Hotspot shield malware und chrome.exe

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 11-07-2022
durchgeführt von wrt (Administrator) auf RYZEN (Acer Aspire GX-281) (14-07-2022 16:18:32)
Gestartet von C:\Users\wrt\Downloads
Geladene Profile: wrt
Plattform: Microsoft Windows 10 Pro Version 21H2 19044.1766 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files\Everything\Everything.exe ->) (ADLICE -> ) C:\Users\wrt\Downloads\RogueKiller_portable64.exe
(C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe ->) (FreeDownloadManager.org) [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(cmd.exe ->) () [Datei ist nicht signiert] C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\browsernativehost.exe
(cmd.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\dgnria_nmhost.exe
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\winkmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <32>
(explorer.exe ->) (voidtools -> voidtools) C:\Program Files\Everything\Everything.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\notepad.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Canon Inc. -> ) C:\Program Files (x86)\Canon\IJPLM\ijplmsvc.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(services.exe ->) (Nuance Communications, Inc. -> Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBar.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.722.5052.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16706080 2018-03-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CanonMyPrinter] => C:\Program Files\Canon\MyPrinter\BJMyPrt.exe [2782096 2010-07-26] (Canon Inc. -> CANON INC.)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [585296 2017-12-22] (Acronis International GmbH -> )
HKLM-x32\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\\isuspm.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKLM-x32\...\Run: [DNS7reminder] => C:\Program Files (x86)\Nuance\NaturallySpeaking13\Ereg\Ereg.exe [325960 2014-05-30] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4871640 2021-12-02] (Acronis International GmbH -> )
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY PRODUCTION LLC -> ABBYY Production LLC)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3237808 2018-01-09] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [DocFetcher-Daemon] => C:\Program Files (x86)\DocFetcher\docfetcher-daemon-windows.exe [563621 2021-05-26] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX\CNMNSST.exe [452016 2010-09-09] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [10587912 2022-07-04] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [CanonQuickMenu] => C:\Program Files (x86)\Canon\Quick Menu\CNQMMAIN.EXE [1313408 2017-07-05] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [AllShareAgent] => C:\Program Files (x86)\Samsung\AllShare\AllShareAgent.exe [285072 2012-03-01] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
HKLM-x32\...\Run: [IJNetworkScannerSelectorEX2] => C:\Program Files (x86)\Canon\IJ Network Scanner Selector EX2\CNMNSST2.exe [279240 2016-12-09] (Canon Inc. -> CANON INC.)
HKLM-x32\...\Run: [Everything] => C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\TibMounterMonitor.exe [425864 2017-12-22] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [117528 2022-02-18] (VMware, Inc. -> VMware, Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [708840 2022-04-26] (Oracle America, Inc. -> Oracle Corporation)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [ISUSPM] => C:\ProgramData\FLEXnet\Connect\11\ISUSPM.exe [2075480 2013-06-24] (Flexera Software LLC -> Flexera Software LLC.)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Free Download Manager] => C:\Program Files\FreeDownloadManager.ORG\Free Download Manager\fdm.exe [10203648 2019-01-30] (FreeDownloadManager.org) [Datei ist nicht signiert]
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31162288 2021-04-29] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [116056952 2022-02-23] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [MicrosoftEdgeAutoLaunch_46CDB3F20D5A4745D54DCEE527247EDD] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3601824 2022-07-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-779246859-3990032973-3551585165-1001\...\Run: [Opera Browser Assistant] => C:\Users\wrt\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4110832 2022-07-06] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2632088 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-779246859-3990032973-3551585165-500\...\Run: [886685649D2A507C991FC995626687C37E813F73._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8 [3601824 2022-07-06] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon G3010 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDEI.DLL [482816 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MX420 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAM.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX420 series: C:\WINDOWS\system32\CNCALAM.DLL [302080 2010-10-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor G3010 series: C:\WINDOWS\system32\CNMLMEI.DLL [1303040 2017-08-22] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MX420 series: C:\WINDOWS\system32\CNMLMAM.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJNP Port: C:\WINDOWS\system32\CNMN6PPM.DLL [359936 2012-06-14] (CANON INC.) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\FPR10:: C:\WINDOWS\system32\fpmon10-x64.dll [226760 2020-09-01] (FinePrint Software, LLC -> FinePrint Software, LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\103.0.5060.114\Installer\chrmstp.exe [2022-07-05] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\MaxLauncher.lnk [2020-01-08]
ShortcutTarget: MaxLauncher.lnk -> C:\Program Files\MaxLauncher\MaxLauncher.exe (Roberto Concepcion) [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-05-15]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Data [2021-03-09]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DocFetcher Pro Demo Daemon.lnk [2022-01-03]
ShortcutTarget: DocFetcher Pro Demo Daemon.lnk -> C:\Program Files\DocFetcher Pro Demo\docfetcher-pro-daemon-d.exe () [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dragon NaturallySpeaking.lnk [2021-07-25]
ShortcutTarget: Dragon NaturallySpeaking.lnk -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\natspeak.exe (Nuance Communications, Inc. -> Nuance Communications, Inc.)
