Windows Defender findet nach Datenrettung Trojaner -> Win32/Wacatac.H!ml

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20-06-2023
durchgeführt von ***** (Administrator) auf DESKTOP-P3927EI (Micro-Star International Co., Ltd MS-7C02) (21-06-2023 00:42:10)
Gestartet von C:\Users\*****\Downloads\FRST64.exe
Geladene Profile: *****
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.3086 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.139\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.139\BraveCrashHandler64.exe
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>
(C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe
(explorer.exe ->) (Rare Ideas, LLC -> PortableApps.com) C:\Users\*****\Documents\Battlefield 1\bin\FirefoxPortable\FirefoxPortable.exe
(Figma, Inc. -> ) C:\Users\*****\AppData\Local\FigmaAgent\figma_agent.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler64.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Users\*****\Documents\Battlefield 1\bin\FirefoxPortable\App\Firefox\firefox.exe <13>
(Nvidia Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(Razer USA Ltd. -> Razer Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <3>
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_50916785244854f2\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (philandro Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe
(services.exe ->) (Scarlet.Crush Productions) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpService.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2210.0.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_11.2304.2.0_x64__8wekyb3d8bbwe\Microsoft.Media.Player.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.SecHealthUI_cw5n1h2txyewy\SecHealthUI.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Voice.ai] => "D:\Users\*****\Desktop\1\VoiceAI.exe" start (Keine Datei)
HKLM\...\Run: [Eraser] => C:\Program Files\Eraser\Eraser.exe [1073144 2021-09-25] (Heidi Computers Ltd -> The Eraser Project)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Razer Synapse] => C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe [599056 2021-10-28] (Razer USA Ltd. -> Razer Inc.) [Datei ist nicht signiert]
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4371816 2023-06-13] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [Discord] => C:\Users\*****\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [1649768 2023-04-06] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize  (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [Figma Agent] => C:\Users\*****\AppData\Local\FigmaAgent\figma_agent.exe [6722104 2023-06-19] (Figma, Inc. -> )
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Run: [utweb] => "C:\Users\*****\AppData\Roaming\uTorrent Web\utweb.exe" /MINIMIZED (Keine Datei)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\RunOnce: [Application Restart #2] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [3299864 2023-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\RunOnce: [Application Restart #0] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [3299864 2023-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-1029424333-3947187170-3340132406-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] False
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\114.0.5735.134\Installer\chrmstp.exe [2023-06-16] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\114.1.52.126\Installer\chrmstp.exe [2023-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\AnyDesk.lnk [2022-03-31]
ShortcutTarget: AnyDesk.lnk -> C:\Program Files (x86)\AnyDesk\AnyDesk.exe (philandro Software GmbH -> AnyDesk Software GmbH)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScpToolkit Tray Notifications.lnk [2023-02-12]
ShortcutTarget: ScpToolkit Tray Notifications.lnk -> C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpTrayApp.exe (Scarlet.Crush Productions) [Datei ist nicht signiert]
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\RazerNagaConfig.exe [2011-11-16] (Razer USA Ltd -> Razer USA Ltd)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {196B1617-D477-423E-A4D5-AEA879320C31} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [649784 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {201FC747-75A7-49FB-A258-254F14174649} - System32\Tasks\Opera scheduled assistant Autoupdate 1592842286 => C:\Users\*****\AppData\Local\Programs\Opera\launcher.exe  -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\*****\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {20735570-FB5D-4763-80FF-90A9AEF28107} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2BD63133-F287-4B3C-836E-334F61E72343} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {2E6CEE85-BC06-4018-B0EA-CA4F2B163ABC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [718752 2023-05-27] (Mozilla Corporation -> Mozilla Foundation) <==== ACHTUNG
