Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet

cosinus · 14.10.2024, 11:54

Zitat:

doch die Setup-Datei wurde von Virustotal als Virus angezeigt.

Das sind Fehlalarme. Wenn du schon sowas wie VT nutzt, dann musst du die Ergebnisse auch selbst einigermaßen deuten können sonsz macht das ganze 0 Sinn!

Und von FRST fehlt das Hauptlog.

janskript · 14.10.2024, 12:04

hier das Hauptlog von FARBAR:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-09-2024
durchgeführt von mskkg (Administrator) auf KITE (LENOVO 20KGS4LL00) (14-10-2024 09:59:59)
Gestartet von C:\Users\mskkg\Downloads\FRST64.exe
Geladene Profile: mskkg
Plattform: Microsoft Windows 11 Pro Version 23H2 22631.4317 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe
(C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe ->) (QFX Software Corporation -> QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\x64\KeyScrambler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe <3>
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxEM.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <17>
(explorer.exe ->) (Corel Corporation -> MindManager) C:\Program Files\MindManager 22\MmReminderService.exe
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2408.12.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\WINWORD.EXE
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\msinfo32.exe
(explorer.exe ->) (Zoho Mail) [Datei ist nicht signiert] C:\Program Files\Zoho Mail - Desktop\Zoho Mail - Desktop.exe <6>
(IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <22>
(QFX Software Corporation -> QFX Software Corporation) C:\Program Files (x86)\KeyScrambler\KeyScrambler.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(services.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe
(services.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe
(services.exe ->) (Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Browny02\BrYNSvc.exe
(services.exe ->) (Dolby Laboratories, Inc. -> ) C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_d51901c26227fb29\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_d372a4ea3b959b1c\aesm_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (IObit CO., LTD -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe
(services.exe ->) (Key for TBT Legacy Driver -> Intel Corporation) C:\Program Files (x86)\Intel\Thunderbolt Software\tbtsvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_c7ee80e7f3d3c3de\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_2295caad8eb8753a\x64\LITSSvc.exe
(services.exe ->) (Malwarebytes Inc. -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxCUIService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_9a229169a273dffe\OneApp.IGCC.WinService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_48ce07e3e7326f11\IntelCpHDCPSvc.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_48ce07e3e7326f11\IntelCpHeciSvc.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Smart Sound Technology -> Intel) C:\Windows\System32\cAVS\Intel(R) Audio Service\IntelAudioService.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.sechealthui_1000.25992.9000.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.AAD.BrokerPlugin_cw5n1h2txyewy\Microsoft.AAD.BrokerPlugin.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\Packages\Preview\amd64\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_500d7f066e4084ac\igfxext.exe
(svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\1.0.2402.27001-0\SecurityHealthHost.exe <2>
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [645976 2024-06-06] (Geek Software GmbH -> geek software GmbH)
HKLM\...\Run: [MMReminderService] => C:\Program Files\MindManager 22\MMReminderService.exe [203792 2022-12-13] (Corel Corporation -> MindManager)
HKLM-x32\...\Run: [I16A] => C:\WINDOWS\twain_32\Brimi16a\Common\TwDsUiLaunch.exe [94952 2019-03-19] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [145344 2019-07-26] (Brother Industries, Ltd. -> Brother Industries, Ltd.)
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [4009984 2024-05-31] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [1939968 2014-10-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [KeyScrambler] => C:\Program Files (x86)\KeyScrambler\keyscrambler.exe [900120 2023-08-14] (QFX Software Corporation -> QFX Software Corporation)
HKLM-x32\...\Run: [S18A] => C:\WINDOWS\twain_32\Brims18a\Common\TwDsUiLaunch.exe [85912 2020-03-18] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrotherSoftwareUpdateNotification] => C:\Program Files (x86)\Brother\SoftwareUpdateNotification\SoftwareUpdateNotificationService.exe [3591168 2023-02-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\MRT: Beschränkung <==== ACHTUNG
HKLM\Software\Policies\...\system: [EnableCdp] 0
HKLM\Software\Policies\...\system: [EnableActivityFeed] 0
HKLM\Software\Policies\...\system: [AllowCrossDeviceClipboard] 0
HKLM\Software\Policies\...\system: [UploadUserActivities] 0
HKLM\Software\Policies\...\system: [PublishUserActivities] 0
HKU\S-1-5-21-2395074704-259971784-2882117250-1001\...\Run: [Nextcloud] => C:\Program Files\Nextcloud\nextcloud.exe [5827280 2024-09-27] (Nextcloud GmbH -> Nextcloud GmbH)
HKU\S-1-5-21-2395074704-259971784-2882117250-1001\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [5461872 2024-05-07] (IObit CO., LTD -> IObit)
HKU\S-1-5-21-2395074704-259971784-2882117250-1001\...\Run: [electron.app.Notion] => C:\Users\mskkg\AppData\Local\Programs\Notion\Notion.exe [186492352 2024-10-04] (Notion Labs, Inc. -> Notion Labs, Inc)
HKU\S-1-5-21-2395074704-259971784-2882117250-1001\...\Run: [org.whispersystems.signal-desktop] => C:\Users\mskkg\AppData\Local\Programs\signal-desktop\Signal.exe [186624880 2024-10-09] (Signal Messenger, LLC -> Signal Messenger, LLC)
HKU\S-1-5-21-2395074704-259971784-2882117250-1001\...\Policies\Explorer: [HideSCAMeetNow] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\129.1.70.126\Installer\chrmstp.exe [2024-10-09] (Brave Software, Inc. -> Brave Software, Inc.)
Startup: C:\Users\mskkg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\DeepL auto-start.lnk [2024-08-21]
ShortcutTarget: DeepL auto-start.lnk -> C:\Users\mskkg\AppData\Roaming\0install.net\desktop-integration\stubs\1eae01f3cdb5ff0ecf683b15a60a1489573c1188cb34abc205fcf7a924b4e54d\auto-start.exe () [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Brother iPSMonitor.lnk [2024-09-14]
ShortcutTarget: Brother iPSMonitor.lnk -> C:\Program Files (x86)\Brother\iPrint&Scan\IPSMONITOR\iPSMonitor.exe (iPSMonitor) [Datei ist nicht signiert]

