W10: Firefox, automatischer Aufruf von craccoon.com

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 17-04-2021
durchgeführt von Hendrik (Administrator) auf ZEITRÄUBER (20-04-2021 07:23:30)
Gestartet von C:\Users\Hendrik\Downloads
Geladene Profile: Hendrik
Platform: Windows 10 Pro Version 20H2 19042.928 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() [Datei ist nicht signiert] C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
() [Datei ist nicht signiert] C:\Users\Hendrik\AppData\Roaming\Elgato\StreamDeck\Plugins\com.barraider.shadowplay.sdPlugin\com.barraider.shadowplay.exe
() [Datei ist nicht signiert] C:\Users\Hendrik\AppData\Roaming\Elgato\StreamDeck\Plugins\com.lostdomain.zoom.sdPlugin\sdzoomplugin.exe
() [Datei ist nicht signiert] C:\Users\Hendrik\AppData\Roaming\Elgato\StreamDeck\Plugins\com.zergo0.teamspeak3integration.sdPlugin\com.zergo0.teamspeak3integration.exe
() [Datei ist nicht signiert] C:\Users\Hendrik\AppData\Roaming\Elgato\StreamDeck\Plugins\tv.twitch.studio.sdPlugin\twitchstudiostreamdeck.exe
(ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\AsPowerBar\AsPowerBar.exe
(ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe
(ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe
(ASUSTeK Computer Inc. -> TODO: <Company name>) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp32.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp64.exe
(Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(Conexant Systems, Inc.) [Datei ist nicht signiert] C:\Windows\SysWOW64\UIUMPSrv.exe
(Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\CorsairLink4\CorsairLink4.exe
(Corsair Components, Inc. -> Corsair Components, Inc.) C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe
(Corsair Memory, Inc. -> Corsair Memory, Inc) C:\Program Files\Elgato\StreamDeck\StreamDeck.exe
(Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(Dxtory Software) [Datei ist nicht signiert] C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe
(Even Balance, Inc. -> ) C:\Windows\System32\PnkBstrA.exe
(GoPro, Inc. -> ) C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation - Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Intel Network Drivers -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe
(Intel(R) Intel Network Drivers -> Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_b8e01d9e8716d2a7\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_54b736e5be5b50b2\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a086f01cc7be643a\IntelCpHeciSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel Driver Update Utility\SUR\SurSvc.exe
(Logitech -> Logitech Inc.) C:\Program Files\Logitech\Gaming Software\LWEMon.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDClock.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Applets\LCDMedia.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(Logitech Inc -> Logitech) C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServices.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingServices_2.51.3002.0_x64__8wekyb3d8bbwe\GamingServicesNet.exe
(Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\CompatTelRunner.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.925_none_e76d4f6f260a683e\TiWorker.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MpCmdRun.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(The Qt Company Oy -> The Qt Company Ltd.) C:\Program Files\Elgato\StreamDeck\QtWebEngineProcess.exe <4>
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8899592 2016-08-19] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [15003256 2015-09-19] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [GoPro Tray App] => C:\Program Files\GoPro\GoPro Desktop App\GoProDesktopSystemTray.exe [866224 2016-12-02] (GoPro, Inc. -> )
HKLM\...\Run: [Start WingMan Profiler] => C:\Program Files\Logitech\Gaming Software\LWEMon.exe [190536 2010-06-14] (Logitech -> Logitech Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3951968 2019-07-09] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [Stream Deck] => C:\Program Files\Elgato\StreamDeck\StreamDeck.exe [10298848 2021-02-24] (Corsair Memory, Inc. -> Corsair Memory, Inc)
HKLM-x32\...\Run: [Opera Browser Assistant] => C:\Program Files (x86)\Opera\assistant\browser_assistant.exe [3154456 2020-11-25] (Opera Software AS -> Opera Software)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4087528 2021-04-12] (Valve -> Valve Corporation)
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [12684224 2020-12-28] (Binary Fortress Software Ltd -> Binary Fortress Software)
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [Dxtory Update Checker 2.0] => C:\Program Files (x86)\ExKode\Dxtory2.0\UpdateChecker.exe [93696 2010-10-17] (Dxtory Software) [Datei ist nicht signiert]
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [CorsairLink4] => C:\Program Files (x86)\CorsairLink4\CorsairLink4.exe [27146448 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.)
