App&Browsersteuerung von PresentationHost.Exe angegriffen

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-03-2021
durchgeführt von Jan (Administrator) auf PC-JAN (MSI MS-7984) (24-03-2021 20:14:55)
Gestartet von C:\Users\Jan\Downloads
Geladene Profile: Jan
Platform: Windows 10 Home Version 20H2 19042.867 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avscan.exe <2>
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe
(Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.CpuIdRemote64.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.DisplayAdapter.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc.) C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE.exe
(Discord Inc. -> Discord Inc.) C:\Users\Jan\AppData\Local\Discord\app-0.0.309\Discord.exe <6>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <29>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.72\GoogleCrashHandler64.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3282.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.3282.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel(R) Biometric and Context Agent -> Intel(R) Corporation) C:\Program Files\Intel\BCA\pabeSvc64.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(Intel(R) Intel Network Drivers -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Common Files\LogiShrd\KHAL3\KHALMNPR.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_agent.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LGHUB\lghub_updater.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\SetPointP\SetPoint.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\TrueKey\McTkSchedulerService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\WINWORD.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20688.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20688.0_x64__8wekyb3d8bbwe\HxTsr.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2102.4-0\MsMpEng.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe
(MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Opera Software AS -> Opera Software) C:\Users\Jan\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe <2>
(Skutta, Kristjan -> ) H:\Steam Spiele\steamapps\common\wallpaper_engine\wallpaper32.exe
(Swift Media Entertainment, Inc. -> Blitz, Inc.) C:\Users\Jan\AppData\Local\Programs\Blitz\Blitz.exe <14>

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [EvtMgr6] => C:\Program Files\Logitech\SetPointP\SetPoint.exe [3136136 2018-09-07] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [Riot Vanguard] => C:\Program Files\Riot Vanguard\vgtray.exe [353400 2021-03-22] (Riot Games, Inc. -> Riot Games, Inc.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [337720 2020-11-12] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Super Charger] => C:\Program Files (x86)\MSI\Super Charger\Super Charger.exe [1031120 2015-05-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [705728 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [CORSAIR iCUE Software] => C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\iCUE Launcher.exe [405032 2019-11-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [107977528 2021-01-28] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-03-23] (Valve -> Valve Corporation)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-09-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2020-09-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [iCloudPhotos] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudPhotos.exe [356664 2020-09-08] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [Discord] => C:\Users\Jan\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [LGHUB] => C:\Program Files\LGHUB\lghub.exe [123792288 2021-03-24] (Logitech Inc -> Logitech, Inc.)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Jan\AppData\Local\Microsoft\Teams\Update.exe [2350776 2020-06-08] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [com.blitz.app] => C:\Users\Jan\AppData\Local\Programs\Blitz\Blitz.exe [109893896 2021-03-20] (Swift Media Entertainment, Inc. -> Blitz, Inc.)
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [0FEA11A396E151B4588EDCB67D9DC589C7FEDE4F._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [GoogleDriveSync] => C:\Program Files\Google\Drive\googledrivesync.exe [50011008 2021-01-20] (Google LLC -> )
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [WallpaperEngine] => H:\Steam Spiele\steamapps\common\wallpaper_engine\wallpaper32.exe [2769000 2021-03-04] (Skutta, Kristjan -> )
HKU\S-1-5-21-3457053640-1891177686-776274774-1001\...\Run: [Opera GX Browser Assistant] => C:\Users\Jan\AppData\Local\Programs\Opera GX\assistant\browser_assistant.exe [3291288 2021-02-01] (Opera Software AS -> Opera Software)