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2C5BFDE5-A3A6-4BDC-8E45-47787B45BF49} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [5511536 2024-03-15] (IObit CO., LTD -> IObit) -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/Task
Task: {A746CC99-19A0-425C-A2DB-A23496C35807} - System32\Tasks\ASC_SkipUac_mskkg => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [10570608 2024-09-02] (IObit CO., LTD -> IObit) -> C:\Program Files (x86)\IObit\Advanced SystemCare\\/SkipUac
Task: {59C750E8-C70E-41C7-8701-437392E80ACC} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{D13F9298-816E-4BF8-8883-D925D6EAC250} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {2FA60D9A-5524-46B0-93C0-83E408266E38} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{534F4983-B730-4580-B9C7-93CFBAB57FA1} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-19] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {C4EE3419-A82B-43C9-BD7D-FDFD5A12DF84} - System32\Tasks\Intel PTT EK Recertification => C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\IntelPTTEKRecertification.exe [855664 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
Task: {081AFAFB-C34A-4CD2-B752-D0EA0F4E0902} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {D88A32BF-E67E-4F62-851E-6803E9C51C6A} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on switch user if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {3DD71DB4-25AD-4594-90E3-F9B9792E870D} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [227888 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation)
Task: {FC5EBE89-AB21-48AE-AB32-4945AB6F3E83} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2311216 2019-10-02] (Key for TBT Legacy Driver -> Intel Corporation) -> C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalServiceStart
Task: {F343BFFC-D9FD-468E-BA1D-75C23BE72284} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => C:\WINDOWS\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files (x86)\Intel\Thunderbolt Software\\start ThunderboltService
Task: {B3190CBC-1275-42DA-BEBD-547EB146F9A5} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [128872 2023-12-20] (Lenovo -> Lenovo)
Task: {DAE888CC-7D50-4601-B039-D83A85295F29} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [66920 2023-12-20] (Lenovo -> )
Task: {AB9529E8-B301-42D7-BC4E-36CEFDE216F8} - System32\Tasks\Lenovo\SmartStandby\Daily analysis => C:\Windows\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\AutonomicMgr.exe [76640 2024-05-09] (Lenovo -> )
Task: {CEF79D0B-0083-4A8B-8BBB-70984F5F8A4F} - System32\Tasks\Lenovo\SmartStandby\Uninstall Monitor => C:\WINDOWS\system32\SmartStandbyInst.exe [45912 2024-05-09] (Lenovo -> )
Task: {A0228165-ACED-44B0-874C-09CCF382CC35} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21917936 2024-08-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {5721A859-3438-4372-BD4C-ECA4610257C6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [21917936 2024-08-26] (Microsoft Corporation -> Microsoft Corporation)
Task: {B363BEC7-6233-4ABC-AD60-49B579E0AF5A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {51238A36-5AF5-4D1F-8FFF-14907374DCE0} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141384 2024-09-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {82D2C73C-5E8F-481C-98B7-29EB03DACBFF} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {601FEE4D-7E82-45DE-A164-83A9CB0CD5EE} - System32\Tasks\MindManagerV22 Notifications Check {S-1-5-21-2395074704-259971784-2882117250-1001} => C:\WINDOWS\system32\rundll32.exe [90112 2024-07-12] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\MindManager 22\"C:\Program Files\MindManager 22\MmProductNotifications.dll",InvokeNotificationsShellable <==== ACHTUNG
Task: {DCB7B956-E371-42CA-85A6-4AA0C17D8C3F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2395074704-259971784-2882117250-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [672320 2024-10-09] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {61EE39C9-9BB0-4845-883D-287BCB3AE2ED} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34368 2024-10-09] (Mozilla Corporation -> Mozilla Foundation)
Task: {3286C019-A5F9-4CAA-90B4-DFAAF738F9B7} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3060072 2024-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {7D892789-DF67-4E48-B35D-870890460676} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2395074704-259971784-2882117250-1001 => C:\Program Files (x86)\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [3060072 2024-08-20] (Microsoft Corporation -> Microsoft Corporation)
Task: {5A119AD0-373C-458C-B702-699DAEB312EA} - System32\Tasks\RtHDVBg_Dolby => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {BEE8BDEF-B57D-46F7-A7E5-38829F8D75BA} - System32\Tasks\RtHDVBg_PushButton => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {91179E08-9E21-402C-9E11-6E8AD49CCACE} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [3618912 2022-05-17] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {32FCCCF3-9755-4D6F-9326-6AEB5052CD55} - System32\Tasks\Uninstaller_SkipUac_mskkg => C:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [9914736 2024-06-26] (IObit CO., LTD -> IObit) -> C:\Program Files (x86)\IObit\IObit Uninstaller\\/UninstallExplorer

