Speicherintegrität lässt sich aufgrund eines Treibers (csrbc.sys) nicht einschalten

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25-03-2023
durchgeführt von Max (Administrator) auf LENVOMAX (LENOVO 81FV) (30-03-2023 17:36:21)
Gestartet von C:\Users\Max\Desktop
Geladene Profile: Max
Plattform: Microsoft Windows 11 Home Version 21H2 22000.1696 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe ->) (Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplmv.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe <2>
(C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCopyAccelerator.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(cmd.exe ->) (Lenovo (Beijing) Limited -> Lenovo Group Limited) C:\Users\Max\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
(cmd.exe ->) (Softdeluxe) [Datei ist nicht signiert] D:\Max\Free Download Manager\wenativehost.exe
(D:\Max\MBytes\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) D:\Max\MBytes\mbamtray.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_0d8dab4470c5524b\igfxCUIService.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0d8dab4470c5524b\igfxEM.exe
(explorer.exe ->) (Focusrite Audio Engineering, Ltd.) [Datei ist nicht signiert] C:\Program Files\Focusriteusb\Focusrite Notifier.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <62>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Cisco Systems, Inc. -> Cisco Systems, Inc.) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnagent.exe
(services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Windows\System32\dolbyaposvc\DAX3API.exe <2>
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Focusrite Audio Engineering Ltd.) [Datei ist nicht signiert] C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe
(services.exe ->) (geek software GmbH -> geek software GmbH) D:\Max\PDF24\pdf24.exe
(services.exe ->) (Gemalto, Inc. -> SafeNet, Inc.) C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_7ecc5be6ca7b3b0d\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0b214be229a13e84\jhi_service.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_0d8dab4470c5524b\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_a9a2dde7124f013f\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d7403bad0b41f2bd\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d7403bad0b41f2bd\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_120314e52c04567c\RstMwService.exe
(services.exe ->) (Lenovo -> ) C:\Program Files (x86)\Lenovo\System Update\SUService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) D:\Max\MBytes\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvltig.inf_amd64_caa1786f599c5709\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(services.exe ->) (X-Rite Incorporated -> X-Rite Inc.) C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe
(svchost.exe ->) (INNOVATIVE SOLUTIONS GRUP SRL -> Innovative Solutions GRUP SRL) D:\Max\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.Office.Desktop_16051.16130.20306.0_x86__8wekyb3d8bbwe\Office16\SDXHelperBgt.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21374.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.3400.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (WhatsApp Inc.) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2311.3.0_x64__cv1g1gvanyjgm\WhatsApp.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\RtkAudUService64.exe [865568 2019-03-14] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [LenovoUtility] => C:\Program Files\Lenovo\LenovoUtility\utility.exe [894376 2017-04-14] (LENOVO -> Lenovo(beijing) Limited)
HKLM\...\Run: [PDF24] => D:\Max\PDF24\pdf24.exe [564928 2021-03-25] (geek software GmbH -> geek software GmbH)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusriteusb\Focusrite Notifier.exe [5029376 2020-06-02] (Focusrite Audio Engineering, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Cisco AnyConnect Secure Mobility Agent for Windows] => C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe [2011528 2022-06-02] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
HKLM\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKLM\Software\Policies\...\system: [EnableActivityFeed] 0
HKLM\Software\Policies\...\system: [PublishUserActivities] 0
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKLM\Software\Policies\...\system: [AllowClipboardHistory] 0
HKLM\Software\Policies\...\system: [AllowCrossDeviceClipboard] 0
