]
VIV Extension: (Chrome Media Router) - C:\Users\madtr\AppData\Local\Vivaldi\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-01-30]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8902024 2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10897296 2021-01-13] (Logitech Inc -> Logitech, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5198064 2021-02-03] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 wampapache64; c:\wamp64\bin\apache\apache2.4.46\bin\httpd.exe [29696 2020-08-02] (Apache Software Foundation) [Datei ist nicht signiert]
S3 wampmariadb64; c:\wamp64\bin\mariadb\mariadb10.4.13\bin\mysqld.exe [16058280 2020-05-09] (MariaDB Corporation Ab -> )
S3 wampmysqld64; c:\wamp64\bin\mysql\mysql5.7.31\bin\mysqld.exe [41826304 2020-06-02] () [Datei ist nicht signiert]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_1c83a5d7cffd7bff\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 3dxhid; C:\WINDOWS\system32\DRIVERS\3dxhid.sys [49952 2020-11-09] (3Dconnexion SAM -> 3Dconnexion SAM)
R3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
R1 cbfsconnect2017; C:\Windows\system32\drivers\cbfsconnect2017.sys [481296 2020-06-24] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [33784 2020-10-04] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R1 EneIo; C:\Windows\system32\drivers\ene.sys [17624 2019-05-22] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 I2cHkBurn; C:\WINDOWS\system32\drivers\I2cHkBurn.sys [41760 2015-07-27] (Feature Integration Technology -> FINTEK Corp.)
R3 KORGUMDS; C:\WINDOWS\System32\Drivers\KORGUM64.SYS [43448 2020-07-07] (KORG INC. -> KORG INC.)
R2 LGHUBTemperatureService; C:\ProgramData\LGHUB\depots\73248\driver_cpu_temperature\logi_core_temp.sys [25448 2021-01-13] (Logitech Inc. -> Logitech)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [38136 2021-01-13] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [26672 2021-01-13] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [66808 2021-01-13] (Logitech Inc -> Logitech)
S4 RsFx0310; C:\WINDOWS\System32\DRIVERS\RsFx0310.sys [249024 2015-04-20] (Microsoft Corporation -> Microsoft Corporation)
R2 UI5IFS; C:\Program Files (x86)\Ashampoo\Ashampoo UnInstaller 10\IFS64.sys [40400 2020-11-25] (Ashampoo GmbH & Co. KG -> )
R3 VBAudio100VMVAIO3MME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio364_win10.sys [71712 2020-08-21] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudio101WDMCableCMME; C:\WINDOWS\System32\drivers\vbaudio_cablec64_win10.sys [69832 2020-08-21] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudio102WDMCableDMME; C:\WINDOWS\System32\drivers\vbaudio_cabled64_win10.sys [69616 2020-08-21] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVACAMME; C:\WINDOWS\System32\drivers\vbaudio_cablea64_win7.sys [41144 2015-10-19] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVACBMME; C:\WINDOWS\System32\drivers\vbaudio_cableb64_win7.sys [41144 2015-10-19] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-02] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVMAUXVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmauxvaio64_win10.sys [71920 2020-08-21] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVMVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2020-08-21] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 vpnpbus; C:\WINDOWS\System32\drivers\vpnpbus.sys [20496 2019-10-07] (Microsoft Windows Hardware Compatibility Publisher -> Callback Technologies, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [48536 2020-12-04] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [429296 2020-12-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-04] (Microsoft Windows -> Microsoft Corporation)
U3 dmwappushsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-02-09 09:12 - 2021-02-09 09:12 - 000101590 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-02-06 at 19.21.44.jpeg
2021-02-09 09:11 - 2021-02-09 09:11 - 000067218 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-02-06 at 19.16.59.jpeg
2021-02-09 09:10 - 2021-02-09 09:10 - 000337946 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-02-08 at 13.05.15.jpeg
2021-02-09 08:23 - 2021-02-09 08:23 - 000655456 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-02-09 08:17 - 2021-02-09 08:17 - 000000000 ___HD C:\$WinREAgent
2021-02-08 14:16 - 2021-02-08 16:06 - 000000000 ____D C:\Users\madtr\AppData\Roaming\RegistryFinder
2021-02-08 14:16 - 2021-02-08 16:06 - 000000000 ____D C:\Program Files\Registry Finder
2021-02-08 14:15 - 2021-02-08 14:16 - 004802222 _____ (Sergey Filippov ) C:\Users\madtr\Downloads\RegistryFinderSetup2.48.exe
2021-02-08 13:56 - 2021-02-08 13:56 - 004436583 _____ C:\Users\madtr\Downloads\ooregeditor.zip
2021-02-08 13:34 - 2021-02-08 13:34 - 000564394 _____ C:\Users\madtr\Downloads\Wochenplan 08. -12.02.2021.pdf
2021-02-07 21:18 - 2021-02-07 23:26 - 000000000 ____D C:\Users\madtr\AppData\Roaming\audacity
2021-02-07 21:18 - 2021-02-07 21:18 - 000000000 ____D C:\Users\madtr\AppData\Local\Audacity