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\IntentionActivator.exe - Verknüpfung.lnk [2018-10-12]
ShortcutTarget: IntentionActivator.exe - Verknüpfung.lnk -> C:\Program Files (x86)\Intention activator\IntentionActivator.exe () [Datei ist nicht signiert]
Startup: C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MadAppLauncher.lnk [2018-03-06]
ShortcutTarget: MadAppLauncher.lnk -> C:\Programme wr\MadAppLauncher\MadAppLauncher.exe () [Datei ist nicht signiert]

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {001E3010-73A9-417D-A80E-F9AF7C7FDAF2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {03C846F1-A7FF-42B2-8AD4-0E7F3A828350} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378880 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {044F3AA5-8042-4853-849E-0F81E1F6C836} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40880 2021-04-29] (Garmin International, Inc. -> )
Task: {0B5CD838-6196-497F-A350-15198F19090D} - System32\Tasks\AMDInstallLauncher => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {0BBF98D4-26A7-49BD-8376-A34D997F2AB7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {1505733E-46E8-478B-B9D1-BCCEC589E27A} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantWakeupRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /WakeupRun (Zugriff verweigert) <==== ACHTUNG
Task: {15FFF743-AB60-4A18-8C22-FE1D150CBC6C} - System32\Tasks\Opera scheduled assistant Autoupdate 1627569296 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2518008 2022-07-05] (Opera Norway AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\wrt\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {2D7AE1B1-188E-462C-8EF4-7A58B98DDC72} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistantCalendarRun => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} /CalendarRun (Zugriff verweigert) <==== ACHTUNG
Task: {3B85578C-5601-4C8F-A171-8A0954F8B0C9} - System32\Tasks\Microsoft\Windows Live\SOXE\Extractor Definitions Update Task => {3519154C-227E-47F3-9CC9-12C3F05817F1}
Task: {3F20E8F7-0FD2-49EC-AAC3-5A7F89E6DC7E} - System32\Tasks\Nero\Nero Info => C:\Program Files (x86)\Common Files\Nero\Nero Info\NeroInfo.exe [3867928 2020-11-15] (Nero AG -> Nero AG)
Task: {419869E2-0CFF-40DA-BC7D-F079A6B7444C} - System32\Tasks\EZCastServiceSchedule => C:\Program Files (x86)\EZCast\EZCast.exe [6048064 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )
Task: {45983CCD-82A3-498E-83F9-F4E2E87F29FA} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)
Task: {48A93B24-DC7E-4336-B161-DE203CD5C92F} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\UpdateAssistant => C:\WINDOWS\UpdateAssistant\UpdateAssistant.exe /ClientID Win10Upgrade:VNL:NHV12:{} (Zugriff verweigert) <==== ACHTUNG
Task: {4E48C07D-7DB7-49AE-8E39-4E90DCEFBDAE} - System32\Tasks\AMDLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1709344 2021-03-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {5A607ACA-A8E9-4167-AECF-4002C3FB0650} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [566592 2008-07-30] (Apple Inc. -> Apple Inc.)
Task: {68BDCA2C-CED7-4006-A158-6DF0C85EE5F2} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-03-03] (Google Inc -> Google Inc.)
Task: {7159ADE2-418F-4A6D-8241-C5043AC33E3F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {873491E9-B7CD-45F9-96D6-08C36CA12967} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [68176 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {8E3C2A42-887A-47DE-9AC1-7EAB7E5AB9A5} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {92668079-69A8-42CB-A2EA-FB8864ABF954} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-17] (Adobe Inc. -> Adobe Inc.)
