Windows 10 Defender lässt sich nich mehr aktivieren

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14-03-2021
Ran by SYSTEM on MININT-1DRBOPI (15-03-2021 22:19:53)
Running from f:\
Platform: Windows 10 Home Version 20H2 19042.867 (X64) Language: Deutsch (Deutschland) -> Deutsch (Deutschland)
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.


==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [768448 2018-07-13] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\SYSTEM32\DRIVERSTORE\FILEREPOSITORY\WAVESAPO77AC.INF_AMD64_1C72DFBD7A8B521F\WAVESSVC64.EXE [1287440 2018-05-30] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [iTunesHelper] => "D:\Program Files\iTunes\iTunesHelper.exe"
HKLM\...\Windows x64\Print Processors\Canon TS8200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEK.DLL [482816 2018-11-26] (CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor TS8200 series: C:\Windows\system32\CNMLMEK.DLL [904192 2018-11-26] (CANON INC.)
HKLM\...\Print\Monitors\HP B111 Status Monitor: C:\Windows\system32\hpinkstsB111LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DBE97F8-6C00-413B-9880-CEF0C3E3144F} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12DF3F8A-9612-48CA-AE38-2818FA70CA73} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [507392 2021-01-13] ()
Task: {143C69E5-5FD5-4558-A6BA-99056575EC72} - \Microsoft\Windows\Windows Error Reporting\SysInfo -> No File <==== ATTENTION
Task: {1C71DCDF-E249-4B96-9C87-81E7B1B18336} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe
Task: {27B5F7F6-0E1C-499F-9969-B3C9A7176502} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [7071000 2019-08-29] (Nero AG -> Nero AG)
Task: {28519E13-FAD4-4EB3-90E6-F16C060A8576} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {29064211-797B-4302-A9B1-CD339219720D} - System32\Tasks\Agent Activation Runtime\S-1-5-21-4274780374-310312604-1853351802-1001 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-12-06] ()
Task: {2AE11AF1-8D11-47DA-8F01-468864E5458B} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2BED9E85-9FFF-4456-80F4-C0DD0A0DC905} - System32\Tasks\dmci => C:\Users\ANDREA~1\dmci\ohxobu.exe -> C:\Users\ANDREA~1\dmci\fnnd.ssm
Task: {2BF5EA0D-5835-4222-A6AF-854D81E7CF8E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2020-08-16] (Google Inc -> Google LLC)
Task: {2C20BB6A-F3DD-4ED3-B288-D13FC87029EF} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {2D713917-6A46-4A07-9990-82FEE9F3D5EC} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1557200 2021-01-25] (Adobe Inc. -> Adobe Inc.)
Task: {332D52C9-E8FE-45B0-9732-35E8270ED02A} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {36972BE7-3BA2-4B90-8F44-1472DE441194} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37ACB099-7453-41AA-9C67-00F332364B07} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {3DCD2779-CFB2-4880-ACC7-2046CEE42473} - System32\Tasks\CareCenter\AppleIEDAV_Reg_HKCURun_S-1-5-21-4274780374-310312604-1853351802-1001 => C:\Program Files (x86)\Common Files\Apple\Internet Services\AppleIEDAV.exe [68408 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {4045B47F-B3BA-4D17-AE11-A97AB0CC7FED} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2018-01-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {412D8276-8D08-40CE-8F92-3CCE8002566C} - System32\Tasks\UbtFrameworkService => C:\Program Files\Acer\User Experience Improvement Program\Framework\TriggerFramework.exe [215856 2017-09-13] (Acer Incorporated -> TODO: <Company name>)
Task: {451001C9-378B-4AE3-9E64-B3F99F121789} - System32\Tasks\CareCenter\Folder Size_Reg_HKCURun_S-1-5-21-4274780374-310312604-1853351802-1001 => C:\Program Files\FolderSize\FolderSize.exe [169472 2013-02-12] (Brio)
Task: {48C1D5D3-51A8-40F5-91A6-E91D933AAADB} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4B980566-1FA1-4317-9B56-39FA8CA885AD} - \PC Cleaner repairing -> No File <==== ATTENTION
Task: {4C79F391-64E0-4EEB-A0C5-EAC4C3953168} - System32\Tasks\IMF_SkipUAC_Andreas Ebner => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
Task: {4DCF3553-E408-48F8-967A-ED143F919B23} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {509B46F4-E139-4699-9E8F-7032C6F7B533} - System32\Tasks\Trojan Remover => C:\Program Files\Loaris Trojan Remover\ltr.exe [17908736 2021-01-07] (Loaris Inc.)