2021-02-07 21:17 - 2021-02-07 21:18 - 000000000 ____D C:\Program Files (x86)\Audacity
2021-02-07 21:17 - 2021-02-07 21:17 - 028141904 _____ (Audacity Team ) C:\Users\madtr\Downloads\audacity-win-2.4.2.exe
2021-02-07 20:59 - 2021-02-07 20:59 - 012538328 _____ (pCloud AG) C:\Users\madtr\Downloads\pCloud_Windows_3.9.11_x64.exe
2021-02-07 20:29 - 2021-02-07 20:32 - 403121080 _____ (Ashampoo GmbH & Co. KG ) C:\Users\madtr\Downloads\ashampoo_photo_commander_16_16.3.0_sm.exe
2021-02-07 20:29 - 2021-02-07 20:30 - 063627264 _____ (Ashampoo GmbH & Co. KG ) C:\Users\madtr\Downloads\ashampoo_music_studio_8_8.0.3_sm.exe
2021-02-07 20:29 - 2021-02-07 20:29 - 020368776 _____ (Ashampoo GmbH & Co. KG ) C:\Users\madtr\Downloads\ashampoo_winoptimizer_18_18.00.18_sm.exe
2021-02-07 20:29 - 2021-02-07 20:29 - 018463856 _____ (Ashampoo GmbH & Co. KG ) C:\Users\madtr\Downloads\ashampoo_uninstaller_10_10.00.13_sm.exe
2021-02-06 19:58 - 2021-02-06 19:58 - 007914672 _____ (Ashampoo GmbH & Co. KG ) C:\Users\madtr\Downloads\ashampoo_registry_cleaner_2_31732.exe
2021-02-06 16:58 - 2021-02-06 16:58 - 000000000 ____D C:\Users\madtr\AppData\Local\Deployment
2021-02-06 16:44 - 2021-02-06 16:44 - 000001280 _____ C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\pCloud.lnk
2021-02-06 16:04 - 2021-02-09 09:40 - 000000000 ____D C:\FRST
2021-02-06 15:26 - 2021-02-06 15:26 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-02-06 02:03 - 2021-02-06 20:09 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-02-05 21:55 - 2021-02-05 21:56 - 142254071 _____ C:\Users\madtr\Downloads\MediathekView71-latest-win.zip
2021-02-03 23:59 - 2021-02-03 23:59 - 000000020 ___SH C:\Users\madtr\ntuser.ini
2021-02-03 23:58 - 2021-02-09 08:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-02-03 23:58 - 2021-02-09 03:54 - 000004156 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{5E59B233-F514-4A4E-95B3-3B2FA3F71180}
2021-02-03 23:58 - 2021-02-06 18:52 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1382810180-2329140491-3092258902-1001
2021-02-03 23:58 - 2021-02-05 02:23 - 000003630 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-02-03 23:58 - 2021-02-05 02:23 - 000003506 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-02-03 23:58 - 2021-02-03 23:58 - 000011433 _____ C:\WINDOWS\diagwrn.xml
2021-02-03 23:58 - 2021-02-03 23:58 - 000011433 _____ C:\WINDOWS\diagerr.xml
2021-02-03 23:58 - 2021-02-03 23:58 - 000003736 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1595866288
2021-02-03 23:58 - 2021-02-03 23:58 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-02-03 23:58 - 2021-02-03 23:58 - 000003504 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1595866282
2021-02-03 23:58 - 2021-02-03 23:58 - 000003404 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-02-03 23:58 - 2021-02-03 23:58 - 000002860 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1382810180-2329140491-3092258902-1007
2021-02-03 23:58 - 2021-02-03 23:58 - 000002148 _____ C:\WINDOWS\system32\Tasks\MSISW_Host
2021-02-03 23:58 - 2021-02-03 23:58 - 000000000 _SHDL C:\Documents and Settings
2021-02-03 23:58 - 2021-02-03 23:58 - 000000000 ____D C:\WINDOWS\system32\Tasks\MySQL
2021-02-03 23:51 - 2021-02-09 08:30 - 002086268 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-02-03 23:48 - 2021-02-09 09:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-02-03 23:47 - 2021-02-09 08:23 - 000008192 ___SH C:\DumpStack.log.tmp
2021-02-03 23:02 - 2021-02-03 23:02 - 000000000 ____H C:\Users\madtr\OneDrive\Dokumente\Default.rdp
2021-02-03 22:52 - 2021-02-03 23:47 - 000000000 ____D C:\WINDOWS\system32\config\bbimigrate
2021-02-03 22:48 - 2021-02-06 20:08 - 000000000 ____D C:\Users\madtr
2021-02-03 22:48 - 2021-02-06 18:52 - 000002428 _____ C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-02-03 22:48 - 2021-02-03 23:47 - 000000000 ____D C:\Users\scan
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Vorlagen
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Startmenü
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Netzwerkumgebung
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Lokale Einstellungen
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Eigene Dateien
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Druckumgebung
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\AppData\Local\Verlauf
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\AppData\Local\Anwendungsdaten
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\scan\Anwendungsdaten
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Vorlagen
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Startmenü
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Netzwerkumgebung
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Lokale Einstellungen
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Eigene Dateien
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Druckumgebung
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\AppData\Local\Verlauf
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\AppData\Local\Anwendungsdaten