Task: {9DDBC009-01A8-4318-A6D6-189363669F13} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [145304 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {A079ACB7-7695-4D4B-BE58-3EC2B91DBFF5} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [60496 2021-03-10] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {A460D746-9FC0-480E-B15E-F682DC49BEE7} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1000928 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D1B64B0F-2D8B-406F-891F-56F6670B325D} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [64416 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {D4A2E6A3-E5BF-46C9-95A4-807FB79BAF60} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4214144 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {D5A2A4E8-2F20-4616-BBF6-C08798907DBA} - System32\Tasks\Opera scheduled Autoupdate 1627569282 => C:\Users\wrt\AppData\Local\Programs\Opera\launcher.exe [2518008 2022-07-05] (Opera Norway AS -> Opera Software)
Task: {E31D94B8-5EE5-4C3F-B6AD-38D8332D8DCE} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-10-01] (Tweaking LLC -> Tweaking.com)
Task: {F7259928-9C54-4484-8AB8-D2BDAF92A119} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23378880 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {FDB7BF1B-9611-4EDC-A21E-C92A9577C71D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{2533f77b-1d4f-435f-8466-79d6e3c81c4b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{275bfb08-bb13-4461-8f88-8a01ff26ae94}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{38e77d75-a546-469b-aadf-57a377551e87}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5fdf102f-d92b-4e9e-b85c-8ab59ac3823c}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{74f45b62-e5e7-4339-82ef-bd29351a171d}: [DhcpNameServer] 8.8.8.8
Tcpip\..\Interfaces\{89062fd4-48a3-410d-8b24-b45bd6b0332d}: [DhcpNameServer] 192.168.0.1 0.0.0.0
Tcpip\..\Interfaces\{94d30481-e060-45fd-bd5f-d15ad7158a23}: [DhcpNameServer] 192.168.0.1 0.0.0.0
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <==== ACHTUNG

Edge: 
=======
DownloadDir: C:\Users\wrt\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\wrt\AppData\Local\Microsoft\Edge\User Data\Default [2022-07-14]
Edge DownloadDir: Default -> C:\Users\wrt\Downloads
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\wrt\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-07-07]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

FireFox:
========
FF Plugin: @garmin.com/GpsControl -> C:\Program Files\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: nuance.com/DgnRia2_x86_64 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\x64\npDgnRia2_x64.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files (x86)\Canon\My Image Garden\AddOn\CIG\npmigfpi.dll [2019-07-02] (CANON INC.) [Datei ist nicht signiert]
FF Plugin-x32: @garmin.com/GpsControl -> C:\Program Files (x86)\Garmin GPS Plugin\npGarmin.dll [2014-03-31] (Garmin International, Inc. -> GARMIN Corp.)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll [2015-10-13] (Google Inc -> Google, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\dtplugin\npDeployJava1.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.333.2 -> C:\Program Files (x86)\Java\jre1.8.0_333\bin\plugin2\npjp2.dll [2022-06-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2022-06-05] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: nuance.com/DgnRia2 -> C:\Program Files (x86)\Nuance\NaturallySpeaking13\Program\npDgnRia2.dll [2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default [2022-07-14]
CHR Notifications: Default -> hxxps://calendar.google.com
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Session Restore: Default -> ist aktiviert.
CHR Extension: (Google Übersetzer) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2022-03-12]
CHR Extension: (Free Download Manager) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2021-10-21]
CHR Extension: (DuckDuckGo) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2022-07-01]
CHR Extension: (Tab Manager Plus for Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\cnkdjjdmfiffagllbiiilooaoofcoeff [2020-06-22]
CHR Extension: (Dragon Weberweiterung) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddaloccgjfibfpkalenodgehlhkgoahe [2020-07-17]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-07-01]
CHR Extension: (Voice Recognition) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjmfindklfaonkodbnidahohdfbdhkn [2020-01-08]
CHR Extension: (Nehmen Sie vollständige Webseiten auf - FireShot) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2022-06-16]
CHR Extension: (SingleFile) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpiodijhokgodhhofbcjdecpffjipkle [2022-07-14]
CHR Extension: (Hotspot Shield Free VPN Proxy - Unlimited VPN) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlbejmccbhkncgokjcmghpfloaajcffj [2022-07-12]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-30]
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1 [2022-07-05]
CHR Extension: (Präsentationen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-08-22]
CHR Extension: (Docs) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2018-08-22]
CHR Extension: (Google Drive) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-10-29]
CHR Extension: (YouTube) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-08-22]
CHR Extension: (Adobe Acrobat) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2020-10-29]
CHR Extension: (ZenMate Free VPN – Bestes VPN für Chrome) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdcgdnkidjaadafnichfpabhfomcebme [2020-10-29]
CHR Extension: (Tabellen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-08-22]
CHR Extension: (Google Docs Offline) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-10-29]
CHR Extension: (Application Launcher for Drive (by Google)) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2020-10-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-10-29]
CHR Extension: (Google Mail) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-10-29]
CHR Extension: (Chrome Media Router) - C:\Users\wrt\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-10-29]
CHR Profile: C:\Users\wrt\AppData\Local\Google\Chrome\User Data\System Profile [2022-07-05]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-779246859-3990032973-3551585165-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Opera: 
=======
OPR Profile: C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable [2022-07-14]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2022-06-24]
OPR Extension: (Opera Crypto Wallet) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2022-06-24]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\wrt\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2021-10-10]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY PRODUCTION LLC -> ABBYY InfoPoisk LLC)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [2728304 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1216760 2017-12-22] (Acronis International GmbH -> )
S2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-17] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6096688 2021-12-09] (Acronis International GmbH -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12111264 2022-07-09] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46864 2022-07-04] (Dropbox, Inc -> Dropbox, Inc.)