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{560d912a-889e-4cb4-ba1e-d5527f5c4e67}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{560d912a-889e-4cb4-ba1e-d5527f5c4e67}: [DhcpDomain] fritz.box

Edge: 
=======
Edge Profile: C:\Users\mskkg\AppData\Local\Microsoft\Edge\User Data\Default [2024-10-04]
Edge Extension: (Google Docs Offline) - C:\Users\mskkg\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-07-25]
Edge Extension: (Edge relevant text changes) - C:\Users\mskkg\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-07-25]

FireFox:
========
FF DefaultProfile: nbwxgn5y.default
FF ProfilePath: C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\nbwxgn5y.default [2024-08-19]
FF ProfilePath: C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release [2024-10-14]
FF Homepage: Mozilla\Firefox\Profiles\wa5y3ct2.default-release -> www.duckduckgo.com
FF Extension: (Facebook Container) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\@contain-facebook.xpi [2024-08-23]
FF Extension: (DeepL Übersetzer) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\firefox-extension@deepl.com.xpi [2024-09-26]
FF Extension: (DuckDuckGo Privacy Essentials) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\jid1-ZAdIEUB7XOzOJw@jetpack.xpi [2024-08-19]
FF Extension: (RoboForm Passwortmanager) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\rf-firefox@siber.com.xpi [2024-10-04]
FF Extension: (uBlock Origin) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\uBlock0@raymondhill.net.xpi [2024-10-04]
FF Extension: (Surfshark VPN-Erweiterung) - C:\Users\mskkg\AppData\Roaming\Mozilla\Firefox\Profiles\wa5y3ct2.default-release\Extensions\{732216ec-0dab-43bb-ac85-4b5e1977599d}.xpi [2024-10-07]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-08-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-08-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2024-08-19] (Microsoft Corporation -> Microsoft Corporation)

