Malwarebyte blockiert Winnet exe wegen Trojaner Hatte seit einigen Wochen scheinbar einen Crypto Mining Trojaner auf meinem Pc, der meine Cpu auf 80%, im Idle Zustand, gebracht hat. Konnte den nur durch den Ressourcenmonitor erkennen, weil er sich sobald ich den Taskmanager geöffnet hatte, sich nur für 0,5 Sekunden als "Systemunterbrechung" gezeigt hat. Und solange ich meinen Taskmanager offen hatte, lief mein PC auch wie immer. Das Program Iexplore hat folgende Prozesse deaktiviert: "winsvc.exe", "windefupd.exe" und "winnet.exe" anschliessend habe ich bei Malwarebyte einen Scan durchgeführt und einige Sachen gefunden und gelöscht. Seitdem habe ich auch keine Probleme. Allerdings bekomme ich alle 3-4 Minuten 4-5 Benachrichtigungen, das Malwarebyte, Websiten blockiert, obwohl ich nicht einmal im Browser bin. Riskware, Schadsoftware, kompromittiert und Trojaner werden mir im Wechsel angezeigt.
Code:
Alles auswählen Aufklappen ATTFilter
Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Datum des Schutzereignisses: 24.03.23
Uhrzeit des Schutzereignisses: 18:37
Protokolldatei: 8d3b9f32-ca6a-11ed-8644-2cf05dda0056.json
-Softwaredaten-
Version: 4.5.25.256
Komponentenversion: 1.0.1957
Version des Aktualisierungspakets: 1.0.67087
Lizenz: Testversion
-Systemdaten-
Betriebssystem: Windows 10 (Build 19045.2728)
CPU: x64
Dateisystem: NTFS
Benutzer: System
-Einzelheiten zu blockierten Websites-
Bösartige Website: 1
, C:\Windows\System32\winnet.exe, Blockiert, -1, -1, 0.0.0, ,
-Website-Daten-
Kategorie: Trojaner
Domäne:
IP-Adresse: 94.140.114.254
Port: 21910
Typ: Ausgehend
Datei: C:\Windows\System32\winnet.exe
(end)
Code:
Alles auswählen Aufklappen ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 24-03-2023
durchgeführt von Jermaine PC (Administrator) auf JERMAINE-PC (Micro-Star International Co., Ltd. MS-7C56) (24-03-2023 18:31:37)
Gestartet von C:\Users\Jermaine PC\Desktop
Geladene Profile: Jermaine PC
Plattform: Microsoft Windows 10 Home Version 22H2 19045.2728 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\CC_Engine_x64.exe
(C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI.CentralServer.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <29>
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mspaint.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) S:\Steam\steam.exe
(Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(S:\Steam\steam.exe ->) (Valve Corp. -> ) S:\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
(S:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) S:\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <10>
(S:\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) S:\Steam\GameOverlayUI.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_ffc75848a6342fdf\jhi_service.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft GameInput\x64\gameinputsvc.exe <2>
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation) [Datei ist nicht signiert] C:\Windows\System32\winsvc.exe
(services.exe ->) (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\FoundationService\MSIAPService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe
(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\MSI_Super_Charger_Service.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_059948e396d205d5\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe <2>
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(services.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\GameBarPresenceWriter.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControlEngine.exe
(winsvc.exe ->) () [Datei ist nicht signiert] C:\Windows\System32\winnet.exe
(winsvc.exe ->) (Microsoft Corporation) [Datei ist nicht signiert] C:\Windows\System32\wincfg.exe
(winsvc.exe ->) (Microsoft Corporation) [Datei ist nicht signiert] C:\Windows\System32\windefupd.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [CL-25-78C80621-47EF-42ED-A4CF-69BA96980097] => "C:\Program Files\Common Files\Bitdefender\SetupInformation\CL-25-78C80621-47EF-42ED-A4CF-69BA96980097\setuplauncher.exe" /run:Installer.exe /args:"/setup-folder:"CL-25-78C80621-47EF-42ED-A4CF-69BA969 (Der Dateneintrag hat 7 mehr Zeichen). (Keine Datei)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe [1618320 2022-11-16] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-21-155395719-1804907069-938482460-1001\...\Run: [com.blitz.app] => "C:\Users\Jermaine PC\AppData\Local\Programs\Blitz\Blitz.exe" --autostart (Keine Datei)
HKU\S-1-5-21-155395719-1804907069-938482460-1001\...\Run: [] => [X]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\111.0.5563.111\Installer\chrmstp.exe [2023-03-24] (Google LLC -> Google LLC)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {115A8EF9-5D5C-4345-98F2-67631ED120A1} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_75ffca5eec865b4b\lib\IntelPTTEKRecertification.exe [918288 2020-04-22] (Intel(R) Trust Services -> Intel(R) Corporation)
Task: {2A9BBBB5-BD46-461E-A4C8-3B3636D8E774} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3140E5CD-C2F4-49C3-BA27-EB9DCBF93DC1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {3D752BF8-B225-4348-927B-6644930B676C} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3F7B1AE7-59DD-4B9B-8CAD-EFD7BFE50147} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe [1775440 2021-11-09] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {46338272-413F-47FB-8DCA-3F0389BBED9B} - System32\Tasks\ROCCAT DEVICE SERVICE => C:\Program Files (x86)\ROCCAT\ROCCAT Swarm\ROCCAT_dev_service.exe (Keine Datei)
Task: {4E0EB6FC-1278-49B4-A41E-004B7205D5D3} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {54593A42-381D-4583-AB84-8795ACB2AA6F} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {5FA759E2-CF72-40D1-8415-E4DB269CEE25} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-10] (Google Inc -> Google Inc.)
