ad.doubleclick.net werde ich nicht los

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 06-10-2023
durchgeführt von *** (Administrator) auf DESKTOP-RS0PC19 (LENOVO 20L8S02D00) (14-10-2023 00:14:32)
Gestartet von C:\Users\***\Desktop\FRST64.exe
Geladene Profile: ***
Plattform: Microsoft Windows 10 Education Version 22H2 19045.3570 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Chrome
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantage-(LenovoServiceBridgeAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Elantech\ETDCtrl.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(C:\Program Files\Elantech\ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe ->) (Logitech Inc -> ) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\crashpad_handler.exe
(C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe ->) (Logitech Inc -> Logitech Europe S.A.) C:\Program Files\Logitech\Collaboration\Services\Video\RightSightAPI\RightSightService.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <4>
(C:\Program Files\RogueKiller\RogueKillerSvc.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKiller64.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Microsoft Corporation) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\WebView2\msedgewebview2.exe <7>
(C:\Users\***\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\***\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-connect.exe
(C:\Users\***\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe ->) (Synology Inc. -> Synology Inc.) C:\Users\***\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-daemon.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxEM.exe
(DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\shtctky.exe
(DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\FNCC3C~1.INF\driver\tposd.exe
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(explorer.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\iCloudServices.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Inc.) [Datei ist nicht signiert] C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe
(explorer.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5185.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <16>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (Now.gg, INC -> now.gg, Inc.) C:\Users\***\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe <4>
(explorer.exe ->) (VideoLAN -> VideoLAN) C:\Program Files\VideoLAN\VLC\vlc.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.312\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.312\GoogleCrashHandler64.exe
(Key for TBT Legacy Driver -> Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\Thunderbolt.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\23.199.0924.0001\Microsoft.SharePoint.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(services.exe ->) (ADLICE -> ) C:\Program Files\RogueKiller\RogueKillerSvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (HP) [Datei ist nicht signiert] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_021eceaa8ff1503d\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a1e7755eb10c8b98\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_a1e7755eb10c8b98\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Key for TBT Legacy Driver -> Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\tphkload.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Windows\SysWOW64\EasyResume.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\LITSSvc.exe
(services.exe ->) (Logitech Inc -> Logitech) C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftCorporationII.WindowsSubsystemForLinux_1.2.5.0_x64__8wekyb3d8bbwe\wslservice.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\Microsoft Update Health Tools\uhssvc.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synology Inc. -> ) C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2340.9.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_14.2.108.0_x64__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (EB51A5DA-0E72-4863-82E4-EA21C1F8DFE3 -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.5185.0_x64__8j3eq9eme6ctt\IGCC.exe
(svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_14ddcd953a744ac8\igfxext.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Synology Inc. -> Synology Inc.) C:\Users\***\AppData\Local\SynologyDrive\SynologyDrive.app\bin\cloud-drive-ui.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [] => [X]
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-11] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-22] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [TeamsMachineInstaller] => C:\Program Files (x86)\Teams Installer\Teams.exe [138214768 2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Acrotray.exe [5267168 2021-10-12] (Adobe Inc. -> Adobe Systems Inc.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [] => [X]
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" (Keine Datei)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" [64799664 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2588592 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [] => [X]
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\***\AppData\Local\Microsoft\Teams\Update.exe [2589872 2023-10-09] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [electron.app.BlueStacks Services] => C:\Users\***\AppData\Local\Programs\bluestacks-services\BlueStacksServices.exe [162219656 2023-09-18] (Now.gg, INC -> now.gg, Inc.)
