Guten Tag,

Jede woche führe ich einen Scan mit Kaspersky Total Security und jeden Monat mit adw cleaner durch. Außerdem habe ich den Process explorer, dort überprüfe ich mit VirusTotal jedes programm. Nun zu mein Problem: Weil ich neugierig war habe ich mal den SafetyScanner von der offiziellen Microsoftseite gedownloaded, diesen habe ich dann auch ausgeführt.

Nach ungefähr 5 Stunden Scanzeit hat 2 infizierte Datien gefunden, einmal Trojan:win32/Skeeyah.A!rfn und VirTool:Win32/DefenderTamperingRestore in system32.
Diese hat er auch sofort entfernt und ich konnte auch nicht nachgucken wie die Datei hieß, deshalb weiß ich nicht ob es jetzt ein Fehlalarm war oder auch nicht.

Daraufhin habe ich einmal mit Kaspersky, awd, Malewarebytes und rkill nochmal alles durchgescannt. Alles war sauber. Wie erkenne ich jetzt ob ich wirklich infiziert war?

FRST.txt:

FRST Logfile:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-03-2021
durchgeführt von Micro (Administrator) auf MICHAEL (15-03-2021 10:03:16)
Gestartet von C:\Users\Micro\Downloads
Geladene Profile: Micro
Platform: Windows 10 Pro Version 2004 19041.867 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atieclxx.exe
(Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0361901.inf_amd64_204a65b18f2a904a\B361909\atiesrxx.exe
(Alexey Nicolaychuk -> ) C:\Users\Micro\RivaTuner Statistics Server\EncoderServer.exe
(Alexey Nicolaychuk -> ) C:\Users\Micro\RivaTuner Statistics Server\RTSS.exe
(Alexey Nicolaychuk -> ) C:\Users\Micro\RivaTuner Statistics Server\RTSSHooksLoader64.exe
(Amagicom AB -> Mullvad VPN AB) C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\LightingService\1.00.42\AsRogAuraGpuDllServer.exe
(ASUSTeK Computer Inc. -> ) C:\Windows\System32\AsusUpdateCheck.exe
(ASUSTeK Computer Inc. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.94\AsusFanControlService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.51\atkexComSvc.exe
(ASUSTeK Computer Inc. -> ASUSTek Computer Inc.) C:\Program Files (x86)\LightingService\LightingService.exe
(ASUSTeK Computer Inc. -> TODO: <Company name>) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe
(ASUSTEK COMPUTER INCORPORATION -> ASUSTek COMPUTER INC.) C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe
(Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe
(Discord Inc. -> Discord Inc.) C:\Users\Micro\AppData\Local\Discord\app-0.0.309\Discord.exe <7>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <18>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\avp.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\avpui.exe
(Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\plugins_nms.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3041.0_x64__8wekyb3d8bbwe\GameBar.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.521.3041.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> ) D:\MSI Afterburner\MSIAfterburner.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Epson Printer Connection Checker\EPPCCMON.EXE
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Skutta, Kristjan -> ) D:\Steam\steamapps\common\wallpaper_engine\wallpaper64.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(VMware, Inc. -> VMware, Inc.) D:\VmWare\vmware-authd.exe
(voidtools -> voidtools) C:\Users\Micro\Everything\Everything.exe <2>

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18723976 2018-08-08] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279432 2018-06-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Everything] => C:\Users\Micro\Everything\Everything.exe [2254152 2020-09-01] (voidtools -> voidtools)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [442936 2020-10-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [405032 2019-09-30] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [5162744 2020-06-10] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-16] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [FUFAXRCV] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXRCV.exe [670824 2020-11-06] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [FUFAXSTM] => C:\Program Files (x86)\Epson Software\FAX Utility\FUFAXSTM.exe [896104 2020-11-06] (SEIKO EPSON CORPORATION -> SEIKO EPSON CORPORATION)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [Genshin Impact_Launcher] => [X]
HKLM-x32\...\Run: [GaomonTablet] => C:\Users\Micro\AppData\Roaming\GaomonTablet\GaomonTablet.exe [2154696 2021-03-13] (GUANZHOU GAOMON ELECTRONIC TECHNOLOGY CO.,LTD . -> Guangzhou Gaomon Technology Co., Ltd.)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [Steam] => D:\Steam\steam.exe [4087016 2021-03-12] (Valve -> Valve Corporation)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [Discord] => C:\Users\Micro\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [WallpaperEngine] => D:\Steam\steamapps\common\wallpaper_engine\wallpaper64.exe [3510760 2020-12-20] (Skutta, Kristjan -> )
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [1690704 2020-06-17] (Sony Mobile Communications AB -> Sony)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [GogGalaxy] => C:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14858824 2020-12-23] (GOG Sp. z o.o. -> GOG.com)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [electron.app.Lowkey.gg] => C:\Users\Micro\AppData\Local\Programs\lowkey-electron\Lowkey.gg.exe [99973824 2020-11-25] (Camelot.ai, Inc. -> GitHub)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Micro\AppData\Local\Microsoft\Teams\Update.exe [2453688 2021-01-24] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50011008 2021-01-20] (Google LLC -> )
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [EPLTarget\P0000000000000001] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATISDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\Micro\AppData\Local\WebEx\CiscoWebExStart.exe [2689752 2021-03-05] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-1694628501-1286526773-235289340-1001\...\Policies\Explorer: [] 
HKLM\...\Print\Monitors\EPSON ET-2550 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBNXE.DLL [180224 2014-03-05] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\EPSON ET-4750 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBSDE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON PC-FAX Driver2 64Monitor: C:\WINDOWS\system32\EFXLM16A.DLL [182784 2020-11-06] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\...\AppCompatFlags\Custom\H3Blade.exe: [{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb] -> HoMM III Compatibility Database
HKLM\Software\...\AppCompatFlags\Custom\Heroes3.exe: [{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb] -> HoMM III Compatibility Database
HKLM\Software\...\AppCompatFlags\InstalledSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}: [DatabasePath] -> C:\WINDOWS\AppPatch\CustomSDB\{62a24b39-0106-4990-90ea-3a09e9dda7a6}.sdb [2019-12-17]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-15] (Google LLC -> Google LLC)
Startup: C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-03-15]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy\User: Beschränkung ? <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {045AD619-87F1-4546-9401-6B6675202997} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [64936 2021-02-24] (Microsoft Corporation -> Microsoft)
Task: {068F8654-83C8-4E4A-81D0-5BD59040CCED} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3022416 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {0EA7C8FC-0082-434E-8652-5110152AEC35} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5057968 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {0F74E7A6-07EA-449A-B1F1-DE6FDC98431C} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22763912 2021-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {20E27906-D460-4D8F-A76E-80B7F3A3BD94} - System32\Tasks\SS3svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\x64\SS3svc64.exe [811520 2018-06-20] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert]
Task: {29A2253B-CBF1-44B8-A4EC-7B7A9EE8547F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145760 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E92DAEE-3286-481C-8E24-09F7985A87B0} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4329008 2020-10-12] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {35058FF4-5214-462E-8844-77AA3941F8FC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694256 2021-03-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {41235E27-46B8-47F2-90FC-B90E26BB295F} - System32\Tasks\RTSS => C:\Users\Micro\RivaTuner Statistics Server\RTSS.exe [261264 2019-09-09] (Alexey Nicolaychuk -> )
Task: {43CAC651-71D3-4564-83B8-5CEF7CCCA627} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-04] (Google Inc -> Google Inc.)
Task: {4C75F0BF-50FE-48BB-824E-0DF75B04E629} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [22763912 2021-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {4E17BC93-1494-4DFD-8D38-F8279621DA4D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-04] (Google Inc -> Google Inc.)
Task: {5528B123-F32B-4438-94D0-3C8103F664D6} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe
Task: {5BB0567B-DED4-4F05-A04D-A1DC70C27C22} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2019-11-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {5C32A0BD-2A0F-4972-890E-6D40A5E055D9} - System32\Tasks\SS3svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\Sonic Suite 3\Foundation\SS3svc32.exe [1234432 2018-06-20] (ASUSTeK COMPUTER INC.) [Datei ist nicht signiert]
Task: {6846DA4B-694A-42BB-8166-80DC24BE32BE} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [61624 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {775C4C8A-5859-4F85-8600-00FFBCB3131F} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2115632 2020-10-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {7FD78517-FB7B-4E1E-8119-CAD9045EC751} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2019-11-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {8FB03E93-54ED-42F8-BFC4-D87A2191D844} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [69304 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {95F88DE2-8A68-42B4-8076-2F6209B1CDC5} - System32\Tasks\EPSON ET-4750 Series Update {EB9DA418-25B6-425E-9A15-065F9063C2CD} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {98000D10-43BC-4B02-8D15-8C1593645608} - System32\Tasks\simplewallTask => C:\Program Files\simplewall\simplewall.exe [857088 2020-07-29] (Henry++) [Datei ist nicht signiert]
Task: {A1CBF0C0-D4EE-477D-8A13-807E8221930E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {AA2524F5-FED2-48B5-A130-E48682CE0DD7} - System32\Tasks\EPSON ET-4750 Series Update {D4C5AA3D-BC24-43DF-9DAA-44AA4588288C} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {AB632AA9-78CE-4DA1-9E71-0905801705C1} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5057968 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {AD2E686A-2F1F-44DD-8124-52F0293B0888} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe [1627528 2019-11-07] (ASUSTeK Computer Inc. -> ASUS)
Task: {BA87C5AD-29D7-43D9-BABA-F3713186DE15} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe [51120 2019-10-29] (ASUSTeK Computer Inc. -> )
Task: {C28C6E48-CA79-45F3-9FD0-CE73C3BFEF5F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145760 2021-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {C28CC374-8933-4C5C-BC6C-6E22D50B049A} - System32\Tasks\ASUS\AsRogAuraGpuDllServer => C:\Program Files (x86)\LightingService\1.00.42\AsRogAuraGpuDllServer.exe [280536 2018-03-29] (ASUSTeK Computer Inc. -> )
Task: {C6299B32-16FF-464B-9265-BF24D8467601} - System32\Tasks\MSIAfterburner => D:\MSI Afterburner\MSIAfterburner.exe [782320 2019-10-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
Task: {C8C9089C-2439-4119-B8DC-CFCF752AD3FF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {E030F7C8-7F0C-4739-B9BA-4834B43942D4} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {EC978589-25B3-4D27-8509-12B1B01F1CBE} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe [38092952 2019-10-24] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {F424E6CD-A125-439A-9598-DC0DB2723F94} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1710472 2020-12-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {F80FEB71-8F5A-4C68-8091-AFE0F658DACF} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1469288 2020-10-19] (ASUSTeK Computer Inc. -> )