HKLM\...\Print\Monitors\HP CD11 Status Monitor: C:\WINDOWS\system32\hpinkstsCD11LM.dll [391992 2019-03-15] (HP Inc -> HP Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.90\Installer\chrmstp.exe [2021-03-18] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{B7724AE5-1135-4889-8A5F-CA98BE6CA1ED}] -> C:\Program Files\TrueKey\McAfee.TrueKey.CredentialProvider.dll [2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ryos Driver.lnk [2018-01-13]
ShortcutTarget: Ryos Driver.lnk -> C:\Program Files (x86)\ROCCAT\Ryos Keyboard\Ryos MK Monitor.exe (ROCCAT GmbH Co., Ltd.) [Datei ist nicht signiert]
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2019-06-22]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Twitch.lnk [2019-11-22]
ShortcutTarget: Twitch.lnk -> C:\Users\Jan\AppData\Roaming\Twitch\Bin\Twitch.exe (Twitch Interactive, Inc. -> Twitch Interactive, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0B734ABD-1386-4875-AAB2-BEB34929BA16} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {0ED4898D-5556-4A29-8A01-FB2C995E8FF6} - System32\Tasks\{DAA4647D-5031-4B83-AFE3-CD5C26C8C913} => "c:\program files (x86)\google\chrome\application\chrome.exe" https://ui.skype.com/ui/0/7.35.0.103/de/abandoninstall?page=tsProgressBar
Task: {24749709-AE40-4B2D-8979-5122D2618556} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248248 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {332E2C52-A32B-4606-81F0-808B6E0C91A7} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-26] (Overwolf Ltd -> Overwolf LTD)
Task: {399307AE-98E2-43E0-9326-1AFA92149FFE} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3BCE6133-4672-450F-8C44-A11F5D47D5E7} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {3F4CC13B-7042-466A-9D96-F1E9730787B7} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23248248 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {404121D8-6F03-4591-8E33-05003F61FDB5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {41842CA9-164B-4B48-B2F0-E48EB14A1606} - System32\Tasks\GPU Tweak II => C:\Program Files (x86)\ASUS\GPU TweakII\GPUTweakII.exe [12797408 2020-02-19] (ASUSTEK COMPUTER INC. -> ASUSTeK COMPUTER INC.)
Task: {4636CCF1-7F71-4FA4-BCBA-2E173BC2E1FE} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [234200 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {4F9FCD3F-2DF0-4AA0-B85A-7FBA849DB678} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {52CD14A6-AAC9-4687-870B-9E781DD81B3E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {53C5E976-9069-48F1-BEC3-BC1C2EE209D0} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [616832 2019-09-04] (Apple Inc. -> Apple Inc.)
Task: {57275D50-39E8-4684-BD2B-0FA1BA1EF2BD} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5B8BD09C-B69F-4593-AD69-7ABB62E4D25E} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114040 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {6395FD1F-97D6-4234-9DA0-1AE1B29BD6D9} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [29757392 2021-02-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {65270FBF-36DA-4D6F-9D5E-8AAEB620A290} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6EB1081E-6422-49AE-B581-3E05CAC91C25} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [67896 2020-09-08] (Apple Inc. -> Apple Inc.)
Task: {76DC858A-F68D-4A25-8C83-B5F3DD5572C4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-01] (Google Inc -> Google Inc.)
Task: {7A066FC0-9F18-49EA-82A7-2BDFCAB69733} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MpCmdRun.exe [566368 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7EFD0D30-A1FA-4715-8461-6D9D016A7FDC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-01] (Google Inc -> Google Inc.)
Task: {87165D9B-390B-40C0-B3CE-9DD6524BBBA8} - System32\Tasks\Opera GX scheduled Autoupdate 1608576834 => C:\Users\Jan\AppData\Local\Programs\Opera GX\launcher.exe [1720472 2021-03-10] (Opera Software AS -> Opera Software)
Task: {9262550E-B1F7-423C-A9DF-4EB3F3AC18D0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [114040 2021-03-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {93760C71-26D0-4CA1-AF8B-03B2FC857648} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {98B5D067-33CE-4B8E-9B90-0E6D776F10A0} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {9B9C34F7-B637-4703-8F5C-DCC5EA08A440} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2651216 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {B813C0BC-DD60-4746-B52A-49BCBBC41D87} - System32\Tasks\{D2470796-5B2B-4A23-B417-F25809FF90F0} => "c:\windows\system32\launchwinapp.exe" hxxp://ui.skype.com/ui/0/7.22.0.109/de/abandoninstall?source=lightinstaller&page=tsInstall
Task: {C6433A23-7747-45FD-A714-BB0AF5385CC2} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {CB5F5047-EDCF-40C8-9124-2451A98F5E38} - System32\Tasks\GoogleUpdateTaskMachineCore1d3ee7c2b99a922 => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154440 2016-05-01] (Google Inc -> Google Inc.)