R2 DragonLoggerService; C:\Program Files (x86)\Common Files\Nuance\loggerservice.exe [151616 2014-11-04] (Nuance Communications, Inc. -> Nuance Communications, Inc.)
S2 Everything; C:\Program Files (x86)\Everything\Everything.exe [1774160 2021-01-25] (voidtools -> voidtools)
S2 EZCastService; C:\Program Files (x86)\EZCast\EZCastService.exe [286016 2019-10-08] (Actions Microelectronics Co.,Ltd. -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\22.131.0619.0001\FileSyncHelper.exe [3381632 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
R2 IJPLMSVC; C:\Program Files (x86)\Canon\IJPLM\IJPLMSVC.EXE [445432 2021-04-19] (Canon Inc. -> )
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8677120 2022-07-01] (Malwarebytes Inc. -> Malwarebytes)
S2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2021-12-02] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2017-12-22] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1753528 2021-12-02] (Acronis International GmbH -> )
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\22.131.0619.0001\OneDriveUpdaterService.exe [3822496 2022-07-14] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6254368 2022-06-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7157960 2021-12-02] (Acronis International GmbH -> )
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 aftap0901; C:\WINDOWS\System32\drivers\aftap0901.sys [48624 2018-03-06] (AnchorFree Inc -> The OpenVPN Project)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [62056 2020-07-27] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [160376 2021-10-08] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 DRHARD64; C:\WINDOWS\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Peter A. Gebhard Softwareentwicklung -> Licensed for Gebhard Software)
R2 DRHMSR64; C:\WINDOWS\system32\drivers\DRHMSR64.sys [13760 2013-07-21] (Peter A. Gebhard Softwareentwicklung -> )
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [33592 2015-05-24] (DEV47 APPS -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\drivers\droidcamvideo.sys [230712 2015-05-24] (DEV47 APPS -> Windows (R) Win 7 DDK provider)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [569392 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [379664 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [182832 2018-04-16] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-07-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [192960 2022-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [74704 2022-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181992 2022-07-14] (Malwarebytes Inc. -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2019-07-16] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R0 sptd2; C:\WINDOWS\System32\Drivers\sptd2.sys [162360 2018-05-20] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
R0 tib; C:\WINDOWS\System32\DRIVERS\tib.sys [1310552 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [213336 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 tnd; C:\WINDOWS\system32\DRIVERS\tnd.sys [690520 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2022-07-14] (ADLICE (Julien ASCOET) -> )
S3 usbser; C:\Windows\SysWOW64\drivers\usbser.sys [26112 2013-07-04] (Microsoft Corporation) [Datei ist nicht signiert]
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [331976 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [60344 2022-01-12] (VMware, Inc. -> VMware, Inc.)
R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [67072 2022-02-18] (VMware, Inc. -> VMware, Inc.)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [243472 2021-12-09] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [105912 2021-08-16] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [38320 2022-02-09] (Microsoft Windows Hardware Compatibility Publisher -> VMware, Inc.)
S3 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [26880 2018-03-03] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
S3 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 hsstap; \SystemRoot\System32\drivers\hsstap.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-07-14 16:18 - 2022-07-14 16:20 - 000038104 _____ C:\Users\wrt\Downloads\FRST.txt
2022-07-14 16:17 - 2022-07-14 16:19 - 000000000 ____D C:\FRST
