1. win10: Win-Defender findet "Trojaner Leonem", Defender-Meldung verschwindet sofort und wird durch "keine Bedrohung" ersetzt

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 23-11-2024
durchgeführt von XXXXXX (Administrator) auf SPARKLE (Dell Inc. Latitude 7285) (25-11-2024 18:57:28)
Gestartet von C:\Users\const\Downloads\FRST64.exe
Geladene Profile: XXXXXX
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.5131 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_15.3.138.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Adobe Crash Processor.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\bckp_amgr.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\grpm-mini.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\monitoring-mini.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\bin\task-manager.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\adp-agent.exe
(C:\Program Files (x86)\Acronis\Agent\aakore.exe ->) (Acronis International GmbH -> Acronis International GmbH.) C:\Program Files (x86)\Acronis\Agent\bin\updater.exe
(C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe ->) (Adobe Inc. -> Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\acrotray.exe <3>
(C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe ->) (453637B3-4E12-4CDF-B0D3-2A3C863BF6EF -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.251.345.0_x64__zpdnekdrzrea0\Spotify.exe <8>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.CoreServices.Client.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Technologies Inc. -> Dell, Inc.) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\Tablet\ISD\WacomHost.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_Tablet.exe
(C:\Program Files\Tablet\ISD\WTabletServiceISD.exe ->) (Wacom Technology Corp. -> Wacom Technology) C:\Program Files\Tablet\ISD\WacomHost.exe
(C:\Program Files\Tablet\ISD\WTabletServiceISD.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\ISD_TabletUser.exe
(DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxCUIService.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxEM.exe
(DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\dptf_helper.exe
(explorer.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkUGui64.exe
(explorer.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.132.3201.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <6>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Acronis\Agent\aakore.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Dell Inc. -> ) C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe
(services.exe ->) (Dell Technologies Inc. -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Technologies Inc. -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Technologies Inc. -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f47cef52ac4d1535\igfxCUIService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_af50fdb80983f7bc\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_c2c5b0e17a28a48f\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_bee333b3fb02dacb\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3898aa684fb57d5a\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_3898aa684fb57d5a\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <3>
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Wacom Technology Corporation -> Wacom Technology, Corp.) C:\Program Files\Tablet\ISD\WTabletServiceISD.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Program Files\Waves\MaxxAudio\WavesSysSvc64.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2445.7.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\SDXHelper.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe <5>
(Western Digital Technologies, Inc. -> Western Digital Corporation) C:\Program Files (x86)\Western Digital\Discovery\Current\WDDiscoveryMonitor.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4116904 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [858808 2019-02-20] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\Program Files\Waves\MaxxAudio\WavesSvc64.exe [1235160 2019-09-26] (Waves Inc -> Waves Audio Ltd.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [RTKUGUI] => C:\WINDOWS\system32\RtkUGui64.exe [11075168 2020-08-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [637784 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [ControlCenter4] => C:\Program Files (x86)\ControlCenter4\BrCcBoot.exe [143360 2012-09-06] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [BrStsMon00] => C:\Program Files (x86)\Browny02\Brother\BrStMonW.exe [3076096 2012-06-06] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [PowerDVD17Agent] => C:\Program Files (x86)\CyberLink\PowerDVD17\PowerDVD17Agent.exe [527400 2017-09-12] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [238568 2020-05-08] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2024-09-03] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [WDDiscovery] => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Discovery.exe [132587352 2024-08-13] (Western Digital Technologies, Inc. -> Western Digital Corporation)
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [5450696 2022-12-21] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446392 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1130416 2024-11-20] (Adobe Inc. -> Adobe Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\Winlogon: [Shell] [[%%INSTALLTIME%%]] <==== ACHTUNG
HKU\S-1-5-20\...\Winlogon: [Shell] [[%%INSTALLTIME%%]] <==== ACHTUNG
HKU\S-1-5-21-2359067757-2565054429-883763901-1001\...\Run: [CCXProcess] => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194048 2024-11-23] (Adobe Inc. -> Adobe Inc.)
