Windows 10 pop up mit persönlichen Daten hack.ye (oder hack ye?)

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-06-2022 01
durchgeführt von wrt (Administrator) auf RYZEN (Acer Aspire GX-281) (24-06-2022 17:27:47)
Gestartet von C:\Users\wrt\Downloads
Geladene Profile: wrt
Plattform: Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() [Datei ist nicht signiert] C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe
() [Datei ist nicht signiert] C:\Program Files\CherryTree\mingw64\bin\gdbus.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(AnchorFree Inc -> AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\hsscp.exe
(C:\Program Files (x86)\ABBYY FineReader 11\FineReader.exe ->) (ABBYY PRODUCTION LLC -> ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\FineExec.exe <15>
(C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\acrocef_2\RdrCEF.exe <7>
(C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMUPDT.EXE
(C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\Dropbox\Client\Dropbox.exe ->) (Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\151.4.4304\QtWebEngineProcess.exe <2>
(C:\Program Files (x86)\Everything\Everything.exe ->) (The Document Foundation -> The Document Foundation) C:\Program Files\LibreOffice\program\soffice.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe ->) (AnchorFree Inc -> AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\x64\hydra.exe
(C:\Program Files (x86)\VMware\VMware Workstation\vmware.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-unity-helper.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\AppVShNotify.exe <2>
(C:\Program Files\LibreOffice\program\soffice.exe ->) (The Document Foundation -> The Document Foundation) C:\Program Files\LibreOffice\program\soffice.bin
(C:\winkmd\TOTALCMD64.EXE ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AcroRd32.exe <4>
(C:\winkmd\TOTALCMD64.EXE ->) (TrueCrypt Foundation -> TrueCrypt Foundation) C:\Program Files\TrueCrypt\TrueCrypt.exe
(C:\winkmd\TOTALCMD64.EXE ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware.exe
(Canon Inc. -> CANON INC.) C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE
(cmd.exe ->) () [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe
(DriverStore\FileRepository\u0359283.inf_amd64_33ce511cef7cdef1\B359021\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359283.inf_amd64_33ce511cef7cdef1\B359021\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(explorer.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\CherryTree\bin\cherrytree.exe
(explorer.exe ->) () [Datei ist nicht signiert] C:\Program Files\DocFetcher Pro Demo\docfetcher-pro-daemon-d.exe
(explorer.exe ->) (ABBYY PRODUCTION LLC -> ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe
(explorer.exe ->) (Amazon.com Services LLC -> Amazon.com) C:\Users\wrt\AppData\Local\Amazon\Kindle\application\Kindle.exe
(explorer.exe ->) (FreeDownloadManager.org) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\winkmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <52>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Windows NT\Accessories\wordpad.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(explorer.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe
(explorer.exe ->) (Opera Software AS -> Opera Software) C:\Users\wrt\AppData\Local\Programs\Opera\assistant\browser_assistant.exe <2>
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking13\dgnuiasvr.exe
(Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\NaturallySpeaking13\x64\dgnuiasvr_x64.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Sebastian Dörfler -> XMedia Recode) C:\Program Files\XMedia Recode 64bit\XMedia Recode.exe
(services.exe ->) (ABBYY PRODUCTION LLC -> ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Actions Microelectronics Co.,Ltd. -> ) C:\Program Files (x86)\EZCast\EZCastService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0359283.inf_amd64_33ce511cef7cdef1\B359021\atiesrxx.exe
(services.exe ->) (AnchorFree Inc -> AnchorFree Inc.) C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(services.exe ->) (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(services.exe ->) (voidtools -> voidtools) C:\Program Files (x86)\Everything\Everything.exe <2>
(svchost.exe ->) (ABBYY PRODUCTION LLC -> ABBYY Production LLC) C:\Program Files (x86)\ABBYY FineReader 11\FineReader.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Flexera Software LLC -> Flexera Software LLC.) C:\ProgramData\FLEXnet\Connect\11\agent.exe
(svchost.exe ->) (FreeDownloadManager.org) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.20970.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Studios) C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.13.5310.0_x64__8wekyb3d8bbwe\Solitaire.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\HelpPane.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe
(svchost.exe ->) (Tweaking LLC -> Tweaking.com) C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe
(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16706080 2018-03-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585296 2017-12-22] (Acronis International GmbH -> )
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe [325960 2014-05-30] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4871640 2021-12-02] (Acronis International GmbH -> )