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [MicrosoftEdgeAutoLaunch_2265847B6A84292940F9A01AAB296638] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4210232 2023-10-06] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-778626503-1836525963-3679822317-1001\...\Run: [LenovoVantage] => C:\ProgramData\Lenovo\Vantage\Addins\LenovoCompanionAppAddin\1.0.0.35\LenovoVantage.exe [23976 2023-06-14] (Lenovo -> Lenovo)
HKLM\...\Windows x64\Print Processors\hpcpp120: C:\Windows\System32\spool\prtprocs\x64\hpcpp120.DLL [342016 2012-01-27] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)
HKLM\...\Windows x64\Print Processors\us016PC: C:\Windows\System32\spool\prtprocs\x64\us016pc.dll [61736 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [65160 2021-10-05] (Adobe Inc. -> Adobe Systems Inc)
HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Datei ist nicht signiert]
HKLM\...\Print\Monitors\us016 Langmon: C:\Windows\system32\us016lm.dll [40744 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\118.0.5993.70\Installer\chrmstp.exe [2023-10-11] (Google LLC -> Google LLC)
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2023-07-04]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Synology Drive Client.lnk [2023-10-13]
ShortcutTarget: Synology Drive Client.lnk -> C:\Program Files (x86)\Synology\SynologyDrive\bin\launcher.exe (Synology Inc. -> Synology Inc.)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {52A1D011-4680-489D-94BD-1478396597C6} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe  (Keine Datei)
Task: {81339B19-6B19-4157-A973-D1206635E37F} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3571168 2023-08-22] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {45FD57F0-A2C5-45A1-B26A-3A0D6EAF9DB9} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3807712 2023-08-22] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {E1EA70B3-FCE0-4EC3-AC28-38749C612095} - System32\Tasks\BlueStacksHelper_nxt => C:\Program Files\BlueStacks_nxt\BlueStacksHelper.exe [302968 2023-08-29] (Now.gg, INC -> BlueStack Systems, Inc.)
Task: {DB0946DE-F1A3-470C-B0F5-F28FF4473C1F} - System32\Tasks\GoogleUpdateTaskMachineCore{59EC8E0A-982F-4BB4-AE08-C00B474EB6DA} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-17] (Google LLC -> Google LLC)
Task: {4670A595-DCAB-4A7B-8BCF-35245DC69D5B} - System32\Tasks\GoogleUpdateTaskMachineUA{586C3629-22F6-49C8-9DA2-6D9003365305} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [171480 2023-02-17] (Google LLC -> Google LLC)
Task: {C125180A-7301-4768-8C3F-4AC525070A94} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 ] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {9DF8435C-F6AB-4684-894E-EBB14E66CBC6} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 ] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {F89B782F-6C95-43B9-A2F2-7D84625CE584} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 ] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {0E79976C-0A08-4E0E-86AC-DC9DE1EB916D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2311216 ] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {0CF97E91-17BB-4A12-9E33-6B02354ED5D0} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start ThunderboltService
Task: {87FB0F5C-431D-4539-9DFD-8914FAFC40A4} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\Windows\system32\ImController.InfInstaller.exe [74952 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {4F52DFE2-5C80-410A-BF58-21BF7B1E67D8} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {F9C0068B-5026-490D-BBE4-D9A7B22F2069} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\Windows\System32\reg.exe [77312 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {D993F21B-64F3-45BC-831C-EC2012B3DFD6} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\4cc34d8a-3cad-4a1c-a938-48fd35d5f8f8 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {2316A7BA-6BBE-45E1-BB92-BCC74255311D} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\86dab3eb-ea90-4a14-9139-204014e4b4b5 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {D80629FF-B0CE-4B2C-B924-392DEC61B500} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a0cc378a-a4ca-43be-8eda-2d832a6910e1 => C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
Task: {8A64DD0F-00B7-40B0-B9BF-399CB9FFDE30} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [129016 2022-12-05] (Lenovo -> Lenovo)
Task: {169A5F6B-2800-404C-B398-786E4DD1A537} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\Windows\SysWOW64\PowerMgrInst.exe [64984 2022-05-17] (Lenovo -> )
Task: {DFE363AE-C67A-459A-B9BF-E09CE63341C9} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\Windows\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {8DEBC769-894A-4436-BA12-53B6121C9884} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {2D78401B-0A67-49A4-B5BB-DAC66DC5B548} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {F8BE8F00-47AB-43BA-8B81-9111123CC090} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {7F327951-57B7-45A7-AC72-326FA8A97A44} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {D3C37288-86AB-4BCC-975F-40D0817A690B} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {EB51629C-E7AE-499B-870C-E7F24F2716F4} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBoostAddin.Prompt => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {DA8981EB-8AC6-4ACB-A6F9-833C3F273156} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {2234C5AA-42DA-4E19-98BC-8F8C35747179} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {A7051ED6-EB79-48BA-BD26-92BE697A1B42} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {61101A5C-3E9E-4B0D-9B97-95964A5E2705} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe [30040 2023-07-14] (Lenovo -> Lenovo)
