Illegale Software

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 28-03-2022
durchgeführt von Stardust (Administrator) auf STARDUST-PC (ASUS All Series) (29-03-2022 17:35:37)
Gestartet von C:\Users\Stardust\Desktop\Virenscanner
Geladene Profile: Stardust
Plattform: Microsoft Windows 10 Home Version 20H2 19042.1237 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe ->) (Acronis International GmbH -> Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <9>
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(explorer.exe ->) (Realtek Semiconductor Corp -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(services.exe ->) (Acronis International GmbH -> Seagate) C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5dcb5bbf5c3edcf2\Display.NvContainer\NVDisplay.Container.exe <2>
(svchost.exe ->) (Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe
(svchost.exe ->) (Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [Seagate Scheduler2 Service] => C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedhlp.exe [401080 2016-09-09] (Acronis International GmbH -> Seagate)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8853248 2016-03-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg_DTS] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1419008 2016-03-31] (Realtek Semiconductor Corp -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3952096 2020-03-10] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => "C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe" (Keine Datei)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [293872 2014-08-25] (Intel Corporation - Software and Firmware Products -> Intel Corporation)
HKLM-x32\...\Run: [DiscWizardMonitor.exe] => C:\Program Files (x86)\Seagate\DiscWizard\DiscWizardMonitor.exe [5626736 2016-09-09] (Acronis International GmbH -> Seagate)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [693336 2015-07-19] (Acronis International GmbH -> Acronis International GmbH)
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\Run: [Evjtion] => C:\Windows\SysWOW64\regsvr32.exe C:\Users\Stardust\AppData\Local\Ednltion\zggmavdz.dll (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Stardust\AppData\Local\Microsoft\Teams\Update.exe [2452664 2021-01-22] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2020-03-22] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\MountPoints2: {2b23946d-8395-11ea-8d07-2c56dcfb29ac} - "J:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\MountPoints2: {3708622c-9c6c-11ec-8f47-001bdc0f5e41} - "P:\HiSuiteDownLoader.exe" 
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\MountPoints2: {589a8aa1-416f-11ec-8ed9-001bdc0f5e41} - "P:\WD Drive Unlock.exe" autoplay=true
HKU\S-1-5-21-1645521455-3686839743-3489531396-1000\...\MountPoints2: {f3cf51bc-0d59-11ec-8ea4-001bdc0f5e41} - "J:\HiSuiteDownLoader.exe" 
HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\Windows\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\Windows\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\PDF995 Monitor: C:\Windows\system32\pdf995mon64.dll [40448 2012-04-26] () [Datei ist nicht signiert]
HKLM\...\Print\Monitors\Redirected Port: C:\Windows\system32\redmon64.dll [113152 2012-06-21] () [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\99.1.36.122\Installer\chrmstp.exe [2022-03-26] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\iD Autostart.lnk [2020-11-20]
ShortcutTarget: iD Autostart.lnk -> I:\Program Files\Audient\USBAudioDriver\W10_x64\iD.exe (Thesycon Software Solutions GmbH & Co. KG -> Audient)
Startup: C:\Users\Stardust\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\clean.bat [2019-03-07] () [Datei ist nicht signiert]