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY PRODUCTION LLC -> ABBYY Production LLC)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3237808 2018-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [DocFetcher-Daemon] => C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe [563621 2021-05-26] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2010-09-09] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [10587912 2022-06-22] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-22] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [117528 2022-02-18] (VMware, Inc. -> VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [708840 2022-04-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\RunOnce: [ccleaner_update_helper] => C:\Program Files\CCleaner\ccleaner_update_helper.exe [692824 2022-06-23] (Piriform Software Ltd -> Piriform)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (Keine Datei)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files (x86)\Microsoft OneDrive\OneDrive.exe /background /setautostart (Keine Datei)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [10203648 2019-01-30] (FreeDownloadManager.org) [Datei ist nicht signiert]
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [36836592 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31162288 2021-04-29] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [116056952 2022-02-23] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Opera Browser Assistant] => C:\Users\wrt\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4137216 2022-06-07] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632064 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [886685649D2A507C991FC995626687C37E813F73._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8 [3595168 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon G3010 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEI.DLL [482816 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MX420 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAM.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX420 series: C:\WINDOWS\system32\CNCALAM.DLL [302080 2010-10-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G3010 series: C:\WINDOWS\system32\CNMLMEI.DLL [1303040 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MX420 series: C:\WINDOWS\system32\CNMLMAM.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\FPR10:: C:\WINDOWS\system32\fpmon10-x64.dll [226760 2020-09-01] (FinePrint Software, LLC -> FinePrint Software, LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\102.0.5005.115\Installer\chrmstp.exe [2022-06-10] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MaxLauncher.lnk [2020-01-08]
ShortcutTarget: MaxLauncher.lnk -> C:\Program Files\MaxLauncher\MaxLauncher.exe (Roberto Concepcion) [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-05-15]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Data [2021-03-09]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocFetcher Pro Demo Daemon.lnk [2022-01-03]
ShortcutTarget: DocFetcher Pro Demo Daemon.lnk -> C:\Program Files\DocFetcher Pro Demo\docfetcher-pro-daemon-d.exe () [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk [2021-07-25]
ShortcutTarget: Dragon NaturallySpeaking.lnk -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe (Nuance Communications, Inc. -> Nuance Communications, Inc.)
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntentionActivator.exe - Verknüpfung.lnk [2018-10-12]
ShortcutTarget: IntentionActivator.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Intention activator\IntentionActivator.exe () [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MadAppLauncher.lnk [2018-03-06]
ShortcutTarget: MadAppLauncher.lnk -> C:\Programme wr\MadAppLauncher\MadAppLauncher.exe () [Datei ist nicht signiert]
GroupPolicy: Beschränkung ? <==== ACHTUNG
GroupPolicy\User: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {001E3010-73A9-417D-A80E-F9AF7C7FDAF2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {044F3AA5-8042-4853-849E-0F81E1F6C836} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40880 2021-04-29] (Garmin International, Inc. -> )
Task: {0B5CD838-6196-497F-A350-15198F19090D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {12B1FAAA-5700-47DB-A945-6E26B2807652} - System32\Tasks\CCleanerSkipUAC - wrt => C:\Program Files\CCleaner\CCleaner.exe [30924528 2022-05-11] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {1505733E-46E8-478B-B9D1-BCCEC589E27A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /WakeupRun (Zugriff verweigert) <==== ACHTUNG
Task: {1F3BB399-9AE1-44AC-A6F2-785C03352828} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2D7AE1B1-188E-462C-8EF4-7A58B98DDC72} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /CalendarRun (Zugriff verweigert) <==== ACHTUNG
Task: {3B85578C-5601-4C8F-A171-8A0954F8B0C9} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {3F20E8F7-0FD2-49EC-AAC3-5A7F89E6DC7E} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [3867928 2020-11-15] (Nero AG -> Nero AG)
Task: {419869E2-0CFF-40DA-BC7D-F079A6B7444C} - System32\Tasks\EZCastServiceSchedule => C:\Program Files (x86)\EZCast\EZCast.exe [6048064 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )
Task: {45983CCD-82A3-498E-83F9-F4E2E87F29FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)
Task: {48A93B24-DC7E-4336-B161-DE203CD5C92F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} (Zugriff verweigert) <==== ACHTUNG
Task: {4E48C07D-7DB7-49AE-8E39-4E90DCEFBDAE} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {5A607ACA-A8E9-4167-AECF-4002C3FB0650} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [566592 2008-07-30] (Apple Inc. -> Apple Inc.)