Task: {5413A72E-71CB-47EE-B77C-DBA6849DAD87} - System32\Tasks\IMF_SkipUAC_adm => C:\Program Files (x86)\IObit\IObit Malware Fighter\IMF.exe
Task: {622E3556-B0D5-4FE0-A048-8C16AEAF86D6} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2018-01-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {63A780BE-553B-4160-8F75-3933807C6F94} - System32\Tasks\BlueStacksHelper => D:\BlueStacks\Client\Helper\BlueStacksHelper.exe
Task: {669D58B1-FD25-4C91-BD10-8682412158A5} - System32\Tasks\Norton Security Scan for Andreas Ebner => C:\PROGRA~2\NORTON~2\Engine\461~1.150\Nss.exe
Task: {670B7F97-D28A-49D5-A25C-83B58E6DFE93} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {67C67D30-C919-448D-B9C5-4EBDECAD47C0} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\Windows\UpdateAssistant\UpdateAssistant.exe
Task: {6A067CC0-C766-4833-84BA-142539FAE128} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {6E5E9A48-2165-4040-ABB1-AF7673845C61} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2302184 2018-01-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {7E2D93D1-98CA-4313-8091-AEFCE59ADE76} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {875096B5-CC77-4225-9C3F-0F5B8E826ECA} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8B45FE22-1046-47F6-A071-2E6F58937F53} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [226024 2018-01-25] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {8C267C9B-EDFD-4510-94EF-40FBCD45A1ED} - System32\Tasks\Quick Access => C:\Program Files\Acer\Acer Quick Access\QALauncher.exe [446256 2019-09-26] (Acer Incorporated -> Acer Incorporated)
Task: {8DEF72EB-E500-44BF-9302-FBF0034816DE} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {8F0C014E-4FF3-4186-9948-151E434BA141} - System32\Tasks\EOSv3 Scheduler onTime => C:\Users\Andreas Ebner\Desktop\esetonlinescanner_enu.exe
Task: {8F476193-8984-4554-96FB-E3927F6404A0} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {91BE893C-DD86-41D6-94E1-757499446792} - System32\Tasks\CareCenter\ApplePhotoStreams_Reg_HKCURun_S-1-5-21-4274780374-310312604-1853351802-1001 => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {92E1468D-5693-4592-80AD-D3BBFB38B6A4} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\Windows\UpdateAssistant\UpdateAssistant.exe
Task: {9966559E-E12A-4EB0-931D-8365FD62F8A9} - System32\Tasks\PredatorSense UI => C:\Program Files\Acer\PredatorSense Service\PSLauncher.exe [580888 2019-10-09] (Acer Incorporated -> Acer Incorporated)
Task: {9E47636E-7D34-4F42-A796-CF81F7E27BB2} - System32\Tasks\ACCBackgroundApplication => C:\Program Files (x86)\Acer\Care Center\ACCStd.exe [4696880 2018-05-28] (Acer Incorporated -> )
Task: {A0D0CFEF-EBED-4DE8-A5BE-FB94EEA7B015} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-09] (Adobe Inc. -> Adobe)
Task: {A315D83E-F948-473F-B5EA-93952D03FEB4} - System32\Tasks\CareCenter\Syncios device service_Reg_HKLMWow6432Run => C:\Program Files (x86)\Anvsoft\Syncios\SynciosDeviceService.exe [2944120 2019-07-11] (Anvsoft Inc. -> )
Task: {B02372F9-44E2-4C29-8199-16F0EEA19CA4} - System32\Tasks\ACCAgent => C:\Program Files (x86)\Acer\Care Center\LiveUpdateAgent.exe [41264 2017-10-30] (Acer Incorporated -> )
Task: {B39E20EE-88BC-479D-BFCF-3A2C09C24AF9} - System32\Tasks\Oem\AcerJumpstartTask => C:\Program Files (x86)\Acer\Acer Jumpstart\hermes.exe [64320 2019-07-11] (Acer Incorporated -> Acer)
Task: {C1017873-A0B3-45F9-830C-92F5EE4ABF62} - System32\Tasks\ACC => C:\Program Files (x86)\Acer\Care Center\LiveUpdateChecker.exe [2920752 2017-10-30] (Acer Incorporated -> )
Task: {C54F7330-639B-4617-9A81-CDB32055B55C} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [694256 2021-03-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {C8F8901B-498B-4DA8-94E0-904BCD0E96EF} - System32\Tasks\PredatorSense => C:\Program Files\Acer\PredatorSense Service\PSLauncher.exe [580888 2019-10-09] (Acer Incorporated -> Acer Incorporated)
Task: {C99E434D-288E-43E9-91D7-E8C917F7C0FC} - System32\Tasks\CareCenter\AdobeAAMUpdater-1.0_Reg_HKLMRun => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {CE397CA2-1479-43C6-B287-D9FBC29C3C3B} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
Task: {CEB723EE-D84D-49A9-AB75-9F95C2A08945} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantAllUsersRun => C:\Windows\UpdateAssistant\UpdateAssistant.exe
Task: {D0720991-C887-41BE-A650-4A090FA84E12} - System32\Tasks\StorPSCTL => C:\Program Files\Acer\StorPSCTL\StorPSCTL.exe [91440 2017-09-26] (Acer Incorporated -> Microsoft)
Task: {D4EE7AFA-FEBC-4C0D-A7B9-4D612AC01FB9} - System32\Tasks\UAC => C:\Users\Andreas [Argument = Ebner\AppData\Roaming\NsMiner\IMG001.exe]
Task: {D54A2E50-0475-4A5E-BB13-49BCD6EBE6DD} - System32\Tasks\AcerCMUpdateTask2.1.16258 => C:\Program Files (x86)\Acer\Amundsen\2.1.16258\AWC.exe [152880 2016-09-20] (Acer Incorporated -> )
Task: {D9E6FBB8-8C39-4FF2-84F6-EA9A619CB4E7} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\Windows\UpdateAssistant\UpdateAssistant.exe
Task: {DAF737BA-4855-4070-B610-E9D128DFE022} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-4274780374-310312604-1853351802-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {DC1A0475-072A-4CD2-8AE4-C4078D3E02F4} - System32\Tasks\CareCenter\iCloudServices_Reg_HKCURun_S-1-5-21-4274780374-310312604-1853351802-1001 => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {DD513BEA-24FF-4B3A-ABF2-2BE399713D3E} - System32\Tasks\CareCenter\GXT155gmmouseRun_Reg_HKLMWow6432Run => C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\GXT155mon.exe [3435520 2018-06-11] ()