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\EPSON ET-4750 Series Update {D4C5AA3D-BC24-43DF-9DAA-44AA4588288C}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE:/EXE:{D4C5AA3D-BC24-43DF-9DAA-44AA4588288C} /F:UpdateWORKGROUP\MICHAEL$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
Task: C:\WINDOWS\Tasks\EPSON ET-4750 Series Update {EB9DA418-25B6-425E-9A15-065F9063C2CD}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSSDE.EXE:/EXE:{EB9DA418-25B6-425E-9A15-065F9063C2CD} /F:UpdateWORKGROUP\MICHAEL$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog9 15 C:\WINDOWS\SysWOW64\vsocklib.dll [44128 2020-08-11] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\vsocklib.dll [44128 2020-08-11] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\vsocklib.dll [48224 2020-08-11] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 16 C:\Windows\system32\vsocklib.dll [48224 2020-08-11] (VMware, Inc. -> VMware, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{0463a477-32dc-45cd-8af1-8642acefa672}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Micro\AppData\Local\Microsoft\Edge\User Data\Default [2021-02-26]
Edge Extension: (Outlook) - C:\Users\Micro\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bjhmmnoficofgoiacjaajpkfndojknpb [2020-10-15]
Edge Extension: (Word) - C:\Users\Micro\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hikhggiobiflkdfdgdajcfklmcibbopi [2020-10-15]
Edge Extension: (Excel) - C:\Users\Micro\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\leffmjdabcgaflkikcefahmlgpodjkdm [2020-10-15]
Edge Extension: (PowerPoint) - C:\Users\Micro\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\opfacbhaojodjaojgocnibmklknchehf [2020-10-15]
Edge HKU\S-1-5-21-1694628501-1286526773-235289340-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm]

FireFox:
========
FF DefaultProfile: nXCgAkUc.default
FF ProfilePath: C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release [2021-03-14]
FF Extension: (HTTPS Everywhere) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\https-everywhere@eff.org.xpi [2021-01-29]
FF Extension: (To Google Translate) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\jid1-93WyvpgvxzGATw@jetpack.xpi [2020-11-11]
FF Extension: (Decentraleyes) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-11-08]
FF Extension: (Privacy Badger) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2021-02-05]
FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2021-01-12]
FF Extension: (uBlock Origin) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\uBlock0@raymondhill.net.xpi [2021-03-13]
FF Extension: (Universal Bypass) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\{529b261b-df0b-4e3b-bf42-07b462da0ee8}.xpi [2021-02-07]
FF Extension: (Popup Blocker (strict)) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\783sx24i.default-release\Extensions\{de22fd49-c9ab-4359-b722-b3febdc3a0b0}.xpi [2021-01-18]
FF ProfilePath: C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\nXCgAkUc.default [2019-04-12]
FF Extension: (Avira Browser Safety) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\nXCgAkUc.default\Extensions\abs@avira.com [2018-09-05] [hxxps://download.avira.com/package/absnooffers/firefox/update_webext_no_offers.rdf]
FF Extension: (Avira Password Manager) - C:\Users\Micro\AppData\Roaming\Mozilla\Firefox\Profiles\nXCgAkUc.default\Extensions\passwordmanager@avira.com [2018-09-05] [hxxps://s3.eu-central-1.amazonaws.com/avira-pwm-extensions/update.rdf]
FF HKLM\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\FFExt\light_plugin_firefox\addon.xpi => nicht gefunden
FF Plugin: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-11-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-11-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-01-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2021-03-06] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: BYOND -> C:\Program Files (x86)\BYOND\bin\npbyond.dll [Keine Datei]
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2020-11-22] <==== ACHTUNG (Zeigt auf eine *.cfg Datei)
FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2020-11-22] <==== ACHTUNG