Task: {A074143F-65C6-4A86-AC90-CA0BDB330F36} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26974216 2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D4EAAB4-D3FE-4BBD-9863-4F90A0ED8FEC} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26974216 2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {032D4D58-F533-4A5E-99B0-920BFF142B7A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160920 2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {D3A8019D-5C5E-4656-B7F8-B675B506D716} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [160920 2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {FF1D95BF-C314-4B78-B847-15630BFB7C02} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169136 2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
Task: {3B555F7F-6991-4B02-A060-FBA8A84654A9} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F0AD858A-1D90-476D-87BB-40EF650AEA7F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {79A86FC5-2B37-4EC9-B4F9-2A2475DE92AF} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {58EC077E-7462-46C3-9681-1D8AAEAC6715} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MpCmdRun.exe [1596304 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {002C7A41-A870-4944-A156-FCCCE19BF864} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130720 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {E91EBEC8-5DD7-488C-AF16-33DC7ECAE8AB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-778626503-1836525963-3679822317-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4130720 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {DE363A33-B040-43FA-B53D-3B60B0F81B7E} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {C180FC34-DBB6-4028-B7BB-CE984A2F3748} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {24AB443B-F216-4CB4-9A5D-93A2230EFD6E} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {E5CE6394-0B39-48BB-A9E9-464EB7C63F54} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1900320 2023-01-19] (Lenovo -> )
Task: {0BDFBC9E-15BB-40A7-85D2-5B00AEAF7870} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1900320 2023-01-19] (Lenovo -> )

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.84
Tcpip\..\Interfaces\{625bca34-44b4-4e0a-941f-d7b1ddf7f2fb}: [DhcpNameServer] 192.168.1.84
Tcpip\..\Interfaces\{a65146df-47c5-4f7a-8d7e-309c96c391c7}: [DhcpNameServer] 192.168.1.84

Edge: 
=======
Edge Profile: C:\Users\***\AppData\Local\Microsoft\Edge\User Data\Default [2023-10-13]
Edge Extension: (Google Docs Offline) - C:\Users\***\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Edge relevant text changes) - C:\Users\***\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-21]

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-10-05]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-08-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2023-08-02] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-10-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2021-10-05] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\***\AppData\Local\Google\Chrome\User Data\Default [2023-10-14]
CHR HomePage: Default -> hxxp://google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/?gws_rd=ssl"
CHR Session Restore: Default -> ist aktiviert.
CHR Extension: (Google Übersetzer) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2023-03-23]
CHR Extension: (AdGuard Werbeblocker) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\bgnkhhnnamicmpeenaelnjfhikgbkllg [2023-10-10]
CHR Extension: (Adobe Acrobat: Werkzeuge zum Bearbeiten, Konvertieren und Signieren von PDF-Dateien) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-09-26]
CHR Extension: (MyJDownloader Browser Erweiterung) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\fbcohnmimjicjdomonkcbcpbpnhggkip [2023-02-17]
CHR Extension: (NordVPN - VPN Proxy for Privacy and Security) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\fjoaledfpmneenckfbpdfhkmimnjocfa [2023-10-12]
CHR Extension: (iCloud-Lesezeichen) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2023-02-17]
CHR Extension: (Google Docs Offline) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-02-17]
CHR Extension: (Speechnotes - Diktier-Notepad) - C:\Users\***\AppData\Local\Google\Chrome\User Data\Default\Extensions\opekipbefdbacebgkjjdgoiofdbhocok [2023-02-17]
CHR Profile: C:\Users\***\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-22]
CHR Profile: C:\Users\***\AppData\Local\Google\Chrome\User Data\System Profile [2023-06-05]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [fjoaledfpmneenckfbpdfhkmimnjocfa]

Opera: 
=======
OPR Profile: C:\Users\***\AppData\Roaming\Opera Software\Opera Stable [2023-09-06]
OPR DefaultSearchURL: Opera Stable -> hxxps://www.google.com/search?client=opera&q={searchTerms}&sourceid=opera&ie={inputEncoding}&oe={outputEncoding}
OPR DefaultSearchKeyword: Opera Stable -> g
OPR Extension: (Rich Hints Agent) - C:\Users\***\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2023-03-31]
OPR Extension: (Opera Wallet) - C:\Users\***\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2023-05-15]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\***\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2023-03-31]
OPR Extension: (Opera AI Prompts) - C:\Users\***\AppData\Roaming\Opera Software\Opera Stable\Extensions\mljbnbeedpkgakdchcmfapkjhfcogaoc [2023-05-15]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3966432 2023-08-22] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12859472 2023-09-27] (Microsoft Corporation -> Microsoft Corporation)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2020-06-02] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.199.0924.0001\FileSyncHelper.exe [3503544 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-25] (HP) [Datei ist nicht signiert]
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230352 2023-09-06] (HP Inc. -> HP Inc.)
