Windowns 10: Defender findet mehrere Trojaner und ich erhalte Erpresser-Mails.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 01.01.2024
durchgeführt von ichbi (Administrator) auf JULIAN-PC-STUDI (Micro-Star International Co., Ltd. MS-7C37) (04-01-2024 14:32:52)
Gestartet von C:\Users\ichbi\Downloads\FRST64.exe
Geladene Profile: ichbi
Plattform: Microsoft Windows 10 Pro for Workstations Version 22H2 19045.3803 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe ->) (Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp32.exe
(C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe ->) (Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionHookApp64.exe
(C:\Program Files\Logitech Gaming Software\LCore.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech Gaming Software\LAClient\laclient.exe
(explorer.exe ->) (Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe
(explorer.exe ->) (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.) C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe
(explorer.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\LCore.exe
(explorer.exe ->) (Nextcloud GmbH -> Nextcloud GmbH) C:\Program Files\Nextcloud\nextcloud.exe
(explorer.exe ->) (Palo Alto Networks -> Palo Alto Networks) C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe
(explorer.exe ->) (Phonic Corporation -> ) C:\Program Files\Phonic\1394AudioDriver_FireFly808\Phonic_Cpl.exe
(explorer.exe ->) (VIA Technologies, Inc.) [Datei ist nicht signiert] C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WpcMon.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Binary Fortress Software Ltd -> Binary Fortress Software) C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe
(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrB.exe
(services.exe ->) (geek software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Logitech Inc -> Logitech Inc.) C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msiexec.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispsig.inf_amd64_2a8379cc1977656a\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (PACE Anti-Piracy, Inc. -> PACE Anti-Piracy, Inc.) C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe
(services.exe ->) (Palo Alto Networks -> Palo Alto Networks) C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe
(services.exe ->) (Realtek Semiconductor Corp -> ) C:\Windows\runSW.exe
(services.exe ->) (Realtek Semiconductor Corp -> Realtek) C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe <2>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (VMware, Inc. -> ) C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe
(services.exe ->) (VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2307.4.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe
(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [VIAxHCUtl] => C:\Program Files\VIA XHCI UASP Utility\usb3Monitor.exe [331776 2011-07-12] (VIA Technologies, Inc.) [Datei ist nicht signiert]
HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_550508a90a3c9a47\RtkAudUService64.exe [1618320 2022-11-15] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [DigidesignMMERefresh] => C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [142848 2021-04-11] (Avid Technology, Inc.) [Datei ist nicht signiert]
HKLM\...\Run: [Launch LCore] => C:\Program Files\Logitech Gaming Software\LCore.exe [18727048 2018-10-05] (Logitech Inc -> Logitech Inc.)
HKLM\...\Run: [GlobalProtect] => C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPA.exe [10686824 2022-03-01] (Palo Alto Networks -> Palo Alto Networks)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [614584 2023-07-01] (geek software GmbH -> geek software GmbH)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [767552 2022-05-20] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [vmware-tray.exe] => C:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [119344 2020-06-05] (VMware, Inc. -> VMware, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\82.0.1.0\GoogleDriveFS.exe [55189280 2023-10-12] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\82.0.1.0\GoogleDriveFS.exe [55189280 2023-10-12] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4386664 2023-12-08] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [44486048 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [Discord] => C:\Users\ichbi\AppData\Local\Discord\Update.exe [1512040 2021-03-18] (Discord Inc. -> GitHub)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [DisplayFusion] => C:\Program Files (x86)\DisplayFusion\DisplayFusion.exe [13443008 2021-05-03] (Binary Fortress Software Ltd -> Binary Fortress Software)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [CiscoMeetingDaemon] => C:\Users\ichbi\AppData\Local\WebEx\WebexHost.exe [6976336 2021-12-31] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [Spotify] => C:\Users\ichbi\AppData\Roaming\Spotify\Spotify.exe [30315848 2023-12-09] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [Nextcloud] => C:\Program Files\Nextcloud\nextcloud.exe [5126352 2023-03-09] (Nextcloud GmbH -> Nextcloud GmbH)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\82.0.1.0\GoogleDriveFS.exe [55189280 2023-10-12] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\ichbi\AppData\Local\Microsoft\Teams\Update.exe [2589872 2023-12-04] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\Run: [MicrosoftEdgeAutoLaunch_4D67C3CB7D15609F738713BBF52A3A48] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3854280 2023-12-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\MountPoints2: {728efc9f-c9d4-11eb-912b-d8bbc1099828} - "F:\OnePlus_setup.exe" /s
HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\...\MountPoints2: {ea960893-bd9e-11ec-9158-d8bbc1099828} - "F:\OnePlus_setup.exe" /s
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\82.0.1.0\GoogleDriveFS.exe [55189280 2023-10-12] (Google LLC -> Google, Inc.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\118.0.5993.89\Installer\chrmstp.exe [2023-10-20] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{25CA8579-1BD8-469c-B9FC-6AC45A161C18}] -> C:\Windows\system32\PanV2CredProv.dll [2022-03-01] (Palo Alto Networks -> )
Startup: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2023-10-12]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
Startup: C:\Users\ichbi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\rekordboxAgent.lnk [2022-11-03]
ShortcutTarget: rekordboxAgent.lnk -> C:\Program Files\Pioneer\rekordbox 6.6.5\rekordboxAgent-win32-x64\rekordboxAgent.exe (AlphaTheta Corporation -> AlphaTheta Corporation)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Control Panel.lnk [2021-05-28]