Task: {2F5EEF9F-1745-475C-9E60-5DBD1B4B9368} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {43EDA8A9-2B1F-4065-A51F-8F68388B3E65} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [1003128 2022-03-15] (Nvidia Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {45EE6723-E53C-49E5-BD94-7F2B0B1EE5A4} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4BF99B4F-6C7D-4E23-B37B-CA2D4C929567} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5A33EB3D-9B53-403E-9DAD-495886249B8E} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-04-09] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {76B131D6-3D94-4AA8-8C66-34AAAE96212C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-31] (Google LLC -> Google LLC)
Task: {A96F010B-612E-4479-BE33-744091E6DD7C} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3342376 2023-01-27] (Nvidia Corporation -> NVIDIA Corporation)
Task: {BFD56A4A-D846-4296-8C13-A31E1B948D59} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [677280 2023-05-27] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate <==== ACHTUNG
Task: {C4154D6E-DCAF-4E11-8959-501E3FD5E12A} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-01-31] (Google LLC -> Google LLC)
Task: {C84B2272-D30B-474E-8BE6-216BDB8F8D75} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {CA5D32EE-4133-4124-9EE2-D137D024D9FD} - System32\Tasks\updater => C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpUpdater.exe [464384 2016-01-10] (Nefarius Software Solutions) [Datei ist nicht signiert]
Task: {CC58829A-F0A2-48CA-92E2-E2828EE3F8DB} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-04-09] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {E9FA62F9-F20D-44ED-9C07-597F250A4F59} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1665064 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F1C84008-C022-45D4-A1C2-3BA4B409F3A3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F417E3AA-8BE4-47E8-B9F5-1D9D20D21078} - System32\Tasks\Opera scheduled Autoupdate 1592842284 => C:\Users\*****\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {F9B6812D-D9EC-4D08-89EA-896E50B56F90} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [910888 2023-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {FA092C2D-AEA6-4679-8A92-4677C9E2221D} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3402832 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {FC76FD47-65C4-4C31-845B-2A7ED4F3515D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{0c2e1b5b-f83e-4c32-add4-60413bdb5bf1}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{22b77b65-0c9c-443b-a77f-9db707de0c44}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{68609b6b-dc85-4cd6-95aa-887e16c1b009}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
DownloadDir: C:\Users\*****\Downloads
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge Profile: C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default [2023-06-13]
Edge DownloadDir: Default -> C:\Users\*****\Downloads
Edge Extension: (Edge relevant text changes) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-06-01]

FireFox:
========
FF DefaultProfile: 6zzyonim.default
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\6zzyonim.default [2022-05-29]
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\orzj13sa.default-release [2023-05-27]
FF Homepage: Mozilla\Firefox\Profiles\orzj13sa.default-release -> about:blank
FF Extension: (Dark Reader) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\orzj13sa.default-release\Extensions\addon@darkreader.org.xpi [2023-05-27]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\orzj13sa.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-05-27]
FF Plugin: @java.com/DTPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\dtplugin\npDeployJava1.dll [2020-04-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.241.2 -> C:\Program Files\Java\jre1.8.0_241\bin\plugin2\npjp2.dll [2020-04-04] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) [Datei ist nicht signiert]

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2023-06-21]
CHR Notifications: Default -> hxxps://aternos.org
CHR NewTab: Default ->  Not-active:"chrome-extension://gibkoahgjfhphbmeiphbcnhehbfdlcgo/newtab.html"
CHR Extension: (ColorZilla) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2020-06-19]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2023-06-17]
CHR Extension: (Dark Reader) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2023-04-25]
CHR Extension: (Tab for a Cause) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gibkoahgjfhphbmeiphbcnhehbfdlcgo [2022-11-09]
CHR Extension: (Distill Web Monitor) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\inlikjemeeknofckkjolnjbpehgadgge [2023-06-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-03-17]
CHR HKLM-x32\...\Chrome\Extension: [mfhcmdonhekjhfbjmeacdjbhlfgpjabp]

Brave: 
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2023-06-21]
BRA Notifications: Default -> hxxps://de.tradingview.com; hxxps://preischamp.org; hxxps://steamcommunity.com; hxxps://www.twitch.tv
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Google Translate) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2023-03-22]