R2 IBMPMSVC; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmsvc.exe [850936 2022-11-24] (Lenovo -> Lenovo)
R2 ImControllerService; C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [93896 2022-11-20] (Lenovo -> Lenovo Group Ltd.)
R2 Lenovo Instant On; C:\Windows\SysWOW64\EasyResume.exe [2352368 2022-05-17] (Lenovo -> Lenovo Group Limited)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\LenovoVantageService.exe [34176 2023-07-14] (Lenovo -> Lenovo)
R2 LITSSVC; C:\Windows\System32\LITSSvc.exe [1260488 2023-01-17] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\LPlatSvc.exe [906232 2022-11-24] (Lenovo -> Lenovo)
R2 nebula; C:\Program Files\Logitech\Collaboration\Services\Video\ServiceLayer.exe [4489352 2019-06-12] (Logitech Inc -> Logitech)
S2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.199.0924.0001\OneDriveUpdaterService.exe [3840432 2023-10-13] (Microsoft Corporation -> Microsoft Corporation)
S2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]
R2 rkrtservice; C:\Program Files\RogueKiller\RogueKillerSvc.exe [16014768 2023-09-18] (ADLICE -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402264 2023-10-11] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 Synology Drive VSS Service x64; C:\Program Files (x86)\Synology\SynologyDrive\bin\vss-service-x64.exe [360320 2023-02-02] (Synology Inc. -> )
R2 TPHKLOAD; C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\TPHKLOAD.exe [473760 2021-10-22] (Lenovo -> Lenovo Group Limited)
S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [805224 2023-04-17] (Oracle Corporation -> Oracle and/or its affiliates)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\NisSrv.exe [3116904 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe [133584 2023-10-05] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AKCCID; C:\Windows\System32\drivers\AKCCID.sys [65888 2019-06-24] (Alcorlink Corp. -> Generic)
R2 BlueStacksDrv_nxt; C:\Program Files\BlueStacks_nxt\BstkDrv_nxt.sys [310672 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Bluestack System Inc.)
S3 CH341SER_A64; C:\Windows\System32\Drivers\CH341S64.SYS [78328 2021-08-25] (Microsoft Windows Hardware Compatibility Publisher -> www.winchiphead.com)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 EnigmaFileMonDriver; C:\Windows\system32\Drivers\EnigmaFileMonDriver.sys [84032 2023-10-11] (Microsoft Windows Hardware Compatibility Publisher -> EnigmaSoft Limited)
R3 IBMPMDRV; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\ibmpmdrv.sys [53240 2022-11-24] (Lenovo -> Lenovo)
R3 MpKsl91be00c6; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{A780D4CD-5AC0-48EB-9E23-22CB1D113F33}\MpKslDrv.sys [263560 2023-10-13] (Microsoft Windows -> Microsoft Corporation)
R1 PMDRVS; C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_02d728b29c6492d3\x64\pmdrvs.sys [38904 2022-11-24] (Lenovo -> Lenovo)
U3 RkFlt; C:\Windows\System32\drivers\rkflt.sys [58320 2023-10-11] (ADLICE (Julien Ascoet) -> )
R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [14224 2021-04-01] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [49744 2022-07-14] (nordvpn s.a. -> The OpenVPN Project)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [53696 2023-10-11] (ADLICE (Julien Ascoet) -> )
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [254664 2023-04-17] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [265536 2023-04-17] (Oracle Corporation -> Oracle and/or its affiliates)
R1 VBoxSup; C:\Windows\system32\DRIVERS\VBoxSup.sys [1061440 2023-04-17] (Oracle Corporation -> Oracle and/or its affiliates)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-10-05] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [572712 2023-10-05] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105872 2023-10-05] (Microsoft Windows -> Microsoft Corporation)