Task: {5D954123-25D1-44A1-84E6-BA0785ED3C69} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {621F23BD-4D2D-45FA-80AC-DA9C4BAAD2F2} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {68BDCA2C-CED7-4006-A158-6DF0C85EE5F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)
Task: {7159ADE2-418F-4A6D-8241-C5043AC33E3F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {7FBAB793-202C-47FD-8067-837F3B60D0B3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {81C90710-7E47-4A97-8045-E6C33A1B520E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {873491E9-B7CD-45F9-96D6-08C36CA12967} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68176 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {8A117A9B-538E-4C15-B7B8-009E7F5BE140} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {A079ACB7-7695-4D4B-BE58-3EC2B91DBFF5} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60496 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {A460D746-9FC0-480E-B15E-F682DC49BEE7} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [966072 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {AC55A601-F1E7-414D-8217-F64AA3ECF433} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [619416 2022-06-18] (Piriform Software Ltd -> Piriform Software Ltd)
Task: {BF9F3CC2-BC27-4EDF-9750-458622FFFC89} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [67472 2022-05-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {C1E2BE95-5246-4D64-B153-E50C1240CF41} - System32\Tasks\FreeDownloadManagerNetworkMonitor => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\winwfpmonitor.exe [688128 2019-01-30] (FreeDownloadManager.org) [Datei ist nicht signiert]
Task: {CCC7E68B-D434-4201-A539-289DB82D1E0B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {D4A2E6A3-E5BF-46C9-95A4-807FB79BAF60} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4A775CA-D423-47F3-A788-D2041F5F462B} - System32\Tasks\Opera scheduled Autoupdate 1627569282 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2473216 2022-06-02] (Opera Software AS -> Opera Software)
Task: {D5F3AA7B-2019-45C0-B858-493043AF37BD} - System32\Tasks\Opera scheduled assistant Autoupdate 1627569296 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2473216 2022-06-02] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\wrt\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {D5FCFF51-0DDA-4F38-BE64-41979A9A585D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E03BC3D4-A376-42A0-B56B-ECD2B15F8674} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23246768 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {E31D94B8-5EE5-4C3F-B6AD-38D8332D8DCE} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-10-01] (Tweaking LLC -> Tweaking.com)
Task: {EB58BCDD-EEF5-431D-B87C-DF691043F6E1} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144800 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDB7BF1B-9611-4EDC-A21E-C92A9577C71D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog9 15 C:\WINDOWS\SysWOW64\vsocklib.dll [44128 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9 16 C:\WINDOWS\SysWOW64\vsocklib.dll [44128 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 15 C:\Windows\system32\vsocklib.dll [48224 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Winsock: Catalog9-x64 16 C:\Windows\system32\vsocklib.dll [48224 2021-08-16] (VMware, Inc. -> VMware, Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{275bfb08-bb13-4461-8f88-8a01ff26ae94}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{38e77d75-a546-469b-aadf-57a377551e87}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5fdf102f-d92b-4e9e-b85c-8ab59ac3823c}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{74f45b62-e5e7-4339-82ef-bd29351a171d}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{89062fd4-48a3-410d-8b24-b45bd6b0332d}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{94d30481-e060-45fd-bd5f-d15ad7158a23}: [DhcpNameServer] 192.168.0.1 0.0.0.0
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG

Edge: 
=======
DownloadDir: C:\Users\wrt\Downloads
Edge Notifications: HKU\S-1-5-21-779246859-3990032973-3551585165-1001 -> hxxps://shopee.co.th
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\wrt\AppData\Local\Microsoft\Edge\User Data\Default [2022-06-24]
Edge DownloadDir: Default -> C:\Users\wrt\Downloads
Edge DefaultSearchURL: Default -> hxxps://www.google.co.th/search?q={searchTerms}&ie={inputEncoding?}&oe={outputEncoding?}
Edge DefaultSearchKeyword: Default -> google.co.th

FireFox:
========
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-04-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Datei ist nicht signiert]
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\dtplugin\npDeployJava1.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\plugin2\npjp2.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-03-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-04-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default [2022-06-24]
CHR Notifications: Default -> hxxps://blog.mindvalley.com; hxxps://browsersecurely.com; hxxps://calendar.google.com; hxxps://caputron.com; hxxps://culturacolectiva.com; hxxps://de.cathedralcollege.org; hxxps://fres-news.com; hxxps://my.cdn.hear.com; hxxps://ocsnext.ebay.com.sg; hxxps://pdlife.os.tc; hxxps://photos.google.com; hxxps://promodayz.com; hxxps://remistrainew.club; hxxps://room.edudip.com; hxxps://shopee.co.th; hxxps://uk.yahoo.com; hxxps://vdc.md-medicus.de; hxxps://web.skype.com; hxxps://wwserch42.biz; hxxps://www.aerzteblatt.de; hxxps://www.netflix.com; hxxps://www.newscientist.com; hxxps://www.pinterest.com; hxxps://www.reddit.com; hxxps://www.sternefood.de; hxxps://www.thailand-property.com; hxxps://www.truthfinder.com
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Session Restore: Default -> ist aktiviert.