GroupPolicy\User: Beschränkung ? <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {076989FD-D443-4504-83CA-64810601FBCC} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {07EBFA06-EC9D-4509-964A-DB00D4903D08} - System32\Tasks\Trigger KMS Activation => C:\Program Files\KMSnano\TriggerKMS.exe [54784 2013-01-26] () [Datei ist nicht signiert]
Task: {0E585CE1-C419-4727-A582-9E54A1238CBF} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -MediaCenterRecoveryTask (Keine Datei)
Task: {1258D30D-FF81-46A0-BAA5-4B0EEFE79E2E} - System32\Tasks\{F6ECDA73-02CC-4381-9024-C25B45508A36} => C:\Windows\system32\pcalua.exe -a G:\Downloads\Nikon\Camera_Control_Pro_2.4.0_MAJ+crack-FR\S-CCPRO_-240WU-___FR.exe -d G:\Downloads\Nikon\Camera_Control_Pro_2.4.0_MAJ+crack-FR
Task: {15621708-65E6-425B-9FC7-9690D986FAC0} - System32\Tasks\Red Giant Link => C:\Program [Argument = Files (x86)\Red Giant Link\Red Giant Link.exe]
Task: {18CF7782-EF51-4CF5-98FD-51618CA7C520} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe /RestartRecording (Keine Datei)
Task: {1BB78BF6-674D-4DBE-B063-5D3D09C89A48} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe -pscn 0 (Keine Datei)
Task: {2A123457-F6C7-4970-9697-BFB272A512EA} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2ADE8A48-D80D-4364-BDC7-2867103F061D} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2AE01B1E-CF36-43B3-9107-15D14A6F2E7E} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -ObjectStoreRecoveryTask (Keine Datei)
Task: {2CCCFE10-565F-43E4-BA75-CB0562B433EE} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2F85F820-77B1-4B7B-8E54-1933C30E5CE0} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe /DRMInit (Keine Datei)
Task: {334B7889-5A8B-4058-9EEE-651DCCBE4E1D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-20] (Adobe Inc. -> Adobe)
Task: {342F4578-FFCA-49D9-8DC0-8E8260946CAD} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {38E1DF0C-A53D-42FC-BDCD-198954F634A1} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe do-task "E7CF176E110C211B"
Task: {3BC919F3-ACAB-471F-BF08-6362961F8C8B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-25] (Google Inc -> Google Inc.)
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47C2-B62A-B7C4CED925CB}
Task: {4E5BA39D-F273-4559-A8B4-EBAF956D4278} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoRegisterSearch $(Arg0) (Keine Datei)
Task: {532150C9-B9BA-4E16-AECB-25279FD46214} - System32\Tasks\AdobeAAMUpdater-1.0-Stardust-PC-Stardust => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {53585984-A13C-46C9-9EA3-88CDCF7DE5E6} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {53F1DCE3-3F1A-413E-998B-6B419B9677B1} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe /DoRecoveryTasks $(Arg0) (Keine Datei)
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {5BDA07B6-DE21-4A96-8B19-8EFDA5187064} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe /DoConfigureInternetTimeService (Keine Datei)
Task: {6BA091D6-7111-4C65-A9F3-2285041539F1} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe /DoReindexSearchRoot (Keine Datei)
Task: {6D2A8B03-270A-45AB-90AC-1A7865121988} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {71E80772-B077-4C1B-AD9F-C38C767517E7} - System32\Tasks\Microsoft\Windows\File Classification Infrastructure\Property Definition Sync => {2AE64751-B728-4D6B-97A0-B2DA2E7D2A3B}
Task: {7EECC9C8-1EE0-4853-BBBF-1760A0BBCD38} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [880 2020-09-25] () [Datei ist nicht signiert]
Task: {83093D10-05D6-4F0D-9688-4E171B0E4677} - System32\Tasks\{25F98069-70CB-48A9-B931-BF1D94951F4F} => G:\Downloads\GoPro_Quik-WinInstaller-2.7.0.945.exe [180585880 2020-04-02] (GoPro Media, Inc. -> GoPro, Inc.)