HKU\S-1-5-21-2359067757-2565054429-883763901-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [9252248 2024-11-13] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2359067757-2565054429-883763901-1001\...\Run: [MicrosoftEdgeAutoLaunch_9593FB868ACC58367CDC770E65E88019] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3911240 2024-11-21] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2359067757-2565054429-883763901-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\DreamAquarium.scr [141312 2018-12-23] () [Datei ist nicht signiert]
HKU\S-1-5-21-2359067757-2565054429-883763901-1004\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ralft\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [39236968 2021-03-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2359067757-2565054429-883763901-1004\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ralft\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-2359067757-2565054429-883763901-1004\...\RunOnce: [Uninstall 20.143.0716.0003\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ralft\AppData\Local\Microsoft\OneDrive\20.143.0716.0003\amd64" [0 2021-03-15] () <==== ACHTUNG [Null Byte Datei/Ordner]
HKU\S-1-5-21-2359067757-2565054429-883763901-1004\...\RunOnce: [Uninstall 20.143.0716.0003] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ralft\AppData\Local\Microsoft\OneDrive\20.143.0716.0003" [0 2021-03-15] () <==== ACHTUNG [Null Byte Datei/Ordner]
HKU\S-1-5-21-2359067757-2565054429-883763901-1004\...\Winlogon: [Shell] [[%%INSTALLTIME%%]] <==== ACHTUNG
HKU\S-1-5-21-2359067757-2565054429-883763901-1006\...\Run: [OneDrive] => "C:\Users\XXXXXX_Benutzer\AppData\Local\Microsoft\OneDrive\OneDrive.exe" /background (Keine Datei)
HKU\S-1-5-21-2359067757-2565054429-883763901-1006\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\XXXXXX_Benutzer\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-2359067757-2565054429-883763901-1006\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\XXXXXX_Benutzer\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-2359067757-2565054429-883763901-1006\...\Winlogon: [Shell] [[%%INSTALLTIME%%]] <==== ACHTUNG
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2021-12-24] (Adobe Inc. -> Adobe Systems Inc)
Startup: C:\Users\const\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2021-09-26]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {17D71839-B7AA-4911-8762-B5B482A86F9D} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1574856 2024-09-25] (Adobe Inc. -> Adobe Inc.)
Task: {98B17FB9-FD0B-45B1-9CC4-A8201A440002} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [4116904 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {8F0A703A-2D51-4CAF-9FB6-DC31EBDE6FA3} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [4455336 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C1B08037-F71A-49E8-89F6-46516523D7BB} - System32\Tasks\Apple Diagnostics => C:\Users\const\AppData\Local\Microsoft\WindowsApps\eReporter-AppX.exe [0 2024-11-08] () [symlink -> ]
Task: {62A283A3-5EDE-45BB-B23F-608E3C0F5500} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [964936 2024-04-25] (Dell Technologies Inc. -> Dell Inc.) -> C:\Program Files\Dell\SupportAssistAgent\bin\AutoUpdate
Task: {6AA7A30B-7590-4B8D-BEE4-20043F1429FC} - System32\Tasks\Intel\Intel® Management and Security Status => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [219768 2023-07-09] (Intel Corporation -> Intel Corporation) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
Task: {8B73A108-8FD9-4CA5-B907-3F08B2A11FE9} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194048 2024-11-23] (Adobe Inc. -> Adobe Inc.)