Task: {DEF9ABC2-8F13-40AD-A0F7-2B3621169028} - System32\Tasks\OneDrive Standalone Update Task v2 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {DF1D8E4A-02EE-434D-9D07-B427480E08AB} - System32\Tasks\CareCenter\Killer Control Center.lnk_FolderCommonAppdata => C:\Program Files\Killer Networking\Killer Control Center\KillerControlCenter.exe [1564864 2018-03-06] (Rivet Networks LLC -> Rivet Networks)
Task: {E113C8C6-B2C3-413F-B2A3-3FCABE397FA4} - System32\Tasks\EOSv3 Scheduler onLogOn => C:\Users\Andreas Ebner\Desktop\esetonlinescanner_enu.exe
Task: {EECAFCC8-3809-4567-987E-4552D7178D18} - System32\Tasks\CareCenter\Open-Shell Start Menu_Reg_HKLMRun => C:\Program Files\Open-Shell\StartMenu.exe [224768 2019-10-26] (Open-Shell)
Task: {F59C6A1E-869F-4078-A9DC-B166C143FE04} - System32\Tasks\Software Update Application => C:\ProgramData\OEM\UpgradeTool\ListCheck.exe [473880 2019-10-09] (Acer Incorporated -> Acer Incorporated)
Task: {F7B68233-3F15-45F9-93BB-3ED28D383FEC} - System32\Tasks\CareCenter\iCloudDrive_Reg_HKCURun_S-1-5-21-4274780374-310312604-1853351802-1001 => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {F906CD2B-59B1-4F90-BEE2-A63490DE6296} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2020-08-16] (Google Inc -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\Windows\Tasks\UAC.job => C:\Users\Andreas)Ebner\AppData\Roaming\NsMiner\IMG001.exe

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169672 2021-01-25] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-09] (Adobe Inc. -> Adobe)
S2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
S2 CdRomAccessAgentService; C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe [96152 2020-10-02] (Shenzhen Moyea Software -> Leawo Software)
S2 ETGMGlcsSrv; C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\ETGMSrv.exe [1181544 2012-04-24] (Eastern Times Technology Co.,Ltd -> )
S2 FolderSize; C:\Program Files\FolderSize\FolderSizeSvc.exe [163840 2013-02-12] (Brio)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA)
S3 GoogleChromeElevationService1d6b87fd0753326; C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.90\elevation_service.exe [1509488 2021-03-11] (Google LLC -> Google LLC)
S2 Killer Network Service; C:\Windows\System32\drivers\RivetNetworks\Killer\KillerNetworkService.exe [2319320 2018-04-26] (Microsoft Windows Hardware Compatibility Publisher -> Rivet Networks)
S2 MBAMIService; C:\ProgramData\MB3Install\MBAMIService.exe [231120 2019-06-26] (Malwarebytes Corporation -> Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-02-22] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2535000 2021-02-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3480152 2021-02-24] (Electronic Arts, Inc. -> Electronic Arts)
S3 PSSvc; C:\Program Files\Acer\PredatorSense Service\PSSvc.exe [979736 2019-10-09] (Acer Incorporated -> Acer Incorporated)
S3 QALSvc; C:\Program Files\Acer\Acer Quick Access\QALSvc.exe [466224 2019-09-26] (Acer Incorporated -> Acer Incorporated)
S3 QASvc; C:\Program Files\Acer\Acer Quick Access\QASvc.exe [508208 2019-09-26] (Acer Incorporated -> Acer Incorporated)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [384512 2019-10-15] ()
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [974848 2019-10-15] ()
S2 TeraCopyService; C:\Program Files\TeraCopy\TeraCopyService.exe [110416 2017-05-05] (Code Sector -> Code Sector)
S3 UEIPSvc; C:\Program Files\Acer\User Experience Improvement Program\Framework\UBTService.exe [299824 2017-09-13] (Acer Incorporated -> acer)
S2 VPNUnlimitedService; C:\Program Files (x86)\VPN Unlimited\vpn-unlimited-daemon.exe [47616 2020-12-24] (KeepSolid Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WireGuardTunnel$VPNUWireguard; C:\Program Files (x86)\VPN Unlimited\WireVPNUImpl.exe [17920 2020-10-12] ()
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe [495720 2018-07-04] (Wondershare Technology Co.,Ltd -> Wondershare)
S2 WsAppService3; C:\Program Files (x86)\Wondershare\WAF3\3.0.0.308\WsAppService3.exe [83232 2019-07-09] (Wondershare Technology Co.,Ltd -> Wondershare)
S3 GoogleChromeElevationService; "C:\Program Files (x86)\Google\Chrome\Application\86.0.4240.193\elevation_service.exe" [X]
S3 Rockstar Service; "D:\Rockstar Games Launcher\RockstarService.exe" [X]
S2 SecurityServiceMonitor; C:\Program Files (x86)\TotalAV\SecurityService.exe --monitor [X] <==== ATTENTION
S3 VBoxSDS; "C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe" [X]

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcerAirplaneModeController; C:\Windows\System32\drivers\AcerAirplaneModeController.sys [30168 2020-05-12] (Acer Incorporated -> Acer Incorporated)
S3 AcpiPmi; C:\Windows\System32\drivers\acpipmi.sys [18432 2019-12-07] (Microsoft Corporation)
S1 afunix; C:\Windows\system32\drivers\afunix.sys [41984 2020-10-09] (Microsoft Corporation)
S1 afunix; C:\Windows\SysWOW64\drivers\afunix.sys [29696 2020-10-09] (Microsoft Corporation)
S1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [292864 2019-12-07] (Microsoft Corporation)
S3 AppleKmdfFilter; C:\Windows\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 applockerfltr; C:\Windows\System32\drivers\applockerfltr.sys [18432 2020-10-09] (Microsoft Corporation)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [9728 2019-12-07] (Windows (R) Win 7 DDK provider)
S1 Beep; C:\Windows\System32\Drivers\Beep.sys [10240 2019-12-07] (Microsoft Corporation)
S2 BlueStacksDrv; C:\Program Files\BlueStacks\BstkDrv_bgp.sys [315976 2020-10-04] (Bluestack Systems, Inc -> Bluestack System Inc.)