Task: {89BD13E7-D90B-41E7-91AB-CF803A0752AE} - System32\Tasks\Microsoft\Windows\Offline Files\Logon Synchronization => {FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}
Task: {8B5B7A14-2B5F-41C4-BA82-6923A5D92143} - System32\Tasks\{553076C7-B8AD-4770-893E-6B2BA8DDC567} => C:\Windows\system32\pcalua.exe -a G:\Windows7Platte\hijackthis.exe
Task: {8BC6E84B-2860-40C1-B5D1-579A1C8F9770} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {8D030C4D-BBD1-4892-89B2-D51D809F87C6} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_453_Plugin.exe [1502776 2020-11-20] (Adobe Inc. -> Adobe)
Task: {91CC13EA-0D77-43A4-A9F6-12667D379D8E} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe (Keine Datei)
Task: {98521B7B-BE3C-4AD6-A104-D94A6A45C76F} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe /OCURActivate (Keine Datei)
Task: {9C15659A-CAD1-4E51-8E94-40C45E0BFF83} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9ED1D52B-03A0-4A8A-89BA-34D5A3EBA20A} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4F47-879B-29A80C355D61}
Task: {A08BB583-34C1-49E9-B2DA-4AC980F8CC59} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43DA-BFD7-FBEEA2180A1E}
Task: {A3EDD0B1-51F2-4FDD-A5CE-A8B1F8958981} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -PvrRecoveryTask (Keine Datei)
Task: {A43F1BAA-9399-4965-9C62-14B265A6D5BD} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /PBDADiscovery (Keine Datei)
Task: {A462F529-82E3-4BE2-B0EF-B4EFA29BA5E8} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDFE067B1}
Task: {A7AEA0F8-A9AD-4FB5-B50D-DBC6153ACCB9} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe -SqlLiteRecoveryTask (Keine Datei)
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40B4-8963-D3C761B18371}
Task: {B34FEDE3-F972-46BB-AD46-7691A085E4E9} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {B3CED513-A4FE-4F16-9F98-2AFCCC82D880} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {B47C6464-3B0B-4209-908A-48E1B9AB080C} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe /DoUpdateRecordPath $(Arg0) (Keine Datei)
Task: {B6451DFA-7517-4D9D-8048-4C32CEAA9C49} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-16] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {BAF779DC-E992-4932-8359-7889E0FEF22F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:90 /PBDADiscovery (Keine Datei)
Task: {C0B40F63-FED3-4A03-8B6D-761AA4DAAB29} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe $(Arg0) (Keine Datei)
Task: {CAE05DA5-63F7-44F4-9D51-E27999E6834D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CFA9598B-1124-4A7E-8A2A-A9C697F770F6} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D2899B86-E294-4E7C-B6DF-5B1A9EBC3245} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe /InstallPlayReady $(Arg0) (Keine Datei)
Task: {D35CC1F7-0AAD-4869-990B-4A90B1F59805} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe -PvrSchedule (Keine Datei)
Task: {D42E7572-EFE4-4A43-8766-C86235BF4C57} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe /wait:7 /PBDADiscovery (Keine Datei)
Task: {D68681B2-3CB0-4529-B6EB-0EC6B00236D3} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe /DoActivateWindowsSearch (Keine Datei)
Task: {DD7815C7-5CE4-4F85-852F-1D66DB296AE0} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe /OCURDiscovery $(Arg0) (Keine Datei)
Task: {DE234587-B089-45B9-9FB7-9AAA6DFC52AE} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-11-07] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log
Task: {E61B1606-18F5-4B92-A3B5-17ECDE148C58} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-05-25] (Google Inc -> Google Inc.)
Task: {F1C5573A-A641-4228-88C2-64F8E5DD7461} - System32\Tasks\Microsoft\Windows\Offline Files\Background Synchronization => {FA3F3DD9-4C1A-456B-A8FA-C76EF3ED83B8}

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{905F7350-6D98-4D00-8094-332339AD59E4}: [DhcpNameServer] 192.168.2.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\Stardust\AppData\Local\Microsoft\Edge\User Data\Default [2022-03-29]

FireFox:
========
FF DefaultProfile: bgbxpof5.default
FF ProfilePath: C:\Users\Stardust\AppData\Roaming\TomTom\HOME\Profiles\4rzg4lot.default [2019-05-05]
FF Extension: (Map status indicator) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [2019-05-05] [] [ist nicht signiert]
FF ProfilePath: C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default [2022-03-19]
FF DownloadDir: G:\Downloads
FF Homepage: Mozilla\Firefox\Profiles\bgbxpof5.default -> hxxp://www.google.com
FF Extension: (Facebook Container) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\@contain-facebook.xpi [2021-11-30]
FF Extension: (Combo) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\combo@yandex.ru.xpi [2016-02-09] []
FF Extension: (YouTube Video and Audio Downloader) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\feca4b87-3be4-43da-a1b1-137c24220968@jetpack.xpi [2017-05-20] []
FF Extension: (ImTranslator: Translator, Dictionary, TTS) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\{9AA46F4F-4DC7-4c06-97AF-5035170634FE}.xpi [2021-11-30]
FF Extension: (Video DownloadHelper) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2021-07-11]
FF Extension: (YouTube Video and Audio Downloader (Dev Edt.)) - C:\Users\Stardust\AppData\Roaming\Mozilla\Firefox\Profiles\bgbxpof5.default\Extensions\{f73df109-8fb4-453e-8373-f59e61ca4da3}.xpi [2021-07-11]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_453.dll [2020-11-20] (Adobe Inc. -> )