Task: {733218A3-6D9E-4B38-BDE1-DAF7196FDD07} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {CA183080-F1FC-4238-A62F-75073ABA86D0} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28644032 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {FC218476-E92E-4186-9587-B11AAAAC5AA8} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [223344 2024-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {905A5892-F228-4C54-9A19-C078B1C8A0A7} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [223344 2024-11-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2E0CED44-2AA6-492A-8AA8-3D650F46EC1F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BF0EFFF1-B7A8-4FE2-B116-E11691BC7803} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A83214BE-0E4C-4F1E-9E56-207DE614D62C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {7C637365-5985-496A-9AED-74D8868F4C4D} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpCmdRun.exe [1687360 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {1CAF7F19-8F5D-4921-A004-A09E9C522A26} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671808 2024-11-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {9E4B4794-C23E-43C6-8939-760CEA3839F3} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-2359067757-2565054429-883763901-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [671808 2024-11-17] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {00E679A2-3439-423B-9049-BF350DFAC31A} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34368 2024-11-17] (Mozilla Corporation -> Mozilla Foundation)
Task: {CD23F2CB-2CDF-4DEA-80C9-D257039F3CE5} - System32\Tasks\WD Device Agent Task XXXXXX => C:\Program Files (x86)\Western Digital\Discovery\Current\WD Device Agent.exe [727384 2024-08-13] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
Task: {1669F121-644F-49CD-B097-372744F20B27} - System32\Tasks\WD Discovery Service Task XXXXXX => C:\Program Files (x86)\Western Digital\Discovery\Current\Service\WDDiscoveryService.exe [82264 2024-08-13] (Western Digital Technologies, Inc. -> )

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1 192.168.1.1
Tcpip\..\Interfaces\{176e4df5-194d-4118-8fb3-0ad274cf23b3}: [DhcpNameServer] 192.168.0.1 192.168.1.1
Tcpip\..\Interfaces\{176e4df5-194d-4118-8fb3-0ad274cf23b3}: [DhcpDomain] netgear.com
Tcpip\..\Interfaces\{fec16569-312f-4476-964e-832c0f41dc63}: [DhcpNameServer] 192.168.0.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\const\AppData\Local\Microsoft\Edge\User Data\Default [2024-11-23]
Edge Extension: (Google Docs Offline) - C:\Users\const\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2024-10-15]
Edge Extension: (Edge relevant text changes) - C:\Users\const\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]

FireFox:
========
FF DefaultProfile: 37cdb4s6.default-1648203656690
FF ProfilePath: C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690 [2024-11-25]
FF Notifications: Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690 -> hxxps://www.rnd.de
FF Extension: (Der Camelizer) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\izer@camelcamelcamel.com.xpi [2022-03-25]
FF Extension: (Dashlane) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\jetpack-extension@dashlane.com.xpi [2024-11-19]
FF Extension: (uBlock Origin) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\uBlock0@raymondhill.net.xpi [2024-11-17]
FF Extension: (Flagfox) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2024-11-09]
FF Extension: (Search by Image) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\{2e5ff8c8-32fe-46d0-9fc8-6b8986621f3c}.xpi [2024-07-01]
FF Extension: (Video DownloadHelper) - C:\Users\const\AppData\Roaming\Mozilla\Firefox\Profiles\37cdb4s6.default-1648203656690\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2024-09-11]
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-07-23]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @videolan.org/vlc,version=3.0.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.20 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-30] (VideoLAN -> VideoLAN)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2024-11-20] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2024-09-04] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2024-04-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.21 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-11-13] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2024-11-20] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei]

Chrome: 
=======
CHR HKU\S-1-5-21-2359067757-2565054429-883763901-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aakore; C:\Program Files (x86)\Acronis\Agent\aakore.exe [9031480 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [13720736 2022-12-21] (Acronis International GmbH -> )
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1704216 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [172992 2024-09-25] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944048 2024-11-20] (Adobe Inc. -> Adobe Inc.)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6391536 2024-08-13] (Acronis International GmbH -> )
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [4580776 2024-10-23] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [103264 2022-10-08] (Apple Inc. -> Apple Inc.)