2021-02-03 22:48 - 2021-02-03 22:48 - 000000000 _SHDL C:\Users\madtr\Anwendungsdaten
2021-02-03 22:48 - 2019-12-07 10:10 - 000001105 _____ C:\Users\scan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-02-03 22:45 - 2021-02-03 22:51 - 000000000 ____D C:\WINDOWS\ServiceProfiles
2021-02-03 22:36 - 2021-02-03 22:36 - 003860832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpltfm.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-02-03 22:36 - 2021-02-03 22:36 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-02-03 22:36 - 2021-02-03 22:36 - 001314112 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-02-03 22:36 - 2021-02-03 22:36 - 000980320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmpal.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000915296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmcodecs.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000732000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ortcengine.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000729600 _____ (Microsoft Corporation) C:\WINDOWS\system32\hhctrl.ocx
2021-02-03 22:36 - 2021-02-03 22:36 - 000595968 _____ (Microsoft Corporation) C:\WINDOWS\system32\appwiz.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000581120 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhotoScreensaver.scr
2021-02-03 22:36 - 2021-02-03 22:36 - 000575488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\hhctrl.ocx
2021-02-03 22:36 - 2021-02-03 22:36 - 000499200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PhotoScreensaver.scr
2021-02-03 22:36 - 2021-02-03 22:36 - 000469504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appwiz.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000467968 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000446976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mmsys.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000304128 _____ (Microsoft Corporation) C:\WINDOWS\system32\ksproxy.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000266240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg2splt.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000234496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ksproxy.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000221184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bthprops.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000204800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mpg2splt.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000178688 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\intl.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000170496 _____ (Microsoft Corporation) C:\WINDOWS\system32\VBICodec.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000157184 _____ C:\WINDOWS\system32\uwfcsp.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000138056 _____ C:\WINDOWS\system32\HvsiManagementApi.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000135168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\VBICodec.ax
2021-02-03 22:36 - 2021-02-03 22:36 - 000111616 _____ C:\WINDOWS\system32\RDVGHelper.exe
2021-02-03 22:36 - 2021-02-03 22:36 - 000101704 _____ C:\WINDOWS\SysWOW64\HvsiManagementApi.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000095744 _____ C:\WINDOWS\system32\VirtualMonitorManager.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000087552 _____ (Microsoft Corporation) C:\WINDOWS\system32\tdc.ocx
2021-02-03 22:36 - 2021-02-03 22:36 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000072704 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\tdc.ocx
2021-02-03 22:36 - 2021-02-03 22:36 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-02-03 22:36 - 2021-02-03 22:36 - 000067072 _____ C:\WINDOWS\system32\BWContextHandler.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000055376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rtmmvrortc.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000053760 _____ C:\WINDOWS\SysWOW64\BWContextHandler.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000045880 _____ C:\WINDOWS\system32\HvSocket.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2021-02-03 22:36 - 2021-02-03 22:36 - 000010908 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-02-03 22:35 - 2021-02-03 22:35 - 004898144 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpltfm.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 002254336 _____ C:\WINDOWS\system32\dwmscene.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-02-03 22:35 - 2021-02-03 22:35 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-02-03 22:35 - 2021-02-03 22:35 - 001354080 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmpal.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 001162240 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-02-03 22:35 - 2021-02-03 22:35 - 001091936 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmcodecs.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 001032544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ortcengine.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000544768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mmsys.cpl