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2630568 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Max\AppData\Local\Microsoft\Teams\Update.exe [2336912 2020-03-20] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [Discord] => C:\Users\Max\AppData\Local\Discord\Update.exe [1512096 2021-05-24] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [Steam] => D:\Max\Steam\steam.exe [4253032 2023-02-14] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [MicrosoftEdgeAutoLaunch_0C0D5F59005A32876380EE3B976869A6] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4055952 2023-03-24] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Run: [EpicGamesLauncher] => D:\Max\EpicGames\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [37104592 2023-03-15] (Epic Games Inc. -> Epic Games, Inc.)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\Policies\Explorer: [HideSCAMeetNow] 1
HKU\S-1-5-21-2200612098-3136866900-3460433062-1001\...\MountPoints2: {cbfcb277-53bf-11ed-ae85-8c1645a674c7} - "E:\Setup.exe" 
HKU\S-1-5-21-2200612098-3136866900-3460433062-1003\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2630568 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2200612098-3136866900-3460433062-1003\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Max\AppData\Local\Microsoft\Teams\Update.exe [2336912 2020-03-20] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\Canon MG3000 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDDG.DLL [30720 2016-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\sst8cPC: C:\Windows\System32\spool\prtprocs\x64\sst8cpc.dll [43520 2015-05-26] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG3000 series: C:\Windows\system32\CNMLMDG.DLL [485376 2016-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\sst8c Langmon: C:\Windows\system32\sst8clm.dll [22528 2015-05-26] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\111.0.5563.147\Installer\chrmstp.exe [2023-03-29] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AudientAppLauncher Autostart.lnk [2022-12-16]
ShortcutTarget: AudientAppLauncher Autostart.lnk -> C:\Program Files\Audient\USBAudioDriver\W10_x64\AudientAppLauncher.exe (Thesycon Software Solutions GmbH & Co. KG -> Audient)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\i1Profiler Tray.lnk [2022-06-01]
ShortcutTarget: i1Profiler Tray.lnk -> D:\Max\X-Rite\i1Profiler\i1ProfilerTray.exe (X-Rite Incorporated -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2019 Fast Start.lnk [2020-11-11]
ShortcutTarget: SOLIDWORKS 2019 Fast Start.lnk -> C:\Windows\Installer\{F261BF5C-81C4-4E81-9ED6-D7EBFA2A9A5B}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\XRGamma.lnk [2022-06-01]
ShortcutTarget: XRGamma.lnk -> D:\Max\X-Rite\i1Profiler\XRGamma.exe (LOGO Kommunikations- und Drucktechnik GmbH & Co. KG) [Datei ist nicht signiert]
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Edge: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {02723562-DDAB-4F0A-8B4B-3E3314B4716C} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\bf858717-4dbc-4459-9483-0ac44c30384a => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {0B9CE139-F817-4C02-836C-9A2549FC0291} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\1532032d-16ce-43da-9418-bbed0469a452 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {0C6ED01E-B702-49DA-86A5-BD837EC5FE51} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {0E76A62E-764B-4E90-8BC5-E6C5F922588C} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {28F961B8-3FE7-4CF5-8F29-A838CBFF16E4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3124E03A-2DD8-48E2-9903-59A1F7804A5D} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908856 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {3488E478-2668-4C73-BFE8-67C42D62B658} - System32\Tasks\CCleanerSkipUAC - Max => C:\Program Files\CCleaner\CCleaner.exe [32617808 2023-01-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {4362EAF4-7C49-4DE2-8976-3522F35CE9E0} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {4AA6516B-01C5-4192-8594-B5D094799924} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-09-18] (Google Inc -> Google LLC)
Task: {4AEE3698-C666-4FC6-9F0C-069B84BA5A8F} - System32\Tasks\AupAvUpdate => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\updAvTask.exe -UPDATE (Keine Datei)
Task: {4B1570C4-3251-4EAC-9011-DC65BFB30FC7} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [684976 2023-01-11] (Piriform Software Ltd -> Piriform)
Task: {51FB0FF3-3B8D-4B15-BA4E-8C104E17F893} - System32\Tasks\Health-Check => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [6862024 2023-02-10] (INNOVATIVE SOLUTIONS GRUP SRL -> Innovative Solutions)
Task: {538AE2B4-0DE3-409B-BB75-C8DE293F3A0D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\11c4cf62-ebfe-4cbb-a221-9b6a2020bb64 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {5474BE75-72BD-411F-9584-2FB30214BDD1} - System32\Tasks\UninstallMonitor => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\Uninstaller.exe [18173640 2023-02-10] (INNOVATIVE SOLUTIONS GRUP SRL -> Innovative Solutions GRUP SRL)
Task: {57598C96-0DF5-4997-87E7-44A116C3E18E} - System32\Tasks\X-Rite Device Services Software Updater => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe [26024 2021-08-26] (X-Rite Incorporated -> X-Rite Inc.)