Task: {6288B17D-2117-49CF-9685-F384E295E72D} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {636E378F-D031-4487-AFE6-A31B792EC8B1} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [168840 2023-03-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {67453431-BBA6-44E7-85DA-CD932E0DBFC8} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {6979F3B7-1405-448A-AB96-6B5779087C43} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-09-10] (Google Inc -> Google Inc.)
Task: {6AADBF25-DFDF-453A-875A-6EA77800D72D} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {80863403-8B1C-4BD8-AAC9-4CBC3BC4E14C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)
Task: {8147E3AF-0C1F-415C-89AD-B2E531997934} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {92398BB8-CBF3-434E-87E5-F85B0B18BBC5} - System32\Tasks\MSI Task Host - MSI.True Color => C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe [47416 2021-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9BAA411A-2247-42A9-936E-39343C4C31B4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26296808 2023-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D9C92EF-2B28-4579-98A1-11F9DB5C2182} - System32\Tasks\MSI Task Host - DisplayID => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [102712 2021-07-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {9DEB1A25-BDE0-4E46-888C-F18D989EE0F2} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
Task: {9F2FA3D4-6358-4BCD-8D11-4B9564DF4DD5} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {A4458FC6-32B6-4C0D-9E39-F027CA81F696} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A847D8C9-983F-4F3B-8C57-E6B1617A531B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [144232 2023-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {BF810BE5-256F-4821-BEED-52D7126CB754} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1560056 2023-02-01] (Adobe Inc. -> Adobe Inc.)
Task: {EE27871D-5376-42EC-B704-3E325F26C272} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FB0248A6-7FF5-4443-8383-8320D8CF8266} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe [804312 2022-11-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> )
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3c924660-3b70-46b2-b007-727575306657}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{b6ee4341-403c-4f01-857e-8565ba4f4d21}: [NameServer] 8.8.4.4,8.8.8.8
Tcpip\..\Interfaces\{b6ee4341-403c-4f01-857e-8565ba4f4d21}: [DhcpNameServer] 192.168.178.1
Edge:
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\Jermaine PC\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-24]
Edge DownloadDir: Default -> D:\Google Chrome Downloads
Edge HomePage: Default -> edge://newtab/
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.351.2 -> C:\Program Files\Java\jre1.8.0_351\bin\dtplugin\npDeployJava1.dll [2023-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.351.2 -> C:\Program Files\Java\jre1.8.0_351\bin\plugin2\npjp2.dll [2023-01-07] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-02-14] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default [2023-03-24]
CHR DownloadDir: D:\Google Chrome Downloads
CHR Extension: (Dunkles Theme für Google Chrome) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\annfbnbieaamhaimclajlajpijgkdblo [2023-03-24]
CHR Extension: (Social Blade) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfidkbgamfhdgmedldkagjopnbobdmdn [2022-09-04] [UpdateUrl:hxxps://addon.socialblade.com/updates.json] <==== ACHTUNG
CHR Extension: (FrankerFaceZ) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2021-03-25]
CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-02-24]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-28]
CHR Profile: C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-03-24]
CHR Profile: C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Profile 2 [2023-03-24]
CHR Extension: (Google Docs Offline) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-01-04]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-08-28]
CHR Profile: C:\Users\Jermaine PC\AppData\Local\Google\Chrome\User Data\System Profile [2023-03-24]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-02-01] (Adobe Inc. -> Adobe Inc.)
S3 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2688544 2022-07-27] (PUBG CORPORATION -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12512768 2023-03-19] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-12] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-03-20] (Dropbox, Inc -> Dropbox, Inc.)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [1135648 2022-11-10] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [584680 2022-06-28] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [24739320 2022-06-12] (FACE IT LIMITED -> )
R2 LightKeeperService; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe [86776 2020-12-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9094440 2023-03-23] (Malwarebytes Inc. -> Malwarebytes)
R2 MSI Foundation Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\FoundationService\MSIAPService.exe [75216 2020-09-23] (Micro-Star International CO., LTD. -> Micro-Star International Co., Ltd.)