FF Plugin: @videolan.org/vlc,version=3.0.11 -> d:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_453.dll [2020-11-20] (Adobe Inc. -> )
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> D:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2012-09-23] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-03-09] (Adobe Systems Incorporated -> Adobe Systems)

Brave: 
=======
BRA Profile: C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2022-03-29]
BRA DownloadDir: G:\Downloads
BRA StartupUrls: Default -> "hxxp://www.google.com/"
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Brave Local Data Files Updater) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2022-03-29]
BRA Extension: (Brave NTP background images) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2022-03-10]
BRA Extension: (Wallet Data Files Updater) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2022-03-10]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-03-29]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2021-03-17]
BRA Extension: (Brave Ad Block Updater (EasyList Germany)) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\faknfgalcghekhfggcdikddilkpjbonh [2022-03-29]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-14]
BRA Extension: (Brave NTP sponsored images) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2022-03-29]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\Stardust\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2022-03-16]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-11-20] (Adobe Inc. -> Adobe)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2128872 2018-05-11] (Adobe Systems Incorporated -> Adobe Systems, Incorporated)
R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.00.33\AsusFanControlService.exe [1340376 2017-12-05] (ASUSTeK Computer Inc. -> ASUSTeK Computer Inc.)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [162400 2021-03-16] (Brave Software, Inc. -> BraveSoftware Inc.)
S4 DevoloNetworkService; C:\Program Files (x86)\devolo\dlan\devolonetsvc.exe [0 2022-03-28] () <==== ACHTUNG [Null Byte Datei/Ordner]
S2 DTSAudioSvc; C:\Program Files\Realtek\Audio\HDA\DTSU2PAuSrv64.exe [249320 2016-03-31] (DTS, Inc. -> DTS, Inc)
S4 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [135824 2011-12-12] (SEIKO EPSON Corporation -> Seiko Epson Corporation)
S2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1666664 2022-03-28] (David Carpenter -> )
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [82216 2020-12-22] (Mixbyte Inc -> Freemake)
S2 GoProDeviceDetectionService; C:\Program Files\GoPro\GoPro Desktop App\GoProDeviceDetection.exe [38328 2018-08-31] (GoPro Media, Inc. -> )
S2 HuaweiHiSuiteService64.exe; C:\Program Files (x86)\HiSuite\HandSetService\HuaweiHiSuiteService64.exe [236864 2021-06-03] (Huawei Technologies Co., Ltd. -> ) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8022200 2022-03-28] (Malwarebytes Inc -> Malwarebytes)
R2 SgtSch2Svc; C:\Program Files (x86)\Common Files\Seagate\Schedule2\schedul2.exe [1255144 2016-09-09] (Acronis International GmbH -> Seagate)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 asComSvc; "C:\Program Files (x86)\ASUS\AXSP\4.00.01\atkexComSvc.exe" [X]
S2 AsSysCtrlService; "C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5dcb5bbf5c3edcf2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_5dcb5bbf5c3edcf2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] (ASUSTeK Computer Inc. -> )
R3 audientusbaudio; C:\WINDOWS\System32\drivers\audientusbaudio.sys [366800 2018-09-26] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 audientusbaudioks; C:\WINDOWS\System32\drivers\audientusbaudioks.sys [53456 2018-09-26] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 CYUSB3; C:\WINDOWS\System32\Drivers\CYUSB3.sys [91952 2018-11-16] (Cypress Semiconductor Corporation -> Cypress Semiconductor)
R3 debutfilter; C:\WINDOWS\system32\DRIVERS\debutfilterx64.sys [55144 2020-12-11] (NCH Software Pty Ltd -> )
S3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [33592 2015-05-24] (DEV47 APPS -> Dev47Apps)
S3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [229432 2015-05-24] (DEV47 APPS -> Dev47Apps)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [160176 2021-09-11] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 ew_usbccgpfilter; C:\WINDOWS\System32\drivers\ew_usbccgpfilter.sys [18944 2021-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [296736 2018-07-22] (Acronis International GmbH -> Acronis International GmbH)
U5 hw_usbdev; C:\Windows\System32\Drivers\hw_usbdev.sys [116864 2021-06-03] (Microsoft Windows Hardware Compatibility Publisher -> Huawei Technologies Co., Ltd.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223688 2022-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-20] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [195024 2022-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [69040 2022-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248992 2022-03-29] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [157816 2022-03-29] (Malwarebytes Inc -> Malwarebytes)
S3 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)
R2 NPF_devolo; C:\WINDOWS\sysWOW64\drivers\npf_devolo.sys [36496 2021-07-13] (devolo AG -> Riverbed Technology, Inc.)