Task: {6592CBDD-8FD6-4860-AA18-5954995324E7} - System32\Tasks\Health-Check-deep => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe [6862024 2023-02-10] (INNOVATIVE SOLUTIONS GRUP SRL -> Innovative Solutions)
Task: {6D196FF1-DCCC-46F8-9BE3-01D0FE348B11} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {7070F10E-9818-448C-A99D-C033297E7ED0} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {757ED722-D959-4171-AFE7-2E8197884F75} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [74952 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {76599947-CCD0-4610-B460-27C2A41E3122} - System32\Tasks\Lenovo\BatteryGauge\BatteryGaugeMaintenance => C:\ProgramData\Lenovo\ImController\Plugins\LenovoBatteryGaugePackage\x64\BGHelper.exe [149280 2022-09-23] (Lenovo -> Lenovo Group Ltd.)
Task: {779A9BB7-6130-47A0-9308-DEE12740A414} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4713808 2023-01-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --configpath "C:\Program Files\CCleaner\Setup" --guid "c9d5e7f9-ef77-4fbd-8363-a1bd3284efd6" --version "6.08.10255" --silent
Task: {86156306-0BDF-454A-84B7-14754848492E} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758536 2018-03-26] (Lenovo -> )
Task: {8A501A67-7294-47C1-BA2F-870DFFC3742B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2019-09-18] (Google Inc -> Google LLC)
Task: {8B635FA2-845D-41CB-A4C1-7446F4C07DE4} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {8EF210BA-4786-40CB-BFF0-3B4AA0B5479F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {901744D3-F714-42D9-B803-CB2B1E6672CF} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2200612098-3136866900-3460433062-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4205960 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {97A887DD-C0FC-47D1-8596-753503F06218} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2200612098-3136866900-3460433062-1003 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4205960 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D41AAF4-51FB-4B9F-8C46-00D6F97EE3AB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MpCmdRun.exe [1645904 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {9E1D7FB2-F5D3-4E44-A96A-38504A11108F} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4205960 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {A207C64A-750D-4305-B01A-D7A627F783A0} - System32\Tasks\Microsoft\VisualStudio\Updates\BackgroundDownload => C:\Program Files (x86)\Microsoft Visual Studio\Installer\resources\app\ServiceHub\Services\Microsoft.VisualStudio.Setup.Service\BackgroundDownload.exe [65440 2020-11-04] (Microsoft Corporation -> Microsoft)
Task: {A54E9709-1E46-4EC9-89DC-64EDD18FB813} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\99db926c-74ca-42da-afb5-b4ed1369134c => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {AC7DEC85-D6EF-4194-B070-30D2FBBA458E} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [908856 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {C5E58690-DAD7-475F-9652-398DD34EAFDB} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => %windir%\System32\reg.exe add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {C7E5DCCE-2994-4E5D-8E7B-450A91BDC602} - System32\Tasks\bguuwe.exe => C:\Users\Max\AppData\Local\Temp\6fb2af726d\bguuwe.exe (Keine Datei) <==== ACHTUNG
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => C:\WINDOWS\System32\MbaeParserTask.exe (Keine Datei)
Task: {CFAFAF22-CD34-42A0-9753-C8864D94FD18} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {D18907EA-6E20-4E4E-ABA2-5CD52CBE5119} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2200612098-3136866900-3460433062-1001 => C:\Users\Max\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [89096 2022-10-19] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {D2E608D5-7D3A-4C74-BFE8-680AFA8108AE} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => "%windir%\system32\sc.exe" START ImControllerService
Task: {DAEEC65F-4E90-4B43-BC10-62FF03AFCDA8} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1758536 2018-03-26] (Lenovo -> )
Task: {DFEBF7C2-B06F-43C7-AE5E-DDB71F35C47B} - System32\Tasks\Opera scheduled Autoupdate 1665684544 => D:\Max\Neuer Ordner\launcher.exe [2700696 2023-03-15] (Opera Norway AS -> Opera Software) <==== ACHTUNG
Task: {EE7B3FCE-8246-4A63-9114-76F75A4ED35A} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1655864 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
Task: {EF493826-0109-4D26-BD82-FF4160CB600D} - System32\Tasks\LenovoUtility Startup => C:\Windows\explorer.exe [5092024 2023-03-22] (Microsoft Windows -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\WINDOWS\Tasks\Health-Check-deep.job => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe
Task: C:\WINDOWS\Tasks\Health-Check.job => D:\Max\Innovative Solutions\Advanced Uninstaller PRO\healthcheck.exe