ShortcutTarget: Control Panel.lnk -> C:\Program Files\Phonic\1394AudioDriver_FireFly808\Phonic_Cpl.exe (Phonic Corporation -> )
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {93B6FE41-E102-4E7F-A947-FB35F1F32D23} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {F546C58E-99C1-48C0-9660-4F0A9C7CB282} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [714256 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {1815B76B-3713-44B7-8776-3904A330BBF6} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [4703648 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "46c9ee54-c4ab-4de2-a740-3c6cbf22912a" --version "6.19.10858" --silent
Task: {7B9FFCED-F7A4-4742-83F8-7AB81F56092C} - System32\Tasks\CCleanerSkipUAC - ichbi => C:\Program Files\CCleaner\CCleaner.exe [37458848 2023-12-05] (PIRIFORM SOFTWARE LIMITED -> Piriform Software Ltd)
Task: {476E1642-F7B7-4C01-8E7B-2CE87C030022} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-05-17] (Google LLC -> Google LLC)
Task: {B781ACCF-11F6-486D-9DDE-1EDDF9448056} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154456 2021-05-17] (Google LLC -> Google LLC)
Task: {C4126C75-6A21-4E69-9864-E77051149789} - System32\Tasks\MATLAB R2021b Startup Accelerator => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe [50176 2021-05-15] () [Datei ist nicht signiert]
Task: {D98A5B4A-53EC-4349-BDD3-80F55F61BBAA} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23571032 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A64DC16-F8C3-4559-9921-93ADAD4F2881} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23571032 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {8D6E6A9C-BF0A-4D07-927C-53F97130C6FD} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2209272 2023-12-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {0217BDDF-A728-407F-AB52-7510F85C6F8A} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2209272 2023-12-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {F1F5A26C-EF15-422D-BF58-FC983F8227EB} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3513920 2023-12-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {AB0D4E06-6FDF-43BA-B6F4-704F52FEC67E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [3513920 2023-12-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {0B07A97F-D007-45FC-957F-91EE4F021E96} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {6591C6F5-5B10-4A8E-B9FE-570E42C20996} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3D998901-7AFD-45A2-B21E-D4A06D4CEB43} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7E8636B3-0054-4019-90AA-66145559560E} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42CCCFBB-EC38-4953-A371-96D03949C4DD} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674208 2023-12-02] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {B9EB5106-6C1A-4106-9F00-82C8A5C1797B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2023-12-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {15456070-D5F7-484F-BE26-19C00ECE251A} - System32\Tasks\MSI Task Host - Detect_Monitor => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [78648 2021-04-01] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {3EA47929-2EBA-4038-8708-E9B1200F595C} - System32\Tasks\MSI Task Host - DisplayID => C:\Program Files (x86)\MSI\One Dragon Center\MSI.NotifyServer.exe [78648 2021-04-01] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {5D305FAF-8C0E-4470-9171-4E98D246CC56} - System32\Tasks\MSI Task Host - LEDKeeper2_Host => C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LEDKeeper2.exe [1685328 2021-04-15] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {20069275-3E88-4E23-A832-4F260EE68D90} - System32\Tasks\MSI Task Host - MSI.True Color => C:\Program Files (x86)\MSI\One Dragon Center\True Color\MSI.True Color.exe [47416 2021-03-29] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
Task: {41ED8001-A23A-4D4F-A9CC-AAE1369F970D} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3203882355-2465378241-1904074028-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {40021508-9061-41BC-AD3B-9C1E344D02C4} - System32\Tasks\update-S-1-5-21-3203882355-2465378241-1904074028-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {90A34D95-2050-45A2-B153-5B9937D2956E} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe
Task: C:\Windows\Tasks\MATLAB R2021b Startup Accelerator.job => C:\Program Files\MATLAB\R2021b\bin\win64\MATLABStartupAccelerator.exe C:\Program Files\MATLAB\R2021bJULIAN-PC-STUDI\ichbi.Sta
Task: C:\Windows\Tasks\update-S-1-5-21-3203882355-2465378241-1904074028-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\Windows\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Winsock: Catalog5 08 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [121704 2011-08-30] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 08 C:\Program Files\Bonjour\mdnsNSP.dll [132968 2011-08-30] (Apple Inc. -> Apple Inc.)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{23b271b8-daaa-4df3-b234-b1b53af3e70b}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{23b271b8-daaa-4df3-b234-b1b53af3e70b}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{4fd08595-b9e9-4e81-80a8-3292f0867e56}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{4fd08595-b9e9-4e81-80a8-3292f0867e56}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{4fd08595-b9e9-4e81-80a8-3292f0867e56}\145747F6A7577602E6163686023597C647: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{4fd08595-b9e9-4e81-80a8-3292f0867e56}\145747F6A7577602E6163686023597C647: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{5b552e3d-0022-4b12-a317-3298326a495d}: [NameServer] 134.106.40.3,134.106.49.2

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-13]
Edge Extension: (Google Docs Offline) - C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-09-01]
Edge Extension: (Edge relevant text changes) - C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]
Edge Extension: (Microsoft Edge DevTools Enhancements) - C:\Users\ichbi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\kfbdpdaobnofkbopebjglnaadopfikhh [2023-08-18]

FireFox:
========
FF DefaultProfile: nk31nrhe.default
FF ProfilePath: C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\nk31nrhe.default [2021-05-16]
FF ProfilePath: C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release [2024-01-04]
FF DownloadDir: C:\Users\ichbi\Downloads
FF Session Restore: Mozilla\Firefox\Profiles\cu7yum5m.default-release -> ist aktiviert.