2021-02-03 22:35 - 2021-02-03 22:35 - 000455680 _____ C:\WINDOWS\SysWOW64\WindowManagementAPI.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000422912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2021-02-03 22:35 - 2021-02-03 22:35 - 000330752 _____ C:\WINDOWS\SysWOW64\ssdm.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\bthprops.cpl
2021-02-03 22:35 - 2021-02-03 22:35 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000238592 _____ (Microsoft Corporation) C:\WINDOWS\system32\intl.cpl
2021-02-03 22:35 - 2021-02-03 22:35 - 000235520 _____ C:\WINDOWS\SysWOW64\HeatCore.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000190976 _____ C:\WINDOWS\system32\BthpanContextHandler.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000182272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\timedate.cpl
2021-02-03 22:35 - 2021-02-03 22:35 - 000152064 _____ C:\WINDOWS\system32\EoAExperiences.exe
2021-02-03 22:35 - 2021-02-03 22:35 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\activeds.tlb
2021-02-03 22:35 - 2021-02-03 22:35 - 000112128 _____ (Microsoft Corporation) C:\WINDOWS\system32\activeds.tlb
2021-02-03 22:35 - 2021-02-03 22:35 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2021-02-03 22:35 - 2021-02-03 22:35 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-02-03 22:35 - 2021-02-03 22:35 - 000056672 _____ (Microsoft Corporation) C:\WINDOWS\system32\rtmmvrortc.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000047472 _____ C:\WINDOWS\SysWOW64\umpdc.dll
2021-02-03 22:35 - 2021-02-03 22:35 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msacm32.drv
2021-02-03 22:35 - 2021-02-03 22:35 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2021-02-03 22:35 - 2021-02-03 22:35 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2021-02-03 22:34 - 2021-02-03 22:34 - 004227116 _____ C:\WINDOWS\system32\DefaultHrtfs.bin
2021-02-03 22:34 - 2021-02-03 22:34 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 002260480 _____ (The ICU Project) C:\WINDOWS\system32\icu.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000707544 _____ C:\WINDOWS\system32\TextShaping.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000643072 _____ C:\WINDOWS\system32\WindowManagementAPI.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000562688 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2021-02-03 22:34 - 2021-02-03 22:34 - 000455168 _____ C:\WINDOWS\system32\ssdm.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000306688 _____ C:\WINDOWS\system32\HeatCore.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\timedate.cpl
2021-02-03 22:34 - 2021-02-03 22:34 - 000231232 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000197632 _____ C:\WINDOWS\system32\IHDS.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000165888 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2021-02-03 22:34 - 2021-02-03 22:34 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000074240 _____ C:\WINDOWS\system32\rdsxvmaudio.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000064552 _____ C:\WINDOWS\system32\umpdc.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msacm32.drv
2021-02-03 22:34 - 2021-02-03 22:34 - 000029696 _____ (The ICU Project) C:\WINDOWS\system32\icuuc.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000025088 _____ (The ICU Project) C:\WINDOWS\system32\icuin.dll
2021-02-03 22:34 - 2021-02-03 22:34 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2021-02-03 22:21 - 2021-02-03 23:47 - 000000000 ____D C:\Program Files (x86)\MSBuild
2021-02-03 22:21 - 2021-02-03 22:21 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2021-02-03 22:21 - 2021-02-03 22:21 - 000000000 ____D C:\Program Files\Reference Assemblies
2021-02-03 22:21 - 2021-02-03 22:21 - 000000000 ____D C:\Program Files\MSBuild
2021-02-03 22:21 - 2021-02-03 22:21 - 000000000 ____D C:\Program Files (x86)\Reference Assemblies
2021-02-03 22:06 - 2021-02-03 22:06 - 000008192 _____ C:\WINDOWS\system32\config\userdiff
2021-02-03 21:43 - 2021-02-08 09:36 - 000000000 ___DC C:\WINDOWS\Panther
2021-02-03 18:43 - 2021-02-03 18:43 - 016263136 _____ C:\Users\madtr\Downloads\DaVinci-Resolve-15-Definitive-Guide-DE.pdf
2021-02-03 18:36 - 2021-02-03 18:36 - 000000000 ____D C:\Users\madtr\OneDrive\Dokumente\Blackmagic Design
2021-02-03 18:36 - 2021-02-03 18:36 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Blackmagic Design
2021-02-03 18:19 - 2021-02-03 22:48 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blackmagic Design
2021-02-03 18:18 - 2021-02-03 18:18 - 000000000 ____D C:\Program Files\Blackmagic Design
2021-02-03 18:18 - 2021-02-03 18:18 - 000000000 ____D C:\Program Files (x86)\Blackmagic Design
2021-02-03 18:16 - 2021-02-03 02:55 - 2357781856 _____ C:\Users\madtr\Downloads\DaVinci_Resolve_17.0b8_Windows.exe
2021-02-03 16:36 - 2021-02-04 19:20 - 000000000 ____D C:\Users\madtr\OneDrive\Dokumente\Audacity