R0 nvme; C:\WINDOWS\System32\drivers\nvme.sys [83784 2015-12-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd)
R0 nvmeF; C:\WINDOWS\System32\drivers\nvmeF.sys [30776 2015-12-16] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd)
S3 SIVDriver; C:\WINDOWS\system32\Drivers\SIVX64.sys [198144 2021-12-13] (Microsoft Windows Hardware Compatibility Publisher -> Ray Hinchliffe)
S3 sparkocam; C:\WINDOWS\System32\DRIVERS\sparkocam.sys [36176 2015-12-21] (Sparkosoft Inc -> Sparkosoft)
R2 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1058632 2018-07-22] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\System32\DRIVERS\tib_mounter.sys [248648 2018-07-22] (Acronis International GmbH -> Acronis International GmbH)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2017-11-27] (Apple, Inc.) [Datei ist nicht signiert]
R3 USBPcap; C:\WINDOWS\System32\DRIVERS\USBPcap.sys [48960 2019-08-11] (Tomasz Moń -> USBPcap)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
R2 WinisoCDBus; C:\WINDOWS\System32\drivers\WinisoCDBus.sys [204032 2013-12-10] (ZJMedia Digital Technology Ltd. -> WinISO.com)
S1 iaujjhli; \??\C:\WINDOWS\system32\drivers\iaujjhli.sys [X]
U3 idsvc; kein ImagePath
S1 rqzhynon; \??\C:\WINDOWS\system32\drivers\rqzhynon.sys [X]
S3 TSSKX64; System32\drivers\tsskx64.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-03-29 17:31 - 2022-03-29 17:35 - 000000000 ____D C:\Users\Stardust\Desktop\Virenscanner
2022-03-29 17:26 - 2022-03-29 17:27 - 000089026 _____ C:\Users\Stardust\Desktop\Addition.txt
2022-03-29 17:25 - 2022-03-29 17:27 - 000045359 _____ C:\Users\Stardust\Desktop\FRST.txt
2022-03-29 17:20 - 2022-03-29 17:20 - 000009158 _____ C:\Users\Stardust\Desktop\RogueKiller.txt
2022-03-29 17:08 - 2022-03-29 17:20 - 000000000 ____D C:\ProgramData\RogueKiller
2022-03-29 17:06 - 2022-03-29 17:08 - 000002129 _____ C:\Users\Stardust\Desktop\mbam.txt
2022-03-29 16:56 - 2022-03-29 16:56 - 000004986 _____ C:\Users\Stardust\Documents\AdwCleaner[S00].txt
2022-03-29 16:56 - 2022-03-29 16:56 - 000004396 _____ C:\Users\Stardust\Documents\AdwCleaner[C00].txt
2022-03-29 16:52 - 2022-03-29 16:55 - 000000000 ____D C:\AdwCleaner
2022-03-29 16:38 - 2022-03-29 16:38 - 000195024 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2022-03-29 16:38 - 2022-03-29 16:38 - 000157816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2022-03-29 16:38 - 2022-03-29 16:38 - 000069040 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2022-03-28 20:29 - 2022-03-29 16:20 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2022-03-28 20:12 - 2022-03-29 16:25 - 000248992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-03-28 20:12 - 2022-03-29 16:20 - 000223688 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-03-28 16:13 - 2022-03-28 16:15 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-03-19 09:20 - 2022-03-19 09:20 - 000095933 _____ C:\Users\Stardust\Documents\rechnungbeitraghukmoped.pdf
2022-03-15 17:09 - 2022-03-15 17:09 - 001134792 _____ C:\Users\Stardust\Desktop\anwaltsrechnung.pdf
2022-03-14 16:51 - 2022-03-25 22:12 - 000000000 ____D C:\WINDOWS\Minidump