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [266240 2012-06-05] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13652176 2024-11-09] (Microsoft Corporation -> Microsoft Corporation)
S3 dcpm-notify; C:\Program Files\Dell\CommandPowerManager\NotifyService.exe [86048 2017-08-16] (Dell Inc -> Dell Inc.)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458128 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
S2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [159632 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [481680 2023-12-07] (Dell Technologies Inc. -> Dell Technologies Inc.)
R2 Dell Digital Delivery Services; C:\Program Files (x86)\Dell Digital Delivery Services\Dell.D3.WinSvc.exe [59632 2024-10-29] (Dell Inc. -> )
S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{976E7592-51B7-44A6-83AC-00293660FD22} [22384 2023-11-16] (Microsoft Windows -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [51936 2024-07-19] (Dell Technologies Inc. -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [159664 2023-12-22] (Dell Technologies Inc. -> Dell)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe [1447680 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4882992 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559368 2024-11-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [159048 2024-04-25] (Dell Technologies Inc. -> Dell Inc.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256856 2023-08-08] (Intel Corporation -> Intel Corporation)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [16907576 2023-03-09] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [5910328 2022-12-21] (Acronis International GmbH -> Acronis International GmbH)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe [3199672 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe [141952 2024-10-31] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BrSerIb; C:\WINDOWS\System32\drivers\BrSerIb.sys [87552 2009-11-03] (Microsoft Windows Hardware Compatibility Publisher -> Brother Industries Ltd.)
S3 BrUsbSIb; C:\WINDOWS\System32\drivers\BrUsbSIb.sys [14592 2009-11-03] (Microsoft Windows Hardware Compatibility Publisher -> Brother Industries Ltd.)
R2 CLFCL5.17; C:\WINDOWS\system32\DRIVERS\CLFCL5.17\000.fcl [46848 2018-05-07] (CyberLink Corp. -> CyberLink Corp.)
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [46640 2023-08-29] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 DellProf; C:\WINDOWS\system32\drivers\DellProf.sys [41208 2018-05-08] (Techporch Incorporated -> Dell Computer Corporation)
S3 ElbyCDFL; C:\WINDOWS\System32\Drivers\ElbyCDFL.sys [40872 2014-02-10] (SlySoft, Inc. -> SlySoft, Inc.)
S3 ElbyCDFL; C:\Windows\SysWOW64\Drivers\ElbyCDFL.sys [40872 2014-02-10] (SlySoft, Inc. -> SlySoft, Inc.)
R2 file_protector; C:\WINDOWS\System32\DRIVERS\file_protector.sys [730696 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\WINDOWS\System32\DRIVERS\file_tracker.sys [392840 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
R0 fltsrv; C:\WINDOWS\System32\DRIVERS\fltsrv.sys [183944 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
S3 mosuport; C:\WINDOWS\System32\drivers\mosuport.sys [367744 2016-12-23] (WDKTestCert Alex,130940336584439605 -> ASIX Electronics Corporation)
R3 MpKsl68ed394b; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{C7524860-F70A-478F-A154-D0476AEFEF2C}\MpKslDrv.sys [267552 2024-11-25] (Microsoft Windows -> Microsoft Corporation)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1169096 2023-06-15] (Realtek Semiconductor Corp. -> Realtek Corporation)
R2 tib_mounter; C:\WINDOWS\system32\DRIVERS\tib_mounter.sys [175648 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
S3 USBAAPL64; C:\WINDOWS\System32\Drivers\usbaapl64.sys [54784 2018-04-17] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R2 virtual_file; C:\WINDOWS\System32\DRIVERS\virtual_file.sys [334984 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
R0 volume_tracker; C:\WINDOWS\System32\DRIVERS\volume_tracker.sys [251016 2024-08-13] (Acronis International GmbH -> Acronis International GmbH)
R3 WacHidRouterISD; C:\WINDOWS\System32\drivers\wachidrouter_isd.sys [154704 2018-03-23] (Wacom Technology Corporation -> Wacom Technology, Corp.)