BRA Extension: (BetterTTV) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2023-04-21]
BRA Extension: (Dark Reader) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\eimadpbcbfnmbkopoojfekhnkhdbieeh [2023-04-11]
BRA Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2023-06-20]
BRA Extension: (Read Aloud: A Text to Speech Voice Reader) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\hdhinadidafjejdhmfkjgnolgimiaplp [2023-05-28]
BRA Extension: (Volume Master) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jghecgabfgfdldnmbfkhmffcabddioke [2023-03-06]
BRA Extension: (Youtube-shorts block) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jiaopdjbehhjgokpphdfgmapkobbnmjp [2023-06-17]
BRA Extension: (CSGOFloat Market Checker) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\jjicbefpemnphinccgikpdaagjebbnhg [2023-06-16]
BRA Extension: (CSGO Trader - Steam Trading Enhancer) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\kaibcgikagnkfgjnibflebpldakfhfih [2023-05-26]
BRA Extension: (Steam Artwork Hub Essentials) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\kdappijekicdbempkjaahnnmkookhfnj [2022-04-28]
BRA Extension: (ColorPick Eyedropper) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ohcpnigalekghcmgcdcenkpelffpdolg [2023-06-18]
BRA Profile: C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\Guest Profile [2023-01-16]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2023-06-17]
BRA Extension: (Brave NTP background images) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-06-09]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2023-06-20]
BRA Extension: (Wallet Data Files Updater) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2023-06-19]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2023-06-20]
BRA Extension: (Brave Ad Block Updater (Default)) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\cffkpbalmllkdoenhmdmpbkajipdjfam [2022-12-01]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2023-05-25]
BRA Extension: (Brave NTP sponsored images) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\gccbbckogglekeggclmmekihdgdpdgoe [2021-10-05]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-05-12]
BRA Extension: (Brave Ad Block Updater (Default (plaintext))) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2023-06-20]
BRA Extension: (Brave SpeedReader Updater) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\jicbkmdloagakknpihibphagfckhjdih [2022-03-10]
BRA Extension: (Brave Ad Block Updater (Easylist-Cookie List - Filter Obtrusive Cookie Notices)) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfgnenkkneohplacnfabidofpgcdpofm [2022-12-01]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2023-06-06]
BRA Extension: (Brave NTP sponsored images) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2023-06-20]
BRA Extension: (Crypto Wallets) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\odbfpeeihdkbihmopkbjmoonfanlbfcl [2020-12-03]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\*****\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-06-20]
StartMenuInternet: Brave - C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S4 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3739728 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
S4 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3511376 2020-09-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3853384 2022-08-12] (philandro Software GmbH -> AnyDesk Software GmbH)
S4 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8395968 2020-05-22] (BattlEye Innovations e.K. -> )
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-04-09] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-04-09] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveVpnService; C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\114.1.52.126\brave_vpn_helper.exe [3057176 2023-06-14] (Brave Software, Inc. -> Brave Software, Inc.)
R2 Ds3Service; C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpService.exe [389632 2016-01-10] (Scarlet.Crush Productions) [Datei ist nicht signiert] [Datei wird verwendet]
S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [10456168 2023-04-06] (Electronic Arts, Inc. -> Electronic Arts)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [803440 2021-06-30] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2021-11-22] (Even Balance, Inc. -> )
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2703192 2022-12-18] (Rockstar Games, Inc. -> Rockstar Games)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [336208 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 updater; C:\Program Files\Nefarius Software Solutions\ScpToolkit\ScpUpdater.exe [464384 2016-01-10] (Nefarius Software Solutions) [Datei ist nicht signiert]