2021-02-03 15:38 - 2021-02-03 15:38 - 000000000 ____D C:\Users\madtr\AppData\Local\Meltytech
2021-02-03 15:38 - 2021-02-03 15:38 - 000000000 ____D C:\Program Files\Shotcut
2021-02-03 15:37 - 2021-02-03 15:37 - 084620912 _____ C:\Users\madtr\Downloads\Shotcut-win64-210129.exe
2021-02-03 15:01 - 2021-02-03 15:07 - 000000000 ____D C:\Users\madtr\AppData\Roaming\FlashIntegro
2021-02-03 15:01 - 2021-02-03 15:01 - 000000000 ____D C:\Users\madtr\OneDrive\Dokumente\FlashIntegro
2021-02-03 15:01 - 2021-02-03 15:01 - 000000000 ____D C:\Users\madtr\AppData\Local\CrashRpt
2021-02-03 14:58 - 2021-02-03 14:58 - 000000000 ____D C:\Program Files\FlashIntegro
2021-02-03 14:58 - 2021-02-03 14:58 - 000000000 ____D C:\Program Files\Common Files\FlashIntegro
2021-02-03 14:58 - 2021-01-20 12:06 - 000083112 _____ (Multilab LLC) C:\WINDOWS\system32\mslvddsfilter5.ax
2021-02-03 14:58 - 2011-12-07 18:32 - 000216064 _____ ( ) C:\WINDOWS\system32\Lagarith.dll
2021-02-03 14:58 - 2005-08-01 18:43 - 000245760 _____ () C:\WINDOWS\system32\lame.ax
2021-02-03 14:58 - 2004-12-10 09:03 - 000438272 _____ (On2.com) C:\WINDOWS\system32\vp6vfw.dll
2021-02-03 14:58 - 2004-09-06 15:06 - 000053248 _____ C:\WINDOWS\system32\xvid.ax
2021-02-03 14:58 - 2004-07-03 20:08 - 000139264 _____ C:\WINDOWS\system32\xvidvfw.dll
2021-02-03 14:58 - 2004-07-03 19:59 - 000524288 _____ C:\WINDOWS\system32\xvidcore.dll
2021-02-03 14:58 - 2004-02-04 20:11 - 000081920 _____ (fccHandler) C:\WINDOWS\system32\AC3ACM.acm
2021-02-03 14:58 - 2003-05-22 11:26 - 000638976 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divx.dll
2021-02-03 14:58 - 2003-05-22 11:26 - 000221215 _____ (DivXNetworks, Inc.) C:\WINDOWS\system32\divxdec.ax
2021-02-03 14:58 - 2003-05-21 22:50 - 000261632 _____ (MainConcept) C:\WINDOWS\system32\mcdvd_32.dll
2021-02-03 14:58 - 2003-05-21 22:50 - 000156910 _____ C:\WINDOWS\WMSysPr8.prx
2021-02-03 14:58 - 2003-05-21 22:50 - 000082944 _____ (Voxware, Inc.) C:\WINDOWS\system32\vct3216.acm
2021-02-03 14:58 - 2003-05-21 22:50 - 000038912 _____ (NCT Company) C:\WINDOWS\system32\alf2cd.acm
2021-02-03 14:58 - 2003-05-21 22:50 - 000024576 _____ (Microsoft Corporation) C:\WINDOWS\system32\msxml3a.dll
2021-02-03 14:58 - 2003-03-25 04:49 - 000098304 _____ (Fraunhofer Institut Integrierte Schaltungen IIS) C:\WINDOWS\system32\L3CODECX.AX
2021-02-03 14:58 - 2002-08-19 23:41 - 000413760 _____ (Microsoft Corporation) C:\WINDOWS\system32\mpg4c32.dll
2021-02-03 14:58 - 2000-03-14 19:55 - 000013239 _____ (SHARP Corporation) C:\WINDOWS\system32\Scg726.acm
2021-02-03 14:54 - 2021-02-03 14:56 - 093881160 _____ (Flash-Integro LLC ) C:\Users\madtr\Downloads\VSDC - Video Editor - x64.exe
2021-02-03 03:44 - 2020-10-07 13:36 - 001769688 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2021-02-03 03:44 - 2020-10-07 13:36 - 001769688 _____ C:\WINDOWS\system32\vulkaninfo.exe
2021-02-03 03:44 - 2020-10-07 13:36 - 001370328 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2021-02-03 03:44 - 2020-10-07 13:36 - 001370328 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2021-02-03 03:44 - 2020-10-07 13:36 - 001054936 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2021-02-03 03:44 - 2020-10-07 13:36 - 001054936 _____ C:\WINDOWS\system32\vulkan-1.dll
2021-02-03 03:44 - 2020-10-07 13:36 - 000917720 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2021-02-03 03:44 - 2020-10-07 13:36 - 000917720 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2021-02-03 03:44 - 2020-10-07 13:36 - 000455408 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2021-02-03 03:44 - 2020-10-07 13:36 - 000351128 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 001023216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 000673520 _____ C:\WINDOWS\system32\nvofapi64.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 000670616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 000555248 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2021-02-03 03:44 - 2020-10-07 13:34 - 000543128 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 007707544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 006860184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 004174064 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 002508528 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 002098072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 001585560 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 001507224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 001161112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 000813464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 000657304 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2021-02-03 03:44 - 2020-10-07 13:33 - 000589208 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2021-02-03 03:44 - 2020-10-07 13:33 - 000445848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2021-02-03 03:44 - 2020-10-07 13:33 - 000230720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2021-02-03 03:44 - 2020-10-07 13:33 - 000047232 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll
2021-02-03 03:44 - 2020-10-07 13:32 - 005519600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2021-02-03 03:44 - 2020-10-07 13:32 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2021-02-03 03:44 - 2020-10-07 13:29 - 007001536 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2021-02-03 03:44 - 2020-10-07 13:29 - 005972824 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2021-02-03 03:44 - 2020-10-07 13:11 - 000080930 _____ C:\WINDOWS\system32\nvinfo.pb
2021-02-03 00:36 - 2021-02-08 14:47 - 000000000 ____D C:\Users\madtr\AppData\Roaming\obs-studio
2021-02-03 00:35 - 2021-02-03 00:36 - 000000000 ____D C:\Program Files\obs-studio
2021-02-03 00:34 - 2021-02-03 00:34 - 075607864 _____ (obsproject.com) C:\Users\madtr\Downloads\OBS-Studio-26.1.1-Full-Installer-x64.exe
2021-02-02 23:38 - 2021-02-08 13:40 - 000000000 ____D C:\Users\madtr\Videoaufnahmen
2021-02-01 13:48 - 2021-02-01 13:50 - 006176613 _____ C:\Users\madtr\Downloads\test.mp4
2021-01-31 15:37 - 2021-02-08 11:18 - 000000000 ____D C:\Users\madtr\AppData\Roaming\vlc
2021-01-31 11:53 - 2021-01-31 11:53 - 000000000 ____D C:\Users\madtr\AppData\Local\Luxion
2021-01-30 22:16 - 2021-02-09 08:24 - 000000000 ____D C:\Users\madtr\AppData\Local\CiscoSpark
2021-01-30 22:15 - 2021-02-05 02:18 - 000000000 ____D C:\Users\madtr\AppData\Local\CiscoSparkLauncher
2021-01-30 22:15 - 2021-02-03 23:47 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Webex
2021-01-30 22:14 - 2021-01-30 22:14 - 182824960 _____ C:\Users\madtr\Downloads\WebexTeams.msi
2021-01-30 18:50 - 2021-01-30 18:50 - 000001145 _____ C:\Users\madtr\Downloads\# Hausaufgaben.lnk
2021-01-29 16:54 - 2021-02-03 23:47 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cisco Webex Meetings Desktop-App
2021-01-29 16:52 - 2021-01-30 18:17 - 000000000 ____D C:\Users\madtr\AppData\Roaming\webex
2021-01-29 16:51 - 2021-02-09 08:24 - 000000000 ____D C:\Users\madtr\AppData\LocalLow\WebEx
2021-01-29 16:51 - 2021-02-09 01:21 - 000000000 ____D C:\Users\madtr\AppData\Local\WebEx
2021-01-29 16:51 - 2021-01-29 16:51 - 000254320 _____ (Cisco Webex LLC) C:\Users\madtr\Downloads\webex.exe
2021-01-29 14:31 - 2021-01-29 14:31 - 000008738 _____ C:\Users\madtr\Downloads\contacts.csv
2021-01-22 21:57 - 2021-01-22 21:57 - 000000000 ____D C:\Users\madtr\.android
2021-01-22 21:23 - 2021-01-22 21:23 - 000000000 ____D C:\Users\madtr\Apple
2021-01-22 21:15 - 2021-01-22 21:15 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-01-22 20:24 - 2021-02-03 23:47 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\DroidCam
2021-01-22 20:24 - 2021-01-22 20:24 - 000000000 ____D C:\Program Files (x86)\DroidCam
2021-01-22 20:23 - 2021-01-22 20:24 - 016400472 _____ C:\Users\madtr\Downloads\DroidCam.Setup.6.4.1.exe
2021-01-22 17:10 - 2021-01-22 17:10 - 000000000 ____D C:\Program Files\LGHUB
2021-01-22 16:35 - 2021-01-22 16:35 - 000028769 _____ C:\Users\madtr\Downloads\2021-01.pdf
2021-01-18 21:55 - 2021-01-18 21:55 - 000086542 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.54.59.jpeg
2021-01-18 21:29 - 2021-01-18 21:29 - 000218951 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.28.18.jpeg
2021-01-18 21:29 - 2021-01-18 21:29 - 000137389 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.28.17(1).jpeg
2021-01-18 21:29 - 2021-01-18 21:29 - 000120803 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.28.17.jpeg
2021-01-18 21:28 - 2021-01-18 21:28 - 000165511 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.28.16.jpeg
2021-01-18 21:28 - 2021-01-18 21:28 - 000116497 _____ C:\Users\madtr\Downloads\WhatsApp Image 2021-01-18 at 21.28.15.jpeg
2021-01-13 23:35 - 2021-01-13 23:35 - 000066808 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_xlcore.sys
2021-01-13 23:35 - 2021-01-13 23:35 - 000038136 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_bus_enum.sys
2021-01-13 23:35 - 2021-01-13 23:35 - 000026672 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_vir_hid.sys
2021-01-12 22:41 - 2021-01-12 22:41 - 008554537 _____ C:\Users\madtr\Downloads\teams_handout_deutsch.pdf
2021-01-12 22:41 - 2021-01-12 22:41 - 000901382 _____ C:\Users\madtr\Downloads\teams_quickstartenglisch.pdf
2021-01-11 22:38 - 2021-01-13 10:44 - 000000000 ____D C:\Users\madtr\AppData\Roaming\MusicBrainz
2021-01-11 22:38 - 2021-01-11 22:38 - 000000000 ____D C:\Users\madtr\AppData\Local\MusicBrainz
2021-01-11 22:38 - 2021-01-11 22:38 - 000000000 ____D C:\Program Files\MusicBrainz Picard
2021-01-11 22:37 - 2021-01-22 17:03 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Mp3tag
2021-01-11 22:11 - 2021-02-03 23:47 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2021-01-11 22:08 - 2021-01-11 22:09 - 030678744 _____ (MusicBrainz) C:\Users\madtr\Downloads\picard-setup-2.5.6.exe
2021-01-11 21:58 - 2021-01-11 21:58 - 000000000 ____D C:\Program Files (x86)\Mp3tag
2021-01-11 21:56 - 2021-01-11 21:56 - 003565592 _____ C:\Users\madtr\Downloads\mp3tagv304asetup.exe
2021-01-11 10:08 - 2021-01-11 10:08 - 004304792 _____ (Dominik Reichl ) C:\Users\madtr\Downloads\KeePass-2.47-Setup.exe