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default [2021-03-15]
CHR Notifications: Default -> hxxps://advent.playstation.com; hxxps://drive.google.com; hxxps://web.whatsapp.com
CHR HomePage: Default -> hxxps://www.google.com/
CHR StartupUrls: Default -> "hxxp://google.de/"
CHR DefaultSearchURL: Default -> hxxps://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png
CHR Extension: (Präsentationen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-09-04]
CHR Extension: (Just Black) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghfnjkcakhmadgdomlmlhhaocbkloab [2020-11-27]
CHR Extension: (YouTube) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\agimnkijcaahngcdmfeangaknmldooml [2021-03-03]
CHR Extension: (Kaspersky Protection) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2021-02-21]
CHR Extension: (WebRank Whois Lookup) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajebiiiaphmfaiookbhpepoongjejihh [2021-01-28]
CHR Extension: (Docs) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-09-04]
CHR Extension: (Google Drive) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-21]
CHR Extension: (YouTube) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-09-04]
CHR Extension: (Honey) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2021-02-18]
CHR Extension: (OneTab) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2021-03-07]
CHR Extension: (uBlock Origin) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2021-02-07]
CHR Extension: (VirusTotal) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\dnopbpmlkabcondfpckfnhgabfcncjmg [2020-04-24]
CHR Extension: (Tabellen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-09-04]
CHR Extension: (Google Docs Offline) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-12]
CHR Extension: (Der Camelizer) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2021-03-09]
CHR Extension: (Anwendungs-Launcher für Drive (von Google)) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-23]
CHR Extension: (YouTube NonStop) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlkaejimjacpillmajjnopmpbkbnocid [2021-03-13]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Google Mail) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-13]
CHR Profile: C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2 [2020-12-26]
CHR HomePage: Profile 2 -> hxxps://www.google.com/
CHR StartupUrls: Profile 2 -> "hxxps://www.google.de/webhp?hl=de"
CHR Extension: (Präsentationen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-07-07]
CHR Extension: (Kaspersky Protection) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2020-12-26]
CHR Extension: (Docs) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\aohghmighlieiainnegkcijnfilokake [2020-07-07]
CHR Extension: (Google Drive) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-26]
CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2020-07-07]
CHR Extension: (YouTube) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-07-07]
CHR Extension: (Honey) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\bmnlcjabgnpnenekpadlanbbkooimhnj [2020-12-26]
CHR Extension: (uBlock Origin) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-12-26]
CHR Extension: (Tabellen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-07-07]
CHR Extension: (Google Docs Offline) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-12-26]
CHR Extension: (Der Camelizer) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghnomdcacenbmilgjigehppbamfndblo [2020-12-26]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-12-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-07-07]
CHR Extension: (Google Mail) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-26]
CHR Extension: (Chrome Media Router) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-26]
CHR Profile: C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3 [2020-12-26]
CHR Extension: (Präsentationen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-12-26]
CHR Extension: (Kaspersky Protection) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2020-12-26]
CHR Extension: (Docs) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2020-12-26]
CHR Extension: (Google Drive) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-12-26]
CHR Extension: (YouTube) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-12-26]
CHR Extension: (Tabellen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-12-26]
CHR Extension: (Google Docs Offline) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-12-26]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-12-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-12-26]
CHR Extension: (Google Mail) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-12-26]
CHR Extension: (Chrome Media Router) - C:\Users\Micro\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-12-26]
CHR Profile: C:\Users\Micro\AppData\Local\Google\Chrome\User Data\System Profile [2020-12-26]
CHR HKLM\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp]
CHR HKU\S-1-5-21-1694628501-1286526773-235289340-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Micro\AppData\Local\Google\Drive\user_default\apdfllckaahabafndbhieahigkjlhalf_live.crx [2020-12-27]
CHR HKU\S-1-5-21-1694628501-1286526773-235289340-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [ahkjpbeeocnddjkakilopmfdlnjdpcdm] - hxxps://chrome.google.com/webstore/detail/kaspersky-protection/ahkjpbeeocnddjkakilopmfdlnjdpcdm
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [ipmkfpcnmccejididiaagpgchgjfajgp]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S3 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3374160 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S3 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3103824 2020-03-04] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 ArmouryCrateService; C:\Program Files\ASUS\ARMOURY CRATE Lite Service\ArmouryCrate.Service.exe [344184 2021-01-21] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.51\atkexComSvc.exe [442928 2020-10-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S4 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.31\aaHMSvc.exe [975832 2017-01-24] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe [1360016 2020-10-12] (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert]
S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2019-11-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.94\AsusFanControlService.exe [2073136 2020-10-12] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [163176 2019-11-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S4 AsusROGLSLService; C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe [425080 2019-11-22] (ASUSTeK Computer Inc. -> ASUS)
R2 AsusUpdateCheck; C:\WINDOWS\System32\AsusUpdateCheck.exe [768408 2021-03-15] (ASUSTeK Computer Inc. -> )
R2 AVP21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\avp.exe [381928 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8894752 2021-02-08] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8854920 2021-02-05] (Microsoft Corporation -> Microsoft Corporation)