R2 MSI_Central_Service; C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe [147088 2020-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 MSI_Companion_Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe [143160 2021-03-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 MSI_Super_Charger_Service; C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\MSI_Super_Charger_Service.exe [35824 2021-01-18] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R2 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [36152 2021-08-25] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 Mystic_Light_Service; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe [39760 2021-05-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2579272 2022-08-09] (Electronic Arts, Inc. -> Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [3497808 2022-08-09] (Electronic Arts, Inc. -> Electronic Arts)
S3 Rockstar Service; S:\Launcher\RockstarService.exe [2016208 2022-06-28] (Rockstar Games, Inc. -> Rockstar Games)
S3 SteelSeriesUpdateService; C:\Program Files\SteelSeries\GG\SteelSeriesUpdateService.exe [35192 2023-03-14] (SteelSeries ApS -> )
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\UNCHEATER\ucldr_battlegrounds_gl.exe [7152880 2021-12-30] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 vgc; C:\Program Files\Riot Vanguard\vgc.exe [11060856 2023-03-10] (Riot Games, Inc. -> Riot Games, Inc.)
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [368248 2021-03-16] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\NisSrv.exe [3191256 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2301.6-0\MsMpEng.exe [133576 2023-02-15] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 winsvc; C:\WINDOWS\system32\winsvc.exe [33306624 2019-11-20] (Microsoft Corporation) [Datei ist nicht signiert]
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [9959072 2022-08-10] (PUBG CORPORATION -> KRAFTON, Inc)
S3 EpicOnlineServices; "C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_059948e396d205d5\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_059948e396d205d5\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S3 OVRLibraryService; "C:\Program Files\Oculus\Support\oculus-librarian\OVRLibraryService.exe" [X]
S2 OVRService; "C:\Program Files\Oculus\Support\oculus-runtime\OVRServiceLauncher.exe" [X]
S2 SecurityService; "C:\Program Files (x86)\TotalAV\SecurityService.exe" [X] <==== ACHTUNG
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [2178912 2022-08-21] (PUBG CORPORATION -> ANTICHEATEXPERT.COM)
S3 ACE-GAME; C:\WINDOWS\system32\drivers\ACE-GAME.sys [914760 2022-08-21] (PUBG CORPORATION -> ANTICHEATEXPERT.COM)
S3 AppleKmdfFilter; C:\WINDOWS\System32\drivers\AppleKmdfFilter.sys [20032 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 atvi-randgrid; C:\ProgramData\Battle.net_components\randgridauks\randgrid.sys [2513192 2022-11-15] (Activision Publishing Inc -> Activision Blizzard, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 CorsairGamingAudioService; C:\Windows\System32\drivers\CorsairGamingAudio64.sys [60312 2020-11-19] (Microsoft Windows Hardware Compatibility Publisher -> Corsair Memory, Inc.)
R1 CTIIO; C:\WINDOWS\system32\drivers\CtiIo64.sys [29224 2022-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)
S3 dtlitescsibus; C:\WINDOWS\System32\drivers\dtlitescsibus.sys [30264 2017-03-13] (Disc Soft Ltd -> Disc Soft Ltd)
S3 dtliteusbbus; C:\WINDOWS\System32\drivers\dtliteusbbus.sys [47672 2017-03-13] (Disc Soft Ltd -> Disc Soft Ltd)
R3 ElgatoVAD; C:\WINDOWS\System32\drivers\ElgatoVAD.sys [39208 2020-11-08] (Elgato Systems LLC -> Elgato Systems GmbH)
R1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2023-03-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R0 FACEIT; C:\WINDOWS\System32\Drivers\FACEIT.sys [15958536 2022-06-12] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 hitmanpro37; C:\WINDOWS\system32\drivers\hitmanpro37.sys [42000 2023-03-24] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ipadtst2; C:\ProgramData\MSI\Super_Charger\ipadtst2_64.sys [26168 2021-01-12] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 LGJoyHidFilter; C:\WINDOWS\system32\drivers\LGJoyHidFilter.sys [57368 2018-03-19] (Logitech Inc -> Logitech Inc.)
S3 LGJoyHidLo; C:\WINDOWS\system32\drivers\LGJoyHidLo.sys [47256 2018-03-19] (Logitech Inc -> Logitech Inc.)
S3 LGSHidFilt; C:\WINDOWS\System32\drivers\LGSHidFilt.Sys [64280 2018-03-19] (Logitech -> Logitech Inc.)