FF Notifications: Mozilla\Firefox\Profiles\cu7yum5m.default-release -> hxxps://www.faceit.com
FF Extension: (YouTube mp3) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\320youtube@gmx.net.xpi [2022-11-14]
FF Extension: (Facebook Container) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\@contain-facebook.xpi [2023-07-30]
FF Extension: (Übersetzen Sie Websites in Ihrem Browser, ohne die Cloud zu verwenden.) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\firefox-translations-addon@mozilla.org.xpi [2023-07-30]
FF Extension: (Honey) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\jid1-93CWPmRbVPjRQA@jetpack.xpi [2023-04-12]
FF Extension: (Tab Session Manager) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\Tab-Session-Manager@sienori.xpi [2023-12-13]
FF Extension: (eBay™ Popularity Sort) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\test@arunshah.co.uk.xpi [2021-05-16]
FF Extension: (Dark Theme for Google™) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{026cca71-a2e2-4020-840d-f2759849d62e}.xpi [2023-03-08]
FF Extension: (TWP - Translate Web Pages) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{036a55b4-5e72-4d05-a06c-cba2dfcc134a}.xpi [2023-09-20]
FF Extension: (Moodle Buddy) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{29d2b673-83e5-4aca-a0b8-f9130b9b9cb7}.xpi [2022-08-21]
FF Extension: (Fakespot Fake Amazon Reviews and eBay Sellers) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{44df5123-f715-9146-bfaa-c6e8d4461d44}.xpi [2024-01-04]
FF Extension: (__Cool Shade__) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{56b8b413-e19e-47c7-80c5-52a6795dfe78}.xpi [2021-05-16]
FF Extension: (WebNowPlaying) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{64b2c525-24ed-4c05-aed1-95ff9e6cef70}.xpi [2024-01-04]
FF Extension: (Return YouTube Dislike) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{762f9885-5a13-4abd-9c77-433dcd38b8fd}.xpi [2023-12-17]
FF Extension: (insta-download) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{7b21dc78-ddbd-44c8-8621-161bb293598d}.xpi [2021-05-16]
FF Extension: (Tab Auto Refresh) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{7fee47a1-8299-4576-90bf-5fd88d756926}.xpi [2022-07-12]
FF Extension: (Markdown Viewer Webext) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{943b8007-a895-44af-a672-4f4ea548c95f}.xpi [2023-06-28]
FF Extension: (Sauron - Dark mode for all websites) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{ac17338b-b900-4cd1-a34f-bd30ad5abab9}.xpi [2021-05-16]
FF Extension: (Video DownloadHelper) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2023-08-26]
FF Extension: (SoundCloud Downloader) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{c7a839e7-7086-4021-8176-1cfcb7f169ce}.xpi [2023-06-28]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-06-21]
FF Extension: (Trello Super Powers) - C:\Users\ichbi\AppData\Roaming\Mozilla\Firefox\Profiles\cu7yum5m.default-release\Extensions\{e8a71c3b-3deb-4ab3-834a-5c0aee943847}.xpi [2021-12-26]
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-17] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2021-05-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-01-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2021-05-16] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2021-05-16] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR Profile: C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default [2023-12-17]
CHR Extension: (SoundCloud to Mp3 - SoundCloud Downloader) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\bglggfjiagajfmchbcjolbggghckfhgm [2023-06-28]
CHR Extension: (Markdown Viewer) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ckkdlimhmcjmikdlpkmbgfkaikojcbjk [2023-10-15]
CHR Extension: (Music downloader) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmkmbhibddfjgokeipcjedbhphkmhied [2023-06-28]
CHR Extension: (Google Docs Offline) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-17]
CHR Extension: (Music downloader for SoundCloud™) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\imccchinfcnnpjoicclggnpdenhachco [2023-03-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-05-17]
CHR Extension: (Smallpdf - PDF komprimieren und konvertieren) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohfgljdgelakfkefopgklcohadegdpjf [2023-12-17]
CHR Extension: (Dunkler Modus - Dunkler Leser für Chrome) - C:\Users\ichbi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjbgfifennfhnbkhoidkdchbflppjncb [2023-10-15]
CHR HKU\S-1-5-21-3203882355-2465378241-1904074028-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
S3 AvidHubService; C:\Program Files\Avid\Cloud Client Services\Hub.exe [2299208 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
S3 AvidTransportClient; C:\Program Files\Avid\Cloud Client Services\TransportClient.exe [7067464 2017-11-09] (Avid Technology, Inc. -> Avid Technology, Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8901960 2022-01-13] (BattlEye Innovations e.K. -> )
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9497688 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
S3 DigiRefresh; C:\Program Files\Avid\Pro Tools First\MMERefresh.exe [142848 2021-04-11] (Avid Technology, Inc.) [Datei ist nicht signiert]
S3 digiSPTIService64; C:\Program Files\Avid\Pro Tools First\digisptiservice64.exe [201728 2021-04-11] (Avid Technology, Inc.) [Datei ist nicht signiert]
R2 DisplayFusionService; C:\Program Files (x86)\DisplayFusion\DisplayFusionService.exe [11309520 2021-05-03] (Binary Fortress Software Ltd -> Binary Fortress Software)
S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [588264 2022-01-31] (EasyAntiCheat Oy -> Epic Games, Inc.)