CHR Extension: (Google Übersetzer) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-12]
CHR Extension: (Free Download Manager) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2021-10-21]
CHR Extension: (DuckDuckGo) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2022-06-02]
CHR Extension: (Tab Manager Plus for Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkdjjdmfiffagllbiiilooaoofcoeff [2020-06-22]
CHR Extension: (Dragon Weberweiterung) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe [2020-07-17]
CHR Extension: (Voice Recognition) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2020-01-08]
CHR Extension: (Nehmen Sie vollständige Webseiten auf - FireShot) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2022-06-16]
CHR Extension: (SingleFile) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpiodijhokgodhhofbcjdecpffjipkle [2022-06-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1 [2021-09-28]
CHR Extension: (Präsentationen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-22]
CHR Extension: (Docs) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-22]
CHR Extension: (Google Drive) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-29]
CHR Extension: (YouTube) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-22]
CHR Extension: (Adobe Acrobat) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-10-29]
CHR Extension: (ZenMate Free VPN – Bestes VPN für Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2020-10-29]
CHR Extension: (Tabellen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-22]
CHR Extension: (Google Docs Offline) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-10-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-10-29]
CHR Extension: (Google Mail) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-29]
CHR Extension: (Chrome Media Router) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-29]
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\System Profile [2021-09-28]
CHR HKU\S-1-5-21-779246859-3990032973-3551585165-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

Opera: 
=======
OPR Profile: C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable [2022-06-24]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-06-24]
OPR Extension: (Opera Crypto Wallet) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-06-24]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY PRODUCTION LLC -> ABBYY InfoPoisk LLC)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2728304 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1216760 2017-12-22] (Acronis International GmbH -> )
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6096688 2021-12-09] (Acronis International GmbH -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11988384 2022-06-19] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46872 2022-06-22] (Dropbox, Inc -> Dropbox, Inc.)
R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
R2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)
R2 EZCastService; C:\Program Files (x86)\EZCast\EZCastService.exe [286016 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.111.0522.0002\FileSyncHelper.exe [3373960 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
R2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [54144 2018-09-18] (AnchorFree Inc -> AnchorFree Inc.)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [445432 2021-04-19] (Canon Inc. -> )
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2017-12-22] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1753528 2021-12-02] (Acronis International GmbH -> )
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.111.0522.0002\OneDriveUpdaterService.exe [3812760 2022-06-16] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254368 2022-06-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7157960 2021-12-02] (Acronis International GmbH -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)
R3 AFTrafMgr1.4; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_4_64.sys [56840 2018-08-24] (AnchorFree Inc -> AnchorFree Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 DRHARD64; C:\WINDOWS\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Peter A. Gebhard Softwareentwicklung -> Licensed for Gebhard Software)