Task: {D8E35F34-EA80-4F24-AADD-5442A6CB5950} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {DD220E92-F8CC-41E1-9C4A-8277FDF33B77} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {E2EF65E4-1A36-4D87-BA55-2560DF737463} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {EFF7A9CA-0A21-4504-9A57-FFCAAC3B9580} - System32\Tasks\Opera GX scheduled assistant Autoupdate 1615885505 => C:\Users\Jan\AppData\Local\Programs\Opera GX\launcher.exe [1720472 2021-03-10] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Jan\AppData\Local\Programs\Opera GX\assistant" $(Arg0)
Task: {FF0FFD5E-F08B-4C82-8518-122EE667E5BF} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\gxx speed launcher.job => C:\Program Files (x86)\Garena\Garena\Garena.exe
Task: C:\WINDOWS\Tasks\Intel PTT EK Recertification.job => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{9d8c3971-1157-4458-9e06-af7103f576a3}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Profile: C:\Users\Jan\AppData\Local\Microsoft\Edge\User Data\Default [2021-03-24]
Edge StartupUrls: Default -> "hxxp://google.com/"
Edge DefaultSearchURL: Default -> hxxps://www.google.com.sg/search?q={searchTerms}&ie={inputEncoding?}&oe={outputEncoding?}
Edge DefaultSearchKeyword: Default -> google.com.sg

FireFox:
========
FF ProfilePath: C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\fvizidJd.default [2016-05-01]
FF Extension: (Avira Browser Safety) - C:\Users\Jan\AppData\Roaming\Mozilla\Firefox\Profiles\fvizidJd.default\Extensions\abs@avira.com [2016-05-01] []
FF HKLM-x32\...\Firefox\Extensions: [{F003DA68-8256-4b37-A6C4-350FA04494DF}] - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt
FF Extension: (Logitech SetPoint) - C:\Program Files\Logitech\SetPointP\LogiSmoothFirefoxExt [2019-01-15] [ist nicht signiert]
FF Plugin: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-10-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-03-08] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default [2021-03-24]
CHR HomePage: Default -> hxxp://www.google.com
CHR NewTab: Default ->  Active:"chrome-extension://jepibmfmhopgkplegmkjgifmhabbjadg/newtab/newtab.html"
CHR Extension: (Präsentationen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-13]
CHR Extension: (BetterTTV) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2021-03-15]
CHR Extension: (Docs) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-13]
CHR Extension: (Google Drive) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-24]
CHR Extension: (YouTube) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-02-20]
CHR Extension: (AutoDraw for skribbl.io) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bpnefockcbbpkbahgkkacjmebfheacjb [2021-03-21]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2021-01-28]
CHR Extension: (FrankerFaceZ) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2020-10-04]
CHR Extension: (Tabellen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-13]
CHR Extension: (Avira Browserschutz) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-03-16]
CHR Extension: (Google Docs Offline) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-03-16]
CHR Extension: (Flavr – eigener Hintergrund & neuer Tab für Google™) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jepibmfmhopgkplegmkjgifmhabbjadg [2018-06-17]
CHR Extension: (Anwendungs-Launcher für Drive (von Google)) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2021-01-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Extension: (Google Mail) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-23]
CHR Extension: (Chrome Media Router) - C:\Users\Jan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKU\S-1-5-21-3457053640-1891177686-776274774-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Opera: 
=======
StartMenuInternet: (HKU\S-1-5-21-3457053640-1891177686-776274774-1001) Opera GXStable - "C:\Users\Jan\AppData\Local\Programs\Opera GX\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208432 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [537472 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484904 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484904 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [575776 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [96056 2020-09-24] (Apple Inc. -> Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.42\atkexComSvc.exe [442416 2019-09-03] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [636592 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [384360 2020-12-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [247232 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161072 2020-12-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8894752 2021-02-02] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8783240 2021-03-13] (Microsoft Corporation -> Microsoft Corporation)
R2 CorsairService; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\Corsair.Service.exe [54312 2019-11-29] (Corsair Memory, Inc. -> Corsair Memory, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [810928 2021-03-04] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 Futuremark SystemInfo Service; C:\Program Files (x86)\Futuremark\SystemInfo\FMSISvc.exe [342456 2017-05-19] (FUTUREMARK INC -> Futuremark)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA)
R2 IntelBCAsvc; C:\Program Files\Intel\BCA\pabeSvc64.exe [3026584 2016-05-06] (Intel(R) Biometric and Context Agent -> Intel(R) Corporation)
R2 LGHUBUpdaterService; C:\Program Files\LGHUB\lghub_updater.exe [10545056 2021-03-24] (Logitech Inc -> Logitech, Inc.)