S3 FACEITService; C:\Program Files\FACEIT AC\faceitservice.exe [65739656 2023-08-30] (FACE IT LIMITED -> )
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [230360 2023-11-14] (HP Inc. -> HP Inc.)
S3 LightKeeperService; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\LightKeeperService.exe [86776 2020-12-23] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
R2 LogiRegistryService; C:\Program Files\Logitech Gaming Software\Drivers\APOService\LogiRegistryService.exe [206472 2018-10-05] (Logitech Inc -> Logitech Inc.)
S3 MSI_Central_Service; C:\Program Files (x86)\MSI\One Dragon Center\MSI_Central_Service.exe [147088 2020-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
S3 MSI_Companion_Service; C:\Program Files (x86)\MSI\One Dragon Center\Game_Summary\MSI_Companion_Service.exe [143160 2021-03-31] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 MSI_VoiceControl_Service; C:\Program Files (x86)\MSI\One Dragon Center\VoiceControl\VoiceControl_Service.exe [32752 2021-02-26] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)
S3 Mystic_Light_Service; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Mystic_Light_Service.exe [39760 2021-03-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)
R2 PanGPS; C:\Program Files\Palo Alto Networks\GlobalProtect\PanGPS.exe [7509352 2022-03-01] (Palo Alto Networks -> Palo Alto Networks)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [614584 2023-07-01] (geek software GmbH -> geek software GmbH)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [75064 2021-06-02] (Even Balance, Inc. -> )
R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [215128 2021-06-02] (Even Balance, Inc. -> )
R2 RealtekWlanU; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RtlService.exe [48856 2014-10-09] (Realtek Semiconductor Corp -> Realtek)
S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [2579840 2022-09-13] (Rockstar Games, Inc. -> Rockstar Games)
S2 RTLDHCPService; C:\Program Files (x86)\Realtek\USB Wireless LAN Utility\RTLDHCP.exe [262360 2014-10-09] (Realtek Semiconductor Corp -> Realtek)
R2 RunSwUSB; C:\Windows\runSW.exe [44760 2021-08-25] (Realtek Semiconductor Corp -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [534472 2023-12-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [17029944 2023-05-02] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\UNCHEATER\ucldr_battlegrounds_gl.exe [7152880 2022-01-10] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
R2 VMwareHostd; C:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15504600 2020-06-05] (VMware, Inc. -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 zksvc; C:\Program Files\Common Files\PUBG\zksvc.exe [8631496 2022-01-10] (PUBG CORPORATION -> PUBG Corporation)
R2 NVDisplay.ContainerLocalSystem; C:\Windows\System32\DriverStore\FileRepository\nv_dispsig.inf_amd64_2a8379cc1977656a\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\Windows\System32\DriverStore\FileRepository\nv_dispsig.inf_amd64_2a8379cc1977656a\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
R2 PaceLicenseDServices; "C:\Program Files (x86)\Common Files\PACE\Services\LicenseServices\LDSvc.exe" -u hxxps://activation.paceap.com/InitiateActivation

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 61883; C:\Windows\System32\drivers\61883.sys [70144 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 AppleLowerFilter; C:\Windows\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
R1 EneTechIo; C:\Windows\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 FACEIT; C:\Program Files\FACEIT AC\FACEIT_AC.sys [68181560 2023-08-30] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 FocusritePCIeSwRoot; C:\Windows\System32\drivers\FocusritePCIeSwRoot.sys [105192 2022-05-20] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsb; C:\Windows\System32\drivers\FocusriteUsb.sys [197280 2022-05-20] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
S3 FocusriteUsbAudio; C:\Windows\System32\drivers\FocusriteUsbAudio.sys [97952 2022-05-20] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\Windows\System32\drivers\FocusriteUsbSwRoot.sys [110864 2022-05-20] (WDKTestCert builds,132265248139626354 -> Focusrite Audio Engineering Ltd.)
R1 googledrivefs31092; C:\Windows\System32\DRIVERS\googledrivefs31092.sys [384600 2023-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
S3 gpfltdrv; C:\Windows\system32\DRIVERS\gpfltdrv.sys [91760 2022-03-01] (Palo Alto Networks -> Palo Alto Networks)
R2 LGCoreTemp; C:\Program Files\Logitech Gaming Software\Drivers\LgCoreTemp\lgcoretemp.sys [14184 2015-06-21] (Logitech -> Logitech)
R3 LGJoyXlCore; C:\Windows\system32\drivers\LGJoyXlCore.sys [67736 2018-10-05] (Logitech Inc -> Logitech Inc.)