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe [3232576 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe [133592 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 BraveElevationService; "C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\114.1.52.126\elevation_service.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_50916785244854f2\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_50916785244854f2\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [63392 2020-06-16] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R3 DroidCam; C:\WINDOWS\System32\drivers\droidcam.sys [32240 2020-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Dev47Apps)
R3 DroidCamVideo; C:\WINDOWS\System32\DriverStore\FileRepository\droidcamvideo.inf_amd64_47e18363cbf3dfe0\droidcamvideo.sys [33784 2021-04-10] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
R1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 gdrv3; C:\WINDOWS\gdrv3.sys [36352 2021-06-30] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)
S3 iriuna0; C:\WINDOWS\system32\drivers\iriuna0.sys [46976 2021-04-06] (Iriun Oy -> Windows (R) Win 7 DDK provider)
S3 iriunvid; C:\WINDOWS\System32\DriverStore\FileRepository\iriunvid.inf_amd64_031604b3a1860b9d\iriunvid.sys [164992 2022-05-05] (Iriun Oy -> Windows (R) Win 7 DDK provider)
S3 libusbK; C:\WINDOWS\System32\drivers\libusbK.sys [47200 2020-09-19] (Travis Lee Robinson -> hxxp://libusb-win32.sourceforge.net)
R1 MSIO; C:\WINDOWS\system32\drivers\MsIo64.sys [17424 2021-06-30] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
R3 NvModuleTracker; C:\WINDOWS\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [45656 2022-07-14] (Nvidia Corporation -> NVIDIA Corporation)
S3 RzSynapse; C:\WINDOWS\System32\drivers\RzSynapse.sys [126464 2011-11-15] (Razer USA Ltd) [Datei ist nicht signiert]
R3 ScpVBus; C:\WINDOWS\System32\drivers\ScpVBus.sys [39168 2013-05-19] (Bruce James -> Scarlet.Crush Productions)
S3 SnapCameraVirtualDevice; C:\WINDOWS\System32\drivers\SnapCameraVirtualDevice.sys [2800232 2020-10-12] (Snap Inc. -> Windows (R) Win 7 DDK provider)
S3 VBAudioVACMME; C:\WINDOWS\System32\drivers\vbaudio_cable64_win7.sys [41192 2014-09-03] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBAudioVMVAIOMME; C:\WINDOWS\System32\drivers\vbaudio_vmvaio64_win10.sys [71712 2022-12-13] (Vincent Burel -> Windows (R) Win 7 DDK provider)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2023-06-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99568 2023-06-14] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-06-21 00:42 - 2023-06-21 00:42 - 000030443 _____ C:\Users\*****\Downloads\FRST.txt
2023-06-21 00:41 - 2023-06-21 00:42 - 000000000 ____D C:\FRST
2023-06-21 00:41 - 2023-06-21 00:41 - 002383360 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2023-06-14 12:27 - 2023-06-14 12:27 - 000000000 ___HD C:\$WinREAgent
2023-06-09 01:01 - 2023-06-09 01:01 - 000000000 ____D C:\Users\*****\Documents\FBX Converter 2013.3
2023-06-09 00:56 - 2023-06-09 01:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Autodesk
2023-06-09 00:56 - 2023-06-09 00:56 - 000000000 ____D C:\Program Files\Autodesk
2023-06-02 02:24 - 2023-06-02 02:24 - 000000753 _____ C:\Users\*****\AppData\Roaming\PureRef.ini
2023-06-02 01:27 - 2023-06-02 01:22 - 2681571328 _____ C:\Users\*****\Documents\linuxmint-21.1-cinnamon-64bit.iso
2023-06-02 00:34 - 2023-06-02 00:34 - 000000000 ____D C:\Users\*****\AppData\Local\Eraser 6
2023-06-01 23:56 - 2023-06-20 20:22 - 000000000 ____D C:\Users\*****\Documents\testdisk-7.2-WIP
2023-06-01 23:19 - 2023-06-01 23:19 - 000001828 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eraser.lnk
2023-06-01 23:19 - 2023-06-01 23:19 - 000000000 ____D C:\Program Files\Eraser
2023-05-29 19:16 - 2023-05-29 19:16 - 000000000 ____H C:\Users\*****\Documents\Default.rdp
2023-05-29 16:51 - 2023-05-29 01:39 - 139370248 _____ (Balena Ltd.) C:\Users\*****\Documents\balenaEtcher-Portable-1.18.4.exe
2023-05-27 22:08 - 2023-05-28 19:56 - 000000000 ____D C:\Program Files\Mozilla Firefox

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-06-21 00:35 - 2021-12-17 14:04 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-06-21 00:35 - 2020-01-31 01:36 - 000000000 ____D C:\Program Files (x86)\Google
2023-06-21 00:31 - 2022-09-18 17:13 - 000000000 ____D C:\ProgramData\NVIDIA
2023-06-21 00:31 - 2020-02-28 21:03 - 000000000 ____D C:\Users\*****\AppData\Local\CrashDumps
2023-06-21 00:29 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-06-21 00:22 - 2020-11-11 02:28 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-06-20 22:57 - 2020-01-31 18:11 - 000000000 ____D C:\Users\*****\AppData\Roaming\Mozilla
2023-06-20 22:17 - 2020-01-31 02:18 - 000000000 ____D C:\Users\*****\AppData\Roaming\Discord
2023-06-20 22:17 - 2020-01-31 02:18 - 000000000 ____D C:\Users\*****\AppData\Local\Discord
2023-06-20 17:51 - 2020-01-31 01:59 - 000000000 ____D C:\Program Files (x86)\Steam
2023-06-20 17:50 - 2020-11-11 02:32 - 000003654 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA
2023-06-20 17:50 - 2020-11-11 02:32 - 000003530 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore
2023-06-20 00:34 - 2020-11-10 23:10 - 000000000 ____D C:\Users\*****