Task: C:\WINDOWS\Tasks\X-Rite Device Services Software Updater.job => C:\Program Files (x86)\X-Rite\Devices\Services\XRD Software Update.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{1996256b-cb36-4bbc-936b-3fa9acced17b}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{78eee14e-dd75-4680-a50d-65496d80680a}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{7f3ef932-2b8d-4f56-ad89-5288dc980f83}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{99a392cc-eed9-4ab3-9f47-97efa44bbfef}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default [2023-03-30]
Edge Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2023-03-12]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]

FireFox:
========
FF Plugin: 3ds.com/ComposerPlayerWebPlugin_x86_64 -> D:\Max\Solidworks\SOLIDWORKS Composer Player\Bin\npcomposerplayerwebplugin.dll [2019-02-27] (Dassault Systemes SE -> Dassault Systemes)
FF Plugin-x32: 3ds.com/ComposerPlayerWebPlugin -> D:\Max\Solidworks\SOLIDWORKS Composer Player\Bin\x86\npcomposerplayerwebplugin.dll [2019-02-27] (Dassault Systemes SE -> Dassault Systemes)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default [2023-03-30]
CHR Notifications: Default -> hxxps://cymatics.fm; hxxps://de.softonic.com; hxxps://mein.strussundclaussen.de; hxxps://www.lieferando.de
CHR Extension: (Google Übersetzer) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2023-03-22]
CHR Extension: (Free Download Manager) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahmpjcflkgiildlgicmcieglgoilbfdp [2021-10-19]
CHR Extension: (Adblock für Youtube™) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2023-02-16]
CHR Extension: (Google Docs Offline) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-03-11]
CHR Extension: (AdBlock*– der beste Ad-Blocker) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-02-23]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-01-29]
CHR Profile: C:\Users\Max\AppData\Local\Google\Chrome\User Data\System Profile [2023-03-18]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Opera: 
=======
OPR Profile: C:\Users\Max\AppData\Roaming\Opera Software\Opera Stable [2023-03-30]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\Max\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-03-12]
OPR Extension: (Opera Wallet) - C:\Users\Max\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-03-12]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Max\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2022-10-13]
StartMenuInternet: (HKU\S-1-5-21-2200612098-3136866900-3460433062-1001) OperaStable - "D:\Max\Neuer Ordner\Launcher.exe"

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [9712432 2022-11-04] (BattlEye Innovations e.K. -> )
S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1003344 2023-01-11] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
S3 CoordinatorServiceHost; D:\Max\Solidworks\SOLIDWORKS\swScheduler\DTSCoordinatorService.exe [78736 2019-02-28] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\system32\dolbyaposvc\DAX3API.exe [398352 2018-06-21] (Dolby Laboratories, Inc. -> )
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [813032 2022-11-04] (EasyAntiCheat Oy -> Epic Games, Inc)
S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2022-07-11] (Epic Games Inc. -> Epic Games, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.048.0305.0002\FileSyncHelper.exe [3412360 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [305520 2018-05-30] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 Focusrite Control Server; C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe [1554432 2020-06-02] (Focusrite Audio Engineering Ltd.) [Datei ist nicht signiert]
R2 hasplms; C:\Program Files (x86)\Common Files\Aladdin Shared\HASP\hasplms.exe [5730312 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
R2 MBAMService; D:\Max\MBytes\MBAMService.exe [9084512 2023-03-20] (Malwarebytes Inc. -> Malwarebytes)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.048.0305.0002\OneDriveUpdaterService.exe [3797384 2023-03-26] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; D:\Max\PDF24\pdf24.exe [564928 2021-03-25] (geek software GmbH -> geek software GmbH)
S3 Rockstar Service; D:\Max\Rockstar Games\Launcher\RockstarService.exe [2338096 2021-10-14] (Rockstar Games, Inc. -> Rockstar Games) [Datei ist nicht signiert]
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2020-11-03] (SolidWorks) [Datei ist nicht signiert]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\NisSrv.exe [3224328 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2302.7-0\MsMpEng.exe [133544 2023-03-28] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 xrdd.exe; C:\Program Files (x86)\X-Rite\Devices\Services\xrdd.exe [81320 2021-08-26] (X-Rite Incorporated -> X-Rite Inc.)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvltig.inf_amd64_caa1786f599c5709\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvltig.inf_amd64_caa1786f599c5709\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 acsock; C:\WINDOWS\system32\DRIVERS\acsock64.sys [297888 2022-06-02] (Microsoft Windows Hardware Compatibility Publisher -> Cisco Systems, Inc.)