R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [53288 2019-09-30] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S4 DialogBlockingService; C:\WINDOWS\System32\DialogBlockingService.dll [76288 2021-03-09] (Microsoft Windows -> Microsoft Corporation)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2019-01-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [206304 2020-10-02] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
S3 GalaxyClientService; C:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2020-12-23] (GOG Sp. z o.o. -> GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-07-02] (GOG Sp. z o.o. -> GOG.com)
S3 klvssbridge64_21.2; C:\Program Files (x86)\Kaspersky Lab\Kaspersky Total Security 21.2\x64\vssbridge64.exe [467352 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [3053656 2021-01-11] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-08-08] (Logitech Inc -> Logitech Inc.)
S3 MsMpiLaunchSvc; C:\Program Files\Microsoft MPI\Bin\msmpilaunchsvc.exe [23040 2016-03-04] () [Datei ist nicht signiert]
R2 MullvadVPN; C:\Program Files\Mullvad VPN\resources\mullvad-daemon.exe [10234792 2021-02-18] (Amagicom AB -> Mullvad VPN AB)
S4 NovabenchService; C:\Program Files\Novawave\Novabench\NovabenchService.exe [330288 2018-10-06] (Novawave Inc. -> Novawave Inc.)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2213696 2018-09-05] (Electronic Arts, Inc. -> Electronic Arts)
S4 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3084104 2018-09-05] (Electronic Arts, Inc. -> Electronic Arts)
R2 ROG Live Service; C:\Program Files (x86)\ASUS\ROG Live Service\ROGLiveService.exe [5463128 2021-01-18] (ASUSTEK COMPUTER INCORPORATION -> ASUSTek COMPUTER INC.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5352528 2021-03-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12834584 2021-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 VMAuthdService; D:\VmWare\vmware-authd.exe [99376 2020-11-17] (VMware, Inc. -> VMware, Inc.)
S3 VSStandardCollectorService150; C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe [147392 2019-04-30] (Microsoft Corporation -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-03-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2575360 2020-06-17] (Sony) [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2017-06-01] (ASUSTeK Computer Inc. -> )
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [34112 2019-07-02] (ASUSTeK Computer Inc. -> )
R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [35136 2020-05-25] (ASUSTeK Computer Inc. -> )
S3 clwvd9; C:\WINDOWS\System32\drivers\clwvd9.sys [60984 2019-09-08] (CyberLink Corp. -> CyberLink Corporation)
R0 cm_km; C:\WINDOWS\System32\DRIVERS\cm_km.sys [251608 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys [20472 2019-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz148; C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [44648 2021-03-15] (CPUID S.A.R.L.U. -> CPUID)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
S3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [33768 2020-04-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R1 EneIo; C:\WINDOWS\system32\drivers\ene.sys [17624 2019-05-22] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 GLCKIO2; C:\WINDOWS\system32\drivers\GLCKIO2.sys [29368 2019-04-24] (ASUSTeK Computer Inc. -> )
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [35344 2020-11-03] (ASUSTEK COMPUTER INC. -> ASUSTeK Computer Inc.)
S3 iVCam; C:\WINDOWS\system32\DRIVERS\iVCam.sys [1089512 2020-04-04] (Shanghai Yitu Information Technology Co., Ltd. -> e2eSoft)
R1 klbackupdisk; C:\WINDOWS\system32\DRIVERS\klbackupdisk.sys [110392 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klbackupflt; C:\WINDOWS\System32\DRIVERS\klbackupflt.sys [212280 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kldisk; C:\WINDOWS\system32\DRIVERS\kldisk.sys [127288 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S0 klelam; C:\WINDOWS\System32\DRIVERS\klelam.sys [37496 2020-10-21] (Microsoft Windows Early Launch Anti-Malware Publisher -> AO Kaspersky Lab)
R1 klflt; C:\WINDOWS\system32\DRIVERS\klflt.sys [523576 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klgse; C:\WINDOWS\System32\DRIVERS\klgse.sys [657176 2021-01-27] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klhk; C:\WINDOWS\system32\DRIVERS\klhk.sys [1400600 2021-01-27] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klids; C:\ProgramData\Kaspersky Lab\AVP21.2\Bases\klids.sys [245280 2021-02-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [1025336 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klim6; C:\WINDOWS\system32\DRIVERS\klim6.sys [95544 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klkbdflt; C:\WINDOWS\system32\DRIVERS\klkbdflt.sys [113464 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klmouflt; C:\WINDOWS\system32\DRIVERS\klmouflt.sys [113464 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpd; C:\WINDOWS\System32\DRIVERS\klpd.sys [85288 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klpnpflt; C:\WINDOWS\system32\DRIVERS\klpnpflt.sys [97080 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_arkmon; C:\WINDOWS\System32\Drivers\klupd_klif_arkmon.sys [257208 2020-11-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
S3 klupd_klif_kimul; C:\WINDOWS\System32\Drivers\klupd_klif_kimul.sys [99152 2020-11-22] (Kaspersky Lab -> AO Kaspersky Lab)
R3 klupd_klif_klark; C:\WINDOWS\System32\Drivers\klupd_klif_klark.sys [310232 2021-01-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R0 klupd_klif_klbg; C:\WINDOWS\System32\Drivers\klupd_klif_klbg.sys [116888 2021-01-18] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R3 klupd_klif_mark; C:\WINDOWS\System32\Drivers\klupd_klif_mark.sys [207352 2020-11-22] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwfp; C:\WINDOWS\system32\DRIVERS\klwfp.sys [153400 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 klwtp; C:\WINDOWS\system32\DRIVERS\klwtp.sys [250168 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R1 kneps; C:\WINDOWS\system32\DRIVERS\kneps.sys [300856 2020-10-21] (Kaspersky Lab JSC -> AO Kaspersky Lab)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
S3 LGJoyHidFilter; C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys [57368 2018-05-07] (Logitech Inc -> Logitech Inc.)
S3 LGJoyHidLo; C:\WINDOWS\system32\drivers\LGJoyHidLo.sys [47256 2018-05-07] (Logitech Inc -> Logitech Inc.)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [67736 2018-05-07] (Logitech Inc -> Logitech Inc.)
S3 LGSHidFilt; C:\WINDOWS\System32\drivers\LGSHidFilt.Sys [64280 2018-05-07] (Logitech -> Logitech Inc.)
S3 LGSUsbFilt; C:\WINDOWS\System32\drivers\LGSUsbFilt.Sys [41752 2018-05-07] (Logitech -> Logitech Inc.)
R3 MSIO; C:\Program Files\Patriot\Aac_Patriot Viper RGB\msio64.sys [25616 2018-02-12] (MICSYS Technology Co., Ltd. -> )
S3 MTsensor; C:\WINDOWS\System32\drivers\ASACPI.sys [17280 2013-05-17] (ASUSTeK Computer Inc. -> )
S3 NovabenchDriver; C:\Program Files\Novawave\Novabench\NovabenchDriverWin10.sys [28216 2018-03-28] (Microsoft Windows Hardware Compatibility Publisher -> )
U5 PROCMON24; C:\Windows\System32\Drivers\PROCMON24.sys [92008 2021-03-15] (Microsoft Windows Hardware Compatibility Publisher -> Sysinternals - www.sysinternals.com)