2022-07-14 16:00 - 2022-07-14 16:06 - 000000000 ____D C:\Users\wrt\Desktop\scan 1407
2022-07-14 15:51 - 2022-07-14 15:51 - 000010890 _____ C:\Users\wrt\Downloads\roguekiller.txt,
2022-07-14 13:46 - 2022-07-14 13:46 - 000074704 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2022-07-14 13:45 - 2022-07-14 13:45 - 000192960 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2022-07-14 13:45 - 2022-07-14 13:45 - 000181992 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2022-07-13 21:33 - 2022-07-13 21:33 - 000001415 _____ C:\Users\wrt\Desktop\malwarebytes ERgebnis.txt
2022-07-13 09:29 - 2022-07-13 21:27 - 000000000 ____D C:\Users\wrt\Desktop\JPG  s
2022-07-11 20:19 - 2022-07-11 20:19 - 002369536 _____ (Farbar) C:\Users\wrt\Downloads\FRST64 (1).exe
2022-07-11 10:06 - 2022-07-11 10:06 - 000000000 _____ C:\Users\wrt\AppData\Roaming\.NANotifyHere
2022-07-09 07:14 - 2022-07-09 07:14 - 001681396 _____ C:\Users\wrt\Downloads\ELB-Discharge_report_(ueber_Browser_oeffnen)_#0106202210480065.pdf
2022-07-09 07:14 - 2022-07-09 07:14 - 001681396 _____ C:\Users\wrt\Downloads\ELB-Discharge_report_(ueber_Browser_oeffnen)_#0106202210480065 (1).pdf
2022-07-08 09:11 - 2022-07-08 09:11 - 000000000 ____D C:\Users\wrt\Documents\Custom Office Templates
2022-07-07 12:14 - 2022-07-07 12:14 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2022-07-07 06:55 - 2022-07-14 12:57 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\IGDump
2022-07-07 06:54 - 2022-07-07 06:54 - 000000008 __RSH C:\ProgramData\ntuser.pol
2022-07-06 08:34 - 2022-07-06 08:34 - 001011049 _____ C:\Users\wrt\Downloads\20210921_EnergyFlowsUserGuide.pdf
2022-07-05 06:50 - 2022-07-05 06:50 - 000138646 _____ C:\Users\wrt\Downloads\Re_ Für die Frage gibt es eine Antwort_ kein Mikrofonsymbol in Word für Android.eml
2022-07-05 06:46 - 2022-07-05 06:46 - 000081256 _____ C:\Users\wrt\Downloads\Screenshot_2022-07-04-14-10-05-44_a27b88515698e5a58d06d430da63049d.jpg.fdmdownload
2022-07-04 21:36 - 2022-07-04 21:36 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2022-07-04 21:36 - 2022-07-04 21:36 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2022-07-04 21:36 - 2022-07-04 21:36 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2022-07-04 21:36 - 2022-07-04 21:36 - 000046864 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2022-07-03 16:54 - 2022-07-03 16:54 - 000000000 ____D C:\Users\wrt\.ms-ad
2022-07-03 15:58 - 2022-07-14 13:55 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2022-07-03 15:53 - 2022-07-03 16:15 - 000000000 ____D C:\ProgramData\RogueKiller
2022-07-03 15:51 - 2022-07-03 15:52 - 034312152 _____ C:\Users\wrt\Downloads\RogueKiller_portable64.exe
2022-07-03 15:42 - 2022-07-03 15:42 - 000001414 _____ C:\Users\wrt\Desktop\mbam 2.txt
2022-07-02 20:30 - 2022-07-02 20:35 - 000000000 ____D C:\AdwCleaner
2022-07-02 10:36 - 2022-07-02 10:34 - 000084250 _____ C:\Users\wrt\Downloads\Rechnung Juni .pdf
2022-07-02 10:36 - 2022-07-02 08:00 - 000070551 _____ C:\Users\wrt\Downloads\Gesprächsprotokoll Juni.pdf
2022-07-02 07:46 - 2022-07-02 07:46 - 000052138 _____ C:\Users\wrt\Downloads\call_history_2022-06.csv
2022-07-01 20:13 - 2022-07-01 20:13 - 000000000 ____D C:\Users\wrt\AppData\Local\mbam
2022-07-01 20:12 - 2022-07-01 20:12 - 000239544 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2022-07-01 20:12 - 2022-07-01 20:12 - 000223176 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2022-07-01 20:12 - 2022-07-01 20:12 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2022-07-01 20:12 - 2022-07-01 20:12 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2022-07-01 20:12 - 2022-07-01 20:11 - 000158640 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2022-07-01 20:12 - 2022-07-01 20:11 - 000021480 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2022-07-01 20:10 - 2022-07-01 20:10 - 000000000 ____D C:\ProgramData\Malwarebytes
2022-07-01 20:10 - 2022-07-01 20:10 - 000000000 ____D C:\Program Files\Malwarebytes
2022-06-28 08:25 - 2022-06-28 08:25 - 000002784 _____ C:\Users\wrt\AppData\Local\recently-used.xbel
2022-06-27 19:17 - 2022-06-27 19:17 - 000002662 _____ C:\Users\wrt\Neues Dokument 2.2022_06_27_19_17_25.0.svg
2022-06-27 18:59 - 2022-06-27 18:59 - 000001649 _____ C:\Users\wrt\Desktop\cherrytree - Verknüpfung.lnk
2022-06-24 17:39 - 2022-06-24 17:58 - 000066785 _____ C:\Users\wrt\Desktop\FRST_24-06-2022 17.39.12.txt