R2 DRHMSR64; C:\WINDOWS\system32\drivers\DRHMSR64.sys [13760 2013-07-21] (Peter A. Gebhard Softwareentwicklung -> )
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [33592 2015-05-24] (DEV47 APPS -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [230712 2015-05-24] (DEV47 APPS -> Windows (R) Win 7 DDK provider)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [569392 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182832 2018-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R3 MpKsl86efc9c8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C8B49610-CB3D-4C20-BE4B-0AA5F20D4C0D}\MpKslDrv.sys [141568 2022-06-24] (Microsoft Windows -> Microsoft Corporation)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [162360 2018-05-20] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 usbser; C:\Windows\SysWOW64\drivers\usbser.sys [26112 2013-07-04] (Microsoft Corporation) [Datei ist nicht signiert]
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [60344 2022-01-12] (VMware, Inc. -> VMware, Inc.)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [67072 2022-02-18] (VMware, Inc. -> VMware, Inc.)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2021-08-16] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [38320 2022-02-09] (Microsoft Windows Hardware Compatibility Publisher -> VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2018-03-03] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-06-24 17:27 - 2022-06-24 17:30 - 000048315 _____ C:\Users\wrt\Downloads\FRST.txt
2022-06-24 17:24 - 2022-06-24 17:29 - 000000000 ____D C:\FRST
2022-06-24 16:47 - 2022-06-24 16:47 - 000064320 _____ C:\Users\wrt\Downloads\Download.htm
2022-06-24 16:09 - 2022-06-24 16:09 - 002369024 _____ (Farbar) C:\Users\wrt\Downloads\FRST64.exe
2022-06-24 02:04 - 2022-06-24 02:04 - 000056366 _____ C:\Users\wrt\Downloads\ernaehrungstagebuch102.pdf
2022-06-23 21:06 - 2022-06-23 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMedia Recode 64bit
2022-06-23 13:50 - 2022-06-23 13:50 - 019590136 _____ (XMedia Recode 64bit ) C:\Users\wrt\Downloads\XMediaRecode3558_x64_setup.exe
2022-06-23 03:16 - 2022-06-23 03:16 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2022-06-22 18:07 - 2022-06-22 18:07 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2022-06-22 18:07 - 2022-06-22 18:07 - 000046872 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2022-06-22 10:05 - 2022-06-22 10:05 - 000000739 _____ C:\Users\wrt\AppData\Local\recently-used.xbel
2022-06-21 17:45 - 2022-06-22 13:41 - 000056201 _____ C:\Users\wrt\Desktop\dotts auf pc.ods
2022-06-21 17:45 - 2022-06-22 13:41 - 000000085 ____H C:\Users\wrt\Desktop\.~lock.dotts auf pc.ods#
2022-06-21 08:13 - 2022-06-21 08:13 - 000234088 _____ C:\Users\wrt\Downloads\kasikto ausz.pdf
2022-06-21 08:10 - 2022-06-21 08:10 - 000227864 _____ C:\Users\wrt\Downloads\0c423fcb-fe2c-489d-8328-023f7522824f.pdf
2022-06-20 20:38 - 2022-06-20 20:47 - 000000000 ____D C:\Users\wrt\Downloads\bilder für c&c
2022-06-20 11:25 - 2022-06-20 11:25 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Pdfsvg
2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\wrt\Documents\eBook Converter
2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\Public\Documents\eBook Converter
2022-06-20 07:54 - 2022-06-24 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBook Converter
2022-06-16 19:33 - 2022-06-16 19:33 - 001349689 _____ C:\Users\wrt\Downloads\Gamma40Manual.pdf
2022-06-15 23:40 - 2022-06-15 23:40 - 021111172 _____ (The OSCAR Team ) C:\Users\wrt\Downloads\OSCAR-1.4.0-Win64.exe
2022-06-15 22:07 - 2022-06-15 22:07 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-06-15 22:07 - 2022-06-15 22:07 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-15 22:05 - 2022-06-15 22:05 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-15 22:05 - 2022-06-15 22:05 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-15 21:29 - 2022-06-15 21:29 - 000000000 ___HD C:\$WinREAgent
2022-06-13 09:04 - 2022-06-13 09:04 - 000336751 _____ C:\Users\wrt\Downloads\Bangkok Bank TC_ONLINE20220523EN_001.pdf