R2 MSI_SuperCharger; C:\Program Files (x86)\MSI\Super Charger\ChargeService.exe [163280 2015-05-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2491736 2021-02-26] (Overwolf Ltd -> Overwolf LTD)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [474256 2019-12-05] (Rockstar Games, Inc. -> Rockstar Games)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [908256 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [15736 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2016-07-22] (McAfee, Inc. -> McAfee, Inc.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [10308904 2021-03-22] (Riot Games, Inc. -> Riot Games, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\NisSrv.exe [2483616 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.4-0\MsMpEng.exe [128376 2021-03-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20640 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35560 2018-05-10] (WDKTestCert build,131474841775766162 -> Apple Inc.)
R1 Asusgio2; C:\WINDOWS\system32\drivers\AsIO2.sys [33832 2019-04-09] (ASUSTeK Computer Inc. -> )
R0 avdevprot; C:\WINDOWS\System32\DRIVERS\avdevprot.sys [78936 2019-06-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\WINDOWS\System32\drivers\avelam.sys [22336 2019-02-21] (Microsoft Windows Early Launch Anti-Malware Publisher -> Avira Operations GmbH & Co. KG)
R2 avgntflt; C:\WINDOWS\System32\DRIVERS\avgntflt.sys [206896 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avipbb; C:\WINDOWS\system32\DRIVERS\avipbb.sys [199312 2021-03-18] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\WINDOWS\system32\DRIVERS\avkmgr.sys [46704 2019-02-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\WINDOWS\system32\DRIVERS\avnetflt.sys [89736 2019-02-21] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R2 CorsairLLAccess3B84E98236B28D4E075D5737DF9F567A1FB76E8A; C:\Program Files (x86)\Corsair\CORSAIR iCUE Software\CorsairLLAccess64.sys [20696 2019-11-14] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [45984 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21920 2020-07-06] (Microsoft Windows Hardware Compatibility Publisher -> Corsair)
R3 cpuz148; C:\WINDOWS\temp\cpuz148\cpuz148_x64.sys [44648 2021-03-24] (CPUID S.A.R.L.U. -> CPUID)
R4 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [34064 2019-01-22] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 ipadtst; C:\Program Files (x86)\MSI\Super Charger\ipadtst_64.sys [20464 2013-11-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Windows (R) Win 7 DDK provider)
S3 LGBusEnum; C:\WINDOWS\system32\drivers\LGBusEnum.sys [37408 2015-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech Inc.)
R2 LGHUBTemperatureService; C:\Program Files\LGHUB\logi_core_temp.sys [22864 2021-03-24] (Logitech Inc -> Logitech)
S3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech Inc.)
R3 logi_joy_bus_enum; C:\WINDOWS\system32\drivers\logi_joy_bus_enum.sys [37200 2021-03-18] (Logitech Inc -> Logitech)
R3 logi_joy_vir_hid; C:\WINDOWS\system32\drivers\logi_joy_vir_hid.sys [25928 2021-03-18] (Logitech Inc -> Logitech)
R3 logi_joy_xlcore; C:\WINDOWS\system32\drivers\logi_joy_xlcore.sys [66896 2021-03-18] (Logitech Inc -> Logitech)
R3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377864 2015-12-09] (Windows Central Build Account - X -> MediaTek Inc.)