R2 aksdf; C:\WINDOWS\system32\drivers\aksdf.sys [389560 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
R2 aksfridge; C:\WINDOWS\system32\drivers\aksfridge.sys [510800 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 audientusbaudio; C:\WINDOWS\System32\drivers\audientusbaudio.sys [405080 2022-05-27] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 audientusbaudioks; C:\WINDOWS\System32\drivers\audientusbaudioks.sys [54872 2022-05-27] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 ElbyCDIO; C:\WINDOWS\System32\Drivers\ElbyCDIO.sys [42616 2017-05-14] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 FBNetFilter; C:\WINDOWS\System32\drivers\FBNetFlt.sys [52688 2020-05-21] (LENOVO (UNITED STATES) INC. -> Lenovo Group Ltd.)
S4 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [97480 2016-11-16] (Focusrite Audio Engineering Ltd. -> Focusrite Audio Engineering Ltd.)
R3 Focusriteusb; C:\WINDOWS\System32\drivers\Focusriteusb.sys [123456 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 FocusriteusbSwRoot; C:\WINDOWS\System32\drivers\FocusriteusbSwRoot.sys [92568 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R3 Focusriteusb_AUDIO; C:\WINDOWS\system32\drivers\FocusriteusbAudio.sys [87912 2020-06-02] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R2 hardlock; C:\WINDOWS\system32\drivers\hardlock.sys [1970104 2020-05-29] (Gemalto, Inc. -> SafeNet, Inc.)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [223176 2023-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2022-06-21] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239544 2022-12-16] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MpKsl2121a0c8; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{1B4DB71B-C366-43BD-BA80-67EC64826170}\MpKslDrv.sys [211208 2023-03-30] (Microsoft Windows -> Microsoft Corporation)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-11-13] (Nvidia Corporation -> NVIDIA Corporation)
S3 SIVDriver; C:\WINDOWS\system32\Drivers\SIVX64.sys [205552 2021-02-12] (RH Software Ltd -> Ray Hinchliffe)
S3 VClone; C:\WINDOWS\System32\drivers\VClone.sys [44544 2020-02-22] (Microsoft Windows Hardware Compatibility Publisher -> Elaborate Bytes AG)
S3 vpnva; C:\WINDOWS\System32\drivers\vpnva64-6.sys [74064 2022-06-02] (Cisco Systems, Inc. -> Cisco Systems, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49608 2023-03-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [495896 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99624 2023-03-28] (Microsoft Windows -> Microsoft Corporation)
R2 WinI2C-DDC; C:\WINDOWS\system32\drivers\DDCDrv.sys [20832 2021-12-20] (PC Micro Systems Inc. -> Nicomsoft Ltd.)
S3 ysusb_w10_64; C:\WINDOWS\system32\drivers\ysusb_w10_64.sys [172544 2020-07-01] (Microsoft Windows Hardware Compatibility Publisher -> Yamaha Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-03-30 17:36 - 2023-03-30 17:36 - 000037313 _____ C:\Users\Max\Desktop\FRST.txt
2023-03-30 17:36 - 2023-03-30 17:36 - 000000000 ____D C:\FRST
2023-03-30 17:34 - 2023-03-30 17:34 - 002379264 _____ (Farbar) C:\Users\Max\Desktop\FRST64.exe
2023-03-30 16:12 - 2023-03-30 16:12 - 000000000 ____D C:\Program Files\Google
2023-03-30 16:11 - 2023-03-30 16:11 - 000004032 _____ C:\WINDOWS\system32\Tasks\AupAvUpdate
2023-03-30 16:11 - 2023-03-30 16:11 - 000003746 _____ C:\WINDOWS\system32\Tasks\UninstallMonitor
2023-03-30 16:11 - 2023-03-30 16:11 - 000002948 _____ C:\WINDOWS\system32\Tasks\Health-Check-deep
2023-03-30 16:11 - 2023-03-30 16:11 - 000002930 _____ C:\WINDOWS\system32\Tasks\Health-Check
2023-03-30 16:11 - 2023-03-30 16:11 - 000001107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO 13.lnk
2023-03-30 16:11 - 2023-03-30 16:11 - 000000326 _____ C:\WINDOWS\Tasks\Health-Check-deep.job