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [Discord] => C:\Users\Hendrik\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [Gaijin.Net Updater] => C:\Users\Hendrik\AppData\Local\Gaijin\Program Files (x86)\NetAgent\gjagent.exe [2374376 2020-12-04] (Gaijin Network LTD -> Gaijin)
HKU\S-1-5-21-256580667-2295068177-2157506718-1000\...\Run: [Spotify] => C:\Users\Hendrik\AppData\Roaming\Spotify\Spotify.exe [24261704 2021-04-02] (Spotify AB -> Spotify Ltd)
HKLM\...\Print\Monitors\CutePDF Writer Monitor v4.0: C:\Windows\system32\cpwmon64_v40.dll [89584 2019-10-20] (Acro Software Inc -> )
HKLM\...\Print\Monitors\EPSON BX305 Plus Series 64MonitorBE: C:\Windows\system32\E_ILMHRE.DLL [118784 2008-11-11] (Microsoft Windows Hardware Compatibility Publisher -> SEIKO EPSON CORPORATION)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\89.0.4389.128\Installer\chrmstp.exe [2021-04-14] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {031B5FB7-D75C-4081-8B3E-73B1EAFE61EB} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {07B6E9AF-B748-4F4F-B43D-D75A86E43B65} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {09BDC280-CF8F-46C4-B5E9-58D03EA98561} - System32\Tasks\{48068F6D-F1C6-4EED-8B54-00EB45A0C484} => "c:\program files (x86)\mozilla firefox\firefox.exe" hxxp://ui.skype.com/ui/0/7.17.0.105/de/abandoninstall?page=tsProgressBar
Task: {09DC8C65-5B29-4514-B340-6BA4E4FC2B3A} - System32\Tasks\G2MUpdateTask-S-1-5-21-256580667-2295068177-2157506718-1000 => C:\Users\Hendrik\AppData\Local\GoToMeeting\19598\g2mupdate.exe [31320 2021-04-04] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {0D57C107-5420-4E33-A7F5-D91F1B963A1D} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {0EFE35EE-4CCD-4F8B-86A2-4A8372E94700} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {13DD2E0F-8F1D-4844-A353-1652E99A6F2A} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {17E6759C-D506-46B8-9B3E-659ADC76BAE7} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3302128 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {193D141E-04C3-44E8-8B90-C2DF0886C5D9} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {1CB0CFCE-3C42-4150-8AF9-4FFA730D01A1} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1CFCC27F-17D9-4963-9A9A-53B391628E73} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {1FF25FD5-895D-41AD-9D8F-10D370FEA4FD} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {20466A33-D39C-46C7-B091-CFE2503F5A91} - System32\Tasks\G2MUploadTask-S-1-5-21-256580667-2295068177-2157506718-1000 => C:\Users\Hendrik\AppData\Local\GoToMeeting\19598\g2mupload.exe [31320 2021-04-04] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {2DA29869-C3F8-4D39-A0DE-AB5904639941} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {311862E9-AC72-4B25-B9E8-1B05FFB37786} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {344072D6-0362-4DB2-9CDA-80AD530A9916} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {36A13E3F-5BB3-4919-96E2-22AE6695455D} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3EC2DDB6-DE3E-482C-8B7E-5FDCE568A639} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {45E9FC5A-7855-4784-B405-9B52C57FF87E} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4B5670BD-0F39-4C4A-A9F2-3EA30577601F} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {54E7CA7D-F584-4820-B84C-2EFEE35753BC} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {586A9C97-4311-4C9D-9B4A-AD3B0247C3B0} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {58B3BBF0-192D-4844-933B-BE47875053E1} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1127664 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5923CD82-CC1C-45A9-ABD2-F3EC6F682308} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5B6777DE-8127-46FD-9342-AFF596DC9820} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {606C8B4C-FC4B-4118-A888-D9A991DC1FAA} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {634F9F7F-7041-4C04-8D12-7D590608CE1B} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {663BC142-6F03-4BD6-8AF8-CB33AEC9EA13} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {7123FF79-A8F5-4321-801A-AF6975282F12} - System32\Tasks\Opera scheduled assistant Autoupdate 1576776714 => C:\Program Files (x86)\Opera\launcher.exe [1886872 2021-04-13] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Program Files (x86)\Opera\assistant" $(Arg0)
Task: {7674E926-38E3-4E6B-8B7B-EA3577D95DEE} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7701DC72-353C-406E-8260-C58C2F5989E5} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7E151113-53FB-4262-8043-D28298127846} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {841A515B-1960-4F73-8F99-7E0BBE6082D1} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {856FB6EF-DEF8-439D-8B00-EE78FFF48500} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {8573CB39-76C2-40FD-BDCA-55A437B27AB2} - System32\Tasks\Connect => C:\Program Files (x86)\MAGIX\Connect\connect.exe [356936 2017-08-02] (MAGIX Software GmbH -> MAGIX Software GmbH)
Task: {8A107B26-CCE3-40DE-B851-F1D33184F18F} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {91F59614-FAAD-482F-BDCC-AA409AE1E07E} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [1741576 2016-03-17] (Intel(R) Software -> Intel Corporation)