2022-06-24 17:39 - 2022-06-24 17:39 - 000106348 _____ C:\Users\wrt\Desktop\Addition_24-06-2022 17.39.12.txt
2022-06-24 17:27 - 2022-06-24 17:57 - 000066785 _____ C:\Users\wrt\Desktop\FRST.txt
2022-06-24 16:47 - 2022-06-24 16:47 - 000064320 _____ C:\Users\wrt\Downloads\Download.htm
2022-06-24 02:04 - 2022-06-24 02:04 - 000056366 _____ C:\Users\wrt\Downloads\ernaehrungstagebuch102.pdf
2022-06-23 21:06 - 2022-06-23 21:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XMedia Recode 64bit
2022-06-23 13:50 - 2022-06-23 13:50 - 019590136 _____ (XMedia Recode 64bit ) C:\Users\wrt\Downloads\XMediaRecode3558_x64_setup.exe
2022-06-21 17:45 - 2022-06-22 13:41 - 000056201 _____ C:\Users\wrt\Desktop\dotts auf pc.ods
2022-06-21 08:13 - 2022-06-21 08:13 - 000234088 _____ C:\Users\wrt\Downloads\kasikto ausz.pdf
2022-06-21 08:10 - 2022-06-21 08:10 - 000227864 _____ C:\Users\wrt\Downloads\0c423fcb-fe2c-489d-8328-023f7522824f.pdf
2022-06-20 20:38 - 2022-06-29 20:13 - 000000000 ____D C:\Users\wrt\Downloads\bilder für lazada
2022-06-20 11:25 - 2022-06-20 11:25 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Pdfsvg
2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\wrt\Documents\eBook Converter
2022-06-20 11:23 - 2022-06-20 11:23 - 000000000 ____D C:\Users\Public\Documents\eBook Converter
2022-06-20 07:54 - 2022-06-24 11:12 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBook Converter
2022-06-16 19:33 - 2022-06-16 19:33 - 001349689 _____ C:\Users\wrt\Downloads\Gamma40Manual.pdf
2022-06-15 23:40 - 2022-06-15 23:40 - 021111172 _____ (The OSCAR Team ) C:\Users\wrt\Downloads\OSCAR-1.4.0-Win64.exe
2022-06-15 22:07 - 2022-06-15 22:07 - 000479744 _____ C:\WINDOWS\system32\AssignedAccessCsp.dll
2022-06-15 22:07 - 2022-06-15 22:07 - 000040960 _____ C:\WINDOWS\system32\uwfservicingapi.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 001333760 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 000104448 _____ C:\WINDOWS\system32\nettraceex.dll
2022-06-15 22:06 - 2022-06-15 22:06 - 000011787 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2022-06-15 22:05 - 2022-06-15 22:05 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2022-06-15 22:05 - 2022-06-15 22:05 - 000232288 _____ C:\WINDOWS\system32\containerdevicemanagement.dll
2022-06-15 21:29 - 2022-06-15 21:29 - 000000000 ___HD C:\$WinREAgent

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2022-07-14 16:16 - 2020-03-09 18:53 - 000000000 ____D C:\Users\wrt\AppData\Local\Free Download Manager
2022-07-14 16:11 - 2019-12-07 16:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-07-14 16:00 - 2018-03-03 18:27 - 000000000 ____D C:\Users\wrt\AppData\Local\GHISLER
2022-07-14 15:53 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Roaming\Everything
2022-07-14 15:50 - 2021-03-09 16:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-07-14 15:40 - 2018-03-03 19:05 - 000000000 ____D C:\Program Files (x86)\Google
2022-07-14 14:31 - 2019-12-07 16:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-07-14 14:31 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-07-14 13:50 - 2019-08-15 10:56 - 000000000 ____D C:\Users\wrt\AppData\Local\CrashDumps
2022-07-14 13:45 - 2021-08-23 10:06 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2022-07-14 13:45 - 2021-03-09 17:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-07-14 13:45 - 2021-03-09 16:56 - 000008192 ___SH C:\DumpStack.log.tmp
2022-07-14 13:45 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\ServiceState
2022-07-14 13:45 - 2018-03-05 20:24 - 000000000 ____D C:\ProgramData\VMware
2022-07-14 13:30 - 2019-12-07 16:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2022-07-14 13:30 - 2018-03-04 01:11 - 000065536 _____ C:\WINDOWS\system32\spu_storage.bin
2022-07-14 13:29 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\AppData\Roaming\calibre
2022-07-14 13:29 - 2019-02-10 23:11 - 000000000 ____D C:\Users\wrt\AppData\Local\Everything
2022-07-14 13:29 - 2018-03-04 21:30 - 000000000 ____D C:\ProgramData\TEMP
2022-07-14 13:03 - 2018-03-06 08:08 - 000002350 _____ C:\Users\wrt\Documents\Default.rdp
2022-07-14 11:34 - 2021-12-13 00:51 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-500