S3 tap-tb-0901; C:\WINDOWS\System32\drivers\tap-tb-0901.sys [38656 2019-06-19] (TunnelBear, Inc. -> The OpenVPN Project)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2015-11-05] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [6409864 2021-03-22] (Riot Games, Inc. -> Riot Games, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2021-03-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [420072 2021-03-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-24 20:14 - 2021-03-24 20:15 - 000035621 _____ C:\Users\Jan\Downloads\FRST.txt
2021-03-24 20:14 - 2021-03-24 20:15 - 000000000 ____D C:\FRST
2021-03-24 20:13 - 2021-03-24 20:13 - 002300928 _____ (Farbar) C:\Users\Jan\Downloads\FRST64.exe
2021-03-24 18:46 - 2021-03-24 19:48 - 000000000 ____D C:\Users\Jan\Desktop\Virus Ha
2021-03-24 17:32 - 2021-03-24 17:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2021-03-23 20:32 - 2021-03-23 20:32 - 000000000 ____D C:\Users\Jan\Desktop\Bugframe
2021-03-23 10:45 - 2021-03-23 10:45 - 000000000 ____D C:\Program Files\Warframe
2021-03-23 10:43 - 2021-03-24 17:23 - 000000000 ____D C:\Users\Jan\AppData\Local\Warframe
2021-03-19 11:21 - 2021-03-21 11:17 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-18 16:27 - 2021-03-18 16:27 - 000066896 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_xlcore.sys
2021-03-18 16:27 - 2021-03-18 16:27 - 000037200 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_bus_enum.sys
2021-03-18 16:27 - 2021-03-18 16:27 - 000025928 _____ (Logitech) C:\WINDOWS\system32\Drivers\logi_joy_vir_hid.sys
2021-03-16 10:05 - 2021-03-16 10:05 - 000004404 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled assistant Autoupdate 1615885505
2021-03-14 16:46 - 2021-03-14 16:46 - 000000000 ____D C:\Users\Jan\AppData\LocalLow\Japu Workshops
2021-03-14 16:45 - 2021-03-14 16:45 - 020058919 _____ C:\Users\Jan\Downloads\Pinball Pivot 1.0.zip
2021-03-12 18:38 - 2021-03-12 18:38 - 000640000 _____ C:\Users\Jan\Downloads\Pinball_Pivot.exe
2021-03-11 18:08 - 2021-03-11 18:08 - 000000960 _____ C:\Users\Jan\Downloads\iconmonstr-medical-7.svg
2021-03-11 15:13 - 2021-03-11 15:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2021-03-11 15:13 - 2021-03-11 15:13 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2021-03-11 15:13 - 2021-03-11 15:13 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-03-11 15:13 - 2021-03-11 15:13 - 001394024 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-03-11 15:13 - 2021-03-11 15:13 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-03-11 15:13 - 2021-03-11 15:13 - 001163776 _____ C:\WINDOWS\system32\MBR2GPT.EXE
2021-03-11 15:13 - 2021-03-11 15:13 - 000707016 _____ C:\WINDOWS\system32\TextShaping.dll
2021-03-11 15:13 - 2021-03-11 15:13 - 000611952 _____ C:\WINDOWS\SysWOW64\TextShaping.dll
2021-03-11 15:13 - 2021-03-11 15:13 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-03-11 15:13 - 2021-03-11 15:13 - 000091136 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-03-11 15:13 - 2021-03-11 15:13 - 000011359 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-03-08 11:24 - 2021-03-08 11:24 - 000000000 ____D C:\Program Files (x86)\Teams Installer
2021-03-08 11:21 - 2021-03-23 16:34 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2021-03-08 11:21 - 2021-03-08 11:21 - 000000000 ____D C:\Program Files\Microsoft Office 15
2021-03-07 00:55 - 2021-03-07 00:55 - 001452377 _____ C:\Users\Jan\Downloads\scatec-q4-2020-report.pdf
2021-03-05 09:31 - 2021-03-05 09:31 - 000000000 ____D C:\Users\Jan\AppData\Local\PortfolioPerformance
2021-03-05 09:30 - 2021-03-11 18:15 - 094026897 _____ C:\Users\Jan\Downloads\PortfolioPerformance-distro-0.51.1-win32.win32.x86_64.zip
2021-03-04 16:33 - 2021-03-04 16:33 - 000000016 _____ C:\ProgramData\mntemp
2021-03-04 16:29 - 2021-03-05 21:12 - 000000000 ____D C:\Users\Jan\Documents\Black Desert
2021-03-04 14:27 - 2021-03-04 14:27 - 000000222 _____ C:\Users\Jan\Desktop\Black Desert Online.url
2021-02-28 21:13 - 2021-03-01 01:37 - 000000000 ____D C:\Users\Jan\AppData\Roaming\Wireshark
2021-02-28 21:08 - 2021-02-28 21:08 - 000001827 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk
2021-02-28 21:08 - 2021-02-28 21:08 - 000000000 ____D C:\Program Files\Wireshark
2021-02-28 21:07 - 2021-02-28 21:07 - 061482312 _____ (Wireshark development team) C:\Users\Jan\Downloads\Wireshark-win64-3.4.3.exe
2021-02-28 21:05 - 2021-02-28 21:12 - 088026786 _____ C:\Users\Jan\Downloads\fritzbox-vcc0_28.02.21_2105.eth
2021-02-28 18:17 - 2021-02-28 19:43 - 000000000 ____D C:\Program Files\Cheat Engine 7.2
2021-02-28 17:34 - 2021-02-28 17:34 - 000000223 _____ C:\Users\Jan\Desktop\Apex Legends.url
2021-02-26 22:39 - 2021-02-26 22:39 - 000000223 _____ C:\Users\Jan\Desktop\OUTRIDERS Demo.url
2021-02-26 11:53 - 2021-02-26 11:53 - 000000000 ____D C:\Users\Jan\AppData\Local\Madness
2021-02-25 00:37 - 2021-02-25 01:04 - 007729377 _____ C:\Users\Jan\Downloads\Project_Soviet_Runner1.8.1.zip

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-03-24 20:10 - 2016-11-21 15:04 - 000000000 ____D C:\Users\Jan\AppData\Roaming\discord
2021-03-24 19:48 - 2021-02-03 11:58 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-03-24 19:24 - 2020-10-19 12:25 - 000000000 ____D C:\Users\Jan\AppData\Roaming\Blitz
2021-03-24 18:55 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-24 18:12 - 2020-03-26 05:28 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-24 18:02 - 2016-05-01 15:02 - 000000000 ____D C:\Users\Jan\AppData\Roaming\.minecraft
2021-03-24 18:00 - 2017-02-28 12:58 - 000000000 ____D C:\ProgramData\Riot Games
2021-03-24 17:47 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-24 17:47 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-03-24 17:38 - 2021-02-03 12:01 - 001722788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-03-24 17:38 - 2019-12-07 15:50 - 000743708 _____ C:\WINDOWS\system32\perfh007.dat
2021-03-24 17:38 - 2019-12-07 15:50 - 000150130 _____ C:\WINDOWS\system32\perfc007.dat
2021-03-24 17:38 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2021-03-24 17:34 - 2020-06-28 12:02 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2021-03-24 17:33 - 2020-03-29 04:31 - 000000000 ____D C:\Users\Jan\AppData\Local\CrashDumps
2021-03-24 17:32 - 2021-02-03 12:06 - 000003072 _____ C:\WINDOWS\system32\Tasks\GPU Tweak II
2021-03-24 17:32 - 2019-10-20 02:01 - 000000000 ____D C:\Program Files\LGHUB
2021-03-24 17:32 - 2019-01-25 09:12 - 000000000 ____D C:\Users\Jan\AppData\Roaming\LGHUB
2021-03-24 17:32 - 2019-01-25 09:12 - 000000000 ____D C:\Users\Jan\AppData\Local\LGHUB
2021-03-24 17:31 - 2021-02-03 12:06 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-03-24 17:31 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-03-24 17:30 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-03-24 17:30 - 2016-05-01 14:59 - 000000000 ____D C:\Program Files (x86)\Steam
2021-03-24 10:30 - 2020-03-26 02:33 - 000719600 _____ C:\WINDOWS\ntbtlog.txt
2021-03-24 10:25 - 2020-03-17 06:37 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2021-03-24 10:08 - 2021-01-28 19:34 - 000000000 ___HD C:\$WinREAgent
2021-03-24 10:00 - 2021-01-18 21:01 - 000000000 ____D C:\Program Files\Riot Vanguard
2021-03-24 02:01 - 2018-09-05 10:41 - 000000000 ____D C:\Users\Jan\AppData\Local\Battle.net
2021-03-23 19:00 - 2017-01-10 10:30 - 000000000 ____D C:\Users\Jan\AppData\Local\Ubisoft Game Launcher
2021-03-23 16:43 - 2018-05-18 08:45 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-03-23 16:33 - 2019-12-07 10:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2021-03-23 16:33 - 2019-04-13 08:49 - 000799104 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2021-03-23 12:17 - 2020-03-26 06:32 - 000000000 ____D C:\Users\Jan\AppData\Local\D3DSCache
2021-03-23 10:05 - 2021-01-06 17:33 - 000000000 ___RD C:\Users\Jan\Desktop\Steam
2021-03-23 10:05 - 2016-05-01 15:11 - 000000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-03-22 23:31 - 2021-02-03 11:59 - 000000000 ____D C:\Users\Jan
2021-03-21 18:04 - 2018-09-05 10:41 - 000000000 ____D C:\Program Files (x86)\Battle.net