R3 WAPIDriver; C:\WINDOWS\System32\drivers\WAPIDriver.sys [60488 2022-07-15] (Intel Corporation -> Intel Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [22104 2024-10-31] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [25704 2022-10-03] (WDKTestCert user,132375440089837053 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606624 2024-10-31] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105888 2024-10-31] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-11-25 18:57 - 2024-11-25 18:58 - 000038959 _____ C:\Users\const\Downloads\FRST.txt
2024-11-25 18:56 - 2024-11-25 18:56 - 002402816 _____ (Farbar) C:\Users\const\Downloads\FRST64.exe
2024-11-25 17:10 - 2024-11-25 17:10 - 004498217 _____ C:\Users\const\Downloads\Weißgerber_Mein Vaterland_Orell Füssli Verlag_ Vorablesen.pdf
2024-11-25 09:25 - 2024-11-25 09:25 - 000105252 _____ C:\Users\const\Downloads\2024-11-12_Umzug SB-Filiale KA-HBF.pdf
2024-11-25 09:25 - 2024-11-25 09:25 - 000104196 _____ C:\Users\const\Downloads\01-10-2024_PERIODISCHER KONTOABSCHLUSS_DE42600908003103908577.pdf
2024-11-25 09:24 - 2024-11-25 09:24 - 000105923 _____ C:\Users\const\Downloads\2024-10-03_Gleichbleibende Konditionen_DE36600908000003908577.pdf
2024-11-25 09:24 - 2024-11-25 09:24 - 000104146 _____ C:\Users\const\Downloads\2024-10-01_PERIODISCHER KONTOABSCHLUSS_DE95600908003003908577.pdf
2024-11-25 09:24 - 2024-11-25 09:24 - 000084221 _____ C:\Users\const\Downloads\2024-09-30_Kontoauszug_DE42600908003103908577_Nr_3.pdf
2024-11-25 09:23 - 2024-11-25 09:23 - 000098062 _____ C:\Users\const\Downloads\2024-09-30_Kontoauszug_DE36600908000003908577_Nr_9.pdf
2024-11-25 09:23 - 2024-11-25 09:23 - 000085175 _____ C:\Users\const\Downloads\30-09-2024_Kontoauszug_DE56600908007103908577_Nr_6.pdf
2024-11-25 09:23 - 2024-11-25 09:23 - 000084242 _____ C:\Users\const\Downloads\30-09-2024_Kontoauszug_DE95600908003003908577_Nr_4.pdf
2024-11-25 09:22 - 2024-11-25 09:22 - 000095929 _____ C:\Users\const\Downloads\2024-10-31_Kontoauszug_DE36600908000003908577_Nr_10.pdf
2024-11-23 19:32 - 2024-11-23 19:32 - 000495600 _____ C:\Users\const\Downloads\OmasFlyer_Nov2024_V2.pdf
2024-11-23 19:31 - 2024-11-23 19:31 - 000496436 _____ C:\Users\const\Downloads\OmasFlyer_Nov2024_V3.pdf
2024-11-23 19:31 - 2024-11-23 19:31 - 000489325 _____ C:\Users\const\Downloads\OmasFlyer_Nov2024_V3kürzer.pdf
2024-11-23 19:30 - 2024-11-23 19:30 - 000494077 _____ C:\Users\const\Downloads\OmasFlyer_Nov2024_V1.pdf
2024-11-23 17:30 - 2024-11-23 17:31 - 000000000 ____D C:\Users\const\Documents\Hobby Basteln Sonstiges
2024-11-23 14:33 - 2024-11-23 14:33 - 000000000 ____D C:\Program Files (x86)\VideoLAN
2024-11-23 14:28 - 2024-11-23 14:28 - 000001411 _____ C:\Users\const\Desktop\Lazy Paint No Talent, No Problem (2).lnk
2024-11-23 14:03 - 2024-11-23 14:03 - 000001919 _____ C:\Users\const\Desktop\IrfanView 64 Thumbnails.lnk
2024-11-23 14:03 - 2024-11-23 14:03 - 000001045 _____ C:\Users\const\Desktop\IrfanView 64.lnk
2024-11-23 14:03 - 2024-11-23 14:03 - 000000000 ____D C:\Users\const\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\IrfanView