S3 logi_joy_bus_enum; C:\Windows\system32\drivers\logi_joy_bus_enum.sys [37200 2021-05-29] (Logitech Inc -> Logitech)
S3 logi_joy_vir_hid; C:\Windows\system32\drivers\logi_joy_vir_hid.sys [25928 2021-05-29] (Logitech Inc -> Logitech)
S3 logi_joy_xlcore; C:\Windows\system32\drivers\logi_joy_xlcore.sys [66896 2021-05-29] (Logitech Inc -> Logitech)
S3 MpKsl93a90454; C:\Windows\system32\MpEngineStore\MpKslDrv.sys [214280 2022-11-11] (Microsoft Windows -> Microsoft Corporation)
R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [17424 2020-01-19] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)
S3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\One Dragon Center\Lib\SYS\NTIOLib_X64.sys [14288 2017-07-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
R3 NTIOLib_MysticLight; C:\Program Files (x86)\MSI\One Dragon Center\Mystic_Light\Lib\NTIOLib_X64.sys [14288 2017-07-11] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)
S3 PanGpd; C:\Windows\system32\DRIVERS\pangpd.sys [71968 2022-03-01] (Palo Alto Networks -> Palo Alto Networks Inc.)
R3 phonic_1394; C:\Windows\System32\Drivers\phonic_1394_x64.sys [197344 2021-05-28] (Phonic Corporation -> Archwave AG)
R3 phonic_avs; C:\Windows\System32\Drivers\phonic_avs_x64.sys [72416 2021-05-28] (Phonic Corporation -> Archwave AG)
S3 RDID1198; C:\Windows\system32\Drivers\RDWM1198.SYS [395272 2021-09-27] (Microsoft Windows Hardware Compatibility Publisher -> Roland Corporation)
S3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R2 VMnetBridge; C:\Windows\system32\DRIVERS\vmnetbridge.sys [66368 2020-06-05] (VMware, Inc. -> VMware, Inc.)
R0 vsock; C:\Windows\System32\DRIVERS\vsock.sys [103224 2019-08-14] (VMware, Inc. -> VMware, Inc.)
R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-28] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [55856 2023-12-06] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [594304 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-06] (Microsoft Windows -> Microsoft Corporation)
S3 xhunter1; C:\Windows\xhunter1.sys [2522256 2022-01-13] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 netr28x; \SystemRoot\System32\drivers\netr28x.sys [X]
U4 npcap_wifi; kein ImagePath
S4 NvModuleTracker; \SystemRoot\System32\DriverStore\FileRepository\nvmoduletracker.inf_amd64_0c1cc60a4b422185\NvModuleTracker.sys [X]
S4 nvvad_WaveExtensible; \SystemRoot\system32\drivers\nvvad64v.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-01-04 14:32 - 2024-01-04 14:33 - 000040167 _____ C:\Users\ichbi\Downloads\FRST.txt
2024-01-04 14:32 - 2024-01-04 14:33 - 000000000 ____D C:\FRST
2024-01-04 14:32 - 2024-01-04 14:32 - 002387456 _____ (Farbar) C:\Users\ichbi\Downloads\FRST64.exe
2023-12-23 17:56 - 2023-12-23 17:56 - 000010644 _____ C:\Users\ichbi\AppData\Local\recently-used.xbel
2023-12-23 17:05 - 2023-12-23 17:05 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-12-18 16:56 - 2023-12-18 16:56 - 000066910 _____ C:\Users\ichbi\Downloads\Results_Julian_Härtel_2023-12-18.pdf
2023-12-18 11:11 - 2023-12-18 11:11 - 000346957 _____ C:\Users\ichbi\Downloads\Prolight_+_Sound_2024_Härtel_Julian_1764991320417.pdf
2023-12-18 10:32 - 2023-12-18 10:32 - 006141552 _____ C:\Users\ichbi\Downloads\2016-01_preisliste_jaguar_xf.pdf
2023-12-17 23:37 - 2023-12-17 23:37 - 011372958 _____ C:\Users\ichbi\Downloads\lecture_04_with_solutions.pptx
2023-12-17 13:31 - 2023-12-17 13:31 - 000000944 _____ C:\Users\Public\Desktop\Engine DJ.lnk
2023-12-17 13:31 - 2023-12-17 13:31 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Engine DJ
2023-12-17 13:30 - 2023-12-17 13:31 - 181527128 _____ (AIR Music Technology) C:\Users\ichbi\Downloads\Engine_DJ_3.3.0_7dcfbe5f8c_Setup.exe
2023-12-16 18:04 - 2023-12-16 18:04 - 000740274 _____ C:\Users\ichbi\Downloads\Lebenslauf Pauline Hillebrandt (Sopran)-1.pdf
2023-12-16 17:58 - 2023-12-16 17:58 - 000727676 _____ C:\Users\ichbi\Downloads\Lebenslauf Pauline Hillebrandt (Sopran).pdf
2023-12-16 11:39 - 2023-12-16 11:39 - 000409103 _____ C:\Users\ichbi\Downloads\Rechnung 306-2023 Vermietung IGS Delmenhorst 05.12.2023.pdf
2023-12-15 22:46 - 2023-12-15 22:53 - 000029119 _____ C:\Users\ichbi\Downloads\Bewerbung Despina Entwurf PDF.pdf
2023-12-15 22:45 - 2023-12-15 22:45 - 000257046 _____ C:\Users\ichbi\Downloads\Lebenslauf Pauline Hillebrandt (Sopran) 2024.pdf
2023-12-15 14:28 - 2023-12-15 22:44 - 000000000 ____D C:\Users\ichbi\Downloads\Studio Bilder Ja
2023-12-15 14:28 - 2023-12-15 14:28 - 033225542 _____ C:\Users\ichbi\Downloads\Studio Bilder Ja.zip
2023-12-13 16:07 - 2023-12-13 16:07 - 000000000 ____D C:\Windows\InboxApps