2021-03-19 12:32 - 2020-09-25 07:33 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-03-18 22:38 - 2017-11-30 11:30 - 000206896 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2021-03-18 22:38 - 2017-11-30 11:30 - 000199312 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2021-03-18 00:21 - 2017-02-20 15:01 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-03-16 10:05 - 2021-02-03 12:06 - 000004170 _____ C:\WINDOWS\system32\Tasks\Opera GX scheduled Autoupdate 1608576834
2021-03-16 10:05 - 2020-12-21 19:53 - 000001428 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Browser Opera GX.lnk
2021-03-16 10:04 - 2021-02-03 12:06 - 000003698 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update
2021-03-16 10:04 - 2020-12-03 12:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2021-03-14 16:47 - 2021-02-03 12:06 - 000003356 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3457053640-1891177686-776274774-1001
2021-03-14 16:47 - 2021-02-03 11:59 - 000002373 _____ C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-03-14 16:47 - 2016-05-01 14:55 - 000000000 ___RD C:\Users\Jan\OneDrive
2021-03-12 00:46 - 2021-02-03 11:58 - 000440200 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-03-12 00:45 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-03-11 22:15 - 2020-03-26 05:28 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2021-03-11 22:14 - 2021-02-03 12:06 - 000004308 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000004106 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003976 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003940 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003894 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003858 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2021-02-03 12:06 - 000003654 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}
2021-03-11 22:14 - 2020-03-26 05:25 - 000000000 ____D C:\Program Files\NVIDIA Corporation
2021-03-11 22:14 - 2017-06-12 13:57 - 000000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2021-03-11 15:05 - 2016-05-01 18:18 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-03-11 15:03 - 2016-05-01 18:18 - 131005360 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-03-10 20:18 - 2020-09-19 12:21 - 000000000 ____D C:\Users\Jan\AppData\Roaming\Sky Go
2021-03-10 19:42 - 2020-09-19 12:21 - 000000000 ____D C:\Users\Jan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Sky
2021-03-09 19:48 - 2021-01-22 11:48 - 000000000 ____D C:\Program Files (x86)\Overwolf
2021-03-08 17:32 - 2016-05-01 15:02 - 000000000 ____D C:\Program Files (x86)\Minecraft
2021-03-08 16:28 - 2019-10-10 11:48 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2021-03-08 11:37 - 2018-05-18 10:45 - 000000000 ____D C:\Users\Jan\AppData\Local\PlaceholderTileLogoFolder
2021-03-08 11:23 - 2019-05-17 14:06 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Word.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002492 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerPoint.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002456 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Access.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002455 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Excel.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Outlook.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Publisher.lnk
2021-03-08 11:23 - 2019-05-17 14:06 - 000002435 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneNote.lnk
2021-03-08 11:21 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-03-06 10:54 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2021-03-06 10:29 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-03-04 16:33 - 2019-09-23 10:56 - 000000000 ____D C:\Users\Jan\AppData\Roaming\EasyAntiCheat
2021-02-26 12:26 - 2021-02-05 23:21 - 000003606 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d6fa1c305b79fc
2021-02-26 12:26 - 2021-02-03 12:06 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-02-26 11:53 - 2017-08-13 09:54 - 000000000 ____D C:\Users\Jan\AppData\Local\UnrealEngine
2021-02-22 16:35 - 2020-09-30 14:18 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2017-06-04 07:58 - 2017-06-04 07:58 - 000000017 _____ () C:\Users\Jan\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================