S3 WireGuard; C:\Windows\System32\drivers\wireguard.sys [489368 2023-05-07] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-10-14 00:14 - 2023-10-14 00:15 - 000039979 _____ C:\Users\***\Desktop\FRST.txt
2023-10-14 00:11 - 2023-10-14 00:11 - 002383360 _____ (Farbar) C:\Users\***\Desktop\FRST64.exe
2023-10-13 22:17 - 2023-10-13 22:17 - 000000920 _____ C:\Users\Public\Desktop\VLC media player.lnk
2023-10-13 22:01 - 2023-10-13 22:16 - 000000000 ____D C:\Users\***\Downloads\KILCOMANDSD
2023-10-13 21:57 - 2023-10-13 22:16 - 000000000 ____D C:\Users\***\Downloads\SSCLOUDSD
2023-10-11 10:11 - 2023-10-11 10:11 - 000058320 _____ C:\Windows\system32\Drivers\rkflt.sys
2023-10-11 10:11 - 2023-10-11 10:11 - 000053696 _____ C:\Windows\system32\Drivers\truesight.sys
2023-10-11 10:11 - 2023-10-11 10:11 - 000001554 _____ C:\Users\***\AppData\Local\recently-used.xbel
2023-10-11 10:11 - 2023-10-11 10:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\RogueKiller
2023-10-11 10:11 - 2023-10-11 10:11 - 000000000 ____D C:\Program Files\RogueKiller
2023-10-11 09:38 - 2023-10-11 13:35 - 000000000 ____D C:\ProgramData\RogueKiller
2023-10-11 08:10 - 2023-10-11 08:10 - 000016059 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2023-10-11 08:03 - 2023-10-11 08:03 - 000000000 ___HD C:\$WinREAgent
2023-10-11 08:03 - 2023-10-11 08:03 - 000000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2023-10-09 21:17 - 2023-10-09 21:17 - 000002408 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams classic.lnk
2023-10-08 22:42 - 2023-10-08 22:42 - 000000571 _____ C:\Users\***\Test-Main.py
2023-10-06 07:46 - 2023-10-06 07:46 - 000000000 ____D C:\zing_driver
2023-10-04 17:07 - 2023-10-04 17:07 - 000001068 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2021.lnk
2023-10-04 17:07 - 2023-10-04 17:07 - 000000000 ____D C:\Program Files\Adobe
2023-10-04 16:43 - 2023-10-11 10:22 - 000000000 ____D C:\Users\***\AppData\Local\babl-0.1
2023-10-04 16:43 - 2023-10-04 16:43 - 000000000 ____D C:\Users\***\AppData\Roaming\GIMP
2023-10-04 16:43 - 2023-10-04 16:43 - 000000000 ____D C:\Users\***\AppData\Local\GIMP
2023-10-04 16:43 - 2023-10-04 16:43 - 000000000 ____D C:\Users\***\AppData\Local\gegl-0.4
2023-10-04 16:43 - 2023-10-04 16:43 - 000000000 ____D C:\Users\***\.cache
2023-10-04 16:42 - 2023-10-04 16:42 - 000000950 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GIMP 2.10.34.lnk
2023-10-04 16:41 - 2023-10-04 16:42 - 000000000 ____D C:\Program Files\GIMP 2
2023-10-04 16:37 - 2023-10-04 16:38 - 318409872 _____ (The GIMP Team ) C:\Users\***\Downloads\gimp-2.10.34-setup-2.exe
2023-10-04 16:33 - 2023-10-04 16:33 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-10-03 22:52 - 2023-10-03 22:52 - 000000000 ____D C:\Program Files\dotnet
2023-10-01 19:09 - 2023-10-01 19:10 - 000043632 _____ (Intel Corporation) C:\Windows\system32\Drivers\pmxdrv.sys
2023-09-29 23:16 - 2023-09-29 23:17 - 000000000 ____D C:\Users\***\Documents\Soundaufnahmen
2023-09-29 16:28 - 2023-09-29 16:28 - 000000000 ____D C:\Users\***\AppData\Local\Jedi
2023-09-29 15:10 - 2023-10-01 19:07 - 000000000 ____D C:\Users\***\Desktop\Pico Programm
2023-09-29 15:01 - 2023-10-08 23:04 - 000000000 ____D C:\Users\***\AppData\Roaming\Thonny
2023-09-29 15:01 - 2023-10-08 23:04 - 000000000 ____D C:\Users\***\AppData\Local\thonny-***
2023-09-29 15:01 - 2023-09-29 15:01 - 000001128 _____ C:\Users\Public\Desktop\Thonny.lnk
2023-09-29 15:01 - 2023-09-29 15:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thonny
2023-09-29 15:01 - 2023-09-29 15:01 - 000000000 ____D C:\Program Files (x86)\Thonny
2023-09-28 18:49 - 2023-10-13 21:22 - 000000000 ___RD C:\Users\***\iCloudDrive
2023-09-26 22:29 - 2023-09-26 22:29 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PuTTY (64-bit)
2023-09-26 22:29 - 2023-09-26 22:29 - 000000000 ____D C:\Program Files\PuTTY