Brave: 
=======
BRA Profile: C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-10-14]
BRA HomePage: Default -> hxxp://www.duckduckgo.com/
BRA StartupUrls: Default -> "hxxp://www.duckduckgo.com/"
BRA DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}&t=bravened
BRA DefaultSearchKeyword: Default -> :d
BRA DefaultSuggestURL: Default -> hxxps://ac.duckduckgo.com/ac/?q={searchTerms}&type=list
BRA Extension: (Surfshark VPN-Erweiterung) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ailoabdmgclmfmhdagmlohpjlbpffblp [2024-10-08]
BRA Extension: (change-language) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\cofdbpoegempjloogbagkncekinflcnj [2024-09-17]
BRA Extension: (RoboForm Passwortmanager) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\pnlccmojcmeohlpggmfnbbiapkmbliob [2024-10-01]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-10-08]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-10-12]
BRA Extension: (Brave NTP background images) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2024-09-17]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-10-14]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-10-14]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2024-09-24]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2024-08-19]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-10-14]
BRA Extension: (Brave Ads Resources) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2024-09-17]
BRA Extension: (Brave Ad Block Updater (EasyList Germany (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2024-10-14]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-10-02]
BRA Extension: (Brave Ad Block Updater (Brave Twitch Adblock Rules (plaintext))) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\mhccgcegedfkhdbfbgllfkkcjhgkoinc [2024-09-19]
BRA Extension: (Brave NTP sponsored images) - C:\Users\mskkg\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2024-10-13]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdvancedSystemCareService17; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1268744 2024-03-07] (IObit CO., LTD -> IObit)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-19] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\129.1.70.126\elevation_service.exe [2666512 2024-10-09] (Brave Software, Inc. -> Brave Software, Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167448 2024-08-19] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [500736 2024-05-31] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9203440 2024-08-26] (Microsoft Corporation -> Microsoft Corporation)
R2 Dolby DAX API Service; C:\Program Files\Dolby\Dolby DAX3\API\DAX3API.exe [212448 2019-01-22] (Dolby Laboratories, Inc. -> )
S3 FileSyncHelper; C:\Program Files (x86)\Microsoft OneDrive\21.220.1024.0005\FileSyncHelper.exe [2448232 2024-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 IBMPMSVC; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_c7ee80e7f3d3c3de\x64\ibmpmsvc.exe [1031408 2024-05-31] (Lenovo -> Lenovo)
S2 IObitUnSvr; C:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [167432 2024-04-26] (IObit CO., LTD -> IObit)
R2 LenovoSmartStandby; C:\WINDOWS\System32\DriverStore\FileRepository\smartstandbycomponent.inf_amd64_443332a5152da4f0\SmartStandby.exe [341336 2024-05-09] (Lenovo -> Lenovo)
R2 LITSSVC; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_2295caad8eb8753a\x64\LITSSvc.exe [1093960 2024-06-11] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_c7ee80e7f3d3c3de\x64\LPlatSvc.exe [916312 2024-05-31] (Lenovo -> Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9019096 2024-10-14] (Malwarebytes Inc. -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [3073888 2024-10-14] (Malwarebytes Inc. -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MpDefenderCoreService.exe [1431160 2024-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files (x86)\Microsoft OneDrive\21.220.1024.0005\OneDriveUpdaterService.exe [2836840 2024-08-20] (Microsoft Corporation -> Microsoft Corporation)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [645976 2024-06-06] (Geek Software GmbH -> geek software GmbH)
S3 QFXUpdateService; C:\Program Files (x86)\KeyScrambler\x64\QFXUpdateService.exe [780312 2023-08-14] (QFX Software Corporation -> )
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [530448 2024-08-27] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 TPHKLOAD; C:\WINDOWS\System32\DriverStore\FileRepository\fn.inf_amd64_9c4c29de89199c58\driver\TPHKLOAD.exe [473760 2021-10-22] (Lenovo -> Lenovo Group Limited)