R0 pwdrvio; C:\WINDOWS\System32\pwdrvio.sys [19152 2019-11-08] (MiniTool Solution Ltd -> )
S3 pwdspio; C:\WINDOWS\system32\pwdspio.sys [12504 2019-11-08] (MiniTool Solution Ltd -> )
R3 RTCore64; D:\MSI Afterburner\RTCore64.sys [24000 2019-09-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
S3 RtsUpx; C:\WINDOWS\system32\drivers\RtsUpx.sys [30328 2018-09-04] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
S3 SIUSBXP; C:\WINDOWS\system32\drivers\SiUSBXp.sys [19456 2018-06-04] (Silicon Laboratories) [Datei ist nicht signiert]
R2 speedfan; C:\WINDOWS\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> )
R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> )
S3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
S3 tapwindscribe0901; C:\WINDOWS\System32\drivers\tapwindscribe0901.sys [54896 2018-07-06] (Windscribe Limited -> The OpenVPN Project)
S3 VBAudioVMAUXVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmauxvaio64_win10.sys [71920 2020-11-16] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 VBAudioVMVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2020-11-16] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 VBoxNetAdp; C:\WINDOWS\system32\DRIVERS\VBoxNetAdp6.sys [237840 2020-07-11] (Oracle Corporation -> Oracle Corporation)
R1 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [165744 2020-12-14] (Microsoft Windows Hardware Compatibility Publisher -> Nefarius Software Solutions e.U.)
R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [60344 2020-11-17] (VMware, Inc. -> VMware, Inc.)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [68544 2020-11-17] (VMware, Inc. -> VMware, Inc.)
R3 vmulti; C:\WINDOWS\System32\drivers\vmulti.sys [19600 2021-03-13] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74048 2020-06-10] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2020-08-11] (VMware, Inc. -> VMware, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49544 2021-03-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [420088 2021-03-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-14] (Microsoft Windows -> Microsoft Corporation)
S3 wintun; C:\WINDOWS\system32\DRIVERS\wintun.sys [38192 2021-03-14] (WireGuard LLC -> WireGuard LLC)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-15 10:03 - 2021-03-15 10:04 - 000053246 _____ C:\Users\Micro\Downloads\FRST.txt
2021-03-15 10:02 - 2021-03-15 10:03 - 000000000 ____D C:\FRST
2021-03-15 10:01 - 2021-03-15 10:02 - 002300928 _____ (Farbar) C:\Users\Micro\Downloads\FRST64.exe
2021-03-15 09:19 - 2021-03-15 09:20 - 000000000 ____D C:\WINDOWS\Minidump
2021-03-15 09:19 - 2021-03-15 09:19 - 005423268 _____ C:\WINDOWS\Minidump\031521-202921-01.dmp
2021-03-15 09:16 - 2021-03-15 09:16 - 3499879584 ____N C:\WINDOWS\MEMORY.DMP
2021-03-15 09:06 - 2021-03-15 09:06 - 000000000 ____D C:\Program Files\Malwarebytes
2021-03-15 09:02 - 2021-03-15 09:04 - 000002016 _____ C:\Users\Micro\Desktop\Rkill.txt
2021-03-15 09:01 - 2021-03-15 09:01 - 002084016 _____ (Malwarebytes) C:\Users\Micro\Downloads\MBSetup.exe
2021-03-15 09:01 - 2021-03-15 09:01 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Micro\Downloads\rkill.exe
2021-03-15 07:53 - 2021-03-15 07:53 - 000092008 ____H (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCMON24.SYS
2021-03-15 07:51 - 2021-03-15 07:51 - 002052793 _____ C:\Users\Micro\Downloads\ProcessMonitor.zip
2021-03-14 19:24 - 2021-03-14 19:24 - 008463216 _____ (Malwarebytes) C:\Users\Micro\Desktop\adwcleaner_8.1.exe
2021-03-14 17:17 - 2021-03-14 17:17 - 000000000 ____D C:\Users\Micro\AppData\Local\Cemu
2021-03-14 16:48 - 2021-03-14 16:48 - 000000000 ____D C:\Program Files\Nefarius Software Solutions
2021-03-14 16:46 - 2021-03-14 18:49 - 000000000 ____D C:\Program Files (x86)\DS4Windows
2021-03-14 16:16 - 2021-03-14 16:16 - 000000575 _____ C:\Users\Micro\Desktop\blender.lnk
2021-03-14 16:02 - 2021-03-14 16:05 - 000000000 ____D C:\Users\Micro\Desktop\Hobby
2021-03-14 16:02 - 2021-03-14 16:02 - 000000000 ____D C:\Users\Micro\Desktop\Cloud
2021-03-14 15:59 - 2021-03-14 15:59 - 000000000 ____D C:\Users\Micro\Documents\weiß nicht
2021-03-14 15:57 - 2021-03-14 16:05 - 000000000 ____D C:\Users\Micro\Desktop\Studium
2021-03-14 15:55 - 2020-08-17 17:40 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.check
2021-03-14 15:55 - 2020-08-17 17:40 - 000000824 _____ C:\WINDOWS\system32\Drivers\etc\hosts.backup
2021-03-14 15:17 - 2021-03-14 15:17 - 000000815 _____ C:\Users\Public\Desktop\The Legend of Zelda - Breath of the Wild.lnk
2021-03-14 15:17 - 2021-03-14 15:17 - 000000815 _____ C:\ProgramData\Desktop\The Legend of Zelda - Breath of the Wild.lnk
2021-03-14 14:45 - 2021-03-14 14:45 - 000001088 _____ C:\Users\Micro\Desktop\Adobe Photoshop CC 2019.lnk
2021-03-14 14:27 - 2021-03-14 14:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\qBittorrent
2021-03-14 14:27 - 2021-03-14 14:27 - 000000000 ____D C:\Program Files\qBittorrent
2021-03-14 14:25 - 2021-03-14 14:25 - 000001088 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2019.lnk
2021-03-14 13:43 - 2021-03-14 13:43 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-14 13:37 - 2021-03-15 09:16 - 000000000 ____D C:\ProgramData\Mullvad VPN
2021-03-14 13:37 - 2021-03-14 17:18 - 000000000 ____D C:\Users\Micro\AppData\Local\Mullvad VPN
2021-03-14 13:37 - 2021-03-14 13:37 - 000038192 _____ (WireGuard LLC) C:\WINDOWS\system32\Drivers\wintun.sys
2021-03-14 13:37 - 2021-03-14 13:37 - 000001897 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mullvad VPN.lnk
2021-03-14 13:37 - 2021-03-14 13:37 - 000001885 _____ C:\Users\Public\Desktop\Mullvad VPN.lnk
2021-03-14 13:37 - 2021-03-14 13:37 - 000001885 _____ C:\ProgramData\Desktop\Mullvad VPN.lnk
2021-03-14 13:37 - 2021-03-14 13:37 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Mullvad VPN
2021-03-14 13:37 - 2021-03-14 13:37 - 000000000 ____D C:\Program Files\Mullvad VPN
2021-03-13 23:08 - 2021-03-13 23:08 - 002567968 _____ C:\WINDOWS\PE_File.dll
2021-03-13 23:05 - 2021-03-13 23:15 - 000011008 _____ C:\WINDOWS\PE_Rom.dll
2021-03-13 22:36 - 2021-03-13 22:36 - 000000000 _____ C:\WINDOWS\SysWOW64\Drivers\1043_ASUSTeK_ROG STRIX B450-F GAMING.alu
2021-03-13 22:31 - 2019-07-02 09:58 - 000034112 _____ C:\WINDOWS\SysWOW64\Drivers\AsUpIO.sys
2021-03-13 22:28 - 2021-03-14 14:50 - 000000000 ____D C:\Users\Micro\Downloads\zeug
2021-03-13 22:20 - 2021-03-13 22:20 - 000000675 _____ C:\Users\Micro\Desktop\OpenShot Video Editor.lnk
2021-03-13 22:15 - 2021-03-13 22:15 - 002670815 _____ C:\Users\Micro\Downloads\Autoruns.zip
2021-03-13 22:03 - 2021-03-13 22:03 - 000000000 ____D C:\Users\Micro\AppData\Local\CEF
2021-03-13 22:01 - 2021-03-13 22:01 - 000000973 _____ C:\Users\Micro\Desktop\ROG CPU-Z.lnk
2021-03-13 21:00 - 2021-03-14 14:44 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-03-13 17:01 - 2021-03-13 17:01 - 000000000 ____D C:\Users\Micro\AppData\Roaming\webex
2021-03-13 17:01 - 2021-03-13 17:01 - 000000000 ____D C:\Users\Micro\AppData\LocalLow\WebEx
2021-03-13 17:01 - 2021-03-13 17:01 - 000000000 ____D C:\Users\Micro\AppData\Local\WebEx
2021-03-13 14:12 - 2021-03-13 14:12 - 000000000 ____D C:\Users\Micro\Documents\Virtual Machines