2023-09-26 16:25 - 2023-09-26 16:25 - 000000442 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2023-09-26 16:25 - 2023-09-26 16:25 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\docker-desktop-data
2023-09-26 16:25 - 2023-09-26 16:25 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\docker-desktop
2023-09-26 15:05 - 2023-10-02 11:55 - 000000000 ____D C:\Users\***\.docker
2023-09-26 10:14 - 2023-10-11 08:45 - 000001575 _____ C:\Windows\system32\config\VSMIDK
2023-09-26 10:13 - 2023-10-11 08:41 - 000000000 ___SD C:\Windows\SysWOW64\lxss
2023-09-26 10:13 - 2023-10-11 08:41 - 000000000 ___SD C:\Windows\system32\lxss
2023-09-26 09:45 - 2023-10-02 11:55 - 000000000 ____D C:\Users\***\AppData\Roaming\Docker
2023-09-26 09:45 - 2023-10-02 11:55 - 000000000 ____D C:\ProgramData\DockerDesktop
2023-09-26 09:45 - 2023-09-26 16:25 - 000000000 ____D C:\Users\***\AppData\Local\Docker
2023-09-25 00:01 - 2023-09-25 00:05 - 000000000 ____D C:\Users\***\AppData\Roaming\AVG
2023-09-25 00:01 - 2023-09-25 00:05 - 000000000 ____D C:\Users\***\AppData\Local\AVG
2023-09-25 00:00 - 2023-09-24 23:59 - 000313272 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\avgBoot.exe
2023-09-24 23:58 - 2023-09-25 06:47 - 000000000 ____D C:\ProgramData\AVG
2023-09-24 23:58 - 2023-09-24 23:58 - 000888600 _____ (Google LLC) C:\Users\Public\Documents\gcapi.dll
2023-09-24 23:49 - 2023-10-14 00:14 - 000000000 ____D C:\FRST
2023-09-24 23:17 - 2023-09-24 23:17 - 000000000 ____D C:\ProgramData\Downloaded Installations
2023-09-21 16:20 - 2023-09-21 16:20 - 000000448 __RSH C:\ProgramData\ntuser.pol
2023-09-20 02:55 - 2023-09-20 02:55 - 000061496 _____ (The OpenVPN Project) C:\Windows\system32\Drivers\tapexpressvpn.sys
2023-09-20 02:55 - 2023-09-20 02:55 - 000056552 _____ (ExpressVPN) C:\Windows\system32\Drivers\expressvpn-tun.sys
2023-09-19 21:37 - 2023-09-19 21:37 - 000858443 _____ C:\Users\***\Desktop\Scan_20230919_213705.pdf
2023-09-19 21:32 - 2023-09-19 21:32 - 009740088 _____ C:\Users\***\Desktop\Scan_20230919_213007.pdf
2023-09-19 16:48 - 2023-09-19 16:54 - 000214255 _____ C:\Users\***\Desktop\11C FO Bilder.pdf
2023-09-19 16:42 - 2023-09-19 16:42 - 000003584 _____ C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-09-14 14:03 - 2023-09-14 14:03 - 000000000 ____D C:\vallen
2023-09-14 13:31 - 2023-09-14 13:31 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\HTML Help

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-10-14 00:14 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-10-13 23:42 - 2023-02-17 18:00 - 000000000 ____D C:\Users\***\Documents\Outlook-Dateien
2023-10-13 23:42 - 2023-02-17 18:00 - 000000000 ____D C:\Users\***\Documents\Outlook Files
2023-10-13 23:39 - 2023-02-17 16:47 - 000000000 ____D C:\Program Files (x86)\Google
2023-10-13 23:39 - 2022-09-08 05:13 - 000000000 ____D C:\Windows\SystemTemp
2023-10-13 23:26 - 2023-02-17 16:36 - 000000000 ____D C:\Windows\system32\SleepStudy
2023-10-13 22:35 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness
2023-10-13 22:18 - 2023-02-21 11:17 - 000000000 ____D C:\Users\***\AppData\Roaming\vlc
2023-10-13 22:17 - 2023-02-21 23:38 - 000000000 ____D C:\Users\***\AppData\Local\JDownloader 2.0
2023-10-13 21:26 - 2023-02-17 17:09 - 000000000 ____D C:\Windows\TempInst
2023-10-13 21:26 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF
2023-10-13 21:25 - 2023-07-09 17:56 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2023-10-13 21:25 - 2023-02-18 17:07 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2023-10-13 21:25 - 2023-02-17 17:39 - 000003194 _____ C:\Windows\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2023-10-13 21:25 - 2023-02-17 17:39 - 000002152 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-10-13 21:25 - 2023-02-17 17:00 - 000003592 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-778626503-1836525963-3679822317-1001