2022-03-12 15:28 - 2022-03-12 16:21 - 000000000 ____D C:\Users\Stardust\Documents\BAfög
2022-03-07 17:13 - 2022-03-07 17:13 - 000061073 _____ C:\Users\Stardust\Desktop\4769_001.pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-03-29 17:35 - 2018-05-09 19:16 - 000000000 ____D C:\FRST
2022-03-29 17:34 - 2018-05-25 18:07 - 000000000 ____D C:\Program Files (x86)\Google
2022-03-29 17:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2022-03-29 17:13 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-03-29 17:03 - 2016-11-26 15:02 - 000000000 ____D C:\Users\Stardust\AppData\LocalLow\Mozilla
2022-03-29 16:55 - 2016-04-21 16:01 - 000000000 ____D C:\ProgramData\NVIDIA
2022-03-29 16:55 - 2016-02-24 21:17 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\Common
2022-03-29 16:52 - 2016-09-30 17:09 - 000000000 ____D C:\Users\Stardust\Documents\Outlook-Dateien
2022-03-29 16:44 - 2021-05-26 21:49 - 000780942 _____ C:\WINDOWS\system32\perfh00C.dat
2022-03-29 16:44 - 2021-05-26 21:49 - 000149608 _____ C:\WINDOWS\system32\perfc00C.dat
2022-03-29 16:44 - 2021-05-26 21:17 - 002766164 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-03-29 16:44 - 2019-12-07 15:50 - 000785800 _____ C:\WINDOWS\system32\perfh007.dat
2022-03-29 16:44 - 2019-12-07 15:50 - 000167914 _____ C:\WINDOWS\system32\perfc007.dat
2022-03-29 16:40 - 2018-11-03 13:07 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\Everything
2022-03-29 16:38 - 2021-05-26 21:14 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-03-29 16:38 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-03-29 16:37 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-03-29 16:37 - 2018-11-03 22:34 - 000000000 ____D C:\Users\Stardust\AppData\Local\Everything
2022-03-29 16:34 - 2022-01-25 17:49 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2022-03-29 16:34 - 2016-02-06 19:31 - 000000000 ____D C:\Users\Stardust\AppData\Local\Adobe
2022-03-29 16:33 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2022-03-29 16:32 - 2018-05-02 18:01 - 000000000 ____D C:\ProgramData\Garmin
2022-03-29 16:32 - 2016-02-06 16:36 - 000000000 ____D C:\ProgramData\Package Cache
2022-03-28 21:13 - 2021-05-26 21:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-03-28 20:18 - 2018-11-03 13:07 - 000000000 ____D C:\Program Files (x86)\Everything
2022-03-28 20:00 - 2021-05-26 21:06 - 005229264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-03-28 19:56 - 2016-02-06 20:49 - 000000000 ____D C:\Program Files (x86)\Adobe
2022-03-28 19:55 - 2016-02-06 19:31 - 000000000 ____D C:\ProgramData\Adobe
2022-03-28 19:54 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-03-28 19:54 - 2016-02-06 19:33 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2022-03-28 19:49 - 2016-02-14 18:20 - 000000000 ____D C:\Users\Stardust\AppData\LocalLow\Adobe
2022-03-28 16:37 - 2016-02-06 19:31 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\Adobe