2021-03-13 13:50 - 2021-03-13 13:50 - 000174792 _____ (Guangzhou Gaomon Technology Co., Ltd.) C:\WINDOWS\system32\wintab32.dll
2021-03-13 13:50 - 2021-03-13 13:50 - 000144584 _____ (Guangzhou Gaomon Technology Co., Ltd.) C:\WINDOWS\SysWOW64\wintab32.dll
2021-03-13 13:50 - 2021-03-13 13:50 - 000019600 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\vmulti.sys
2021-03-13 13:50 - 2021-03-13 13:50 - 000016528 _____ (Windows (R) Win 7 DDK provider) C:\WINDOWS\system32\Drivers\hidkmdf.sys
2021-03-13 13:50 - 2021-03-13 13:50 - 000000939 _____ C:\Users\Micro\Desktop\GaomonTablet.lnk
2021-03-13 13:50 - 2021-03-13 13:50 - 000000000 ____D C:\Users\Micro\AppData\Roaming\GaomonTablet
2021-03-13 13:50 - 2021-03-13 13:50 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Gaomon
2021-03-13 13:50 - 2021-03-13 13:50 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GaomonTablet
2021-03-12 12:22 - 2021-03-12 12:22 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-12 12:22 - 2021-03-12 12:22 - 000374096 _____ C:\WINDOWS\system32\vp9fs.dll
2021-03-12 12:21 - 2021-03-12 12:21 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-12 12:21 - 2021-03-12 12:21 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-12 12:21 - 2021-03-12 12:21 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-12 12:21 - 2021-03-12 12:21 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-12 12:21 - 2021-03-12 12:21 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-10 15:36 - 2021-03-10 15:36 - 000000000 ____D C:\ProgramData\RadeonProRender
2021-03-10 15:15 - 2021-03-10 15:15 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Python
2021-03-10 00:00 - 2021-03-10 00:00 - 000000000 ____D C:\Users\Micro\AppData\Local\rmmz-game
2021-03-09 23:51 - 2021-03-09 23:51 - 000088996 _____ C:\Users\Micro\Downloads\Blender+2.9+Shortcuts+v1.1.pdf
2021-03-09 03:15 - 2021-03-09 03:15 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-09 03:15 - 2021-03-09 03:15 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-09 03:15 - 2021-03-09 03:15 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-09 03:15 - 2021-03-09 03:15 - 000480256 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2021-03-09 03:15 - 2021-03-09 03:15 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-09 03:15 - 2021-03-09 03:15 - 000164144 _____ C:\WINDOWS\system32\cmdiag.exe
2021-03-09 03:15 - 2021-03-09 03:15 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-06 18:16 - 2021-03-06 18:16 - 027890163 _____ C:\Users\Micro\Downloads\lilienstein_4k.hdr
2021-03-06 03:17 - 2021-03-14 16:40 - 000003086 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2021-03-05 17:21 - 2021-03-05 17:21 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Blender Foundation
2021-03-05 13:39 - 2021-03-05 13:39 - 001133923 _____ C:\Users\Micro\Downloads\Console.Commands.2021.01.19.zip
2021-03-05 13:38 - 2021-03-05 13:38 - 000000000 ____D C:\Users\Micro\.thumbnails
2021-03-04 21:04 - 2021-03-04 21:04 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Blender
2021-03-03 23:10 - 2021-03-03 23:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Starsector
2021-03-03 19:27 - 2021-03-03 19:27 - 000104254 _____ C:\Users\Micro\Downloads\rechnung.pdf
2021-03-03 15:56 - 2021-03-03 15:56 - 000002686 _____ C:\Users\Micro\Desktop\YouTube.lnk
2021-03-03 15:56 - 2021-03-03 15:56 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps
2021-03-02 15:19 - 2021-03-02 15:19 - 000213579 _____ C:\Users\Micro\Downloads\WhatsApp Image 2021-03-02 at 15.13.27.jpeg
2021-03-02 15:19 - 2021-03-02 15:19 - 000209416 _____ C:\Users\Micro\Downloads\WhatsApp Image 2021-03-02 at 15.13.21.jpeg
2021-03-01 12:20 - 2021-03-01 12:21 - 128882936 _____ C:\Users\Micro\Downloads\Wintersemester 2.7z
2021-02-27 21:12 - 2021-02-27 21:16 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Sizer4
2021-02-27 21:11 - 2021-02-27 21:11 - 000101661 _____ C:\Users\Micro\Downloads\162951_sizer4_dev570.zip
2021-02-27 21:11 - 2021-02-27 21:11 - 000000000 ____D C:\Users\Micro\Downloads\162951_sizer4_dev570
2021-02-24 20:48 - 2021-02-24 20:48 - 000001302 _____ C:\Users\Public\Desktop\Unity 2019.4.20f1 (64-bit).lnk
2021-02-24 20:48 - 2021-02-24 20:48 - 000001302 _____ C:\ProgramData\Desktop\Unity 2019.4.20f1 (64-bit).lnk
2021-02-24 20:48 - 2021-02-24 20:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Unity 2019.4.20f1 (64-bit)
2021-02-19 22:52 - 2021-02-19 22:52 - 000000757 _____ C:\Users\Micro\Downloads\Dokumente - Verknüpfung.lnk
2021-02-18 16:30 - 2021-02-18 16:31 - 000000000 ____D C:\Program Files (x86)\SpeedFan
2021-02-18 16:29 - 2021-02-18 16:29 - 003086696 _____ C:\Users\Micro\Downloads\instspeedfan452 (1).exe
2021-02-18 14:43 - 2021-02-18 14:43 - 000000636 _____ C:\Users\Micro\Downloads\Enable_printer_sharing_with_Windows_Sandbox.reg
2021-02-18 13:08 - 2021-02-18 13:08 - 000000678 _____ C:\Users\Public\Desktop\VMware Workstation 16 Player.lnk
2021-02-18 13:08 - 2021-02-18 13:08 - 000000678 _____ C:\ProgramData\Desktop\VMware Workstation 16 Player.lnk
2021-02-18 13:08 - 2021-02-18 13:08 - 000000000 ____D C:\Program Files\Common Files\VMware
2021-02-18 13:08 - 2020-11-17 22:01 - 001305304 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetlib64.dll
2021-02-18 13:08 - 2020-11-17 21:59 - 000422104 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnat.exe
2021-02-18 13:08 - 2020-11-17 21:59 - 000379440 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vmnetdhcp.exe
2021-02-18 13:08 - 2020-11-17 21:59 - 000119736 _____ (VMware, Inc.) C:\WINDOWS\system32\vnetinst.dll
2021-02-18 13:08 - 2020-11-17 21:59 - 000045664 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmnetuserif.sys
2021-02-18 13:08 - 2020-11-17 21:53 - 000110696 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmx86.sys
2021-02-18 13:08 - 2020-11-17 21:53 - 000060344 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vmkbd.sys
2021-02-18 13:08 - 2020-10-01 09:46 - 000085448 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\hcmon.sys
2021-02-18 13:08 - 2020-08-11 00:25 - 000048224 _____ (VMware, Inc.) C:\WINDOWS\system32\vsocklib.dll
2021-02-18 13:08 - 2020-08-11 00:25 - 000044128 _____ (VMware, Inc.) C:\WINDOWS\SysWOW64\vsocklib.dll
2021-02-18 13:08 - 2020-08-11 00:24 - 000105912 _____ (VMware, Inc.) C:\WINDOWS\system32\Drivers\vsock.sys
2021-02-18 13:02 - 2021-02-18 13:02 - 000000000 ___HD C:\$Windows.~WS
2021-02-17 20:05 - 2021-02-17 20:05 - 000000000 ____D C:\Users\Micro\AppData\Roaming\twitch-desktop-electron-platform
2021-02-17 13:34 - 2021-02-17 13:34 - 012961744 _____ C:\Users\Micro\Downloads\FW_BM20I3.exe
2021-02-16 15:52 - 2021-02-16 15:52 - 003726534 _____ C:\Users\Micro\Downloads\Einwilligung und Einmeldung.pdf
2021-02-16 14:33 - 2021-02-16 14:33 - 000067676 _____ C:\Users\Micro\Downloads\ST_0229711_2021_Bescheinigung_ueber_Erstattung_einer_Anzeig.pdf
2021-02-13 22:16 - 2021-03-14 13:44 - 000000021 _____ C:\Users\Micro\Desktop\Neues Textdokument.txt
2021-02-13 10:41 - 2021-02-13 10:41 - 000000000 ____D C:\Users\Micro\Desktop\RimPy
2021-02-13 10:39 - 2021-02-13 10:39 - 076101763 _____ C:\Users\Micro\Downloads\RimPy_Windows (2).7z