R2 USBAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\USBAppControl.exe [11776 2024-08-19] () [Datei ist nicht signiert]
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\NisSrv.exe [3199656 2024-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24080.9-0\MsMpEng.exe [133704 2024-09-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WorkflowAppControl; C:\Program Files (x86)\Brother\iPrint&Scan\WorkflowAppControl.exe [18944 2024-08-19] () [Datei ist nicht signiert]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [55608 2023-06-27] (Apple Inc. -> Apple Inc.)
R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [47904 2024-03-07] (IObit CO., LTD -> IObit)
R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46552 2024-03-07] (IObit CO., LTD -> IObit)
S3 AX88179; C:\WINDOWS\System32\DriverStore\FileRepository\netax88179_178a.inf_amd64_a8bb8a6e92764769\ax88179_178a.sys [79872 2022-05-07] (Microsoft Windows -> ASIX Electronics Corp.)
R3 AX88179A; C:\WINDOWS\System32\DriverStore\FileRepository\axusbeth.inf_amd64_00da554e0fe424fd\AxUsbEth.sys [168048 2024-06-11] (WDKTestCert asix,133111579530933026 -> ASIX Electronics Corp.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2024-06-07] (Microsoft Corporation) [Datei ist nicht signiert]
R3 cpuz154; C:\WINDOWS\temp\cpuz154\cpuz154_x64.sys [40976 2024-10-11] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== ACHTUNG
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2024-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 IBMPMDRV; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_c7ee80e7f3d3c3de\x64\ibmpmdrv.sys [56664 2024-05-31] (Lenovo -> Lenovo)
R3 iobit_monitor_server2021; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [33256 2024-03-07] (IObit CO., LTD -> IObit)
R3 IUFileFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [28240 2024-04-26] (Microsoft Windows Hardware Compatibility Publisher -> IObit)
R3 IUProcessFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37112 2024-04-26] (IObit Information Technology -> IObit)
R3 IURegistryFilter; C:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [36432 2024-04-26] (Microsoft Windows Hardware Compatibility Publisher -> IObit)
R3 KeyScrambler; C:\WINDOWS\System32\drivers\keyscrambler.sys [243800 2018-09-08] (QFX Software Corporation -> QFX Software Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [231504 2024-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-10-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt11.sys [234168 2024-10-14] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [80448 2024-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2024-10-14] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2024-10-14] (Malwarebytes Inc. -> Malwarebytes)
R1 PMDRVS; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_c7ee80e7f3d3c3de\x64\pmdrvs.sys [42328 2024-05-31] (Lenovo -> Lenovo)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-09-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602392 2024-09-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-14] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-14 09:59 - 2024-10-14 10:00 - 000034514 _____ C:\Users\mskkg\Downloads\FRST.txt
2024-10-14 09:59 - 2024-10-14 10:00 - 000000000 ____D C:\FRST
2024-10-14 09:59 - 2024-10-14 09:59 - 002397696 _____ (Farbar) C:\Users\mskkg\Downloads\FRST64.exe
2024-10-14 09:50 - 2024-10-14 10:00 - 000000000 ____D C:\Users\mskkg\AppData\Local\Malwarebytes
2024-10-14 09:50 - 2024-10-14 09:51 - 000000000 ____D C:\Users\mskkg\AppData\LocalLow\IGDump
2024-10-14 09:50 - 2024-10-14 09:50 - 000234168 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys
2024-10-14 09:50 - 2024-10-14 09:50 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2024-10-14 09:50 - 2024-10-14 09:50 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-10-14 09:50 - 2024-10-14 09:50 - 000002081 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-10-14 09:48 - 2024-10-14 09:48 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-10-14 09:47 - 2024-10-14 09:48 - 000000000 ____D C:\Program Files\Malwarebytes
2024-10-14 09:47 - 2024-10-14 09:47 - 002549600 _____ (Malwarebytes) C:\Users\mskkg\Downloads\MBSetup.exe
2024-10-14 09:46 - 2024-10-14 09:46 - 001660532 _____ (Mike Unckel & Dominik Hasenkopf ) C:\Users\mskkg\Downloads\Kalenderwoche CWT_Setup_1.2.0.4.exe