S3 LGSUsbFilt; C:\WINDOWS\System32\drivers\LGSUsbFilt.Sys [41752 2018-03-19] (Logitech -> Logitech Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2023-03-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [198584 2023-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77736 2023-03-24] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2023-03-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [181816 2023-03-24] (Malwarebytes Inc. -> Malwarebytes)
R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [23040 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
S3 NTIOLib_CC_Clock; C:\Program Files (x86)\MSI\One Dragon Center\Lib\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\One Dragon Center\Super_Charger\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys [14288 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
R3 oculusvad_oculusvad; C:\WINDOWS\System32\drivers\oculusvad.sys [75280 2022-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 OCULUSVRHEADSET; C:\WINDOWS\System32\drivers\OCULUS119B.sys [1887232 2019-01-04] (C-MEDIA ELECTRONICS INC. -> OCULUS)
R3 Oculus_ViGEmBus; C:\WINDOWS\System32\drivers\Oculus_ViGEmBus.sys [32856 2019-01-04] (Oculus VR, LLC -> Facebook Inc.)
S3 OCUSBVID; C:\WINDOWS\System32\drivers\ocusbvid111.sys [69176 2019-01-04] (Oculus VR, LLC -> Oculus VR, LLC)
S0 ProtectedELAM; C:\WINDOWS\System32\drivers\protected_elam.sys [18912 2023-02-17] (Microsoft Windows Early Launch Anti-Malware Publisher -> TODO: <Company name>)
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
R3 ssdevfactory; C:\WINDOWS\System32\drivers\ssdevfactory.sys [48848 2020-09-25] (SteelSeries ApS -> SteelSeries ApS)
R3 sshid; C:\WINDOWS\system32\DRIVERS\sshid.sys [44456 2023-03-13] (Microsoft Windows Hardware Compatibility Publisher -> SteelSeries ApS)
R3 SteelSeries_Sonar_VAD; C:\WINDOWS\System32\DriverStore\FileRepository\steelseries-sonar-vad.inf_amd64_c554088ddc1b935b\SteelSeries-Sonar-VAD.sys [94904 2023-03-03] (SteelSeries ApS -> Windows (R) Win 7 DDK provider)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2016-03-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R1 vgk; C:\Program Files\Riot Vanguard\vgk.sys [22292248 2023-03-10] (Riot Games, Inc. -> Riot Games, Inc.)
S3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
R3 VirtualHID; C:\WINDOWS\System32\drivers\VirtualHID.sys [26768 2020-02-05] (Voyetra Turtle Beach, Inc. -> TurtleBeach)
R3 VOICEMOD_Driver; C:\WINDOWS\system32\drivers\vmdrv.sys [48136 2022-03-08] (Voicemod Sociedad Limitada -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49576 2023-02-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [473336 2023-02-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99576 2023-02-15] (Microsoft Windows -> Microsoft Corporation)
R1 webshieldfilter; C:\WINDOWS\System32\drivers\webshieldfilter.sys [96264 2023-02-17] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider) <==== ACHTUNG
R3 WinRing0_1_2_0; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\MODAPI.sys [14544 2023-03-24] (Noriyuki MIYAZAKI -> OpenLibSys.org)
S3 xhunter1; C:\WINDOWS\xhunter1.sys [2522256 2021-12-30] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 CrucialSMBusScan; \??\C:\Users\JERMAI~1\AppData\Local\Temp\CrucialSMBusScan_V64.sys [X] <==== ACHTUNG
S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-03-24 18:31 - 2023-03-24 18:31 - 000032988 _____ C:\Users\Jermaine PC\Desktop\FRST.txt
2023-03-24 18:31 - 2023-03-24 18:31 - 000000000 ____D C:\FRST
2023-03-24 18:30 - 2023-03-24 18:30 - 002379264 _____ (Farbar) C:\Users\Jermaine PC\Desktop\FRST64.exe
2023-03-24 17:09 - 2023-03-24 17:09 - 000000000 ____D C:\WINDOWS\system32\data
2023-03-24 17:08 - 2023-03-24 17:08 - 000181816 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2023-03-24 16:49 - 2023-03-24 16:49 - 000001984 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2023-03-24 16:23 - 2023-03-24 16:23 - 000000000 ____D C:\Users\Jermaine PC\Documents\TotalAV
2023-03-24 16:22 - 2023-03-24 17:08 - 000000000 ____D C:\Program Files (x86)\TotalAV
2023-03-24 16:22 - 2023-03-24 16:22 - 057278304 _____ C:\Users\Jermaine PC\Desktop\TotalAV_Setup.exe
2023-03-24 16:22 - 2023-03-24 16:22 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\GUI
2023-03-24 16:22 - 2023-03-24 16:22 - 000000000 ____D C:\ProgramData\TotalAV
2023-03-24 16:22 - 2023-03-24 16:22 - 000000000 ____D C:\ProgramData\SecuritySuite