Task: {93016DF5-9460-47D0-8243-5B367FBEB5FE} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {95606F8E-0270-40D3-9BC7-CC9CE53A576F} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [696816 2021-03-25] (Mozilla Corporation -> Mozilla Foundation)
Task: {9B960165-519A-43FF-A717-F92D8E437272} - System32\Tasks\Opera scheduled Autoupdate 1488577217 => C:\Program Files (x86)\Opera\launcher.exe [1886872 2021-04-13] (Opera Software AS -> Opera Software)
Task: {9D7EA7F6-02B8-456D-8CC6-690612842C89} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4417496 2017-11-24] (ASUSTeK Computer Inc. -> TODO: <Company name>)
Task: {A1357A20-C678-48C6-884E-9B07E82A2698} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A480471E-507B-4453-B455-93A1BC151F83} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1448408 2017-11-24] (ASUSTeK Computer Inc. -> )
Task: {A74D41D2-4445-46E6-BF25-89C080CF86C9} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A8FD19AD-FDBF-41DC-B4A9-574142B60FE3} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646896 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B20196F3-AA66-428F-AAD2-F0BD3305FBB6} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B22365E3-DD44-4F9D-B86F-6A0292865C26} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {B3FC068A-552F-4BD2-B010-9E1967240BDA} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {B52DBA18-9F13-43F0-8DBF-B47BE975645A} - \Microsoft\Windows\Setup\EOONotify -> Keine Datei <==== ACHTUNG
Task: {BBDB0759-B82B-441A-A44E-30B530814AA7} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C0FA1F87-DC50-4627-8C7D-2C08C9A2AABD} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\task.vbs"
Task: {C4E054EE-FCB9-44E1-AE21-46E35841312C} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D1C4FC92-8615-4D2B-AC1A-77690A1EBAC1} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {D44156F6-48D9-4549-A1F6-B370747EAFB5} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {D64271EA-6524-4016-995F-2602C2A6D38E} - System32\Tasks\Microsoft\Windows\UIU\UIUTask => C:\Windows\UIUTask\UIUTask.exe [1687552 2018-05-11] (Conexant Systems, Inc.) [Datei ist nicht signiert]
Task: {D712B7BD-4760-46C4-A6AD-2B720FA67792} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-06] (Google Inc -> Google Inc.)
Task: {D7FCD2B6-DEAC-48E1-A1EA-EC853EF95F5E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153752 2017-04-06] (Google Inc -> Google Inc.)
Task: {E0EC010C-9185-4E57-B0FE-4DCA18103968} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {E2BEF094-DC6D-4DAB-A837-17FB57AB50FF} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {E41FC311-6EEC-4047-942F-4C727D6E0B25} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2096088 2018-01-04] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
Task: {E4A2BD13-0B03-423E-86BA-94C6867AA9BC} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {EBB8330D-49D9-47BE-BFFB-75D5B819ABEB} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {EE2C32F3-60ED-454C-9C67-A9B3897DF478} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {F24EA26E-E48B-4F71-95FC-315193016752} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {F39EC75A-0868-46C1-B559-A8F35543E94E} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_30_0_0_113_Plugin.exe
Task: {F6254C58-CCFF-4980-AC9A-2BBB832FD2CC} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [906480 2021-01-27] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F7F5F5C9-EC9A-41C1-A847-80F83A7F4119} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {F98535FE-B58A-4CF0-9A08-3F05355DDE68} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {F9985183-E490-46AA-8E10-C0F9492A5396} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {FEEC3A41-0E41-4298-86B6-6C26202C4123} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2021-01-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Connect.job => C:\Program Files (x86)\MAGIX\Connect\connect.exe
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-256580667-2295068177-2157506718-1000.job => C:\Users\Hendrik\AppData\Local\GoToMeeting\19598\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-256580667-2295068177-2157506718-1000.job => C:\Users\Hendrik\AppData\Local\GoToMeeting\19598\g2mupload.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{1c642213-d84a-4e8f-8d00-364f07c4d8cc}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{dd8e562b-1cbb-4daa-a3ab-c4dfd64e2488}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\Hendrik\AppData\Local\Microsoft\Edge\User Data\Default [2021-04-20]

FireFox:
========
FF DefaultProfile: 3q70x7eg.default-1462445944412-1538559026455
FF ProfilePath: C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\3q70x7eg.default-1462445944412-1538559026455 [2021-04-20]
FF Notifications: Mozilla\Firefox\Profiles\3q70x7eg.default-1462445944412-1538559026455 -> hxxps://www.lieferando.de; hxxps://webinterface.nitrado.net; hxxps://native-network.net
FF Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\3q70x7eg.default-1462445944412-1538559026455\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2021-04-12]