S3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [117760 2021-01-13] (Microsoft Corporation)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2020-10-09] (Microsoft Corporation)
S3 BthEnum; C:\Windows\System32\drivers\BthEnum.sys [113664 2021-03-11] (Microsoft Corporation)
S3 BthHFAud; C:\Windows\System32\drivers\BthHfAud.sys [65536 2019-12-07] (Microsoft Corporation)
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation)
S3 BthLEEnum; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [106496 2020-10-09] (Microsoft Corporation)
S3 BthMini; C:\Windows\System32\drivers\BTHMINI.sys [45568 2021-03-11] (Microsoft Corporation)
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation)
S3 BthPan; C:\Windows\System32\drivers\bthpan.sys [133632 2019-12-07] (Microsoft Corporation)
S3 BTHPORT; C:\Windows\System32\drivers\BTHport.sys [1560064 2021-03-11] (Microsoft Corporation)
S3 BTHUSB; C:\Windows\System32\drivers\BTHUSB.sys [110592 2021-03-11] (Microsoft Corporation)
S1 CimFS; C:\Windows\System32\Drivers\CimFS.sys [91136 2021-03-11] ()
S3 circlass; C:\Windows\System32\drivers\circlass.sys [52224 2019-12-07] (Microsoft Corporation)
S2 CldFlt; C:\Windows\System32\drivers\cldflt.sys [495104 2021-02-06] (Microsoft Corporation)
S1 Dfsc; C:\Windows\System32\Drivers\dfsc.sys [152064 2021-03-11] (Microsoft Corporation)
S1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [59392 2019-12-07] (Microsoft Corporation)
S1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8704 2019-12-07] (Microsoft Corporation)
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [430080 2020-10-09] (Microsoft Corporation)
S3 HidBth; C:\Windows\System32\drivers\hidbth.sys [120320 2020-10-09] (Microsoft Corporation)
S3 HidIr; C:\Windows\System32\drivers\hidir.sys [48640 2019-12-07] (Microsoft Corporation)
S1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2020-11-11] (Martin Malik - REALiX -> REALiX(tm))
S3 HwNClx0101; C:\Windows\System32\Drivers\mshwnclx.sys [30208 2019-12-07] (Microsoft Corporation)
S3 IndirectKmd; C:\Windows\System32\drivers\IndirectKmd.sys [47104 2020-10-09] (Microsoft Corporation)
S3 intelpmax; C:\Windows\System32\drivers\intelpmax.sys [30720 2019-12-07] (Microsoft Corporation)
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [90112 2019-12-07] (Microsoft Corporation)
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [225280 2019-12-07] (Microsoft Corporation)
S2 lltdio; C:\Windows\System32\drivers\lltdio.sys [72704 2019-12-07] (Microsoft Corporation)
S2 luafv; C:\Windows\system32\drivers\luafv.sys [140800 2021-03-11] (Microsoft Corporation)
S2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [220616 2021-03-15] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [19912 2020-12-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [248992 2021-03-14] (Malwarebytes Inc -> Malwarebytes)
S3 MbbCx; C:\Windows\System32\drivers\MbbCx.sys [386048 2020-10-09] (Microsoft Corporation)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [65024 2019-12-07] (Microsoft Corporation)
S2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [53248 2020-10-09] (Microsoft Corporation)
S3 Modem; C:\Windows\System32\drivers\modem.sys [47104 2021-01-13] (Microsoft Corporation)
S3 monitor; C:\Windows\System32\drivers\monitor.sys [80896 2020-10-09] (Microsoft Corporation)
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [157696 2019-12-07] (Microsoft Corporation)
S3 MsBridge; C:\Windows\System32\drivers\bridge.sys [127488 2019-12-07] (Microsoft Corporation)
S3 mshidumdf; C:\Windows\System32\drivers\mshidumdf.sys [12288 2019-12-07] (Microsoft Corporation)
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [34816 2020-11-10] (Microsoft Corporation)
S2 MsLldp; C:\Windows\System32\drivers\mslldp.sys [78848 2019-12-07] (Microsoft Corporation)
S3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [740864 2021-03-11] (Microsoft Corporation)
S1 NdisCap; C:\Windows\System32\drivers\ndiscap.sys [54272 2019-12-07] (Microsoft Corporation)
S3 NdisImPlatform; C:\Windows\System32\drivers\NdisImPlatform.sys [135168 2020-10-09] (Microsoft Corporation)
S3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [28672 2020-10-09] (Microsoft Corporation)
S3 NdisWan; C:\Windows\System32\drivers\ndiswan.sys [206848 2020-10-09] (Microsoft Corporation)
S3 ndiswanlegacy; C:\Windows\System32\DRIVERS\ndiswan.sys [206848 2020-10-09] (Microsoft Corporation)
S3 ndproxy; C:\Windows\System32\DRIVERS\NDProxy.sys [93696 2020-10-09] (Microsoft Corporation)
S2 Ndu; C:\Windows\System32\drivers\Ndu.sys [131584 2019-12-07] (Microsoft Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [207360 2021-02-06] (Microsoft Corporation)
S1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [341504 2020-10-09] (Microsoft Corporation)
S1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [48640 2020-10-09] (Microsoft Corporation)
S2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [822784 2020-10-09] (Microsoft Corporation)
S3 PNPMEM; C:\Windows\System32\drivers\pnpmem.sys [17408 2019-12-07] (Microsoft Corporation)
S3 PptpMiniport; C:\Windows\System32\drivers\raspptp.sys [101888 2020-10-09] (Microsoft Corporation)
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [53248 2019-12-07] (Microsoft Corporation)
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [20480 2020-10-09] (Microsoft Corporation)