2023-03-24 15:37 - 2023-03-24 15:38 - 000001387 _____ C:\Users\Jermaine PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ESET Online Scanner.lnk
2023-03-24 15:37 - 2023-03-24 15:37 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\ESET
2023-03-24 15:34 - 2023-03-24 15:36 - 000000000 ____D C:\AdwCleaner
2023-03-24 15:31 - 2023-03-24 15:31 - 000000298 _____ C:\WINDOWS\system32\.crusader
2023-03-24 15:28 - 2023-03-24 15:31 - 000000000 ____D C:\ProgramData\HitmanPro
2023-03-24 15:24 - 2023-03-24 15:24 - 001802704 _____ (Bleeping Computer, LLC) C:\Users\Jermaine PC\Desktop\iExplore.exe
2023-03-24 14:49 - 2020-03-13 07:52 - 006907392 _____ C:\WINDOWS\system32\winnet.exe
2023-03-23 22:20 - 2023-03-23 22:20 - 000000000 ____D C:\Users\Jermaine PC\Documents\League of Legends
2023-03-23 21:08 - 2023-03-24 16:49 - 000001996 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2023-03-23 21:07 - 2023-03-24 16:48 - 000000000 ____D C:\ProgramData\Malwarebytes
2023-03-23 21:07 - 2023-03-24 16:48 - 000000000 ____D C:\Program Files\Malwarebytes
2023-03-23 21:07 - 2023-03-23 21:07 - 002649088 _____ (Malwarebytes) C:\Users\Jermaine PC\Documents\MBSetup.exe
2023-03-23 20:54 - 2023-03-23 20:54 - 000000000 ____D C:\Users\Jermaine PC\Documents\The Witcher 3
2023-03-23 20:49 - 2023-03-23 20:49 - 000000000 ____D C:\Program Files (x86)\Windows Kits
2023-03-23 20:49 - 2023-03-23 20:49 - 000000000 ____D C:\Program Files (x86)\Microsoft GameInput
2023-03-23 20:11 - 2023-03-24 17:08 - 000003146 _____ C:\WINDOWS\system32\Tasks\MSIAfterburner
2023-03-23 19:44 - 2023-03-23 19:44 - 000000000 ____D C:\WINDOWS\pss
2023-03-23 18:39 - 2023-03-23 18:41 - 000001064 _____ C:\Users\Jermaine PC\Desktop\MSI Kombustor 4 x64.lnk
2023-03-23 18:39 - 2023-03-23 18:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geeks3D
2023-03-23 18:39 - 2023-03-23 18:39 - 000000000 ____D C:\Program Files\Geeks3D
2023-03-23 18:00 - 2023-03-23 18:00 - 000001158 _____ C:\Users\Jermaine PC\Desktop\MSI Afterburner.lnk
2023-03-23 18:00 - 2023-03-23 18:00 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\MSI Afterburner
2023-03-23 18:00 - 2023-03-23 18:00 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2023-03-23 17:59 - 2023-03-23 17:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-03-22 20:58 - 2023-03-24 00:32 - 000007624 _____ C:\Users\Jermaine PC\AppData\Local\Resmon.ResmonCfg
2023-03-22 20:54 - 2023-03-22 20:54 - 000000000 ____D C:\Program Files\Google
2023-03-22 19:40 - 2023-03-22 19:40 - 000000915 _____ C:\Users\Public\Desktop\Stream Deck.lnk
2023-03-22 19:40 - 2023-03-22 19:40 - 000000000 ____D C:\ProgramData\obs-studio
2023-03-22 19:40 - 2023-03-22 19:40 - 000000000 ____D C:\Elgato Stream Deck
2023-03-22 19:08 - 2023-03-09 08:57 - 002172512 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2023-03-22 19:08 - 2023-03-09 08:57 - 002172512 _____ C:\WINDOWS\system32\vulkaninfo.exe
2023-03-22 19:08 - 2023-03-09 08:57 - 001607776 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2023-03-22 19:08 - 2023-03-09 08:57 - 001607776 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2023-03-22 19:08 - 2023-03-09 08:57 - 001479264 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2023-03-22 19:08 - 2023-03-09 08:57 - 001479264 _____ C:\WINDOWS\system32\vulkan-1.dll
2023-03-22 19:08 - 2023-03-09 08:57 - 001226736 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-03-22 19:08 - 2023-03-09 08:57 - 001211488 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2023-03-22 19:08 - 2023-03-09 08:57 - 001211488 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2023-03-22 19:08 - 2023-03-09 08:54 - 000671744 _____ C:\WINDOWS\system32\nvofapi64.dll
2023-03-22 19:08 - 2023-03-09 08:54 - 000506344 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2023-03-22 19:08 - 2023-03-09 08:53 - 001534448 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2023-03-22 19:08 - 2023-03-09 08:53 - 001192960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2023-03-22 19:08 - 2023-03-09 08:53 - 000851432 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2023-03-22 19:08 - 2023-03-09 08:53 - 000741360 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2023-03-22 19:08 - 2023-03-09 08:52 - 002163736 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2023-03-22 19:08 - 2023-03-09 08:52 - 001620016 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2023-03-22 19:08 - 2023-03-09 08:52 - 