2024-11-23 14:03 - 2024-11-23 14:03 - 000000000 ____D C:\Program Files\IrfanView
2024-11-23 13:57 - 2024-11-23 13:57 - 000001325 _____ C:\Users\Public\Desktop\ePub DRM Removal.lnk
2024-11-23 13:57 - 2024-11-23 13:57 - 000000000 ____D C:\Users\const\AppData\Roaming\eBookConverter
2024-11-23 13:57 - 2024-11-23 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\eBook Converter
2024-11-23 13:30 - 2024-11-23 13:30 - 000001109 _____ C:\Users\Public\Desktop\calibre 64bit - E-book management.lnk
2024-11-22 19:08 - 2024-11-23 19:35 - 000321047 _____ C:\Users\const\Downloads\Kulturmarxistische Scheingroßmütter.pdf
2024-11-22 17:23 - 2024-11-22 17:23 - 000162057 _____ C:\Users\const\Downloads\_DRP130213539205_PDF.js
2024-11-22 17:22 - 2024-11-22 17:22 - 000234331 _____ C:\Users\const\Downloads\_DRP130213539411_PDF.js
2024-11-22 17:22 - 2024-11-22 17:22 - 000175451 _____ C:\Users\const\Downloads\_DRP130213539380_PDF.js
2024-11-21 21:54 - 2024-11-21 21:54 - 005115352 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-11-21 21:04 - 2024-11-21 21:04 - 000840124 _____ C:\WINDOWS\Minidump\112124-35609-01.dmp
2024-11-21 21:03 - 2024-11-25 17:57 - 000008192 ___SH C:\DumpStack.log.tmp
2024-11-20 23:16 - 2024-11-20 23:16 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign 2025.lnk
2024-11-20 16:56 - 2024-11-20 16:56 - 000001402 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2024-11-20 16:56 - 2024-11-20 16:56 - 000001372 _____ C:\Users\Public\Desktop\Adobe Creative Cloud.lnk
2024-11-19 12:44 - 2024-11-19 12:44 - 000003370 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2359067757-2565054429-883763901-1001
2024-11-19 12:44 - 2024-11-19 12:44 - 000002436 _____ C:\Users\const\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-11-17 18:44 - 2024-11-20 22:34 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird
2024-11-17 15:53 - 2024-11-17 15:53 - 000002118 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller.lnk
2024-11-17 15:53 - 2024-11-17 15:53 - 000002107 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-11-17 15:37 - 2024-11-17 15:37 - 000003530 _____ C:\WINDOWS\system32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0
2024-11-17 15:37 - 2024-11-17 15:37 - 000003506 _____ C:\WINDOWS\system32\Tasks\AdobeGCInvoker-1.0
2024-11-12 20:34 - 2024-11-12 20:34 - 000000000 ___HD C:\$WinREAgent
2024-11-08 21:30 - 2024-11-08 21:30 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-11-08 21:25 - 2024-11-08 21:25 - 000002095 _____ C:\Users\Public\Desktop\Adobe Acrobat.lnk
2024-11-06 11:54 - 2024-11-06 11:54 - 000000000 ___RD C:\Users\const\Recorded Calls
2024-11-06 11:54 - 2024-11-06 11:54 - 000000000 ___RD C:\Users\const\AppMods
2024-11-06 11:54 - 2024-11-06 11:54 - 000000000 ____D C:\Users\const\AppData\Local\ProgramData
2024-11-06 11:54 - 2024-11-06 11:54 - 000000000 ____D C:\Users\const\AppData\Local\DevelopmentFiles
2024-11-06 11:54 - 2024-11-06 11:54 - 000000000 ____D C:\ProgramData\OEM Links