2022-03-28 16:25 - 2016-02-08 18:24 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2022-03-28 16:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2022-03-28 16:10 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2022-03-28 16:08 - 2016-03-13 12:43 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\transmission
2022-03-26 21:55 - 2021-05-26 21:08 - 000000000 ____D C:\Users\Stardust
2022-03-26 21:40 - 2016-03-25 18:39 - 000000000 ____D C:\Users\Stardust\AppData\Local\CrashDumps
2022-03-26 19:30 - 2021-03-16 20:18 - 000002356 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2022-03-25 22:43 - 2017-12-08 18:56 - 000000000 ____D C:\Users\Public\Ticket
2022-03-21 17:40 - 2021-01-28 20:04 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\Signal
2022-03-16 19:06 - 2017-06-25 11:08 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\Arobas Music
2022-03-16 17:53 - 2016-09-04 11:04 - 000000000 ____D C:\Users\Stardust\AppData\Local\ElevatedDiagnostics
2022-03-15 17:35 - 2019-01-09 19:27 - 000000000 ____D C:\Program Files\Common Files\VST3
2022-03-12 10:04 - 2020-09-09 16:14 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\vlc
2022-03-12 09:57 - 2016-10-01 12:42 - 000000000 ____D C:\Users\Stardust\AppData\Roaming\dvdcss
2022-03-08 17:57 - 2021-06-07 16:25 - 000002021 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-03-08 17:57 - 2020-05-03 16:39 - 000002033 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-03-08 17:47 - 2020-05-03 16:39 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-03-08 17:47 - 2020-05-03 15:29 - 000000000 ____D C:\Program Files\Malwarebytes
2022-03-03 18:19 - 2020-04-02 17:55 - 000000000 ____D C:\Users\Stardust\AppData\Local\Packages
2022-03-02 12:56 - 2019-09-27 20:07 - 000366360 _____ (Microsoft Corporation) C:\WINDOWS\system32\vccorlib140.dll
2022-03-02 12:56 - 2019-09-27 20:07 - 000203544 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140_2.dll
2022-03-02 12:56 - 2019-09-27 20:07 - 000044312 _____ (Microsoft Corporation) C:\WINDOWS\system32\vcruntime140_1.dll
2022-03-02 12:56 - 2019-09-27 20:06 - 000333592 _____ (Microsoft Corporation) C:\WINDOWS\system32\concrt140.dll
2022-03-02 12:56 - 2019-09-27 20:06 - 000031512 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140_1.dll
2022-03-02 12:56 - 2019-09-27 20:06 - 000027416 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvcp140_codecvt_ids.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2019-03-07 18:27 - 2019-03-07 18:40 - 000000084 _____ () C:\Users\Stardust\clean.bat
2014-04-29 11:35 - 2014-04-29 11:35 - 354230360 _____ (Sony Creative Software Inc.) C:\Program Files (x86)\vegaspro13.0.310_64bit.exe
2016-01-13 22:47 - 2016-01-13 22:47 - 000000617 _____ () C:\Users\Stardust\AppData\Roaming\12.png
2018-11-10 18:26 - 2018-11-10 18:26 - 000000268 ___RH () C:\Users\Stardust\AppData\Roaming\Bubble Noise
2013-10-02 03:56 - 2013-10-02 03:56 - 000000167 _____ () C:\Users\Stardust\AppData\Roaming\bullet.png
2015-05-20 02:28 - 2015-05-20 02:28 - 000003813 _____ () C:\Users\Stardust\AppData\Roaming\circle_orange.png
2018-12-29 13:19 - 2018-12-29 13:22 - 000345950 _____ () C:\Users\Stardust\AppData\Roaming\CodecsLE_Install.log