000977944 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2023-03-22 19:08 - 2023-03-09 08:52 - 000758272 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2023-03-22 19:08 - 2023-03-09 08:51 - 013765632 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2023-03-22 19:08 - 2023-03-09 08:51 - 011645952 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2023-03-22 19:08 - 2023-03-09 08:51 - 000457752 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2023-03-22 19:08 - 2023-03-09 08:50 - 006084136 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2023-03-22 19:08 - 2023-03-09 08:50 - 005911600 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcudadebugger.dll
2023-03-22 19:08 - 2023-03-09 08:50 - 005835312 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2023-03-22 19:08 - 2023-03-09 08:50 - 000852976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2023-03-22 19:08 - 2023-03-08 12:17 - 000104256 _____ C:\WINDOWS\system32\nvinfo.pb
2023-03-22 18:08 - 2023-03-22 18:09 - 019852088 _____ C:\Users\Jermaine PC\Desktop\IMG_8250.DNG
2023-03-22 18:08 - 2023-03-22 16:57 - 019085228 _____ C:\Users\Jermaine PC\Desktop\IMG_8251.DNG
2023-03-20 20:31 - 2023-03-20 20:31 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\gzke
2023-03-20 19:43 - 2023-03-20 19:43 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\testdis
2023-03-20 19:30 - 2023-03-20 19:30 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\Smuck
2023-03-20 16:21 - 2023-03-20 16:21 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-03-15 20:32 - 2023-03-15 20:32 - 000000000 ___HD C:\$WinREAgent
2023-03-13 18:29 - 2023-03-13 18:30 - 000000055 _____ C:\Users\Jermaine PC\Desktop\.txt
2023-03-08 19:04 - 2023-03-08 19:04 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\MMFApplications
2023-03-08 17:05 - 2023-03-24 17:07 - 110886912 _____ C:\WINDOWS\system32\config\SOFTWARE
2023-03-08 16:27 - 2023-03-08 16:27 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\You_Must
2023-03-05 19:23 - 2023-03-05 19:23 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Find_Yourself
2023-03-02 19:53 - 2023-03-02 19:53 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\N4bA X SeeM
2023-03-02 19:10 - 2023-03-02 19:10 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\GemezlGames
2023-03-02 17:58 - 2023-03-02 17:58 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\sex
2023-03-01 22:43 - 2023-03-09 08:57 - 001487336 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-03-01 22:36 - 2023-03-01 22:36 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Microsoft.4297127D64EC6
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-03-24 18:31 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-03-24 18:27 - 2018-09-10 04:10 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-24 17:11 - 2020-04-23 20:06 - 000000001 _____ C:\WINDOWS\vgkbootstatus.dat
2023-03-24 17:08 - 2020-08-18 02:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-03-24 17:08 - 2020-08-18 02:36 - 000607984 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-03-24 17:08 - 2020-08-18 02:36 - 000008192 ___SH C:\DumpStack.log.tmp
2023-03-24 17:08 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-03-24 17:08 - 2018-09-10 03:59 - 000000000 ____D C:\ProgramData\NVIDIA
2023-03-24 17:07 - 2019-12-07 10:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-03-24 16:51 - 2021-05-13 15:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VEGAS
2023-03-24 16:51 - 2020-11-02 15:58 - 000000000 ____D C:\Program Files\VEGAS
2023-03-24 16:51 - 2019-01-14 17:37 - 000000000 ____D C:\ProgramData\VEGAS Pro
2023-03-24 16:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-03-24 16:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-03-24 16:34 - 2018-09-10 04:04 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Packages
2023-03-24 16:31 - 2021-07-27 20:56 - 000000000 ____D C:\Users\Jermaine PC\Desktop\Dörnberg
2023-03-24 16:26 - 2021-03-25 17:33 - 000000000 ____D C:\WINDOWS\Minidump
2023-03-24 16:26 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2023-03-24 16:26 - 2018-09-12 19:54 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\CrashDumps
2023-03-24 16:22 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-03-24 16:05 - 2020-08-18 02:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-03-24 15:45 - 2018-09-10 04:31 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\D3DSCache