2023-12-13 15:59 - 2023-12-13 15:59 - 000016707 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json
2023-12-13 15:54 - 2023-12-13 15:54 - 000000000 ___HD C:\$WinREAgent
2023-12-13 15:49 - 2023-12-23 17:04 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2023-12-07 14:24 - 2023-12-07 14:24 - 000789123 _____ C:\Users\ichbi\Downloads\fos_tornado_pro.pdf
2023-12-06 14:23 - 2023-12-06 14:23 - 000188211 _____ C:\Users\ichbi\Downloads\Rettet_Most-common-IT-errors-on-Windows-computers.pdf
2023-12-06 14:22 - 2023-12-06 14:22 - 000558876 _____ C:\Users\ichbi\Downloads\Rettet_IT-support-foer-og-under-eksamen_AIT_vejledning_ENG_on-campus.pdf
2023-12-06 14:21 - 2023-12-06 14:21 - 000423159 _____ C:\Users\ichbi\Downloads\Vejledning-til-digital-eksamen-DE-DK-ENG-revideret-2023-.pdf
2023-12-05 19:37 - 2023-12-05 21:34 - 000161533 _____ C:\Users\ichbi\Downloads\Angebot 306-2023 Vermietung IGS Delmenhorst 05.12.2023.pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-01-04 14:31 - 2023-03-16 21:00 - 000002077 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-01-04 14:31 - 2023-03-16 21:00 - 000002065 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-01-04 14:31 - 2022-02-12 13:07 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-04 14:31 - 2021-05-17 15:27 - 000004562 _____ C:\Windows\system32\Tasks\Adobe Acrobat Update Task
2024-01-04 14:30 - 2023-12-02 01:50 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-01-04 14:28 - 2021-07-23 23:39 - 000000000 ____D C:\Users\ichbi\AppData\Local\Spotify
2024-01-04 14:28 - 2021-07-23 23:38 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Spotify
2024-01-04 14:28 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-04 14:27 - 2023-01-24 17:55 - 000000000 ___SD C:\Users\ichbi\Nextcloud
2024-01-04 14:27 - 2021-09-30 20:22 - 000000000 ____D C:\Users\Public\Logi
2023-12-24 00:21 - 2023-01-24 17:54 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Nextcloud
2023-12-24 00:21 - 2021-05-17 16:40 - 000000000 ____D C:\ProgramData\NVIDIA
2023-12-24 00:10 - 2020-11-18 23:50 - 000000000 ____D C:\Windows\system32\SleepStudy
2023-12-24 00:09 - 2021-05-16 18:37 - 000000000 ____D C:\Program Files (x86)\Steam
2023-12-23 22:00 - 2023-08-26 22:56 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\GalaxyLife
2023-12-23 20:26 - 2023-11-28 14:49 - 000013626 _____ C:\Users\ichbi\Desktop\weihnachten.xlsx
2023-12-23 20:26 - 2021-05-31 08:40 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Excel
2023-12-23 20:25 - 2021-05-16 17:59 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Word
2023-12-23 20:21 - 2021-06-11 14:02 - 000000000 ____D C:\Users\ichbi\AppData\Local\babl-0.1
2023-12-23 18:02 - 2023-01-16 10:25 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-12-23 18:02 - 2021-05-16 16:21 - 000000000 ____D C:\Users\ichbi\AppData\Local\PlaceholderTileLogoFolder
2023-12-23 18:02 - 2020-11-19 00:53 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-23 18:02 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-23 18:02 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2023-12-23 17:56 - 2021-06-12 14:07 - 000000000 ____D C:\Users\ichbi\AppData\Local\gtk-2.0
2023-12-23 17:09 - 2021-05-29 01:38 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\PowerPoint
2023-12-23 17:08 - 2021-05-16 16:11 - 001732070 _____ C:\Windows\system32\PerfStringBackup.INI
2023-12-23 17:08 - 2019-12-07 15:51 - 000746674 _____ C:\Windows\system32\perfh007.dat
2023-12-23 17:08 - 2019-12-07 15:51 - 000151622 _____ C:\Windows\system32\perfc007.dat
2023-12-23 17:08 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2023-12-23 17:07 - 2021-05-17 15:03 - 000004210 _____ C:\Windows\system32\Tasks\CCleaner Update
2023-12-23 17:05 - 2021-05-31 20:08 - 000000000 ____D C:\Users\ichbi\AppData\Local\CrashDumps
2023-12-23 17:05 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-12-23 17:04 - 2022-11-08 12:09 - 000000666 _____ C:\Windows\Tasks\CCleanerCrashReporting.job
2023-12-23 17:04 - 2022-01-14 17:22 - 000000000 ____D C:\ProgramData\VMware
2023-12-23 17:04 - 2021-05-17 16:28 - 000000000 ____D C:\Program Files\TeamViewer
2023-12-23 17:04 - 2021-05-17 15:03 - 000000000 ____D C:\Program Files\CCleaner
2023-12-23 17:04 - 2021-05-16 18:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-12-23 17:04 - 2021-05-16 16:04 - 000008192 ___SH C:\DumpStack.log.tmp
2023-12-23 17:04 - 2020-11-19 00:51 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-12-23 17:04 - 2012-10-26 15:20 - 000001485 _____ C:\Windows\system32\Phonic1394_coinst.cfg
2023-12-20 12:16 - 2021-05-16 17:49 - 000000000 ____D C:\Program Files\Microsoft Office