2024-10-14 09:08 - 2024-10-14 09:08 - 000709782 _____ C:\Users\mskkg\Documents\IMG_1507.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000647901 _____ C:\Users\mskkg\Documents\IMG_1508.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000637595 _____ C:\Users\mskkg\Documents\IMG_1504.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000389460 _____ C:\Users\mskkg\Documents\IMG_1505.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000387817 _____ C:\Users\mskkg\Documents\IMG_1503.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000366279 _____ C:\Users\mskkg\Documents\IMG_1506.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000365447 _____ C:\Users\mskkg\Documents\IMG_1502.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000320659 _____ C:\Users\mskkg\Documents\IMG_1501.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000262461 _____ C:\Users\mskkg\Documents\IMG_1500.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000258422 _____ C:\Users\mskkg\Documents\IMG_1498.pdf
2024-10-14 09:08 - 2024-10-14 09:08 - 000247099 _____ C:\Users\mskkg\Documents\IMG_1499.pdf
2024-10-13 07:25 - 2024-10-13 07:25 - 000843058 _____ C:\Users\mskkg\Documents\Nachrüstset Fotos für Ducato 244.pdf
2024-10-13 07:15 - 2024-10-13 07:15 - 004085675 _____ C:\Users\mskkg\Downloads\ocm_2017_2018.xlsx
2024-10-11 19:58 - 2024-10-11 19:58 - 020238862 _____ (3DYD Soft) C:\Users\mskkg\Downloads\3dyd64_1.20.9.exe
2024-10-11 06:20 - 2024-10-11 06:20 - 000723048 _____ C:\WINDOWS\system32\perfh007.dat
2024-10-11 06:20 - 2024-10-11 06:20 - 000149088 _____ C:\WINDOWS\system32\perfc007.dat
2024-10-10 14:17 - 2024-10-10 14:17 - 000614681 _____ C:\Users\mskkg\Downloads\sendebericht_6707da077f5b3431606-1.pdf
2024-10-10 14:16 - 2024-10-10 14:16 - 000470639 _____ C:\Users\mskkg\Downloads\doc_6707da077f5b3431606-1.pdf
2024-10-10 10:07 - 2024-10-10 10:07 - 000033215 _____ C:\Users\mskkg\Documents\20241010_1006_Zahlungsdetails.pdf
2024-10-10 10:06 - 2024-10-10 10:06 - 000033215 _____ C:\Users\mskkg\Downloads\20241010_1006_Zahlungsdetails.pdf
2024-10-10 09:04 - 2024-10-10 09:04 - 000052927 _____ C:\Users\mskkg\Documents\Zahlungsübersicht.pdf
2024-10-09 15:19 - 2024-10-11 06:12 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-10-09 15:12 - 2024-10-09 15:13 - 132818072 _____ (Signal Messenger, LLC) C:\Users\mskkg\Downloads\SignalSetup(1).exe
2024-10-09 15:10 - 2024-10-14 09:51 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Signal
2024-10-09 15:10 - 2024-10-09 15:10 - 000002399 _____ C:\Users\mskkg\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Signal.lnk
2024-10-09 15:10 - 2024-10-09 15:10 - 000002391 _____ C:\Users\mskkg\Desktop\Signal.lnk
2024-10-08 20:11 - 2024-10-08 20:11 - 000000000 ____D C:\Users\mskkg\Downloads\Telegram Desktop
2024-10-08 12:22 - 2024-10-08 12:22 - 000000000 ___RD C:\Users\mskkg\Documents\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe!App
2024-10-05 14:11 - 2024-10-05 16:07 - 000001776 _____ C:\Users\mskkg\Documents\contacts.vcf
2024-10-05 14:09 - 2024-10-05 14:09 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2024-10-04 09:44 - 2024-10-04 09:44 - 000003280 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor
2024-10-04 09:43 - 2024-10-04 09:43 - 000003070 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_mskkg
2024-10-04 09:43 - 2024-10-04 09:43 - 000001298 _____ C:\Users\Public\Desktop\Advanced SystemCare.lnk
2024-10-04 09:43 - 2024-10-04 09:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare
2024-10-04 09:43 - 2024-10-04 09:43 - 000000000 ____D C:\ProgramData\{7D4F950D-61ED-482D-A05D-43620B49B610}
2024-10-04 08:04 - 2024-10-04 08:04 - 000001924 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nextcloud.lnk
2024-10-04 08:04 - 2024-10-04 08:04 - 000001912 _____ C:\Users\Public\Desktop\Nextcloud.lnk
2024-10-04 08:04 - 2024-10-04 08:04 - 000000000 ____D C:\Program Files\Nextcloud
2024-10-04 07:46 - 2024-10-04 07:46 - 000119676 _____ C:\Users\mskkg\Downloads\Paketschein_244278518276_Gockenbach_041024.pdf
2024-10-04 07:46 - 2024-10-04 07:46 - 000067947 _____ C:\Users\mskkg\Downloads\Mobiler_Paketschein_244278518276_Gockenbach_041024.pdf
2024-09-19 15:45 - 2024-09-24 21:55 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Microsoft\PowerPoint
2024-09-18 12:34 - 2024-09-18 12:34 - 002291847 _____ C:\Users\mskkg\Downloads\Anleitung-Tempomat-2.6(1)(1).pdf
2024-09-18 12:31 - 2024-09-18 12:31 - 001609092 _____ C:\Users\mskkg\Downloads\Einbau Tempomat Zemco AP500.pdf
2024-09-18 12:30 - 2024-09-18 12:30 - 001544932 _____ C:\Users\mskkg\Downloads\Anleitung Tempomat V2.1.pdf
2024-09-17 19:18 - 2024-09-17 19:18 - 000623613 _____ C:\Users\mskkg\Documents\Bügeleisen.pdf
2024-09-14 21:44 - 2024-09-14 21:44 - 000001392 _____ C:\Users\Public\Desktop\Brother iPrint&Scan.lnk