2022-06-09 09:00 - 2022-06-09 09:00 - 000000000 ____D C:\Users\wrt\Desktop\temp
2022-06-07 08:46 - 2022-06-07 11:27 - 000000000 ____D C:\Users\wrt\Downloads\mind monitor files 2022
2022-06-05 23:01 - 2022-06-05 23:01 - 019290784 _____ C:\Users\wrt\Downloads\Biologie Neurophysiologie - Drews (Unknown) .epub
2022-06-05 23:00 - 2022-06-05 23:00 - 055033346 _____ C:\Users\wrt\Downloads\Mind to Matter The Astonishing Science of How Your Brain Creates Material Reality (Dawson Church Joe Dispenza) .epub
2022-06-05 23:00 - 2022-06-05 23:00 - 000314118 _____ C:\Users\wrt\Downloads\00029157.2019.1677412.pdf
2022-06-05 22:44 - 2022-06-05 22:44 - 001502667 _____ C:\Users\wrt\Downloads\j.1440-1819.1966.tb02646.x.pdf
2022-06-05 22:41 - 2022-06-05 22:41 - 000106422 _____ C:\Users\wrt\Downloads\acm.2008.0416.pdf
2022-06-05 22:18 - 2022-06-05 22:18 - 003033015 _____ C:\Users\wrt\Downloads\S0192415X03001272.pdf
2022-06-05 22:15 - 2022-06-05 22:15 - 000224034 _____ C:\Users\wrt\Downloads\0013-4694(93)91066-a.pdf
2022-06-05 11:33 - 2022-06-05 11:45 - 000000000 ____D C:\Users\wrt\AppData\Roaming\.Ultimate
2022-06-05 11:33 - 2022-06-05 11:44 - 000000000 ____D C:\Users\wrt\AppData\Roaming\.ecore_tmp
2022-06-05 11:33 - 2022-06-05 11:33 - 000000000 ____D C:\Users\wrt\Ultimate
2022-06-05 11:33 - 2022-06-05 11:33 - 000000000 ____D C:\Users\wrt\Favorite
2022-06-05 11:33 - 2022-06-05 11:33 - 000000000 ____D C:\Users\wrt\EpuborLog
2022-06-05 11:33 - 2022-06-05 11:33 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Ultimate
2022-06-05 11:33 - 2022-06-05 11:33 - 000000000 ____D C:\Users\wrt\.Epubor_Keys
2022-06-05 11:31 - 2022-06-05 11:31 - 000000893 _____ C:\Users\Public\Desktop\Epubor Ultimate.lnk
2022-06-05 11:31 - 2022-06-05 11:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epubor
2022-06-04 21:55 - 2022-06-04 21:55 - 000426542 _____ C:\Users\wrt\Downloads\It Is Done The Final Step To Instant Manifestations (Richard Dotts) .pdf
2022-06-04 21:54 - 2022-06-04 21:54 - 000145967 _____ C:\Users\wrt\Downloads\It-Is-Done-The-Final-Step-To-Ins.epub
2022-06-01 21:35 - 2022-06-01 21:35 - 006212880 _____ (Ghisler Software GmbH) C:\Users\wrt\Downloads\tc1050x64_b8.exe
2022-06-01 14:13 - 2022-06-01 14:20 - 000000000 ____D C:\Users\wrt\Downloads\7 Hz Zen NP Variationen
2022-06-01 06:42 - 2022-06-01 06:42 - 000002261 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth Pro.lnk
2022-06-01 06:42 - 2022-06-01 06:42 - 000002249 _____ C:\Users\Public\Desktop\Google Earth Pro.lnk
2022-06-01 06:42 - 2022-06-01 06:42 - 000000000 ____D C:\Program Files\Google
2022-05-30 11:18 - 2022-05-30 11:18 - 000001542 _____ C:\Users\wrt\Desktop\OSCAR-1.3.1-Win64 - Verknüpfung.lnk
2022-05-30 11:18 - 2022-05-30 11:18 - 000001184 _____ C:\Users\wrt\Desktop\OSCAR - Verknüpfung.lnk
2022-05-30 09:59 - 2022-06-05 11:15 - 000000000 ____D C:\Users\wrt\Downloads\Richard Dotts 220530
2022-05-30 08:02 - 2014-06-21 16:06 - 001493164 _____ C:\Users\wrt\Desktop\Zen12 User Manual.pdf
2022-05-29 20:21 - 2022-05-29 20:21 - 000121207 _____ C:\Users\wrt\Downloads\Thailand June 2022 - December 2022.pdf
2022-05-29 20:15 - 2022-05-29 20:15 - 000090439 _____ C:\Users\wrt\Downloads\United States May 2022.pdf
2022-05-27 10:03 - 2022-05-27 10:03 - 118132736 _____ C:\Users\wrt\Downloads\calibre-5.43.0.msi
2022-05-26 10:18 - 2022-05-26 10:18 - 000403034 _____ C:\Users\wrt\Downloads\KR 3 ***** DE.pdf
2022-05-26 08:11 - 2022-05-26 08:11 - 000047890 _____ C:\Users\wrt\Downloads\beipackzettel_Colestyramin-1-A-Pharma-4-g-Pulver-zur-Herstellung-einer-Suspension-zum-Einnehmen.pdf
2022-05-26 07:36 - 2022-05-26 07:36 - 001261355 _____ C:\Users\wrt\Downloads\DigitalEuphoriaManual.pdf
2022-05-25 21:35 - 2022-05-25 21:40 - 000019284 ____H C:\Users\wrt\Desktop\~WRL0153.tmp

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-06-24 17:34 - 2018-03-04 21:30 - 000000000 ____D C:\ProgramData\TEMP
2022-06-24 17:24 - 2021-03-09 16:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-06-24 17:24 - 2019-12-07 16:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-06-24 16:53 - 2020-03-09 18:53 - 000000000 ____D C:\Users\wrt\AppData\Local\Free Download Manager