2023-12-19 17:36 - 2021-05-30 18:03 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\vlc
2023-12-19 14:05 - 2023-10-07 11:57 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\CurseForge
2023-12-19 13:54 - 2021-08-22 20:47 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\.minecraft
2023-12-18 23:08 - 2021-05-17 16:25 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\discord
2023-12-18 22:24 - 2021-05-17 16:25 - 000000000 ____D C:\Users\ichbi\AppData\Local\Discord
2023-12-18 14:09 - 2021-05-16 17:59 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Office
2023-12-17 23:37 - 2021-05-16 16:19 - 000000000 ____D C:\Users\ichbi\AppData\Local\Packages
2023-12-17 13:32 - 2021-05-17 16:12 - 000000000 ____D C:\ProgramData\Package Cache
2023-12-17 13:31 - 2023-06-24 11:15 - 000000000 ____D C:\Program Files\Engine DJ
2023-12-17 01:08 - 2021-05-16 16:16 - 000000000 ____D C:\Users\ichbi
2023-12-16 11:40 - 2022-11-08 12:09 - 000003382 _____ C:\Windows\system32\Tasks\CCleanerCrashReporting
2023-12-15 17:24 - 2021-05-16 16:19 - 000000000 ____D C:\Users\ichbi\AppData\Local\D3DSCache
2023-12-14 23:38 - 2021-06-21 19:30 - 000000000 ____D C:\Users\ichbi\AppData\Local\ElevatedDiagnostics
2023-12-14 18:33 - 2021-05-28 23:49 - 000001059 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2023-12-13 23:01 - 2021-05-17 16:25 - 000002235 _____ C:\Users\ichbi\Desktop\Discord.lnk
2023-12-13 16:10 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2023-12-13 16:08 - 2020-11-18 23:50 - 000481128 _____ C:\Windows\system32\FNTCACHE.DAT
2023-12-13 16:07 - 2019-12-07 15:54 - 000000000 ___SD C:\Windows\system32\AppV
2023-12-13 16:07 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2023-12-13 16:07 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-12-13 16:07 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer
2023-12-13 16:07 - 2019-12-07 15:51 - 000000000 ____D C:\Windows\SysWOW64\de
2023-12-13 16:07 - 2019-12-07 15:51 - 000000000 ____D C:\Windows\system32\de
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\F12
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\SysWOW64\DiagSvcs
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\UNP
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\F12
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___SD C:\Windows\system32\DiagSvcs
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\PrintDialog
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\WinMetadata
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\setup
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\PerceptionSimulation
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\oobe
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\migwiz
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lv-LV
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\lt-LT
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\et-EE
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\es-MX
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Dism
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Com
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\AdvancedInstallers
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinMetadata
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\WinBioPlugIns
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\SystemResetPlatform
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Sysprep
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\ShellExperiences
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\setup
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\oobe
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\migwiz
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lv-LV
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\lt-LT
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\et-EE
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\es-MX
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Dism
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\Com
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\appraiser
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\system32\AdvancedInstallers
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellExperiences
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ShellComponents
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Provisioning
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\IME
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2023-12-13 16:07 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2023-12-13 16:07 - 2019-12-07 10:03 - 000524288 _____ C:\Windows\system32\config\BBI