2023-10-13 21:23 - 2023-09-04 16:30 - 000000000 ____D C:\Users\***\AppData\Roaming\bluestacks-services
2023-10-13 21:23 - 2023-03-14 09:28 - 000000000 ____D C:\Users\***\AppData\Local\SynologyDrive
2023-10-13 21:22 - 2023-02-17 17:09 - 000000000 __SHD C:\Users\***\IntelGraphicsProfiles
2023-10-13 21:22 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-10-12 12:29 - 2023-02-17 16:50 - 000000000 ____D C:\Users\***\AppData\Local\D3DSCache
2023-10-12 11:44 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ServiceState
2023-10-11 16:57 - 2023-02-17 16:40 - 001723516 _____ C:\Windows\system32\PerfStringBackup.INI
2023-10-11 16:57 - 2019-12-07 16:51 - 000746612 _____ C:\Windows\system32\perfh007.dat
2023-10-11 16:57 - 2019-12-07 16:51 - 000150982 _____ C:\Windows\system32\perfc007.dat
2023-10-11 09:36 - 2023-02-17 17:02 - 000000000 ____D C:\Intel
2023-10-11 09:36 - 2023-02-17 16:36 - 000008192 ___SH C:\DumpStack.log.tmp
2023-10-11 09:36 - 2023-02-17 16:36 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-10-11 09:35 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2023-10-11 09:35 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI
2023-10-11 08:42 - 2023-02-17 16:36 - 000461648 _____ C:\Windows\system32\FNTCACHE.DAT
2023-10-11 08:41 - 2019-12-07 16:54 - 000000000 ___SD C:\Windows\system32\AppV
2023-10-11 08:41 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-10-11 08:41 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-10-11 08:41 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-10-11 08:41 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\SysWOW64\de
2023-10-11 08:41 - 2019-12-07 16:51 - 000000000 ____D C:\Windows\system32\de
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\UNP
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\F12
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Sysprep
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lv-LV
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\lt-LT
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\et-EE
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\es-MX
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Com
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\appraiser
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\Provisioning
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\IME
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Windows Defender
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2023-10-11 08:41 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-10-11 08:41 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing
2023-10-11 08:17 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp
2023-10-11 08:16 - 2019-12-07 16:54 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2023-10-11 08:16 - 2019-12-07 11:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2023-10-11 08:16 - 2019-12-07 11:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2023-10-11 08:10 - 2023-02-17 16:38 - 003014144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2023-10-11 08:00 - 2023-02-17 16:54 - 000000000 ____D C:\Windows\system32\MRT
2023-10-11 07:56 - 2023-02-17 16:54 - 181553176 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2023-10-11 07:24 - 2023-02-17 16:48 - 000002243 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-10-10 10:54 - 2023-09-04 16:29 - 000000000 ____D C:\ProgramData\BlueStacks_nxt
2023-10-10 10:35 - 2023-02-22 15:54 - 000000000 ____D C:\ProgramData\boost_interprocess
2023-10-10 00:46 - 2023-02-18 17:07 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Teams
2023-10-08 22:42 - 2023-02-17 16:42 - 000000000 ____D C:\Users\***
2023-10-08 20:27 - 2023-09-02 15:06 - 000000000 ____D C:\Users\***\AppData\Local\ElevatedDiagnostics