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-15 10:01 - 2018-09-07 13:57 - 000000000 ____D C:\Users\Micro\AppData\Roaming\discord
2021-03-15 09:46 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-15 09:42 - 2018-09-15 18:09 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Everything
2021-03-15 09:37 - 2018-09-04 23:52 - 000002296 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-15 09:32 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-03-15 09:23 - 2020-10-15 14:53 - 001731134 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-15 09:23 - 2019-12-07 15:51 - 000746436 _____ C:\WINDOWS\system32\perfh007.dat
2021-03-15 09:23 - 2019-12-07 15:51 - 000151384 _____ C:\WINDOWS\system32\perfc007.dat
2021-03-15 09:23 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-15 09:20 - 2020-08-19 17:01 - 000036408 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2021-03-15 09:19 - 2020-08-04 17:12 - 000000000 ____D C:\Users\Micro\AppData\Local\CrashDumps
2021-03-15 09:19 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-03-15 09:16 - 2020-10-29 18:00 - 000000000 ____D C:\ProgramData\VMware
2021-03-15 09:16 - 2020-10-15 14:50 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-15 09:16 - 2020-10-15 14:44 - 000000000 ____D C:\Users\Micro
2021-03-15 09:16 - 2020-10-15 14:42 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK
2021-03-15 09:16 - 2020-10-15 14:42 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-15 09:16 - 2020-08-18 20:40 - 000000527 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2021-03-15 09:16 - 2019-11-22 19:22 - 000010667 _____ C:\CosairDram.txt
2021-03-15 09:16 - 2019-02-15 19:34 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-03-15 09:16 - 2018-09-05 04:04 - 000807280 _____ C:\WINDOWS\system32\wpbbin.exe
2021-03-15 09:16 - 2018-09-05 04:04 - 000768408 _____ C:\WINDOWS\system32\AsusUpdateCheck.exe
2021-03-15 08:35 - 2020-07-04 10:34 - 000002422 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-15 08:35 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-15 08:35 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-15 00:41 - 2020-12-10 09:28 - 000000000 ____D C:\Users\Micro\AppData\Local\D3DSCache
2021-03-14 23:16 - 2018-09-15 18:41 - 000000000 ____D C:\Users\Micro\AppData\Local\Everything
2021-03-14 22:53 - 2020-08-17 20:02 - 000000000 ____D C:\ProgramData\Mozilla
2021-03-14 22:53 - 2020-07-20 18:24 - 000000000 ____D C:\Users\Micro\AppData\LocalLow\Mozilla
2021-03-14 22:02 - 2019-12-07 17:38 - 000000000 ____D C:\Program Files\Adobe
2021-03-14 21:54 - 2019-08-20 02:33 - 000007592 _____ C:\Users\Micro\AppData\Local\Resmon.ResmonCfg
2021-03-14 21:00 - 2018-09-05 04:04 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-14 20:50 - 2019-04-12 19:04 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-03-14 19:04 - 2020-10-15 14:50 - 000003426 _____ C:\WINDOWS\system32\Tasks\simplewallTask
2021-03-14 18:49 - 2020-08-19 19:25 - 000000000 ____D C:\Users\Micro\AppData\Roaming\DS4Windows
2021-03-14 17:58 - 2020-08-17 19:32 - 000000000 ____D C:\Users\Micro\AppData\Roaming\qBittorrent
2021-03-14 16:40 - 2019-12-07 10:03 - 000262144 _____ C:\WINDOWS\system32\config\BBI
2021-03-14 16:40 - 2018-09-05 04:05 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2021-03-14 15:55 - 2020-11-27 13:49 - 000000000 ____D C:\WINDOWS\SysWOW64\directx
2021-03-14 15:49 - 2020-08-17 19:31 - 000000000 ____D C:\Users\Micro\Desktop\random
2021-03-14 14:48 - 2020-11-22 15:41 - 000000000 ____D C:\ProgramData\Kaspersky Lab
2021-03-14 14:48 - 2020-11-22 15:41 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab
2021-03-14 14:44 - 2020-08-17 20:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-03-14 14:25 - 2019-12-07 17:49 - 000000000 ____D C:\Users\Micro\Documents\Adobe
2021-03-14 14:25 - 2019-12-07 17:38 - 000000000 ____D C:\Program Files\Common Files\Adobe
2021-03-14 14:25 - 2018-09-04 22:09 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Adobe
2021-03-14 14:21 - 2019-04-12 10:18 - 000000000 ____D C:\ProgramData\Adobe
2021-03-14 13:43 - 2020-08-17 20:02 - 000001008 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-13 23:48 - 2018-09-05 04:04 - 000000000 ____D C:\ProgramData\ASUS
2021-03-13 23:36 - 2020-12-10 09:29 - 000000000 ____D C:\AMD
2021-03-13 22:49 - 2018-09-05 04:05 - 000000000 ____D C:\Program Files\AMD
2021-03-13 22:32 - 2018-09-04 23:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2021-03-13 22:31 - 2020-10-15 14:50 - 000000000 ____D C:\WINDOWS\system32\Tasks\ASUS
2021-03-13 22:31 - 2018-09-04 22:27 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2021-03-13 22:31 - 2018-09-04 22:09 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-03-13 22:07 - 2018-09-08 16:38 - 000000000 ____D C:\ProgramData\EPSON
2021-03-13 22:05 - 2019-08-06 22:36 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twitch Games
2021-03-13 22:04 - 2020-04-30 14:42 - 000000000 ____D C:\Users\Micro\.openshot_qt
2021-03-13 22:01 - 2018-09-04 23:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CPUID
2021-03-13 22:01 - 2018-09-04 23:56 - 000000000 ____D C:\Program Files\CPUID
2021-03-13 22:01 - 2018-09-04 22:09 - 000000000 ____D C:\Users\Micro\AppData\Local\Packages
2021-03-13 15:49 - 2020-10-29 18:03 - 000000000 ____D C:\Users\Micro\AppData\Local\VMware
2021-03-13 14:12 - 2020-10-29 18:03 - 000000000 ____D C:\Users\Micro\AppData\Roaming\VMware
2021-03-13 01:02 - 2020-10-15 14:42 - 000448248 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-13 01:00 - 2020-10-29 21:03 - 000000000 ___SD C:\WINDOWS\system32\containers
2021-03-13 01:00 - 2020-10-15 15:17 - 000000000 ____D C:\Program Files\Hyper-V
2021-03-13 01:00 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-13 01:00 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-12 12:24 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-12 12:21 - 2018-07-22 18:22 - 000413702 __RSH C:\bootmgr
2021-03-12 12:11 - 2020-10-13 07:55 - 000002139 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2021-03-12 12:08 - 2018-09-05 08:31 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-12 12:04 - 2020-06-29 14:33 - 000000000 ____D C:\Program Files\dotnet
2021-03-12 12:04 - 2018-09-05 08:31 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-12 12:04 - 2018-09-04 22:33 - 000000000 ____D C:\ProgramData\Package Cache
2021-03-12 12:03 - 2020-08-14 16:17 - 000000000 ____D C:\Program Files (x86)\dotnet
2021-03-12 12:02 - 2021-01-24 09:51 - 000000000 ____D C:\Users\Default\.dotnet
2021-03-11 13:00 - 2018-09-04 22:10 - 000000000 ____D C:\Users\Micro\AppData\Local\PlaceholderTileLogoFolder
2021-03-10 15:39 - 2020-04-25 17:49 - 000000000 ____D C:\Users\Micro\AppData\Roaming\vlc
2021-03-09 03:27 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-03-09 03:27 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-09 03:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-09 03:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-09 03:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-09 03:10 - 2020-08-19 15:46 - 001682352 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2021-03-09 03:09 - 2020-08-19 15:46 - 000216016 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2021-03-09 03:09 - 2020-08-19 15:46 - 000169400 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2021-03-09 03:09 - 2020-08-19 15:46 - 000159184 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2021-03-09 03:09 - 2020-08-19 15:46 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2021-03-09 03:09 - 2020-08-19 15:46 - 000038320 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamemodcontrol.exe
2021-03-05 17:54 - 2019-08-08 01:20 - 001065984 _____ C:\Users\Micro\AppData\Local\file__0.localstorage
2021-03-04 22:29 - 2020-10-15 16:35 - 000003606 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6a2f9dcb3c394
2021-03-04 22:29 - 2020-10-15 14:50 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-04 13:34 - 2020-12-10 09:36 - 000000000 ____D C:\Users\Micro\AppData\Local\AMD_Common
2021-03-03 23:35 - 2020-08-13 15:47 - 000000000 ____D C:\Users\Micro\AppData\Roaming\UnityHub
2021-03-03 13:44 - 2020-06-16 15:43 - 000000000 ____D C:\ProgramData\Unity
2021-03-03 13:29 - 2020-08-16 17:39 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Telegram Desktop
2021-03-01 14:29 - 2020-05-31 21:02 - 000000000 ____D C:\Users\Micro\Desktop\wichtig
2021-02-28 16:30 - 2018-09-17 16:59 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-02-28 16:29 - 2021-02-08 20:46 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WhatsApp
2021-02-28 16:28 - 2021-02-08 20:45 - 000000000 ____D C:\Users\Micro\AppData\Local\WhatsApp
2021-02-28 15:53 - 2021-02-08 20:45 - 000000000 ____D C:\Users\Micro\AppData\Roaming\WhatsApp
2021-02-26 00:56 - 2018-09-16 09:27 - 000000000 ____D C:\Program Files (x86)\Battle.net
2021-02-24 20:55 - 2020-08-30 16:09 - 000000000 ____D C:\Users\Micro\AppData\LocalLow\DefaultCompany
2021-02-24 20:53 - 2020-05-22 15:35 - 000001358 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Visual Studio Installer.lnk
2021-02-24 20:53 - 2020-05-22 15:35 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Visual Studio Setup
2021-02-24 20:53 - 2020-05-22 15:35 - 000000000 ____D C:\Program Files (x86)\Microsoft Visual Studio
2021-02-20 09:03 - 2020-08-22 03:52 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-02-20 03:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2021-02-20 03:30 - 2020-03-28 16:18 - 000000000 ____D C:\Users\Micro\AppData\Local\User Data
2021-02-18 20:30 - 2018-09-05 17:32 - 000000000 ____D C:\ProgramData\Riot Games
2021-02-18 17:56 - 2020-11-06 13:34 - 000000000 ____D C:\Users\Micro\AppData\LocalLow\RimPy Mod Manager
2021-02-18 16:30 - 2020-12-04 11:46 - 000000045 _____ C:\WINDOWS\SysWOW64\initdebug.nfo
2021-02-18 16:24 - 2019-06-24 21:43 - 000000000 ____D C:\Users\Micro\AppData\Local\Arma 3 Launcher
2021-02-18 16:20 - 2019-06-24 21:46 - 000000000 ____D C:\Users\Micro\AppData\Local\Arma 3
2021-02-18 13:18 - 2021-01-13 17:23 - 000000000 ____D C:\Program Files\Microsoft Office
2021-02-18 13:08 - 2020-10-29 18:00 - 001752172 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2021-02-18 13:03 - 2020-10-14 20:24 - 000000000 ___DC C:\WINDOWS\Panther
2021-02-18 12:53 - 2021-01-13 17:35 - 000003362 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1694628501-1286526773-235289340-1001
2021-02-18 12:53 - 2021-01-13 17:35 - 000000000 ___RD C:\Users\Micro\OneDrive
2021-02-18 12:53 - 2020-10-15 14:44 - 000002382 _____ C:\Users\Micro\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-02-18 11:46 - 2018-11-16 20:04 - 000000000 ____D C:\ESD
2021-02-17 20:09 - 2018-11-23 13:30 - 000000000 ____D C:\Users\Micro\AppData\Roaming\Twitch
2021-02-17 12:51 - 2020-12-04 11:40 - 000000000 ____D C:\Users\Micro\RivaTuner Statistics Server
2021-02-17 12:28 - 2021-02-12 15:11 - 000003094 _____ C:\WINDOWS\system32\Tasks\RTSS
2021-02-15 14:51 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF
2021-02-14 11:43 - 2020-08-13 15:47 - 000001873 _____ C:\Users\Public\Desktop\Unity Hub.lnk
2021-02-14 11:43 - 2020-08-13 15:47 - 000001873 _____ C:\ProgramData\Desktop\Unity Hub.lnk
2021-02-14 11:43 - 2020-08-13 15:47 - 000000000 ____D C:\Program Files\Unity Hub