FF Extension: (English (GB) Language Pack) - C:\Users\Hendrik\AppData\Roaming\Mozilla\Firefox\Profiles\3q70x7eg.default-1462445944412-1538559026455\Extensions\langpack-en-GB@firefox.mozilla.org.xpi [2021-03-26]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_30_0_0_134.dll [2018-07-14] (Adobe Systems Incorporated -> )
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [Keine Datei]
FF Plugin: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_134.dll [2018-07-14] (Adobe Systems Incorporated -> )
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-06-29] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-06-29] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-06-29] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2017-06-29] (Foxit Software Incorporated -> Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-04-21] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\dtplugin\npDeployJava1.dll [2017-02-12] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.121.2 -> C:\Program Files (x86)\Java\jre1.8.0_121\bin\plugin2\npjp2.dll [2017-02-12] (Oracle America, Inc. -> Oracle Corporation)

Chrome: 
=======
CHR Profile: C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default [2021-04-20]
CHR StartupUrls: Default -> "hxxps://3cx.gelsenkirchen.de:5001/webclient/#/people"
CHR Extension: (Präsentationen) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-21]
CHR Extension: (Docs) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-21]
CHR Extension: (Google Drive) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-11-16]
CHR Extension: (YouTube) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-05-21]
CHR Extension: (Tabellen) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-21]
CHR Extension: (Avira Browserschutz) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2021-03-26]
CHR Extension: (Google Docs Offline) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2021-04-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-01]
CHR Extension: (Google Mail) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-24]
CHR Extension: (Chrome Media Router) - C:\Users\Hendrik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-03-15]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Opera: 
=======
OPR Profile: C:\Users\Hendrik\AppData\Roaming\Opera Software\Opera Stable [2021-04-18]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\Hendrik\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-04-18]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe [382424 2018-01-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2017-06-21] (ASUSTeK Computer Inc. -> ) [Datei ist nicht signiert]
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe [1340376 2017-12-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8894752 2021-01-21] (BattlEye Innovations e.K. -> )
R3 CLink4Service; C:\Program Files (x86)\CorsairLink4\CorsairLink4.Service.exe [34512 2018-03-30] (Corsair Components, Inc. -> Corsair Components, Inc.)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2017-03-23] (Digital Wave Ltd -> Digital Wave Ltd.)
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [10570704 2020-12-28] (Binary Fortress Software Ltd -> Binary Fortress Software)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803952 2019-08-02] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [410864 2021-01-25] (NVIDIA Corporation -> NVIDIA)
R2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [37808 2016-12-02] (GoPro, Inc. -> )
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 LogiFacecamService; C:\Program Files\Logitech\LogiCapture\bin\Service\LogiFacecamService.exe [499336 2020-10-26] (Logitech Inc -> Logitech)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [192120 2015-09-19] (Logitech Inc -> Logitech Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2523448 2021-01-16] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3478336 2021-01-16] (Electronic Arts, Inc. -> Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\system32\PnkBstrA.exe [76152 2018-06-29] (Even Balance, Inc. -> )
S3 Rockstar Service; E:\RockStarLauncher\RockstarService.exe [1332632 2021-04-01] (Rockstar Games, Inc. -> Rockstar Games)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5361256 2021-04-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [13172752 2020-01-22] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 UIUMPService; C:\WINDOWS\SysWOW64\UIUMPSrv.exe [104960 2018-05-11] (Conexant Systems, Inc.) [Datei ist nicht signiert]
S3 ViveportDesktopService; C:\Program Files (x86)\VIVE\PCClient\ViveportDesktopService.exe [950728 2021-01-05] (HTC Corp. -> HTC)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\NisSrv.exe [2624104 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2103.7-0\MsMpEng.exe [128376 2021-04-11] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-09-09] (ASUSTeK Computer Inc. -> )
S3 AsrRamDisk; C:\WINDOWS\System32\drivers\AsrRamDisk.sys [31016 2012-01-13] (ASROCK Incorporation -> ASRock Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTWUSB; C:\WINDOWS\System32\Drivers\btwusb.sys [75560 2021-02-16] (Broadcom Corporation -> Broadcom Corporation.)