2022-06-24 16:41 - 2018-03-03 19:05 - 000000000 ____D C:\Program Files (x86)\Google
2022-06-24 13:10 - 2018-03-06 08:08 - 000002348 _____ C:\Users\wrt\Documents\Default.rdp
2022-06-24 11:15 - 2020-10-25 22:31 - 000000000 ____D C:\Program Files\CherryTree
2022-06-24 11:12 - 2018-03-05 13:53 - 000000000 ____D C:\Programme wr
2022-06-24 09:25 - 2018-03-04 22:30 - 000001515 _____ C:\Users\wrt\AppData\Roaming\SAS7_000.DAT
2022-06-24 07:48 - 2020-09-05 15:08 - 000000000 ____D C:\Program Files\CCleaner
2022-06-24 07:10 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Everything
2022-06-23 23:17 - 2021-07-18 21:39 - 000000000 ____D C:\Users\wrt\Documents\My Kindle Content
2022-06-23 21:07 - 2020-05-18 21:03 - 000000000 ____D C:\Users\wrt\AppData\Roaming\XMedia Recode
2022-06-23 21:06 - 2020-05-17 23:03 - 000000000 ____D C:\Program Files\XMedia Recode 64bit
2022-06-23 19:15 - 2019-12-07 16:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-06-23 19:15 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-06-23 14:14 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Roaming\VMware
2022-06-23 13:55 - 2018-03-04 19:17 - 000000000 ____D C:\Users\wrt\AppData\Roaming\audacity
2022-06-23 12:16 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\AppData\Roaming\calibre
2022-06-23 10:19 - 2018-03-04 19:26 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\Mozilla
2022-06-23 08:01 - 2021-08-12 15:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2022-06-23 06:20 - 2018-03-04 07:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-23 03:18 - 2020-01-29 19:44 - 000000000 ____D C:\Users\wrt\AppData\Local\Dropbox
2022-06-23 03:17 - 2020-01-29 19:44 - 000000000 ____D C:\Program Files (x86)\Dropbox
2022-06-22 18:27 - 2018-03-04 21:00 - 000000000 ____D C:\Users\wrt\Documents\FinePrint files
2022-06-22 16:46 - 2018-06-20 15:14 - 000000000 ____D C:\Users\wrt\AppData\Roaming\vlc
2022-06-22 13:47 - 2018-03-05 20:24 - 000000000 ____D C:\ProgramData\VMware
2022-06-22 13:44 - 2022-05-23 21:03 - 000002325 _____ C:\Users\wrt\Desktop\Kindle.lnk
2022-06-22 13:18 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\Calibre-Bibliothek
2022-06-22 10:01 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\AppData\Local\cherrytree
2022-06-22 09:46 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\.dbus-keyrings
2022-06-21 07:09 - 2020-09-15 14:04 - 000000000 ____D C:\Users\wrt\Documents\OSCAR_Data
2022-06-20 20:38 - 2018-03-03 18:27 - 000000000 ____D C:\Users\wrt\AppData\Local\GHISLER
2022-06-20 18:44 - 2018-05-20 14:24 - 000000000 ____D C:\Users\wrt\AppData\Local\D3DSCache
2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSCAR
2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\Program Files\OSCAR
2022-06-19 18:56 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Local\VMware
2022-06-19 18:50 - 2018-03-05 21:00 - 000000000 ____D C:\Temp
2022-06-19 08:02 - 2020-04-14 16:19 - 000000000 ____D C:\Program Files\Microsoft Office
2022-06-18 20:54 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-06-18 16:17 - 2020-06-10 08:25 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-06-18 13:14 - 2021-03-09 17:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-06-18 13:13 - 2021-03-09 16:56 - 000008192 ___SH C:\DumpStack.log.tmp
2022-06-18 13:12 - 2019-12-07 16:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-06-18 13:12 - 2018-03-04 01:11 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2022-06-18 13:08 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Local\Everything
2022-06-16 16:45 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-06-16 12:11 - 2021-04-26 09:25 - 000003662 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d714cc92528094
2022-06-16 12:11 - 2021-03-09 17:23 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-16 12:10 - 2022-04-30 11:56 - 000024193 _____ C:\Users\wrt\Desktop\formulare, selbst, forbes, notes etc.odt
2022-06-16 11:39 - 2021-03-09 17:23 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2022-06-16 11:36 - 2021-08-23 10:06 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-06-16 09:47 - 2021-12-13 00:51 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001