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-02-09 09:40 - 2020-06-28 15:00 - 000000000 ____D C:\Users\madtr\AppData\LocalLow\Mozilla
2021-02-09 09:39 - 2020-12-17 17:59 - 000000000 ____D C:\Users\madtr\AppData\Local\xwalk
2021-02-09 09:20 - 2020-08-28 06:35 - 000000000 ____D C:\Program Files (x86)\JDownloader 2.0
2021-02-09 08:30 - 2019-12-07 15:51 - 000821510 _____ C:\WINDOWS\system32\perfh007.dat
2021-02-09 08:30 - 2019-12-07 15:51 - 000183344 _____ C:\WINDOWS\system32\perfc007.dat
2021-02-09 08:30 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-02-09 08:24 - 2020-11-19 00:28 - 000000000 ____D C:\Users\madtr\AppData\Local\LGHUB
2021-02-09 08:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-02-09 08:23 - 2020-11-19 00:28 - 000000000 ____D C:\Users\madtr\AppData\Roaming\LGHUB
2021-02-09 08:23 - 2020-06-16 20:17 - 000000000 ___RD C:\Users\madtr\OneDrive
2021-02-09 08:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-02-09 08:22 - 2020-08-21 12:37 - 000060625 _____ C:\Users\madtr\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2021-02-09 08:22 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-02-09 08:18 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-02-09 00:44 - 2020-12-14 15:09 - 000002413 _____ C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams.lnk
2021-02-08 16:30 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-02-08 15:22 - 2020-08-20 12:27 - 000000000 ____D C:\Users\madtr\AppData\Local\Downloaded Installations
2021-02-08 13:57 - 2020-08-01 09:24 - 000000000 ____D C:\Programme (noinstall)
2021-02-08 09:36 - 2020-08-09 15:46 - 000000000 ____D C:\Program Files (x86)\Steam
2021-02-08 09:36 - 2020-08-08 14:39 - 000000000 ____D C:\Users\madtr\AppData\Local\CrashDumps
2021-02-07 23:46 - 2020-06-16 20:15 - 000000000 ____D C:\Users\madtr\AppData\Local\Packages
2021-02-07 21:07 - 2020-12-23 17:29 - 000000000 ____D C:\Program Files (x86)\Ashampoo
2021-02-07 21:03 - 2020-06-23 09:40 - 000000000 ____D C:\Users\madtr\AppData\Local\pCloud
2021-02-07 21:01 - 2020-09-03 11:20 - 000000000 ____D C:\Program Files\pCloud Drive
2021-02-07 20:56 - 2020-07-01 11:57 - 000000000 ____D C:\Users\madtr\AppData\Local\D3DSCache
2021-02-07 20:53 - 2020-06-28 15:17 - 000000000 ____D C:\Users\madtr\AppData\Roaming\KeePass
2021-02-06 20:09 - 2020-06-28 15:00 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-02-06 19:27 - 2020-11-05 08:28 - 000000000 ____D C:\Program Files\Inkscape
2021-02-06 15:23 - 2021-01-04 21:00 - 000002426 _____ C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Vivaldi.lnk
2021-02-06 15:23 - 2021-01-04 21:00 - 000000374 _____ C:\Users\madtr\.vivaldi_reporting_data
2021-02-06 15:23 - 2021-01-04 20:59 - 000000000 ____D C:\Users\madtr\AppData\Local\Vivaldi
2021-02-06 02:16 - 2020-10-01 06:43 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-02-04 04:48 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\appcompat
2021-02-04 00:04 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog
2021-02-04 00:03 - 2020-06-16 20:17 - 000000000 ____D C:\Users\madtr\AppData\Local\PlaceholderTileLogoFolder
2021-02-03 23:59 - 2020-06-16 20:15 - 000000000 ___RD C:\Users\madtr\3D Objects
2021-02-03 23:59 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-02-03 23:58 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-02-03 23:58 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2021-02-03 23:58 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-02-03 23:50 - 2020-08-24 14:05 - 001990880 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2021-02-03 23:49 - 2020-06-18 20:20 - 000000000 ____D C:\WINDOWS\system32\Drivers\NVIDIA Corporation
2021-02-03 23:48 - 2019-12-07 10:14 - 000028672 _____ C:\WINDOWS\system32\config\BCD-Template
2021-02-03 23:47 - 2020-11-15 14:53 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Eclipse
2021-02-03 23:47 - 2020-11-13 23:47 - 000000000 ____D C:\Program Files\IIS
2021-02-03 23:47 - 2020-11-09 14:22 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\dp4 Font Viewer
2021-02-03 23:47 - 2020-10-26 18:55 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-02-03 23:47 - 2020-08-28 06:35 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\JDownloader
2021-02-03 23:47 - 2020-08-06 14:30 - 000000000 ____D C:\WINDOWS\SysWOW64\1033
2021-02-03 23:47 - 2020-08-06 14:30 - 000000000 ____D C:\WINDOWS\system32\1033
2021-02-03 23:47 - 2020-07-31 12:38 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Micron Storage Executive
2021-02-03 23:47 - 2020-07-15 09:58 - 000000000 ____D C:\WINDOWS\SysWOW64\Adobe
2021-02-03 23:47 - 2020-07-03 14:25 - 000000000 ____D C:\Program Files\Kyocera
2021-02-03 23:47 - 2020-06-17 06:49 - 000000000 ____D C:\Program Files\UNP
2021-02-03 23:47 - 2019-12-07 10:18 - 000000000 ____D C:\WINDOWS\Setup
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\spool
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\System
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Registration