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2020-11-02 11:40 - 2020-11-02 11:40 - 000000124 _____ () C:\Users\Micro\AppData\Roaming\debug.log
2020-11-02 14:32 - 2021-01-15 18:30 - 000000016 _____ () C:\Users\Micro\AppData\Roaming\obs-virtualcam.txt
2020-11-16 14:37 - 2020-11-16 21:27 - 000034852 _____ () C:\Users\Micro\AppData\Roaming\VoiceMeeterBananaDefault.xml
2019-08-08 01:20 - 2021-03-05 17:54 - 001065984 _____ () C:\Users\Micro\AppData\Local\file__0.localstorage
2020-11-05 12:28 - 2020-11-05 12:28 - 000000173 _____ () C:\Users\Micro\AppData\Local\msmathematics.qat.Micro
2019-12-07 17:39 - 2019-12-07 17:39 - 000000410 _____ () C:\Users\Micro\AppData\Local\oobelibMkey.log
2019-08-20 02:33 - 2021-03-14 21:54 - 000007592 _____ () C:\Users\Micro\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

--- --- ---


MfG


Michael

Jede woche führe ich einen Scan mit Kaspersky Total Security

coronabedingte Langeweile oder Hysterie?
Von so einem Unsinn wie Kaspersky wird schon seit Jahren abgeraten!
Und statt ständig irgendwelche Scans zu machen, die eh keine Sicherheit versprechen, solltest du besser Sicherheitsmaßnahmen umsetzen, die die Sicherheit gewährleisten.

Nach ungefähr 5 Stunden Scanzeit hat 2 infizierte Datien gefunden, einmal Trojan:win32/Skeeyah.A!rfn und VirTool:Win32/DefenderTamperingRestore in system32.

Mit solchen ungenauen Angaben kann niemand was anfangen...und das zweite FRST-Logs fehlt.

1. Es ist ein automatischer Scan, keine Sorge
2. Hier sind die Logs für den SafetyScanner, habe sie doch gefunden, sorry.

---------------------------------------------------------------------------------------
Microsoft Safety Scanner v1.333, (build 1.333.417.0)
Started On Sun Mar 14 21:54:45 2021

Engine: 1.1.17900.7
Signatures: 1.333.417.0
MpGear: 1.1.16330.1
Run Mode: Interactive Graphical Mode

Full Scan Results:
------------------
Threat Detected: VirTool:Win32/DefenderTamperingRestore and Removed!
  Action: Remove, Result: 0x00000000
    regkeyvalue://hklm\software\microsoft\windows defender\\DisableAntiSpyware
        SigSeq: 0x0000055555C57273
Threat Detected: Trojan:Win32/Skeeyah and Removed!
  Action: Remove, Result: 0x00000000
    file://D:\FileHistory\Micro\DESKTOP-IEUQ4MR\Data\C\Users\Micro\Desktop\dwarf fortress\PeridexisErrant's Starter Pack 0.47.04-r06\LNP\utilities\Dwarf Mockup\DwarfMockup-1.2.0 (2020_11_06 07_09_44 UTC).exe
        SigSeq: 0x000026675F323CC6
    file://D:\FileHistory\Micro\DESKTOP-IEUQ4MR\Data\C\Users\Micro\Desktop\dwarf fortress\PeridexisErrant's Starter Pack 0.47.04-r06 (2020_11_06 07_09_44 UTC).zip->LNP/utilities/Dwarf Mockup/DwarfMockup-1.2.0.exe
        SigSeq: 0x000026675F323CC6
    containerfile://D:\FileHistory\Micro\DESKTOP-IEUQ4MR\Data\C\Users\Micro\Desktop\dwarf fortress\PeridexisErrant's Starter Pack 0.47.04-r06 (2020_11_06 07_09_44 UTC).zip

Results Summary:
----------------
Found VirTool:Win32/DefenderTamperingRestore and Removed!
Found Trojan:Win32/Skeeyah and Removed!
Successfully Submitted MAPS Report
Successfully Submitted Heartbeat Report
Microsoft Safety Scanner Finished On Mon Mar 15 06:18:17 2021


Return code: 6 (0x6)
         

3. Der zweite Log ist zu Lang, mehr als 12000 zeichen, wie soll ich ihn einfügen?

Was machen denn da die MSSQL-Server auf deinem Rechner? Gewerbliche Nutzung?

Und diesen ganzen ASUS-Krempel mal entworgen. Auch Kaspersky bitte deinstallieren. Das Zeug braucht man einfach nicht.

1. Ich musste mal SQL wegen meiner Schule installieren, ich brauch es jetzt nichtmehr und hab es vergessen zu deinstallieren, ist es schlimm?

2. Warum ist Kaspersky Müll? Was würdest du empfehlen?

1. Nicht schlimm, aber wozu muss man den Rechner so zukleistern? NIcht benötigte Software muss auch mal wieder runter

2. Klick mal auf den Link in meiner Signatur, hab da extra nen Artikel zu Virenscanner verlinkt. Ich hoffe ja mal, dass diese ganze Hype um Virenscanner verschwindet. Sicherheit bringen die Dinger kaum dafür sehr viele Probleme.

Okay danke habs mir mal alles durchgelesen. Was sagst du zu den Safetyscanner log? Ich hab mal nach den Dateien gegoogled und wie es aussieht ist es ein Fehlalarm, bin mir aber nicht 100% sicher.

Ich kenn das Spiel nicht. Liegt jetzt bei dir ob du die Dateien benutzen willst oder nicht.
Ich verschiebe nach Diskussion.