2023-03-30 16:11 - 2023-03-30 16:11 - 000000318 _____ C:\WINDOWS\Tasks\Health-Check.job
2023-03-30 16:11 - 2023-03-30 16:11 - 000000000 ____D C:\Users\Max\AppData\Local\Innovative Solutions
2023-03-30 16:11 - 2023-03-30 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced Uninstaller PRO
2023-03-30 16:11 - 2023-03-30 16:11 - 000000000 ____D C:\ProgramData\Innovative Solutions
2023-03-30 15:37 - 2023-03-30 15:38 - 000707354 _____ C:\WINDOWS\unins000.exe
2023-03-30 15:37 - 2023-03-30 15:38 - 000002576 _____ C:\WINDOWS\unins000.dat
2023-03-30 15:37 - 2023-03-30 15:38 - 000000000 ____D C:\WINDOWS\SysWOW64\GPBAK
2023-03-30 15:37 - 2008-04-14 02:11 - 000295936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\appmgr.dll
2023-03-30 15:37 - 2001-08-23 13:00 - 000034871 _____ C:\WINDOWS\SysWOW64\gpedit.msc
2023-03-30 14:55 - 2023-03-30 14:55 - 000000000 ____D C:\Program Files\Bonjour
2023-03-30 14:55 - 2023-03-30 14:55 - 000000000 ____D C:\Program Files (x86)\Bonjour
2023-03-29 21:56 - 2023-03-30 15:32 - 000504123 _____ C:\Users\Max\Desktop\MITTWOCH ABEND HOUSE 126bpm_2.flp
2023-03-29 20:52 - 2023-03-29 21:49 - 003476937 _____ C:\Users\Max\Desktop\MITTWOCH ABEND HOUSE 126bpm.flp
2023-03-29 17:15 - 2023-03-29 17:15 - 000133174 _____ C:\Users\Max\Desktop\Modulbeschreibung Maschinenelemtente CAD Host.pdf
2023-03-27 17:08 - 2023-03-27 17:08 - 008508913 _____ C:\Users\Max\Desktop\BWL für Dummies ( PDFDrive ).pdf
2023-03-23 22:45 - 2023-03-23 22:54 - 002898923 _____ C:\Users\Max\Desktop\house.flp
2023-03-23 21:45 - 2023-03-24 12:45 - 001686187 _____ C:\Users\Max\Desktop\melancholischer shit.flp
2023-03-22 20:57 - 2023-03-22 20:57 - 000000000 ___HD C:\$WinREAgent
2023-03-20 14:25 - 2023-03-21 21:57 - 000128479 _____ C:\Users\Max\Desktop\CHOOLER BEAT.flp
2023-03-18 14:41 - 2023-03-18 14:41 - 000000000 ____D C:\Users\Max\AppData\Local\Governikus GmbH & Co. KG
2023-03-16 20:30 - 2023-03-16 20:30 - 000694605 _____ C:\Users\Max\Desktop\KP.flp
2023-03-14 18:46 - 2023-03-30 16:06 - 000419758 _____ C:\WINDOWS\system32\prfh0404.dat
2023-03-14 18:46 - 2023-03-30 16:06 - 000139482 _____ C:\WINDOWS\system32\prfc0404.dat
2023-03-14 18:46 - 2023-03-14 18:46 - 000000000 ____D C:\WINDOWS\SysWOW64\zh-HANT
2023-03-14 18:46 - 2023-03-14 18:46 - 000000000 ____D C:\WINDOWS\system32\zh-HANT
2023-03-13 20:29 - 2023-03-13 20:29 - 000000000 ____D C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2023-03-13 18:55 - 2023-03-13 18:55 - 000049574 _____ C:\Users\Max\Desktop\SS2023 Stundenplan.pdf
2023-03-13 17:32 - 2023-03-21 21:50 - 000182170 _____ C:\Users\Max\Desktop\freshe 808 launchung.flp

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-03-30 17:35 - 2020-11-04 15:07 - 000000000 ____D C:\Users\Max\Desktop\PROGRAMME
2023-03-30 17:33 - 2022-05-09 11:10 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-03-30 17:23 - 2021-06-05 14:10 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-03-30 17:10 - 2019-09-18 17:30 - 000000000 ____D C:\Program Files (x86)\Google
2023-03-30 16:13 - 2020-10-07 13:08 - 000000000 ____D C:\Program Files\Common Files\VST3
2023-03-30 16:06 - 2022-05-09 11:19 - 002308168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-03-30 16:06 - 2021-06-05 19:53 - 000759936 _____ C:\WINDOWS\system32\perfh007.dat
2023-03-30 16:06 - 2021-06-05 19:53 - 000157128 _____ C:\WINDOWS\system32\perfc007.dat
2023-03-30 16:06 - 2021-06-05 14:09 - 000000000 ____D C:\WINDOWS\INF
2023-03-30 16:02 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-03-30 16:01 - 2023-01-27 02:51 - 000000000 ____D C:\Program Files\CCleaner
2023-03-30 15:59 - 2019-09-18 23:22 - 000000000 __SHD C:\Users\Max\IntelGraphicsProfiles
2023-03-30 15:59 - 2018-12-14 21:50 - 000000000 ____D C:\ProgramData\NVIDIA