S3 CH341SER_A64; C:\WINDOWS\System32\Drivers\CH341S64.SYS [59904 2015-02-06] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com)
S3 CorsairAudioFilter; C:\WINDOWS\system32\DRIVERS\corsveng2kamd64.sys [112808 2015-09-21] (Corsair Components, Inc. -> Corsair Components, Inc.)
S3 CorsairVBusDriver; C:\WINDOWS\System32\drivers\CorsairVBusDriver.sys [47840 2016-01-20] (Corsair Components, Inc. -> Corsair)
S3 CorsairVHidDriver; C:\WINDOWS\System32\drivers\CorsairVHidDriver.sys [21728 2016-01-20] (Corsair Components, Inc. -> Corsair)
R3 cpuz146; C:\WINDOWS\temp\cpuz146\cpuz146_x64.sys [52824 2021-04-20] (CPUID -> CPUID)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [199128 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
R3 IOMap; C:\WINDOWS\system32\drivers\IOMap64.sys [34064 2017-12-26] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
R3 LGBusEnum; C:\WINDOWS\system32\drivers\LGBusEnum.sys [37408 2015-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech Inc.)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\WINDOWS\system32\drivers\LGJoyXlCore.sys [68384 2015-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech Inc.)
R3 LGSHidFilt; C:\WINDOWS\system32\DRIVERS\LGSHidFilt.Sys [64280 2013-05-30] (Logitech -> Logitech Inc.)
R3 LGVirHid; C:\WINDOWS\system32\drivers\LGVirHid.sys [26912 2015-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220752 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2021-04-20] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198248 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [157944 2021-04-20] (Malwarebytes Inc -> Malwarebytes)
S3 MbswMailbox; C:\Program Files (x86)\ASUS\AI Suite III\690b33e1-0462-4e84-9bea-c7552b45432a.sys [17208 2019-09-30] (ASUSTeK Computer Inc. -> )
R3 NAL; C:\WINDOWS\system32\Drivers\iqvw64e.sys [37832 2015-05-07] (Intel(R) Intel Network Drivers -> Intel Corporation)
R2 speedfan; C:\Windows\SysWOW64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 usbaud; C:\WINDOWS\system32\DRIVERS\usbaud64.sys [1911288 2018-05-11] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
S3 VBAudio100VMVAIO3MME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio364_win10.sys [71712 2019-07-17] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 VBAudioVMAUXVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmauxvaio64_win10.sys [71920 2019-07-14] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S3 VBAudioVMVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2019-07-14] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [66368 2019-11-04] (VMware, Inc. -> VMware, Inc.)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [103224 2019-08-14] (VMware, Inc. -> VMware, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-04-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [421088 2021-04-11] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [72928 2021-04-11] (Microsoft Windows -> Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-04-20 07:21 - 2021-04-20 07:21 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000220752 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000199128 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000198248 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000157944 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2021-04-20 07:21 - 2021-04-20 07:21 - 000001981 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2021-04-20 07:21 - 2021-04-20 07:21 - 000001981 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2021-04-20 07:21 - 2021-04-20 07:21 - 000000000 ____D C:\Users\Hendrik\AppData\LocalLow\IGDump
2021-04-20 07:06 - 2021-04-20 07:06 - 000089654 _____ C:\Users\Hendrik\Downloads\Shortcut.txt
2021-04-20 07:05 - 2021-04-20 07:06 - 000100873 _____ C:\Users\Hendrik\Downloads\Addition.txt
2021-04-20 07:04 - 2021-04-20 07:24 - 000041971 _____ C:\Users\Hendrik\Downloads\FRST.txt
2021-04-18 20:10 - 2021-04-18 20:10 - 000000219 _____ C:\Users\Hendrik\Desktop\Counter-Strike Global Offensive.url