2023-03-24 15:01 - 2022-01-17 03:21 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\authy
2023-03-24 15:01 - 2020-11-10 14:28 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Twilio Inc
2023-03-24 00:35 - 2019-07-03 16:06 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Discord
2023-03-24 00:00 - 2019-07-03 16:06 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Discord
2023-03-23 23:28 - 2018-09-10 04:40 - 000000000 ____D C:\ProgramData\Riot Games
2023-03-23 21:42 - 2018-10-31 17:46 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\ElevatedDiagnostics
2023-03-23 21:11 - 2018-10-31 18:26 - 000000000 ____D C:\ProgramData\KMSAutoS
2023-03-23 20:48 - 2023-01-07 18:17 - 002786768 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000476624 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000243200 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000202192 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000165328 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000131072 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2023-03-23 20:48 - 2023-01-07 18:17 - 000079352 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2023-03-23 20:48 - 2023-01-07 18:17 - 000062928 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2023-03-23 20:46 - 2019-12-14 17:51 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\VB Audio
2023-03-23 20:46 - 2019-12-14 17:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VB Audio
2023-03-23 20:46 - 2019-12-14 17:51 - 000000000 ____D C:\Program Files\VB
2023-03-23 18:18 - 2021-01-31 14:04 - 000000000 ____D C:\AMD
2023-03-23 18:16 - 2020-05-02 22:41 - 000000000 ____D C:\Program Files\Logitech
2023-03-23 18:16 - 2018-12-28 10:51 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Logitech
2023-03-23 17:59 - 2022-04-29 17:05 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\DropboxElectron
2023-03-23 17:59 - 2020-04-26 16:51 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Dropbox
2023-03-23 17:59 - 2020-04-26 16:51 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-03-23 17:58 - 2020-06-25 21:46 - 000002439 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-03-23 17:56 - 2022-02-22 23:26 - 000000000 ____D C:\WINDOWS\system32\SteelSeries
2023-03-22 19:40 - 2021-03-25 17:32 - 000000000 ____D C:\Program Files\Elgato
2023-03-22 19:40 - 2020-05-15 21:09 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Elgato
2023-03-22 18:08 - 2022-02-07 02:19 - 000000000 ___RD C:\Users\Jermaine PC\Dropbox
2023-03-22 16:49 - 2020-08-18 02:41 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-03-22 16:49 - 2020-08-18 02:41 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-03-20 20:00 - 2022-10-06 19:04 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\N4bA
2023-03-20 18:29 - 2023-02-15 21:01 - 000000000 ____D C:\Users\Jermaine PC\AppData\LocalLow\Rayll
2023-03-19 18:40 - 2018-10-31 18:15 - 000000000 ____D C:\Program Files\Microsoft Office
2023-03-16 18:11 - 2020-08-18 21:36 - 001722788 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-03-16 18:11 - 2019-12-07 15:50 - 000743708 _____ C:\WINDOWS\system32\perfh007.dat
2023-03-16 18:11 - 2019-12-07 15:50 - 000150130 _____ C:\WINDOWS\system32\perfc007.dat
2023-03-15 22:56 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-15 22:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-03-15 22:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-03-15 22:56 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-15 22:54 - 2018-09-13 18:45 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\Spotify
2023-03-15 22:00 - 2018-09-13 18:45 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Spotify
2023-03-15 20:40 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-03-15 20:38 - 2020-08-18 02:41 - 003015680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-15 20:38 - 2016-07-16 13:58 - 000416048 __RSH C:\bootmgr
2023-03-15 19:37 - 2018-09-10 12:26 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-15 17:51 - 2018-09-10 12:26 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-03-13 16:40 - 2019-12-23 17:49 - 000044456 _____ (SteelSeries ApS) C:\WINDOWS\system32\Drivers\sshid.sys