2023-03-30 15:58 - 2022-11-15 21:13 - 000000306 __RSH C:\ProgramData\ntuser.pol
2023-03-30 15:58 - 2022-05-09 11:17 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-03-30 15:58 - 2022-02-10 12:19 - 000000000 ____D C:\Intel
2023-03-30 15:58 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\ServiceState
2023-03-30 15:58 - 2021-06-05 14:01 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2023-03-30 15:58 - 2020-11-11 11:44 - 000012288 ___SH C:\DumpStack.log.tmp
2023-03-30 15:43 - 2018-04-12 01:38 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy
2023-03-30 15:37 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2023-03-30 13:48 - 2021-06-05 14:10 - 000000000 ___HD C:\Program Files\WindowsApps
2023-03-30 13:48 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-03-30 13:34 - 2020-11-04 15:08 - 000000000 ____D C:\Users\Max\Desktop\DOKUMENTE
2023-03-29 22:23 - 2020-06-24 20:59 - 000000000 ____D C:\Users\Max\AppData\Local\CrashDumps
2023-03-29 22:11 - 2019-09-18 17:31 - 000002304 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-03-29 21:10 - 2023-01-28 14:48 - 000000000 ____D C:\Users\Max\Documents\Vital
2023-03-29 21:08 - 2022-03-28 16:27 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-03-28 21:53 - 2018-04-17 21:02 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-03-27 16:41 - 2022-10-18 13:02 - 000001072 _____ C:\Users\Max\Desktop\FH Kiel.lnk
2023-03-26 14:59 - 2019-09-18 23:49 - 000000000 ____D C:\Users\Max\AppData\Local\D3DSCache
2023-03-26 14:45 - 2020-08-24 23:27 - 000002447 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-03-26 14:42 - 2022-05-09 11:17 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2200612098-3136866900-3460433062-1003
2023-03-26 14:42 - 2022-05-09 11:17 - 000003596 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2200612098-3136866900-3460433062-1001
2023-03-26 14:42 - 2022-05-09 11:17 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-03-26 14:42 - 2022-03-28 16:27 - 000002159 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-03-25 20:00 - 2021-12-07 23:39 - 000000000 ____D C:\Users\Max\Desktop\ALLET
2023-03-25 19:08 - 2023-01-27 02:51 - 000004210 _____ C:\WINDOWS\system32\Tasks\CCleaner Update
2023-03-24 14:13 - 2019-09-18 23:22 - 000000000 ____D C:\Users\Max\AppData\Local\Packages
2023-03-24 14:13 - 2019-09-18 17:00 - 000000000 ____D C:\ProgramData\Packages
2023-03-24 11:30 - 2021-03-25 18:30 - 000000000 ____D C:\Users\Max\AppData\Roaming\com.spitfireaudio
2023-03-23 19:17 - 2022-10-25 15:17 - 000000000 ____D C:\Users\Max\Desktop\Aktuelle Hausarbeiten
2023-03-23 19:05 - 2022-05-09 11:10 - 001254560 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-03-23 19:04 - 2022-06-29 00:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\en-GB
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SystemResources
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\setup
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\Provisioning
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2023-03-23 19:04 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-03-23 19:04 - 2021-06-05 14:01 - 000000000 ____D C:\WINDOWS\servicing
2023-03-22 21:03 - 2021-06-05 14:01 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-03-22 21:00 - 2022-05-09 11:12 - 003111424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-03-21 21:56 - 2022-05-09 11:17 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-03-21 21:56 - 2022-05-09 11:17 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-03-21 21:46 - 2023-02-26 14:13 - 002098097 _____ C:\Users\Max\Desktop\AAA.flp
2023-03-21 14:51 - 2022-05-09 11:16 - 000064773 _____ C:\WINDOWS\diagwrn.xml
2023-03-21 14:51 - 2022-05-09 11:16 - 000064773 _____ C:\WINDOWS\diagerr.xml
2023-03-21 14:50 - 2022-05-07 13:16 - 000000000 ___HD C:\$WINDOWS.~BT