S3 RasAgileVpn; C:\Windows\System32\drivers\AgileVpn.sys [118784 2020-11-10] (Microsoft Corporation)
S3 Rasl2tp; C:\Windows\System32\drivers\rasl2tp.sys [110080 2020-10-09] (Microsoft Corporation)
S3 RasSstp; C:\Windows\System32\drivers\rassstp.sys [86016 2020-10-09] (Microsoft Corporation)
S3 rdpbus; C:\Windows\System32\drivers\rdpbus.sys [28672 2019-12-07] (Microsoft Corporation)
S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [174080 2020-12-06] (Microsoft Corporation)
S3 RFCOMM; C:\Windows\System32\drivers\rfcomm.sys [213504 2019-12-07] (Microsoft Corporation)
S3 RfeCoSvc; C:\Windows\System32\drivers\RivetNetworks\Killer\RfeCo10X64.sys [150152 2018-04-26] (Rivet Networks LLC -> Rivet Networks, LLC.)
S3 rhproxy; C:\Windows\System32\drivers\rhproxy.sys [115712 2019-12-07] (Microsoft Corporation)
S1 RrNetCapFilterDriver; C:\Windows\system32\DRIVERS\RrNetCapFilterDriver.sys [25256 2015-07-09] (Audials AG -> Audials AG)
S2 rspndr; C:\Windows\System32\drivers\rspndr.sys [89088 2019-12-07] (Microsoft Corporation)
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [44032 2021-03-11] (Microsoft Corporation)
S3 spaceparser; C:\Windows\System32\drivers\spaceparser.sys [26624 2019-12-07] (Microsoft Corporation)
S3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [782848 2020-12-09] (Microsoft Corporation)
S3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [315392 2020-11-10] (Microsoft Corporation)
S3 Synth3dVsc; C:\Windows\System32\drivers\Synth3dVsc.sys [67072 2019-12-07] (Microsoft Corporation)
S2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [54784 2019-12-07] (Microsoft Corporation)
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [66560 2019-12-07] (Microsoft Corporation)
S3 TsUsbGD; C:\Windows\System32\drivers\TsUsbGD.sys [37888 2019-12-07] (Microsoft Corporation)
S3 tunnel; C:\Windows\System32\drivers\tunnel.sys [129024 2019-12-07] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [160256 2019-12-07] (Microsoft Corporation)
S3 UcmTcpciCx0101; C:\Windows\System32\Drivers\UcmTcpciCx.sys [188416 2019-12-07] (Microsoft Corporation)
S3 UcmUcsiAcpiClient; C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys [36864 2019-12-07] (Microsoft Corporation)
S3 UcmUcsiCx0101; C:\Windows\System32\Drivers\UcmUcsiCx.sys [113152 2020-10-09] (Microsoft Corporation)
S5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] (Empty Loop -> )
S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [210432 2021-02-06] (Microsoft Corporation)
S3 usbaudio2; C:\Windows\System32\drivers\usbaudio2.sys [260608 2019-12-07] (Microsoft Corporation)
S3 usbcir; C:\Windows\System32\drivers\usbcir.sys [107520 2019-12-07] (Microsoft Corporation)
S3 usbglcs1100302; C:\Windows\system32\drivers\usbglcs1100302.sys [25600 2014-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 usbprint; C:\Windows\System32\drivers\usbprint.sys [35328 2019-12-07] (Microsoft Corporation)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [239872 2021-01-07] (Oracle Corporation -> Oracle Corporation)
S1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [249776 2021-01-07] (Oracle Corporation -> Oracle Corporation)
S3 VirtualRender; C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys [11264 2019-12-07] (Microsoft Corporation)
S2 wanarp; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2020-10-09] (Microsoft Corporation)
S3 wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2020-10-09] (Microsoft Corporation)
S3 wcnfs; C:\Windows\system32\drivers\wcnfs.sys [93184 2021-03-11] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [958976 2021-03-11] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WinNat; C:\Windows\System32\drivers\winnat.sys [259584 2021-03-11] (Microsoft Corporation)
S3 wintun; C:\Windows\system32\DRIVERS\wintun.sys [38176 2020-08-21] (WireGuard LLC -> WireGuard LLC)
S3 WINUSB; C:\Windows\System32\drivers\WinUSB.SYS [107008 2019-12-07] (Microsoft Corporation)
S3 WSDPrintDevice; C:\Windows\System32\drivers\WSDPrint.sys [23552 2019-12-07] (Microsoft Corporation)
S3 WSDScan; C:\Windows\system32\DRIVERS\WSDScan.sys [26112 2020-10-09] (Microsoft Corporation)
S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [136192 2019-12-07] (Microsoft Corporation)
S3 WUDFRd; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Corporation)
S3 WUDFWpdFs; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Corporation)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [329216 2021-03-11] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [51712 2021-03-11] (Microsoft Corporation)
S4 ekrn; no ImagePath
S3 semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [X]
UpperFilters: [{71A27CDD-812A-11D0-BEC7-08002BE2092F}] -> [volsnap fltsrv]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (All) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-15 22:19 - 2021-03-15 22:19 - 000000000 ____D C:\FRST
2021-03-15 22:11 - 2021-03-15 22:11 - 000002328 _____ C:\Users\Administrator\Desktop\Google Chrome.lnk
2021-03-15 21:40 - 2021-03-15 21:40 - 000000000 ____D C:\Users\Andreas Ebner\RevoUninstallerProPortable
2021-03-15 21:37 - 2021-03-15 21:41 - 000000000 ____D C:\Users\Andreas Ebner\Desktop\Topf
2021-03-15 20:35 - 2021-03-15 20:35 - 000003840 _____ C:\Windows\System32\Tasks\EOSv3 Scheduler onLogOn