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-02-03 23:47 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-02-03 23:47 - 2019-03-19 05:52 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2021-02-03 23:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\Tasks_Migrated
2021-02-03 23:47 - 2019-03-19 05:52 - 000000000 ____D C:\WINDOWS\system32\MsDtc
2021-02-03 22:52 - 2020-06-16 20:15 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2021-02-03 22:52 - 2020-06-16 20:15 - 000000000 ____D C:\Program Files\AMD
2021-02-03 22:48 - 2021-01-04 20:39 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Shockwave.com
2021-02-03 22:48 - 2020-11-03 18:17 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SUPERMICRO
2021-02-03 22:48 - 2020-10-01 13:05 - 000000000 ____D C:\Users\scan\AppData\Local\Packages
2021-02-03 22:48 - 2020-08-21 11:52 - 000000000 ____D C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VB Audio
2021-02-03 22:42 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-02-03 22:42 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2021-02-03 22:42 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-02-03 22:42 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-02-03 22:42 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2021-02-03 22:42 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing
2021-02-03 22:40 - 2019-12-07 15:54 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2021-02-03 22:40 - 2019-12-07 15:54 - 000020908 _____ C:\WINDOWS\system32\OEMDefaultAssociations.xml
2021-02-03 22:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2021-02-03 22:21 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\MUI
2021-02-03 18:51 - 2020-08-01 09:40 - 000000000 ____D C:\Program Files\Microsoft Office
2021-02-03 18:49 - 2020-12-09 02:32 - 000000000 ____D C:\Users\madtr\AppData\Roaming\ColorPicker
2021-02-03 15:38 - 2020-08-04 16:24 - 000000000 ____D C:\Users\madtr\AppData\Local\cache
2021-02-03 12:49 - 2020-08-27 13:13 - 000000000 ____D C:\Users\madtr\AppData\Local\ElevatedDiagnostics
2021-02-02 23:44 - 2020-08-24 13:49 - 000000000 ____D C:\Users\madtr\Tonaufnahmen
2021-02-02 23:34 - 2020-08-06 11:20 - 000000000 ____D C:\Program Files\VideoLAN
2021-02-02 00:04 - 2020-08-21 11:56 - 000000000 ____D C:\Users\madtr\OneDrive\Dokumente\Voicemeeter
2021-02-01 07:53 - 2020-08-12 22:41 - 000000000 ____D C:\Users\madtr\Downloads\JDownloader
2021-01-30 16:18 - 2020-12-16 00:19 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2021-01-30 16:15 - 2020-08-05 13:37 - 000000000 ____D C:\Program Files\paint.net
2021-01-22 21:22 - 2020-06-16 20:15 - 000000000 ____D C:\Users\madtr\AppData\Local\Publishers
2021-01-22 05:40 - 2020-06-16 20:18 - 000799104 _____ (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-01-21 11:06 - 2020-10-26 13:51 - 000000000 ____D C:\Users\madtr\AppData\Roaming\XnViewMP
2021-01-18 17:04 - 2020-07-27 17:11 - 000001454 _____ C:\Users\madtr\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2021-01-12 23:30 - 2020-06-16 20:15 - 000000000 ____D C:\Users\madtr\AppData\Local\ConnectedDevicesPlatform
2021-01-12 20:56 - 2020-12-09 02:17 - 000000000 ____D C:\Users\Default\.dotnet
2021-01-12 20:56 - 2020-12-09 02:17 - 000000000 ____D C:\Users\Default User\.dotnet
2021-01-12 20:56 - 2020-11-13 23:41 - 000000000 ____D C:\Program Files\dotnet
2021-01-12 20:56 - 2020-11-13 23:41 - 000000000 ____D C:\Program Files (x86)\dotnet
2021-01-12 20:51 - 2020-06-16 20:33 - 135062968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-01-12 20:51 - 2020-06-16 20:33 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-01-11 10:08 - 2020-06-28 15:07 - 000000000 ____D C:\Program Files (x86)\KeePass Password Safe 2

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2020-08-21 12:46 - 2020-08-24 05:49 - 000034795 _____ () C:\Users\madtr\AppData\Roaming\VoiceMeeterBananaDefault.xml
2020-08-21 12:46 - 2020-08-21 12:46 - 000004643 _____ () C:\Users\madtr\AppData\Roaming\VoiceMeeterDefault.xml
2020-08-21 12:37 - 2021-02-09 08:22 - 000060625 _____ () C:\Users\madtr\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2020-12-17 17:59 - 2020-12-17 17:59 - 000045056 _____ () C:\Users\madtr\AppData\Roaming\Web Data
2020-12-17 17:59 - 2020-12-17 17:59 - 000000000 _____ () C:\Users\madtr\AppData\Roaming\Web Data-journal
2020-06-23 06:49 - 2020-11-13 23:40 - 000000128 _____ () C:\Users\madtr\AppData\Roaming\winscp.rnd
2020-10-26 15:34 - 2020-10-29 14:11 - 000047249 _____ () C:\Users\madtr\AppData\Local\digikamrc
2020-10-27 01:02 - 2020-10-27 01:02 - 000000080 _____ () C:\Users\madtr\AppData\Local\digikam_systemrc
2020-12-20 16:15 - 2020-12-20 16:15 - 000006199 _____ () C:\Users\madtr\AppData\Local\recently-used.xbel
2020-11-15 17:04 - 2020-11-15 17:04 - 000000017 _____ () C:\Users\madtr\AppData\Local\resmon.resmoncfg
2020-10-26 15:42 - 2020-10-26 15:43 - 000002090 _____ () C:\Users\madtr\AppData\Local\showfotorc
2020-08-08 11:13 - 2020-08-11 10:58 - 000000000 _____ () C:\Users\madtr\AppData\Local\Temptable.xml

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================