2023-10-08 20:17 - 2023-02-17 16:36 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-10-06 17:02 - 2023-02-17 16:42 - 000000000 ___SD C:\Users\***\AppData\Roaming\Microsoft\Credentials
2023-10-05 21:28 - 2023-04-04 11:38 - 000002338 ____H C:\Users\***\Documents\Default.rdp
2023-10-05 09:51 - 2023-02-17 16:36 - 000000000 ____D C:\Windows\system32\Drivers\wd
2023-10-04 17:18 - 2023-02-17 17:55 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Word
2023-10-04 17:09 - 2023-02-17 18:19 - 000000000 ____D C:\Users\***\AppData\Local\Adobe
2023-10-04 17:08 - 2023-02-17 18:27 - 000000000 ____D C:\Program Files\Common Files\Adobe
2023-10-04 17:08 - 2023-02-17 16:42 - 000000000 ____D C:\Users\***\AppData\Roaming\Adobe
2023-10-04 16:44 - 2023-05-18 16:05 - 000000000 ____D C:\Users\***\AppData\Local\CrashDumps
2023-10-04 16:33 - 2023-02-17 17:32 - 000000000 ____D C:\Program Files\Microsoft Office
2023-10-04 12:15 - 2023-02-17 16:42 - 000000000 ____D C:\Users\***\AppData\Local\Packages
2023-10-03 23:24 - 2023-02-17 16:56 - 000000000 ____D C:\ProgramData\Package Cache
2023-10-01 22:38 - 2023-03-28 22:46 - 000000000 ___RD C:\Users\***\OneDrive - Friedrich-Dessauer-Schule Limburg
2023-09-30 23:57 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\LiveKernelReports
2023-09-29 23:22 - 2023-02-17 18:57 - 000000000 ____D C:\Users\***\AppData\Local\PlaceholderTileLogoFolder
2023-09-26 22:30 - 2023-02-28 19:38 - 000000128 _____ C:\Users\***\AppData\Local\PUTTY.RND
2023-09-26 16:18 - 2023-02-17 16:42 - 000000000 ____D C:\ProgramData\Packages
2023-09-26 09:49 - 2019-12-07 11:09 - 000041784 _____ (Microsoft Corporation) C:\Windows\system32\NvAgent.dll
2023-09-26 09:49 - 2019-12-07 11:09 - 000039440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\passthruparser.sys
2023-09-26 09:49 - 2019-12-07 11:09 - 000031544 _____ (Microsoft Corporation) C:\Windows\system32\vmcomputeeventlog.dll
2023-09-26 09:49 - 2019-12-07 11:09 - 000012816 _____ (Microsoft Corporation) C:\Windows\system32\f989b52d-f928-44a3-9bf1-bf0c1da6a0d6_HyperV-DeviceVirtualization.dll
2023-09-26 09:49 - 2019-12-07 11:09 - 000012600 _____ (Microsoft Corporation) C:\Windows\system32\d4d78066-e6db-44b7-b5cd-2eb82dce620c_HyperV-ComputeLegacy.dll
2023-09-26 09:49 - 2019-12-07 11:09 - 000012600 _____ (Microsoft Corporation) C:\Windows\system32\c4d66f00-b6f0-4439-ac9b-c5ea13fe54d7_HyperV-ComputeCore.dll
2023-09-26 09:49 - 2019-12-07 11:09 - 000012304 _____ (Microsoft Corporation) C:\Windows\system32\07409496-a423-4a3e-b620-2cfb01a9318d_HyperV-ComputeNetwork.dll
2023-09-25 07:06 - 2023-03-09 12:09 - 000000000 ____D C:\Users\***\AppData\Roaming\Microsoft\Excel
2023-09-25 00:00 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2023-09-24 23:22 - 2023-02-18 17:01 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2023-09-20 23:03 - 2019-12-07 11:14 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2023-09-19 06:34 - 2023-02-17 16:47 - 000004002 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA{586C3629-22F6-49C8-9DA2-6D9003365305}
2023-09-19 06:34 - 2023-02-17 16:47 - 000003878 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore{59EC8E0A-982F-4BB4-AE08-C00B474EB6DA}
2023-09-18 17:46 - 2023-09-04 16:30 - 000002482 _____ C:\Users\***\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BlueStacks Services.lnk

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-09-19 16:42 - 2023-09-19 16:42 - 000003584 _____ () C:\Users\***\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-07-10 07:32 - 2023-07-10 07:32 - 000000000 _____ () C:\Users\***\AppData\Local\oobelibMkey.log
2023-02-28 19:38 - 2023-09-26 22:30 - 000000128 _____ () C:\Users\***\AppData\Local\PUTTY.RND
2023-10-11 10:11 - 2023-10-11 10:11 - 000001554 _____ () C:\Users\***\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================