2023-03-09 08:51 - 2023-01-29 18:16 - 003430400 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2023-03-09 08:49 - 2020-06-28 18:55 - 007924696 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2023-03-09 08:48 - 2020-12-20 00:16 - 006788432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2023-03-08 17:04 - 2020-12-05 18:39 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2023-03-08 16:37 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2023-03-08 16:36 - 2023-01-04 15:49 - 000000000 ____D C:\Users\Jermaine PC\AppData\Local\Battlestate Games
2023-03-05 19:11 - 2021-08-11 20:00 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\obs-studio
2023-03-02 18:08 - 2020-04-26 16:51 - 000001248 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2023-03-02 18:08 - 2020-04-26 16:51 - 000001244 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-03-01 22:39 - 2021-03-28 17:17 - 000000000 ____D C:\Users\Jermaine PC\AppData\Roaming\.minecraft
2023-03-01 20:16 - 2020-08-18 02:41 - 000004308 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineUA
2023-03-01 20:16 - 2020-08-18 02:41 - 000004076 _____ C:\WINDOWS\system32\Tasks\DropboxUpdateTaskMachineCore
2023-02-26 04:39 - 2023-01-07 18:17 - 000370176 _____ (Microsoft Corporation) C:\WINDOWS\system32\GameInputRedist.dll
2023-02-26 03:11 - 2023-01-07 18:17 - 000242168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GameInputRedist.dll
2023-02-25 03:00 - 2020-06-28 18:55 - 000121880 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2023-02-24 21:14 - 2020-08-18 02:41 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
2023-01-06 19:39 - 2023-01-06 19:39 - 000039869 _____ () C:\Program Files\unins000.dat
2023-01-06 19:39 - 2023-01-06 19:37 - 003076376 _____ (Xaymars Technology Workshop ) C:\Program Files\unins000.exe
2023-01-06 19:39 - 2023-01-06 19:39 - 000024097 _____ () C:\Program Files\unins000.msg
2022-01-04 16:11 - 2023-02-02 19:59 - 000000032 _____ () C:\Users\Jermaine PC\AppData\Roaming\.machineId
2019-01-04 20:58 - 2019-01-04 21:55 - 000022571 _____ () C:\Users\Jermaine PC\AppData\Local\.starboard.aHR0cHM6Ly93d3cueW91dHViZS5jb20vdHY=.storage
2019-01-04 20:58 - 2019-01-04 20:58 - 000000000 _____ () C:\Users\Jermaine PC\AppData\Local\.starboard.storage
2021-03-22 23:44 - 2021-03-22 23:44 - 000000821 _____ () C:\Users\Jermaine PC\AppData\Local\lgd11960.html
2021-03-22 23:53 - 2021-03-22 23:53 - 000000821 _____ () C:\Users\Jermaine PC\AppData\Local\lgd12628.html
2021-03-22 23:56 - 2021-03-22 23:56 - 000000821 _____ () C:\Users\Jermaine PC\AppData\Local\lgd12844.html
2021-03-23 01:40 - 2021-03-23 01:40 - 000000820 _____ () C:\Users\Jermaine PC\AppData\Local\lgd4792.html
2021-03-22 23:38 - 2021-03-22 23:38 - 000000820 _____ () C:\Users\Jermaine PC\AppData\Local\lgd6260.html
2021-03-22 23:44 - 2021-03-22 23:44 - 000000818 _____ () C:\Users\Jermaine PC\AppData\Local\lgw11960.html
2021-03-22 23:53 - 2021-03-22 23:53 - 000000818 _____ () C:\Users\Jermaine PC\AppData\Local\lgw12628.html
2021-03-22 23:56 - 2021-03-22 23:56 - 000000818 _____ () C:\Users\Jermaine PC\AppData\Local\lgw12844.html
2021-03-23 01:40 - 2021-03-23 01:40 - 000000817 _____ () C:\Users\Jermaine PC\AppData\Local\lgw4792.html
2021-03-22 23:38 - 2021-03-22 23:38 - 000000817 _____ () C:\Users\Jermaine PC\AppData\Local\lgw6260.html
2021-06-23 00:13 - 2021-10-28 14:30 - 000033714 _____ () C:\Users\Jermaine PC\AppData\Local\PlariumPlay.log
2023-03-22 20:58 - 2023-03-24 00:32 - 000007624 _____ () C:\Users\Jermaine PC\AppData\Local\Resmon.ResmonCfg
2021-03-22 23:44 - 2021-03-22 23:44 - 000044305 _____ () C:\Users\Jermaine PC\AppData\Local\wdp11960.js
2021-03-22 23:53 - 2021-03-22 23:53 - 000044305 _____ () C:\Users\Jermaine PC\AppData\Local\wdp12628.js
2021-03-22 23:56 - 2021-03-22 23:56 - 000044305 _____ () C:\Users\Jermaine PC\AppData\Local\wdp12844.js
2021-03-23 01:40 - 2021-03-23 01:40 - 000044305 _____ () C:\Users\Jermaine PC\AppData\Local\wdp4792.js
2021-03-22 23:38 - 2021-03-22 23:38 - 000044305 _____ () C:\Users\Jermaine PC\AppData\Local\wdp6260.js
2021-03-22 23:44 - 2021-03-22 23:44 - 000044367 _____ () C:\Users\Jermaine PC\AppData\Local\wdpdyn11960.js
2021-03-22 23:53 - 2021-03-22 23:53 - 000044367 _____ () C:\Users\Jermaine PC\AppData\Local\wdpdyn12628.js
2021-03-22 23:56 - 2021-03-22 23:56 - 000044367 _____ () C:\Users\Jermaine PC\AppData\Local\wdpdyn12844.js
2021-03-23 01:40 - 2021-03-23 01:40 - 000044367 _____ () C:\Users\Jermaine PC\AppData\Local\wdpdyn4792.js
2021-03-22 23:38 - 2021-03-22 23:38 - 000044367 _____ () C:\Users\Jermaine PC\AppData\Local\wdpdyn6260.js
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================