2021-04-18 13:26 - 2021-04-18 13:31 - 000001251 _____ C:\Users\Hendrik\Desktop\Search.txt
2021-04-18 13:05 - 2021-04-18 13:05 - 000001251 _____ C:\Users\Hendrik\Desktop\Search1904.txt
2021-04-18 12:59 - 2021-04-20 07:23 - 000000000 ____D C:\FRST
2021-04-18 12:58 - 2021-04-18 12:58 - 002298368 _____ (Farbar) C:\Users\Hendrik\Downloads\FRST64.exe
2021-04-18 12:57 - 2021-04-18 12:57 - 000004988 _____ C:\Users\Hendrik\Desktop\AdwCleaner[C00].txt
2021-04-18 12:56 - 2021-04-18 12:57 - 000000000 ____D C:\AdwCleaner
2021-04-18 12:56 - 2021-04-18 12:56 - 008534696 _____ (Malwarebytes) C:\Users\Hendrik\Downloads\adwcleaner_8.2.exe
2021-04-18 12:55 - 2021-04-18 12:55 - 000004230 _____ C:\Users\Hendrik\Desktop\MBAM1904.txt
2021-04-18 12:50 - 2021-04-20 07:21 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2021-04-18 12:50 - 2021-04-20 07:21 - 000000000 ____D C:\ProgramData\Malwarebytes
2021-04-18 12:50 - 2021-04-18 12:50 - 000000000 ____D C:\Users\Hendrik\AppData\Local\mbam
2021-04-18 12:49 - 2021-04-18 12:49 - 000000000 ____D C:\Program Files\Malwarebytes
2021-04-18 12:48 - 2021-04-18 12:48 - 002078632 _____ (Malwarebytes) C:\Users\Hendrik\Downloads\MBSetup.exe
2021-04-14 21:16 - 2021-04-14 21:16 - 003704732 _____ C:\Users\Hendrik\Downloads\pbo_manager_v14.7z
2021-04-14 09:31 - 2021-04-14 09:31 - 001823304 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-04-14 09:31 - 2021-04-14 09:31 - 000231248 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2021-04-14 09:31 - 2021-04-14 09:31 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-04-07 20:28 - 2021-04-07 20:28 - 000000000 ____D C:\Users\Hendrik\.mputils
2021-04-07 20:19 - 2021-04-07 20:19 - 000000000 ____D C:\Users\Hendrik\Desktop\mmc-stable-win32
2021-04-07 20:18 - 2021-04-07 20:18 - 013931017 _____ C:\Users\Hendrik\Downloads\mmc-stable-win32.zip
2021-04-04 12:05 - 2021-04-04 12:05 - 000000000 ____D C:\Users\Hendrik\AppData\LocalLow\IronGate
2021-04-04 12:02 - 2021-04-04 12:02 - 000000222 _____ C:\Users\Hendrik\Desktop\Valheim.url
2021-04-04 01:03 - 2021-04-04 01:03 - 000000000 ____D C:\Users\Hendrik\AppData\LocalLow\SKS
2021-04-03 13:22 - 2021-04-03 13:22 - 000000222 _____ C:\Users\Hendrik\Desktop\The Forest.url
2021-04-03 08:12 - 2021-04-03 08:12 - 000029909 _____ C:\Users\Hendrik\AppData\Local\recently-used.xbel
2021-04-02 19:55 - 2021-04-02 19:55 - 003586312 _____ C:\Users\Hendrik\Downloads\EPM-RCon-Tool-version-1.0.0.5.zip
2021-04-01 12:02 - 2021-04-01 12:02 - 000000222 _____ C:\Users\Hendrik\Desktop\Age of Empires II (2013).url
2021-03-31 10:29 - 2021-03-31 10:29 - 000335334 _____ C:\Users\Hendrik\Downloads\convert.zip
2021-03-31 10:20 - 2021-03-31 10:20 - 003268862 _____ C:\Users\Hendrik\Downloads\coop_patrolops_4rc01.7z
2021-03-26 09:07 - 2021-03-26 09:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-03-25 23:49 - 2021-04-18 13:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2021-03-22 11:01 - 2021-03-22 11:01 - 011321472 _____ (Tim Kosse) C:\Users\Hendrik\Downloads\FileZilla_3.52.2_win64-setup.exe

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-04-20 07:23 - 2019-02-06 17:46 - 000000000 ____D C:\ProgramData\Mozilla
2021-04-20 07:23 - 2017-10-02 21:53 - 000000000 ____D C:\ProgramData\NVIDIA
2021-04-20 07:23 - 2016-11-18 16:28 - 000000000 ____D C:\Users\Hendrik\AppData\LocalLow\Mozilla
2021-04-20 07:21 - 2021-03-16 14:57 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Spotify
2021-04-20 07:21 - 2021-03-16 14:47 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\Spotify
2021-04-20 07:21 - 2020-08-29 12:49 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-04-20 07:21 - 2019-12-29 04:49 - 000000000 ____D C:\ProgramData\VMware
2021-04-20 07:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2021-04-20 07:21 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-04-20 07:21 - 2017-03-14 20:21 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-04-20 07:21 - 2015-10-14 18:51 - 000000000 __SHD C:\Users\Hendrik\IntelGraphicsProfiles