2017-11-21 18:18 - 2017-11-21 18:18 - 041693696 _____ () C:\Users\Stardust\AppData\Roaming\ffmpeg.exe
2016-02-07 20:59 - 2016-02-07 20:59 - 000002210 _____ () C:\Users\Stardust\AppData\Roaming\FlasketAnemometry
2016-02-07 09:55 - 2016-02-07 09:55 - 000076288 _____ () C:\Users\Stardust\AppData\Roaming\hyphenizations.dll
2015-05-20 02:28 - 2015-05-20 02:28 - 000001392 _____ () C:\Users\Stardust\AppData\Roaming\inventory.png
2016-02-07 20:59 - 2016-02-07 20:59 - 000052466 _____ () C:\Users\Stardust\AppData\Roaming\La_Rioja
2013-10-02 03:54 - 2013-10-02 03:54 - 000000447 _____ () C:\Users\Stardust\AppData\Roaming\meta-index
2021-11-02 11:03 - 2021-11-02 11:03 - 000000016 _____ () C:\Users\Stardust\AppData\Roaming\obs-virtualcam.txt
2013-10-02 03:56 - 2013-10-02 03:56 - 000001826 _____ () C:\Users\Stardust\AppData\Roaming\page.margin.outer.xml
2014-05-08 05:08 - 2014-05-08 05:08 - 000001307 _____ () C:\Users\Stardust\AppData\Roaming\Steel - Matte Bronze.3PP
2017-06-25 15:08 - 2017-06-25 15:10 - 000001456 _____ () C:\Users\Stardust\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2016-06-05 13:37 - 2019-03-20 21:25 - 000007680 _____ () C:\Users\Stardust\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-10-17 17:48 - 2019-10-17 17:48 - 000002961 ____H () C:\Users\Stardust\AppData\Local\llbb1cscaicceo.ini
2019-11-28 17:03 - 2019-11-28 17:03 - 000002897 ____H () C:\Users\Stardust\AppData\Local\llbb1csccicceo.ini
2019-12-19 17:35 - 2019-12-19 17:35 - 000002939 ____H () C:\Users\Stardust\AppData\Local\llbb1csceicceo.ini
2019-01-17 18:12 - 2019-01-17 18:12 - 000002961 ____H () C:\Users\Stardust\AppData\Local\llbb1cscicceo.ini
2019-02-28 17:37 - 2019-02-28 17:37 - 000002854 ____H () C:\Users\Stardust\AppData\Local\llbb1cseicceo.ini
2019-03-28 18:20 - 2019-03-28 18:20 - 000002854 ____H () C:\Users\Stardust\AppData\Local\llbb1csgicceo.ini
2019-04-18 16:25 - 2019-04-18 16:26 - 000002918 ____H () C:\Users\Stardust\AppData\Local\llbb1csiicceo.ini
2019-05-16 16:16 - 2019-05-16 16:16 - 000002833 ____H () C:\Users\Stardust\AppData\Local\llbb1cskicceo.ini
2019-06-27 18:45 - 2019-06-27 18:45 - 000002897 ____H () C:\Users\Stardust\AppData\Local\llbb1csmicceo.ini
2020-01-16 18:14 - 2020-01-16 18:14 - 000002961 ____H () C:\Users\Stardust\AppData\Local\llbb1eacicceo.ini
2020-02-20 17:56 - 2020-02-20 17:56 - 000002897 ____H () C:\Users\Stardust\AppData\Local\llbb1eaeicceo.ini
2020-03-19 16:07 - 2020-03-19 16:07 - 000002982 ____H () C:\Users\Stardust\AppData\Local\llbb1eagicceo.ini
2021-12-04 19:24 - 2021-12-04 19:24 - 000007605 _____ () C:\Users\Stardust\AppData\Local\Resmon.ResmonCfg
2020-12-12 20:13 - 2020-12-12 20:13 - 000000000 _____ () C:\Users\Stardust\AppData\Local\zenmap.exe.log
2019-01-09 19:27 - 2019-01-09 19:27 - 000000514 _____ () C:\Users\Stardust\AppData\Local\{BBF71A64-BCF1-4DCD-AD17-6730881BF01C}

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)



testsigning: ==> 'testsigning' ist aktiviert. Prüfung auf eventuelle nicht-signierte Treiber durchführen <==== ACHTUNG
==================== Ende von FRST.txt ========================