2023-03-21 12:15 - 2022-06-20 18:58 - 000000000 ____D C:\WINDOWS\Panther
2023-03-21 12:15 - 2021-06-05 14:01 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-03-20 19:47 - 2022-10-13 20:09 - 000004126 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1665684544
2023-03-20 19:47 - 2022-10-13 20:09 - 000000855 _____ C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2023-03-20 11:33 - 2022-05-09 11:11 - 000000000 ____D C:\Users\Studium
2023-03-16 17:27 - 2022-05-09 11:11 - 000000000 ____D C:\Users\Max
2023-03-16 17:09 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2023-03-15 20:34 - 2022-11-04 20:32 - 000000000 ____D C:\Users\Max\AppData\Local\UnrealEngine
2023-03-15 20:34 - 2022-11-04 20:32 - 000000000 ____D C:\ProgramData\Epic
2023-03-15 20:23 - 2022-11-04 20:32 - 000000000 ____D C:\Users\Max\AppData\Local\EpicGamesLauncher
2023-03-15 19:08 - 2019-09-21 11:57 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-03-15 19:06 - 2022-06-24 15:46 - 153620824 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-03-14 21:23 - 2019-09-18 17:00 - 000000000 ____D C:\Users\Max\AppData\Local\PlaceholderTileLogoFolder
2023-03-14 18:46 - 2022-05-09 11:52 - 000000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2023-03-14 18:46 - 2021-06-05 20:00 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-03-14 18:46 - 2021-06-05 20:00 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\SysWOW64\winrm
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\SysWOW64\WCN
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\SysWOW64\slmgr
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\SysWOW64\Printing_Admin_Scripts
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\system32\winrm
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\system32\WCN
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\system32\slmgr
2023-03-14 18:46 - 2021-06-05 19:52 - 000000000 ____D C:\WINDOWS\system32\Printing_Admin_Scripts
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\system32\F12
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\system32\dsc
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\MUI
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\SysWOW64\Com
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\MUI
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\system32\Com
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\IME
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Windows Defender
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files\Common Files\System
2023-03-14 18:46 - 2021-06-05 14:10 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-03-14 18:44 - 2021-06-05 14:10 - 000000000 ____D C:\WINDOWS\OCR
2023-03-13 20:29 - 2020-04-18 09:41 - 000000000 ____D C:\Users\Max\AppData\Roaming\Zoom
2023-03-01 16:55 - 2020-11-04 15:07 - 000000000 ____D C:\Users\Max\Desktop\PROJEKTE
2023-03-01 16:39 - 2019-09-18 17:49 - 000000000 ____D C:\Users\Max\AppData\Local\Autodesk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2021-09-07 22:13 - 2021-09-07 22:29 - 000000098 _____ () C:\Users\Max\AppData\Roaming\LauncherSettings_live.cfg
2021-09-07 22:05 - 2021-09-07 22:05 - 000002577 _____ () C:\Users\Max\AppData\Roaming\TheHunterSettings_live.bin
2021-09-07 22:05 - 2021-09-07 22:23 - 000000048 _____ () C:\Users\Max\AppData\Roaming\TheHunterSettings_steam_live.cfg
2023-01-05 23:45 - 2023-01-05 23:45 - 000002750 _____ () C:\Users\Max\AppData\Local\recently-used.xbel
2020-07-15 23:41 - 2020-08-14 14:51 - 000007605 _____ () C:\Users\Max\AppData\Local\resmon.resmoncfg
2020-11-04 20:18 - 2020-12-05 14:18 - 000000000 _____ () C:\Users\Max\AppData\Local\Temptable.xml

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================