2021-04-20 07:21 - 2015-10-14 18:16 - 000000000 ____D C:\Intel
2021-04-20 07:20 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-04-20 07:06 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-04-20 07:04 - 2020-08-29 12:49 - 000004164 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{F1330E8B-499F-45FA-8652-134FCBD34987}
2021-04-19 02:36 - 2017-08-06 19:50 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\discord
2021-04-19 02:35 - 2017-07-27 16:58 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\KeePass
2021-04-19 02:35 - 2015-10-14 18:09 - 000000000 ____D C:\Program Files (x86)\Steam
2021-04-19 01:46 - 2019-05-19 16:37 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Discord
2021-04-19 00:32 - 2020-08-29 12:39 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-04-18 22:46 - 2015-10-14 18:55 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\TS3Client
2021-04-18 20:10 - 2015-12-04 17:18 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Arma 3 Launcher
2021-04-18 20:10 - 2015-10-14 19:01 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2021-04-18 19:05 - 2016-01-20 21:18 - 000000000 ____D C:\Users\Hendrik\AppData\Local\DisplayFusion
2021-04-18 17:25 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-04-18 16:19 - 2015-12-04 17:19 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Arma 3
2021-04-18 13:29 - 2020-08-29 12:43 - 001920570 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-04-18 13:29 - 2019-12-07 16:51 - 000820626 _____ C:\WINDOWS\system32\perfh007.dat
2021-04-18 13:29 - 2019-12-07 16:51 - 000177158 _____ C:\WINDOWS\system32\perfc007.dat
2021-04-18 13:23 - 2020-08-29 12:39 - 000693104 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-04-18 13:23 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-04-18 13:22 - 2020-04-16 13:36 - 000000668 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-256580667-2295068177-2157506718-1000.job
2021-04-18 13:22 - 2020-04-16 13:36 - 000000572 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-256580667-2295068177-2157506718-1000.job
2021-04-18 13:22 - 2015-11-07 21:30 - 000000000 ____D C:\Program Files (x86)\Opera
2021-04-18 13:22 - 2015-10-14 18:06 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-04-18 13:21 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\inetsrv
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-04-18 13:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-04-18 12:57 - 2016-10-07 23:47 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Downloaded Installations
2021-04-18 12:50 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2021-04-18 01:01 - 2020-08-20 22:51 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\slobs-client
2021-04-17 17:47 - 2019-04-26 21:31 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\FileZilla
2021-04-17 00:27 - 2021-03-13 16:31 - 000000000 ____D C:\Users\Hendrik\Desktop\Server
2021-04-16 22:51 - 2018-08-17 20:50 - 000000000 ____D C:\Users\Hendrik\AppData\Local\D3DSCache
2021-04-16 21:18 - 2020-11-20 22:01 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-04-16 21:18 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-04-15 15:57 - 2017-03-03 23:40 - 000000000 ____D C:\ProgramData\CLink4
2021-04-15 14:39 - 2020-08-29 12:49 - 000003982 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1488577217
2021-04-15 14:39 - 2017-06-29 16:54 - 000001155 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2021-04-15 08:27 - 2015-12-05 16:00 - 000000000 ____D C:\WINDOWS\system32\appmgmt
2021-04-14 21:46 - 2020-04-14 08:13 - 000000000 ____D C:\Program Files\Rockstar Games
2021-04-14 21:46 - 2020-04-14 08:13 - 000000000 ____D C:\Program Files (x86)\Rockstar Games
2021-04-14 19:04 - 2017-03-15 18:16 - 000000000 ____D C:\Users\Hendrik\AppData\Local\Ubisoft Game Launcher