2022-07-14 11:34 - 2021-03-09 17:23 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2022-07-14 11:33 - 2021-12-13 00:51 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-779246859-3990032973-3551585165-1001
2022-07-14 11:33 - 2020-05-21 16:41 - 000002156 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-07-14 08:19 - 2019-12-07 16:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2022-07-14 08:16 - 2021-03-09 17:12 - 001598370 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-07-14 08:16 - 2019-12-07 21:51 - 000687482 _____ C:\WINDOWS\system32\perfh007.dat
2022-07-14 08:16 - 2019-12-07 21:51 - 000142466 _____ C:\WINDOWS\system32\perfc007.dat
2022-07-14 08:16 - 2019-12-07 16:13 - 000000000 ____D C:\WINDOWS\INF
2022-07-14 08:15 - 2018-03-04 01:11 - 000000000 ____D C:\ProgramData\Package Cache
2022-07-14 08:00 - 2018-03-04 22:30 - 000001515 _____ C:\Users\wrt\AppData\Roaming\SAS7_000.DAT
2022-07-14 06:56 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Roaming\VMware
2022-07-13 20:47 - 2018-03-06 08:46 - 000000000 ____D C:\Users\wrt\AppData\Local\VMware
2022-07-13 17:46 - 2018-05-20 14:24 - 000000000 ____D C:\Users\wrt\AppData\Local\D3DSCache
2022-07-13 13:14 - 2018-03-03 19:15 - 000000000 ____D C:\WINDOWS\system32\MRT
2022-07-13 13:08 - 2018-03-03 19:15 - 146546848 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2022-07-13 11:52 - 2021-03-09 11:44 - 000000000 ____D C:\Users\wrt
2022-07-13 11:35 - 2021-03-09 11:44 - 000000000 ____D C:\Users\Administrator
2022-07-12 18:31 - 2022-04-03 20:11 - 000000000 ____D C:\Users\wrt\Desktop\LLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLLösch
2022-07-12 10:09 - 2021-02-23 10:13 - 000000000 ____D C:\ProgramData\Hotspot Shield
2022-07-12 09:44 - 2018-09-04 17:01 - 000000000 ____D C:\Users\wrt\AppData\Roaming\DocFetcher
2022-07-11 20:56 - 2018-09-04 17:11 - 000054380 _____ C:\Users\wrt\.pdfbox.cache
2022-07-09 14:42 - 2020-04-14 16:19 - 000000000 ____D C:\Program Files\Microsoft Office
2022-07-08 19:39 - 2021-03-22 20:37 - 000000000 ____D C:\Users\wrt\AppData\Local\AMD_Common
2022-07-08 16:17 - 2020-06-10 08:25 - 000002444 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-07-08 11:49 - 2021-09-15 14:16 - 000004380 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1627569296
2022-07-07 21:11 - 2021-07-29 21:35 - 000004152 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1627569282
2022-07-07 21:11 - 2021-07-29 21:34 - 000001442 _____ C:\Users\wrt\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2022-07-07 12:15 - 2020-01-29 19:44 - 000000000 ____D C:\Users\wrt\AppData\Local\Dropbox
2022-07-07 12:15 - 2020-01-29 19:44 - 000000000 ____D C:\Program Files (x86)\Dropbox
2022-07-06 11:56 - 2018-03-04 21:00 - 000000000 ____D C:\Users\wrt\Documents\FinePrint files
2022-07-06 09:30 - 2020-09-15 14:04 - 000000000 ____D C:\Users\wrt\Documents\OSCAR_Data
2022-07-05 07:22 - 2018-03-08 13:32 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\Temp
2022-07-05 07:21 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2022-07-05 07:03 - 2018-03-04 19:00 - 000000000 ____D C:\Users\wrt\AppData\Local\PlaceholderTileLogoFolder
2022-07-05 07:03 - 2015-07-10 18:04 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2022-07-05 07:01 - 2019-12-07 21:53 - 000000000 ____D C:\WINDOWS\OCR
2022-07-05 00:42 - 2020-04-01 17:06 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2022-07-04 22:52 - 2018-03-03 23:30 - 000000000 ____D C:\Users\wrt\AppData\Local\Packages
2022-07-04 15:48 - 2018-06-20 15:14 - 000000000 ____D C:\Users\wrt\AppData\Roaming\vlc
2022-07-03 15:39 - 2018-08-15 20:21 - 000000000 ____D C:\Program Files\Everything
2022-07-03 07:08 - 2018-03-03 23:30 - 000000000 __RHD C:\Users\Public\AccountPictures
2022-07-02 23:00 - 2021-03-09 17:23 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-07-02 20:24 - 2018-09-19 18:58 - 000002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2022-07-02 19:13 - 2020-03-17 09:23 - 000000000 ____D C:\ProgramData\CanonIJPLM
2022-07-02 16:05 - 2021-01-14 14:08 - 000000000 ____D C:\Users\wrt\AppData\Local\TeamViewer
2022-07-02 16:05 - 2018-10-26 06:15 - 000000000 ____D C:\Users\wrt\AppData\Roaming\TeamViewer
2022-07-01 20:12 - 2019-12-07 16:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2022-07-01 06:28 - 2022-04-30 11:56 - 000023516 _____ C:\Users\wrt\Desktop\formulare, selbst, forbes, notes etc.odt