2021-03-15 20:35 - 2021-03-15 20:35 - 000003398 _____ C:\Windows\System32\Tasks\EOSv3 Scheduler onTime
2021-03-15 20:05 - 2021-03-15 20:05 - 000000000 ____D C:\Users\Andreas Ebner\AppData\Local\ESET
2021-03-15 19:43 - 2021-03-15 19:54 - 000000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2021-03-15 19:43 - 2021-03-15 19:43 - 000255928 _____ (Malwarebytes) C:\Windows\System32\Drivers\214197E3.sys
2021-03-15 19:21 - 2021-03-15 19:35 - 000000000 ___HD C:\$WINDOWS.~BT
2021-03-15 16:07 - 2021-03-15 17:25 - 000000000 ____D C:\ProgramData\HitmanPro
2021-03-15 15:52 - 2021-03-15 17:25 - 000000000 ____D C:\Users\Andreas Ebner\AppData\LocalLow\IGDump
2021-03-15 15:19 - 2021-03-15 15:19 - 000000000 ____D C:\Windows\System32\Tasks\McAfee
2021-03-15 13:50 - 2021-01-07 10:18 - 001037824 _____ (Oracle Corporation) C:\Windows\System32\Drivers\VBoxDrv.sys
2021-03-15 13:50 - 2021-01-07 10:18 - 000187888 _____ (Oracle Corporation) C:\Windows\System32\Drivers\VBoxUSBMon.sys
2021-03-15 13:32 - 2021-03-15 13:32 - 019463448 _____ (Microsoft Corporation) C:\Users\Andreas Ebner\Downloads\MediaCreationTool20H2 (2).exe
2021-03-15 13:32 - 2021-03-15 13:32 - 000000000 ___HD C:\$Windows.~WS
2021-03-15 13:31 - 2021-03-15 13:31 - 019463448 _____ (Microsoft Corporation) C:\Users\Andreas Ebner\Downloads\MediaCreationTool20H2 (1).exe
2021-03-15 13:22 - 2021-03-15 13:22 - 019463448 _____ (Microsoft Corporation) C:\Users\Andreas Ebner\Downloads\MediaCreationTool20H2.exe
2021-03-15 09:17 - 2021-03-15 09:18 - 000000000 ____D C:\ProgramData\EaseUS Todo PCTrans
2021-03-15 08:59 - 2021-03-15 08:59 - 000000000 ____D C:\Users\Andreas Ebner\AppData\Roaming\DontSleep
2021-03-15 01:30 - 2021-03-15 01:30 - 000220616 _____ (Malwarebytes) C:\Windows\System32\Drivers\MbamChameleon.sys
2021-03-15 00:48 - 2021-03-15 00:48 - 000000000 ____D C:\MATS
2021-03-14 23:11 - 2021-03-14 23:11 - 000002936 _____ C:\Windows\System32\Tasks\IMF_SkipUAC_adm
2021-03-14 23:09 - 2021-03-15 22:12 - 000000000 ____D C:\Users\Administrator\AppData\Local\OpenShell
2021-03-14 23:09 - 2021-03-14 23:11 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\IObit
2021-03-14 23:09 - 2021-03-14 23:09 - 000000020 ___SH C:\Users\Administrator\ntuser.ini
2021-03-14 23:09 - 2021-03-14 23:09 - 000000000 ____D C:\Users\Administrator\AppData\Roaming\OpenShell
2021-03-14 19:02 - 2021-03-15 17:25 - 000000000 ____D C:\Users\Andreas Ebner\AppData\Local\wureset
2021-03-14 19:02 - 2021-03-14 19:02 - 000000000 ____D C:\Program Files\wureset
2021-03-14 18:51 - 2021-03-14 18:51 - 000000000 ___RD C:\Users\Andreas Ebner\Documents\Scanned Documents
2021-03-14 18:51 - 2021-03-14 18:51 - 000000000 ____D C:\Users\Andreas Ebner\Documents\Fax
2021-03-14 18:19 - 2021-03-14 18:19 - 000214174 _____ C:\Users\Andreas Ebner\Downloads\WindowsFirewall.diagcab
2021-03-14 17:24 - 2021-03-14 17:24 - 000002956 _____ C:\Windows\System32\Tasks\IMF_SkipUAC_Andreas Ebner
2021-03-14 16:56 - 2021-03-14 16:56 - 008823656 _____ (Intel Corporation) C:\Windows\System32\Drivers\Netwtw08.sys
2021-03-14 16:56 - 2021-03-14 16:56 - 002673724 _____ C:\Windows\System32\Drivers\Netwfw08.dat
2021-03-14 16:56 - 2021-03-14 16:56 - 001058152 _____ (Intel Corporation) C:\Windows\System32\IntelIHVRouter08.dll
2021-03-14 16:55 - 2021-03-14 16:55 - 006161712 _____ (Intel Corporation) C:\Windows\System32\Drivers\ibtusb.sys
2021-03-14 16:55 - 2021-03-14 16:55 - 003734352 _____ (Microsoft Corporation) C:\Windows\System32\mcupdate_GenuineIntel.dll
2021-03-14 16:55 - 2021-03-14 16:55 - 000539440 _____ (Intel Corporation) C:\Windows\System32\ibtsiva.exe
2021-03-14 16:55 - 2021-03-14 16:55 - 000441648 _____ (Intel Corporation) C:\Windows\System32\ibtproppage.dll
2021-03-14 16:26 - 2021-03-14 16:26 - 000000000 ___HD C:\$SysReset
2021-03-14 13:16 - 2021-03-14 13:16 - 000000000 ____D C:\Program Files\iPod
2021-03-13 09:38 - 2021-03-13 09:38 - 000000000 ____D C:\Windows\System32\Tasks\Mozilla
2021-03-11 16:58 - 2021-03-11 16:58 - 026273280 _____ (Microsoft Corporation) C:\Windows\System32\edgehtml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 024272384 _____ (Microsoft Corporation) C:\Windows\System32\Hydrogen.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 023451136 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 019870208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 018082304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 017544704 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Xaml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 014762496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Xaml.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 010842448 _____ (Microsoft Corporation) C:\Windows\System32\ntoskrnl.exe