2021-04-14 09:31 - 2020-08-29 12:39 - 002877440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2021-04-14 09:25 - 2016-07-25 21:10 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-04-14 09:21 - 2016-07-25 21:10 - 131963968 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-04-14 08:14 - 2017-05-21 20:54 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-04-13 07:49 - 2020-11-20 22:00 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-04-13 07:49 - 2020-11-20 22:00 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-04-12 23:26 - 2016-02-27 15:54 - 000000000 ____D C:\Users\Hendrik\AppData\Local\CrashDumps
2021-04-12 14:29 - 2020-08-29 12:49 - 000003372 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-256580667-2295068177-2157506718-1000
2021-04-12 14:29 - 2020-08-29 12:40 - 000002425 _____ C:\Users\Hendrik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-04-12 14:29 - 2016-07-25 18:31 - 000000000 ___RD C:\Users\Hendrik\OneDrive
2021-04-11 13:33 - 2018-08-17 20:33 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2021-04-07 20:28 - 2020-08-29 12:40 - 000000000 ____D C:\Users\Hendrik
2021-04-04 15:31 - 2020-08-29 12:49 - 000003830 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-256580667-2295068177-2157506718-1000
2021-04-04 15:31 - 2020-08-29 12:49 - 000003734 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-256580667-2295068177-2157506718-1000
2021-04-04 15:31 - 2020-04-16 13:36 - 000000000 ____D C:\Users\Hendrik\AppData\Local\GoToMeeting
2021-04-03 08:12 - 2018-07-31 20:09 - 000000000 ____D C:\Users\Hendrik\AppData\Local\babl-0.1
2021-04-03 08:12 - 2016-06-06 13:32 - 000000000 ____D C:\Users\Hendrik\AppData\Local\gtk-2.0
2021-04-02 19:57 - 2016-11-22 19:33 - 000000729 _____ C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc
2021-04-02 19:48 - 2017-02-22 19:22 - 000000000 ____D C:\Users\Hendrik\AppData\Roaming\vlc
2021-04-01 08:31 - 2019-07-31 17:47 - 000000000 ____D C:\Program Files\Streamlabs OBS
2021-03-31 19:04 - 2019-04-26 21:31 - 000000000 ____D C:\Users\Hendrik\AppData\Local\FileZilla
2021-03-31 16:02 - 2021-03-15 20:57 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2021-03-27 17:00 - 2020-09-25 13:09 - 000000000 ____D C:\Users\Hendrik\Documents\PW_Banken
2021-03-26 09:07 - 2015-10-14 18:06 - 000001159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-03-24 16:42 - 2021-03-14 21:02 - 000000000 ____D C:\Users\Hendrik\Desktop\MultiPAAConverter
2021-03-22 11:01 - 2019-04-26 21:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client
2021-03-22 11:01 - 2019-04-26 21:31 - 000000000 ____D C:\Program Files\FileZilla FTP Client
2021-03-21 16:15 - 2020-12-11 16:25 - 000000000 ____D C:\Users\Hendrik\Desktop\Logo

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2020-12-28 21:53 - 2020-12-28 21:53 - 106643319 _____ () C:\Program Files (x86)\Minecraft.rar
2020-03-15 15:36 - 2020-03-15 15:39 - 000000098 _____ () C:\Users\Hendrik\AppData\Roaming\LauncherSettings_live.cfg
2020-03-15 15:38 - 2020-03-15 15:38 - 000002513 _____ () C:\Users\Hendrik\AppData\Roaming\TheHunterSettings_live.bin
2019-07-14 11:52 - 2019-07-17 17:17 - 000034158 _____ () C:\Users\Hendrik\AppData\Roaming\VoiceMeeterBananaDefault.xml
2018-04-18 22:00 - 2019-07-14 12:00 - 000004672 _____ () C:\Users\Hendrik\AppData\Roaming\VoiceMeeterDefault.xml
2019-07-17 18:32 - 2020-01-03 21:08 - 000059896 _____ () C:\Users\Hendrik\AppData\Roaming\VoiceMeeterPotatoDefault.xml
2016-06-27 17:46 - 2016-06-27 17:46 - 000000095 _____ () C:\Users\Hendrik\AppData\Local\fusioncache.dat
2015-12-26 18:53 - 2019-04-11 18:57 - 000000600 _____ () C:\Users\Hendrik\AppData\Local\PUTTY.RND
2021-04-03 08:12 - 2021-04-03 08:12 - 000029909 _____ () C:\Users\Hendrik\AppData\Local\recently-used.xbel
2021-02-16 19:32 - 2021-02-16 19:32 - 000012288 _____ () C:\Users\Hendrik\AppData\Local\vita_uranus.data
2016-04-26 10:30 - 2016-04-26 10:30 - 000000000 _____ () C:\Users\Hendrik\AppData\Local\{401D2693-F464-4B4E-9F7A-3C588FF1B40F}

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================