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-11-25 18:59 - 2024-03-07 16:53 - 000003566 _____ C:\WINDOWS\system32\Tasks\Launch Adobe CCXProcess
2024-11-25 18:58 - 2022-12-14 22:20 - 000000000 ____D C:\FRST
2024-11-25 18:51 - 2022-02-09 20:13 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-11-25 18:50 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-11-25 18:45 - 2019-10-04 12:56 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2024-11-25 18:41 - 2018-04-05 18:06 - 000000000 ____D C:\Users\const\AppData\Roaming\vlc
2024-11-25 18:15 - 2019-08-11 20:20 - 000000000 ____D C:\Program Files (x86)\Dell Digital Delivery Services
2024-11-25 18:04 - 2021-03-12 21:19 - 001723066 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2024-11-25 18:04 - 2019-12-07 15:51 - 000746400 _____ C:\WINDOWS\system32\perfh007.dat
2024-11-25 18:04 - 2019-12-07 15:51 - 000150806 _____ C:\WINDOWS\system32\perfc007.dat
2024-11-25 18:04 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-11-25 17:59 - 2024-08-13 09:58 - 000000000 ____D C:\Users\const\AppData\Roaming\WD Discovery
2024-11-25 17:59 - 2024-08-13 09:56 - 000000000 ____D C:\Users\const\.wdc
2024-11-25 17:57 - 2022-08-18 20:53 - 000000000 ____D C:\Program Files\TeamViewer
2024-11-25 17:57 - 2021-12-15 19:41 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-11-25 17:57 - 2021-03-12 21:25 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-11-25 17:57 - 2021-03-12 19:09 - 000000000 ____D C:\Intel
2024-11-25 17:57 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-11-25 17:56 - 2019-12-07 10:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2024-11-25 17:56 - 2018-04-07 16:29 - 000047584 _____ C:\WINDOWS\system32\OV8858_REAR.aiqd
2024-11-25 17:56 - 2018-04-07 16:29 - 000041448 _____ C:\WINDOWS\system32\OV9734_FRONT.aiqd
2024-11-25 15:59 - 2018-12-22 00:59 - 000000000 ____D C:\Users\const\Documents\Gitta und Wigand
2024-11-25 15:59 - 2018-04-01 19:14 - 000000000 ____D C:\Users\const\AppData\Roaming\Microsoft\Word
2024-11-25 15:18 - 2021-03-12 21:11 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-11-25 11:19 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-11-25 11:19 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-11-25 06:59 - 2021-03-12 21:25 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-11-25 06:59 - 2021-03-12 21:25 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2024-11-24 18:51 - 2020-06-15 15:34 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-11-23 19:31 - 2018-12-22 01:03 - 000000000 ____D C:\Users\const\Documents\Listen_Ordnung
2024-11-23 18:29 - 2018-04-01 20:18 - 000000000 ____D C:\Users\const\AppData\Roaming\Microsoft\Excel
2024-11-23 18:23 - 2018-03-31 20:43 - 000000000 ____D C:\Users\const\AppData\Local\Packages
2024-11-23 17:33 - 2019-08-12 21:07 - 000000000 ____D C:\Users\const\Documents\Hobby Papierarbeiten
2024-11-23 17:31 - 2018-12-22 00:44 - 000000000 ____D C:\Users\const\Documents\Abos Vereine
2024-11-23 17:02 - 2018-12-22 00:58 - 000000000 ____D C:\Users\const\Documents\Gesundheit