2023-06-20 00:33 - 2022-02-10 11:42 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-06-20 00:33 - 2020-01-31 18:11 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla
2023-06-19 20:41 - 2022-02-14 11:40 - 000000000 ____D C:\Users\*****\AppData\Local\JDownloader 2.0
2023-06-18 15:34 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-06-18 15:34 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-06-17 14:37 - 2020-06-15 20:48 - 000002436 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-06-16 19:42 - 2020-11-11 18:12 - 001722792 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-06-16 19:42 - 2019-12-07 16:50 - 000743714 _____ C:\WINDOWS\system32\perfh007.dat
2023-06-16 19:42 - 2019-12-07 16:50 - 000150136 _____ C:\WINDOWS\system32\perfc007.dat
2023-06-16 19:42 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-06-16 19:35 - 2021-09-28 16:46 - 000000589 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics
2023-06-16 19:35 - 2021-09-28 16:41 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK
2023-06-16 19:35 - 2020-11-11 02:32 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-06-16 19:35 - 2020-11-11 02:28 - 000008192 ___SH C:\DumpStack.log.tmp
2023-06-16 18:07 - 2019-12-07 11:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-06-16 18:05 - 2020-02-02 23:18 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\MMC
2023-06-16 15:28 - 2020-01-31 01:36 - 000002293 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-06-16 15:24 - 2020-09-20 16:27 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-06-16 15:22 - 2020-11-11 02:32 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-06-16 15:22 - 2020-11-11 02:32 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-06-15 18:49 - 2020-02-01 01:02 - 000000000 ____D C:\Users\*****\AppData\Roaming\obs-studio
2023-06-14 23:25 - 2020-04-09 23:45 - 000002410 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2023-06-14 12:59 - 2022-03-25 07:18 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2023-06-14 12:59 - 2021-09-28 16:40 - 000000000 ____D C:\Program Files\Hyper-V
2023-06-14 12:59 - 2021-09-28 16:37 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-06-14 12:59 - 2020-11-11 02:28 - 000367784 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-06-14 12:59 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-06-14 12:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-06-14 12:30 - 2020-11-11 02:32 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-06-14 12:27 - 2020-01-31 02:22 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-06-14 12:23 - 2020-01-31 02:22 - 170078616 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-06-14 12:18 - 2020-01-31 08:30 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-06-12 16:35 - 2022-07-05 04:11 - 000000804 _____ C:\ProgramData\droidcam-client-options-v2
2023-06-12 16:35 - 2022-07-05 04:11 - 000000409 _____ C:\ProgramData\droidcam-settings
2023-06-10 18:26 - 2020-01-31 21:08 - 000000000 ____D C:\Program Files (x86)\RivaTuner Statistics Server
2023-06-10 18:13 - 2020-01-31 21:08 - 000000000 ____D C:\Program Files (x86)\MSI Afterburner
2023-06-10 14:33 - 2022-09-18 17:11 - 000000000 ____D C:\Users\*****\AppData\Local\D3DSCache
2023-06-08 23:41 - 2020-11-11 02:32 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-06-08 23:41 - 2020-11-11 02:32 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-06-07 20:44 - 2020-02-03 17:57 - 000000000 ____D C:\Users\*****\Downloads\Blender Downloads
2023-06-02 01:27 - 2021-11-10 15:17 - 000000000 ____D C:\Users\*****\AppData\Roaming\balena-etcher
2023-05-31 23:01 - 2023-01-20 11:59 - 000000000 ____D C:\Users\*****\Documents\Peace backup
2023-05-28 19:56 - 2021-10-08 23:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-05-28 13:15 - 2020-01-31 01:47 - 000000000 ____D C:\Users\*****\AppData\Local\Comms
2023-05-28 13:09 - 2021-05-03 21:05 - 000000000 ____D C:\Users\*****\AppData\Roaming\vlc
2023-05-28 00:11 - 2021-10-08 23:05 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-05-25 17:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2022-12-30 03:39 - 2022-12-30 23:35 - 000000097 _____ () C:\Users\*****\AppData\Roaming\LauncherSettings_live.cfg
2023-04-07 10:49 - 2023-04-07 10:49 - 000000016 _____ () C:\Users\*****\AppData\Roaming\msregsvv.dll
2021-07-04 21:37 - 2022-09-23 19:16 - 000000016 _____ () C:\Users\*****\AppData\Roaming\obs-virtualcam.txt
2023-06-02 02:24 - 2023-06-02 02:24 - 000000753 _____ () C:\Users\*****\AppData\Roaming\PureRef.ini
2022-12-30 01:13 - 2022-12-30 01:30 - 000016776 _____ () C:\Users\*****\AppData\Roaming\TheHunterSettings_live.bin
2022-12-13 08:44 - 2023-04-06 15:35 - 000008170 _____ () C:\Users\*****\AppData\Roaming\VoiceMeeterDefault.xml
2020-09-21 17:08 - 2020-09-21 17:08 - 000000000 _____ () C:\Users\*****\AppData\Local\oobelibMkey.log
2021-12-07 12:12 - 2021-12-07 12:12 - 000000740 _____ () C:\Users\*****\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================