2021-03-11 16:58 - 2021-03-11 16:58 - 010352424 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Media.Protection.PlayReady.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 008899800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 008237056 _____ (Microsoft Corporation) C:\Windows\System32\mstscax.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 008015592 _____ (Microsoft Corporation) C:\Windows\System32\OneCoreUAPCommonProxyStub.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 007965496 _____ (Microsoft Corporation) C:\Windows\System32\windows.storage.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 007784448 _____ (Microsoft Corporation) C:\Windows\System32\Chakra.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 007639536 _____ (Microsoft Corporation) C:\Windows\System32\shell32.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 007634432 _____ (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 007109120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 006433792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 006361144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\windows.storage.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 006236160 _____ (Microsoft Corporation) C:\Windows\System32\twinui.pcshell.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 006187008 _____ (Microsoft Corporation) C:\Windows\System32\twinui.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 006004312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 005858144 _____ (Microsoft Corporation) C:\Windows\System32\Windows.StateRepository.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 005751264 _____ (Microsoft Corporation) C:\Windows\System32\StartTileData.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 005424256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.StateRepository.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 005070336 _____ (Microsoft Corporation) C:\Windows\System32\wininet.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004901888 _____ (Microsoft Corporation) C:\Windows\System32\jscript9.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004824576 _____ (Microsoft Corporation) C:\Windows\System32\cdp.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004795784 _____ (Microsoft Corporation) C:\Windows\System32\mfcore.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004743168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004732416 _____ (Microsoft Corporation) C:\Windows\System32\InputService.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004704744 _____ (Microsoft Corporation) C:\Windows\explorer.exe
2021-03-11 16:58 - 2021-03-11 16:58 - 004650576 _____ (Microsoft Corporation) C:\Windows\System32\setupapi.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004629312 _____ (Microsoft Corporation) C:\Windows\System32\sppsvc.exe
2021-03-11 16:58 - 2021-03-11 16:58 - 004534784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004437776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setupapi.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004272640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cdp.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 004123184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe
2021-03-11 16:58 - 2021-03-11 16:58 - 004008960 _____ (Microsoft Corporation) C:\Windows\System32\SystemSettingsThresholdAdminFlowUI.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003938304 _____ (Microsoft Corporation) C:\Windows\System32\SettingsHandlers_nt.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003901952 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentServer.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003869184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003852800 _____ (Microsoft Corporation) C:\Windows\System32\SRH.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003824192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\OneCoreUAPCommonProxyStub.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003815424 _____ (Microsoft Corporation) C:\Windows\System32\win32kfull.sys
2021-03-11 16:58 - 2021-03-11 16:58 - 003785552 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\dxgkrnl.sys
2021-03-11 16:58 - 2021-03-11 16:58 - 003764224 _____ (Microsoft Corporation) C:\Windows\System32\Microsoft.Bluetooth.Service.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003749888 _____ (Microsoft Corporation) C:\Windows\System32\EdgeContent.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003592192 _____ (Microsoft Corporation) C:\Windows\System32\dwmcore.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003557584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mfcore.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003507000 _____ (Microsoft Corporation) C:\Windows\System32\combase.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003394560 _____ (Microsoft Corporation) C:\Windows\System32\wuaueng.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003329536 _____ (Microsoft Corporation) C:\Windows\System32\esent.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003301376 _____ (Microsoft Corporation) C:\Windows\System32\tquery.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003293184 _____ (Microsoft Corporation) C:\Windows\System32\msi.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003178832 _____ (Microsoft Corporation) C:\Windows\System32\mispace.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003094016 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Logon.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 003067904 _____ (Microsoft Corporation) C:\Windows\System32\UIAutomationCore.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002990904 _____ (Microsoft Corporation) C:\Windows\System32\Drivers\tcpip.sys
2021-03-11 16:58 - 2021-03-11 16:58 - 002970624 _____ (Microsoft Corporation) C:\Windows\System32\mssrch.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002919424 _____ (Microsoft Corporation) C:\Windows\System32\win32kbase.sys