2022-06-16 09:47 - 2021-12-13 00:51 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500
2022-06-16 09:47 - 2021-03-09 17:23 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-06-16 09:47 - 2020-05-21 16:41 - 000002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-06-16 06:42 - 2019-12-07 16:13 - 000000000 ____D C:\WINDOWS\INF
2022-06-16 06:36 - 2021-03-09 17:12 - 000005996 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-06-16 06:36 - 2019-12-07 21:51 - 001790010 _____ C:\WINDOWS\system32\perfh007.dat
2022-06-16 06:36 - 2019-12-07 21:51 - 000453316 _____ C:\WINDOWS\system32\perfc007.dat
2022-06-16 06:29 - 2021-03-09 16:56 - 000625080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-16 06:26 - 2019-12-07 21:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-16 06:26 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-15 22:04 - 2021-03-09 17:00 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-15 21:23 - 2018-03-03 19:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-06-15 21:18 - 2018-03-03 19:15 - 145918784 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-06-15 19:20 - 2022-03-16 19:08 - 000000000 ____D C:\Users\wrt\Downloads\books märz 22 radiologie
2022-06-15 19:20 - 2022-02-20 10:34 - 000000000 ____D C:\Users\wrt\Downloads\z lib ebooks
2022-06-15 19:20 - 2022-02-13 19:57 - 000000000 ____D C:\Users\wrt\Downloads\books feb 2022
2022-06-15 19:20 - 2022-01-26 06:20 - 000000000 ____D C:\Users\wrt\Downloads\Ortho
2022-06-15 19:20 - 2021-11-26 22:07 - 000000000 ____D C:\Users\wrt\Downloads\books nov26 21
2022-06-14 08:41 - 2018-04-29 22:43 - 000000000 ____D C:\Users\wrt\AppData\Local\ElevatedDiagnostics
2022-06-13 19:23 - 2021-03-09 11:44 - 000000000 ____D C:\Users\wrt
2022-06-13 19:22 - 2020-03-17 09:23 - 000000000 ____D C:\ProgramData\CanonIJPLM
2022-06-11 09:59 - 2022-04-03 20:11 - 000000000 ____D C:\Users\wrt\Desktop\LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLösch
2022-06-10 19:38 - 2021-03-22 20:37 - 000000000 ____D C:\Users\wrt\AppData\Local\AMD_Common
2022-06-10 06:47 - 2020-04-01 17:06 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-06-09 15:30 - 2021-09-15 14:16 - 000004380 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1627569296
2022-06-07 23:30 - 2018-09-04 16:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2022-06-07 23:30 - 2018-09-04 16:59 - 000000000 ____D C:\Program Files (x86)\Java
2022-06-07 23:29 - 2018-03-03 18:32 - 000000000 ____D C:\winkmd
2022-06-07 23:28 - 2018-09-04 16:59 - 000166680 _____ (Oracle Corporation) C:\WINDOWS\SysWOW64\WindowsAccessBridge-32.dll
2022-06-07 20:16 - 2020-10-08 19:25 - 000001665 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Med7 Arztpraxisprogramm.lnk
2022-06-07 20:16 - 2020-10-08 19:25 - 000000000 ____D C:\Med7
2022-06-06 21:09 - 2021-07-29 21:35 - 000004152 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1627569282
2022-06-06 21:09 - 2021-07-29 21:34 - 000001442 _____ C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2022-06-02 06:06 - 2018-03-03 17:54 - 000000000 ____D C:\Users\wrt\AppData\Roaming\TrueCrypt
2022-06-02 06:04 - 2018-09-04 17:01 - 000000000 ____D C:\Users\wrt\AppData\Roaming\DocFetcher
2022-06-01 20:54 - 2022-04-28 19:26 - 000000000 ____D C:\Users\wrt\Downloads\books wav transfer apr 28
2022-05-30 10:07 - 2020-02-28 16:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre - E-book Management
2022-05-30 10:07 - 2020-02-28 16:30 - 000000000 ____D C:\Program Files (x86)\Calibre2

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-03-06 10:08 - 2018-03-06 10:08 - 000000000 _____ () C:\Program Files (x86)\mstsc
2018-03-04 22:30 - 2022-06-24 09:25 - 000001515 _____ () C:\Users\wrt\AppData\Roaming\SAS7_000.DAT
2018-05-20 20:36 - 2022-02-20 18:34 - 000011776 _____ () C:\Users\wrt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-06-22 10:05 - 2022-06-22 10:05 - 000000739 _____ () C:\Users\wrt\AppData\Local\recently-used.xbel

==================== FLock ==============================

2018-03-03 19:18 C:\WINDOWS\UpdateAssistant

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================