2022-06-29 21:07 - 2022-05-30 09:59 - 000000000 ____D C:\Users\wrt\Downloads\Richard Dotts 220530
2022-06-28 08:15 - 2020-02-28 16:34 - 000000000 ____D C:\Users\wrt\Calibre-Bibliothek
2022-06-27 19:08 - 2018-09-15 15:19 - 000000000 ____D C:\Users\wrt\AppData\Roaming\inkscape
2022-06-26 13:32 - 2021-07-18 21:39 - 000000000 ____D C:\Users\wrt\Documents\My Kindle Content
2022-06-25 22:19 - 2018-07-11 11:29 - 000000000 ____D C:\ProgramData\Packages
2022-06-25 18:12 - 2018-04-29 22:43 - 000000000 ____D C:\Users\wrt\AppData\Local\ElevatedDiagnostics
2022-06-24 11:15 - 2020-10-25 22:31 - 000000000 ____D C:\Program Files\CherryTree
2022-06-24 11:12 - 2018-03-05 13:53 - 000000000 ____D C:\Programme wr
2022-06-23 21:07 - 2020-05-18 21:03 - 000000000 ____D C:\Users\wrt\AppData\Roaming\XMedia Recode
2022-06-23 21:06 - 2020-05-17 23:03 - 000000000 ____D C:\Program Files\XMedia Recode 64bit
2022-06-23 13:55 - 2018-03-04 19:17 - 000000000 ____D C:\Users\wrt\AppData\Roaming\audacity
2022-06-23 10:19 - 2018-03-04 19:26 - 000000000 ____D C:\Users\wrt\AppData\LocalLow\Mozilla
2022-06-23 08:01 - 2021-08-12 15:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2022-06-23 06:20 - 2018-03-04 07:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2022-06-22 13:44 - 2022-05-23 21:03 - 000002325 _____ C:\Users\wrt\Desktop\Kindle.lnk
2022-06-22 10:01 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\AppData\Local\cherrytree
2022-06-22 09:46 - 2020-10-25 22:32 - 000000000 ____D C:\Users\wrt\.dbus-keyrings
2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OSCAR
2022-06-19 20:59 - 2020-09-15 13:34 - 000000000 ____D C:\Program Files\OSCAR
2022-06-19 18:50 - 2018-03-05 21:00 - 000000000 ____D C:\Temp
2022-06-16 12:11 - 2021-04-26 09:25 - 000003662 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1d714cc92528094
2022-06-16 12:11 - 2021-03-09 17:23 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-06-16 06:29 - 2021-03-09 16:56 - 000625080 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-06-16 06:26 - 2019-12-07 21:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\SystemResources
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\et-EE
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\es-MX
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\system32\DDFs
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2022-06-16 06:26 - 2019-12-07 16:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2022-06-16 06:26 - 2019-12-07 16:03 - 000000000 ____D C:\WINDOWS\servicing
2022-06-15 22:04 - 2021-03-09 17:00 - 002877952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2022-06-15 19:20 - 2022-03-16 19:08 - 000000000 ____D C:\Users\wrt\Downloads\books märz 22 radiologie
2022-06-15 19:20 - 2022-02-20 10:34 - 000000000 ____D C:\Users\wrt\Downloads\z lib ebooks
2022-06-15 19:20 - 2022-02-13 19:57 - 000000000 ____D C:\Users\wrt\Downloads\books feb 2022
2022-06-15 19:20 - 2022-01-26 06:20 - 000000000 ____D C:\Users\wrt\Downloads\Ortho
2022-06-15 19:20 - 2021-11-26 22:07 - 000000000 ____D C:\Users\wrt\Downloads\books nov26 21

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-03-06 10:08 - 2018-03-06 10:08 - 000000000 _____ () C:\Program Files (x86)\mstsc
2022-07-11 10:06 - 2022-07-11 10:06 - 000000000 _____ () C:\Users\wrt\AppData\Roaming\.NANotifyHere
2018-03-04 22:30 - 2022-07-14 08:00 - 000001515 _____ () C:\Users\wrt\AppData\Roaming\SAS7_000.DAT
2018-05-20 20:36 - 2022-02-20 18:34 - 000011776 _____ () C:\Users\wrt\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2022-06-28 08:25 - 2022-06-28 08:25 - 000002784 _____ () C:\Users\wrt\AppData\Local\recently-used.xbel

==================== FLock ==============================

2018-03-03 19:18 C:\WINDOWS\UpdateAssistant

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 14.07.22
Scan-Zeit: 16:51
Protokolldatei: 7fa727ba-035a-11ed-8665-98eecb6c1ddf.json

-Softwaredaten-
Version: 4.5.11.202
Komponentenversion: 1.0.1716
Version des Aktualisierungspakets: 1.0.57232
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 19044.1766)
CPU: x64
Dateisystem: NTFS
Benutzer: Ryzen\wrt

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 355940
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 8 Min., 58 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)