2021-03-11 16:58 - 2021-03-11 16:58 - 002821632 _____ (Microsoft Corporation) C:\Windows\System32\WsmSvc.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002810296 _____ (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2021-03-11 16:58 - 2021-03-11 16:58 - 002755584 _____ (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2021-03-11 16:58 - 2021-03-11 16:58 - 002750976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2021-03-11 16:58 - 2021-03-11 16:58 - 002659328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002635128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002602496 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tquery.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002594128 _____ (Microsoft Corporation) C:\Windows\System32\UpdateAgent.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002520072 _____ (Microsoft Corporation) C:\Windows\System32\msmpeg2vdec.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002495824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mispace.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002472040 _____ (Microsoft Corporation) C:\Windows\System32\msxml6.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002454528 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.onecore.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002453384 _____ (Microsoft Corporation) C:\Windows\System32\WMVCORE.DLL
2021-03-11 16:58 - 2021-03-11 16:58 - 002437632 _____ (Microsoft Corporation) C:\Windows\System32\InstallService.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002378752 _____ (Microsoft Corporation) C:\Windows\System32\smartscreen.exe
2021-03-11 16:58 - 2021-03-11 16:58 - 002349568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WsmSvc.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002339744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002321800 _____ (Microsoft Corporation) C:\Windows\System32\Windows.ApplicationModel.Store.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002309120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mssrch.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002268968 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002251264 _____ (Microsoft Corporation) C:\Windows\System32\ISM.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002246480 _____ (Microsoft Corporation) C:\Windows\System32\workfolderssvc.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002204160 _____ (Microsoft Corporation) C:\Windows\System32\ExplorerFrame.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002179584 _____ (Microsoft Corporation) C:\Windows\System32\pnidui.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002137264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVCORE.DLL
2021-03-11 16:58 - 2021-03-11 16:58 - 002111488 _____ (Microsoft Corporation) C:\Windows\System32\windowsudk.shellcommon.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002040144 _____ (Microsoft Corporation) C:\Windows\System32\wsp_fs.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002024224 _____ (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 002007352 _____ (Microsoft Corporation) C:\Windows\System32\appraiser.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001956552 _____ (Microsoft Corporation) C:\Windows\System32\mfasfsrcsnk.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001956352 _____ (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001952912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001886208 _____ (Microsoft Corporation) C:\Windows\System32\wevtsvc.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001866240 _____ (Microsoft Corporation) C:\Windows\System32\dbghelp.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001843712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InstallService.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001828352 _____ (Microsoft Corporation) C:\Windows\System32\Windows.UI.Input.Inking.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001824056 _____ (Microsoft Corporation) C:\Windows\System32\rdpserverbase.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001822272 _____ (Microsoft Corporation) C:\Windows\System32\winload.efi
2021-03-11 16:58 - 2021-03-11 16:58 - 001787904 _____ (Microsoft Corporation) C:\Windows\System32\enterprisecsps.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001784512 _____ (Microsoft Corporation) C:\Windows\System32\WindowsCodecs.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001767936 _____ (Microsoft Corporation) C:\Windows\System32\AppXDeploymentExtensions.desktop.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001751448 _____ (Microsoft Corporation) C:\Windows\System32\sppobjs.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001721168 _____ (Microsoft Corporation) C:\Windows\System32\wsp_health.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001720320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001712128 _____ (Microsoft Corporation) C:\Windows\System32\Windows.Globalization.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001696232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2021-03-11 16:58 - 2021-03-11 16:58 - 001695744 _____ (Microsoft Corporation) C:\Windows\System32\msxml3.dll