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-10-14 09:59 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-10-14 09:51 - 2024-08-19 10:48 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Zoho Mail - Desktop
2024-10-14 09:51 - 2024-08-19 10:36 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Notion
2024-10-14 09:49 - 2024-07-25 16:48 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-10-14 09:49 - 2024-07-25 16:47 - 000000000 ____D C:\WINDOWS\INF
2024-10-14 09:03 - 2024-07-25 16:48 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-10-14 08:48 - 2024-08-24 09:05 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Telegram Desktop
2024-10-14 08:44 - 2024-08-19 07:43 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Microsoft\Word
2024-10-14 07:49 - 2024-07-25 16:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-10-14 06:01 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-10-14 06:00 - 2024-07-25 16:48 - 000000000 ___HD C:\Program Files\WindowsApps
2024-10-13 07:15 - 2024-08-28 20:03 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Microsoft\Excel
2024-10-13 07:15 - 2024-07-25 16:36 - 000000000 ____D C:\Users\mskkg\AppData\Local\Packages
2024-10-13 07:02 - 2024-08-19 06:27 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-10-13 00:00 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-10-11 08:01 - 2024-08-23 04:31 - 000002554 _____ C:\WINDOWS\SysWOW64\pubfreeware.ini
2024-10-11 06:21 - 2024-08-24 23:27 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Nextcloud
2024-10-11 06:20 - 2024-07-25 16:19 - 001660356 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-10-11 06:12 - 2024-08-19 06:27 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-10-11 06:12 - 2024-07-25 16:52 - 000000000 ____D C:\Intel
2024-10-11 06:12 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\ServiceState
2024-10-11 06:12 - 2024-07-25 16:36 - 000000000 __SHD C:\Users\mskkg\IntelGraphicsProfiles
2024-10-11 06:12 - 2024-07-25 16:11 - 000012288 ___SH C:\DumpStack.log.tmp
2024-10-11 06:12 - 2024-07-25 16:11 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-10-10 18:38 - 2024-07-25 16:44 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2024-10-10 13:38 - 2024-07-25 16:40 - 000000000 ____D C:\Users\mskkg\AppData\Local\D3DSCache
2024-10-10 13:23 - 2024-08-19 06:38 - 000013382 _____ C:\WINDOWS\BRRBCOM.INI
2024-10-10 09:50 - 2024-08-19 06:27 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-10-09 20:14 - 2024-08-19 13:10 - 000002356 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-10-09 20:14 - 2024-08-19 13:10 - 000002315 _____ C:\Users\Public\Desktop\Brave.lnk
2024-10-09 15:03 - 2024-07-25 16:11 - 000512296 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-10-09 12:59 - 2024-07-25 16:50 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2024-10-09 12:59 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\SystemResources
2024-10-09 12:59 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2024-10-09 12:59 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-10-09 12:59 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-10-08 20:14 - 2024-07-25 16:48 - 000000000 ____D C:\ProgramData\USOPrivate
2024-10-08 19:50 - 2024-07-25 16:45 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-10-07 18:09 - 2024-08-19 07:43 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\Microsoft\Office
2024-10-07 14:54 - 2024-08-21 13:03 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\DeepL_SE
2024-10-06 13:23 - 2024-08-21 09:08 - 000000000 ____D C:\Users\mskkg\Downloads\!vorab-Papierkorb
2024-10-05 09:16 - 2024-07-25 16:11 - 000003832 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{B593DCEB-BE0E-43F1-8EFD-C3AF4C345131}
2024-10-05 09:16 - 2024-07-25 16:11 - 000003708 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{B95FE16D-CA46-48DE-B41A-E27C0ABEF0C7}
2024-10-04 09:44 - 2024-08-19 15:07 - 000000000 ____D C:\Users\mskkg\AppData\Roaming\IObit
2024-10-04 09:44 - 2024-08-19 15:07 - 000000000 ____D C:\ProgramData\ProductData3
2024-10-04 09:44 - 2024-08-19 15:07 - 000000000 ____D C:\ProgramData\IObit
2024-10-04 09:44 - 2024-07-25 16:53 - 000000000 ____D C:\WINDOWS\Panther
2024-10-04 09:43 - 2024-08-19 15:07 - 000000000 ____D C:\Users\mskkg\AppData\LocalLow\IObit
2024-10-04 09:43 - 2024-08-19 15:07 - 000000000 ____D C:\Program Files (x86)\IObit
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\SystemApps
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\Provisioning
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2024-10-04 07:49 - 2024-07-25 16:48 - 000000000 ____D C:\WINDOWS\IME
2024-10-04 07:49 - 2024-07-25 16:44 - 000000000 ____D C:\WINDOWS\servicing
2024-09-28 11:05 - 2024-08-24 23:28 - 000000000 ____D C:\Users\mskkg\Downloads\mp3s
2024-09-27 11:56 - 2024-07-25 16:13 - 003213312 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-09-22 17:52 - 2024-08-19 08:14 - 000000000 ____D C:\Users\mskkg\AppData\Local\ElevatedDiagnostics
2024-09-17 09:14 - 2024-08-19 07:25 - 000000000 ____D C:\Program Files\Microsoft Office
2024-09-14 23:29 - 2024-07-25 16:11 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2024-09-14 21:44 - 2024-08-22 12:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brother
2024-09-14 21:44 - 2024-08-19 12:49 - 000000000 ____D C:\Program Files (x86)\Browny02
2024-09-14 21:44 - 2024-07-25 16:24 - 000000000 ____D C:\ProgramData\Package Cache
2024-09-14 21:22 - 2024-08-19 10:47 - 000000000 ____D C:\Users\mskkg\AppData\Local\zoho-mail-desktop-updater

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2024-08-19 19:55 - 2024-08-21 15:29 - 000007606 _____ () C:\Users\mskkg\AppData\Local\Resmon.ResmonCfg
2024-08-22 13:33 - 2024-08-22 13:33 - 000000000 _____ () C:\Users\mskkg\AppData\Local\settingData.dat

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet

Log-Analyse und Auswertung: Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet

Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet

Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet

Ähnliche Themen: Kalenderwoche-Programm runtergeladen, nicht installiert, wird als Virus von virustotal gemeldet