2023-12-13 16:07 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing
2023-12-13 16:03 - 2019-12-07 15:54 - 000023040 _____ (Microsoft Corporation) C:\Windows\system32\OEMDefaultAssociations.dll
2023-12-13 16:03 - 2019-12-07 15:54 - 000020827 _____ C:\Windows\system32\OEMDefaultAssociations.xml
2023-12-13 16:03 - 2019-12-07 10:15 - 000208384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msclmd.dll
2023-12-13 16:03 - 2019-12-07 10:14 - 000232448 _____ (Microsoft Corporation) C:\Windows\system32\msclmd.dll
2023-12-13 16:03 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\CbsTemp
2023-12-13 15:59 - 2020-11-19 00:53 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll
2023-12-13 15:54 - 2021-05-16 16:26 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-12-13 15:21 - 2021-05-16 16:26 - 000000000 ____D C:\Windows\system32\MRT
2023-12-13 15:19 - 2021-05-16 16:26 - 182871392 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2023-12-13 15:18 - 2021-05-16 18:01 - 000002525 _____ C:\Users\ichbi\Desktop\Excel.lnk
2023-12-11 11:48 - 2021-11-07 20:31 - 000000576 ____H C:\Windows\Tasks\MATLAB R2021b Startup Accelerator.job
2023-12-06 19:08 - 2020-11-19 00:51 - 000000000 ____D C:\Windows\system32\Drivers\wd
2023-12-05 00:19 - 2023-08-27 14:58 - 000000000 ____D C:\Users\ichbi\AppData\Roaming\Microsoft\Teams

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2021-05-28 23:28 - 2021-05-28 23:31 - 000018544 _____ () C:\Users\ichbi\AppData\Roaming\Avid_CCS_Service_Stop.log
2022-01-16 14:36 - 2022-01-17 08:38 - 000000016 _____ () C:\Users\ichbi\AppData\Roaming\obs-virtualcam.txt
2021-09-25 11:31 - 2022-06-27 18:26 - 000000128 _____ () C:\Users\ichbi\AppData\Local\PUTTY.RND
2023-12-23 17:56 - 2023-12-23 17:56 - 000010644 _____ () C:\Users\ichbi\AppData\Local\recently-used.xbel
2021-07-26 22:42 - 2023-06-24 20:37 - 000007638 _____ () C:\Users\ichbi\AppData\Local\Resmon.ResmonCfg
2021-05-17 16:05 - 2021-05-17 16:05 - 000000003 _____ () C:\Users\ichbi\AppData\Local\updater.log
2021-05-17 16:05 - 2021-05-17 16:05 - 000000424 _____ () C:\Users\ichbi\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         



Bedrohung blockiert
23.12.2023 22:45
Schwerwiegend
Erkannt: Trojan:HTML/CryptoExtortBTC
Status: Entfernt
Eine Bedrohung oder App wurde von diesem Gerät entfernt.
Datum: 24.12.2023 00:16
Details: Dieses Programm ist gefährlich. Es führt Befehle eines Angreifers aus.
Betroffene Elemente:
containerfile: E:\Backups\Equi-Trend.com\backup_equi-
trend.com_2109251227.tar
file: E:\Backups\Equi-Trend.com\backup_equi-trend.com_2109251227.tar-
>backup_domainmail_2109251227.tgz->(GZip)->info/Maildir/ new/1631216929.M296629P18582.mailsrv.web-beta.de,S=2876,W=2921
         



Bedrohung blockiert
23.12.2023 22:45
Schwerwiegend
Erkannt: Trojan:HTML/Phish
Status: Entfernt
Eine Bedrohung oder App wurde von diesem Gerät entfernt.
Datum: 24.12.2023 00:16
Details: Dieses Programm ist gefährlich. Es führt Befehle eines Angreifers aus.
Betroffene Elemente:
containerfile: E:\Backups\Equi-Trend.com\backup_equi-
trend.com_2109251227.tar
file: E:\Backups\Equi-Trend.com\backup_equi-trend.com_2109251227.tar-
>backup_domainmail_2109251227.tgz->(GZip)->info/Maildir/
new/1538777135.M782738P8140V000000000000090210000000004120FB7.s
rv.web-alpha.de,S=2158
file: E:\Backups\Equi-Trend.com\backup_equi-trend.com_2109251227.tar- >backup_domainmail_2109251227.tgz->(GZip)->inhaber/Maildir/
new/1538777136.M302278P8157V000000000000090210000000004120FB8.5
rv.web-alpha.de,S=2374
file: E:\Backups\Equi-Trend.com\backup_equi-trend.com_2109251227.tar- >backup_domainmail_2109251227.tgz->(GZip)->inhaber/Maildir/ new/1538913208.M471140P25230V000000000000090210000000004120FBC
srv.web-alpha.de,S=2397
         



Bedrohung blockiert
23.12.2023 22:45
Schwerwiegend
Erkannt: Trojan:Script/Wacatac.H!ml
Status: Entfernt
Eine Bedrohung oder App wurde von diesem Gerät entfernt.
Datum: 24.12.2023 00:16
Details: Dieses Programm ist gefährlich. Es führt Befehle eines Angreifers aus.
Betroffene Elemente:
file: C:\Users\ichbi\Downloads\Chapter-File-1.rar
Weitere Informationen
Aktionen
         



Bedrohung blockiert
23.12.2023 22:45
Schwerwiegend
Erkannt: Trojan:Win32/Zusy.EC!MTB
Status: Entfernt
Eine Bedrohung oder App wurde von diesem Gerät entfernt.
Datum: 24.12.2023 00:16
Details: Dieses Programm ist gefährlich. Es führt Befehle eines Angreifers aus.
Betroffene Elemente:
containerfile: C:\$Recycle.Bin
\S-1-5-21-3203882355-2465378241-1904074028-1001\$R0F09Q3.zip
file: C:\$Recycle.Bin\S-1-5-21-3203882355-2465378241-1904074028-1001\
$ROF09Q3.zip->aclui.dll
Weitere Informationen
Aktionen