2024-11-23 17:00 - 2018-12-22 00:58 - 000000000 ____D C:\Users\const\Documents\Gedichte
2024-11-23 16:58 - 2018-12-30 18:57 - 000000000 ____D C:\Program Files\Adobe
2024-11-23 16:57 - 2018-10-20 19:59 - 000000000 ____D C:\Users\const\AppData\Local\D3DSCache
2024-11-23 16:26 - 2018-12-21 22:54 - 000000000 ____D C:\Users\const\AppData\Roaming\calibre
2024-11-23 16:24 - 2023-06-04 11:12 - 000000000 ____D C:\Users\const\Documents\Excel Tipps Makros
2024-11-23 14:57 - 2018-12-22 00:58 - 000000000 ____D C:\Users\const\Documents\Briefe_Briefpapier
2024-11-23 14:37 - 2018-03-31 21:01 - 000000000 ____D C:\Users\const\AppData\Local\PlaceholderTileLogoFolder
2024-11-23 14:34 - 2022-03-30 18:13 - 000001141 _____ C:\Users\Public\Desktop\VLC media player.lnk
2024-11-23 14:03 - 2018-04-05 18:09 - 000000000 ____D C:\Users\const\AppData\Roaming\IrfanView
2024-11-23 14:00 - 2021-04-04 20:07 - 000000000 ____D C:\Program Files (x86)\Exact Audio Copy
2024-11-23 13:53 - 2023-12-17 20:27 - 000000000 ____D C:\ProgramData\SlySoft
2024-11-23 13:53 - 2023-12-17 20:26 - 000000000 ____D C:\Program Files (x86)\RedFox
2024-11-23 13:46 - 2023-12-17 20:30 - 000000041 ___SH C:\ProgramData\.zreglib
2024-11-23 13:30 - 2024-07-16 18:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2024-11-23 13:30 - 2020-10-05 10:36 - 000000000 ____D C:\Program Files\Calibre2
2024-11-22 17:15 - 2024-08-13 09:02 - 000000000 ____D C:\Users\const\Documents\Ski-Club Karlsruhe Geschaeftsstelle
2024-11-22 09:41 - 2022-11-17 21:25 - 000000000 ____D C:\Program Files\RUXIM
2024-11-21 21:54 - 2022-06-20 21:27 - 000000000 ____D C:\WINDOWS\Panther
2024-11-21 21:35 - 2024-06-25 21:14 - 000000000 ____D C:\Users\const\AppData\Local\threema_web
2024-11-21 21:35 - 2023-11-18 16:42 - 000000000 ____D C:\Users\const\AppData\Roaming\threema-web
2024-11-21 21:35 - 2023-11-18 16:42 - 000000000 ____D C:\Users\const\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Threema GmbH
2024-11-21 21:07 - 2021-03-12 20:03 - 000000000 ____D C:\Users\const
2024-11-21 21:04 - 2021-06-07 08:55 - 000000000 ____D C:\WINDOWS\Minidump
2024-11-21 16:18 - 2018-12-30 18:49 - 000000000 ____D C:\Program Files\Common Files\Adobe
2024-11-21 16:09 - 2017-12-18 17:03 - 000000000 ___SD C:\Users\const\AppData\Roaming\Microsoft\Credentials
2024-11-21 15:48 - 2024-09-18 17:43 - 000000000 ___RD C:\Program Files\Microsoft Games
2024-11-21 15:48 - 2024-09-18 17:43 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2024-11-21 15:45 - 2023-12-11 22:00 - 000000000 ____D C:\ProgramData\Freemake
2024-11-21 15:45 - 2023-12-11 21:59 - 000000000 ____D C:\Program Files (x86)\Freemake
2024-11-21 08:00 - 2018-12-22 01:50 - 000000000 ____D C:\ProgramData\Adobe
2024-11-21 07:59 - 2018-03-31 20:43 - 000000000 ____D C:\Users\const\AppData\Roaming\Adobe
2024-11-20 22:34 - 2024-10-15 18:59 - 000000000 ____D C:\Program Files\Mozilla Firefox
2024-11-20 22:34 - 2018-06-28 23:30 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-11-20 16:56 - 2018-12-21 22:58 - 000000000 ____D C:\Program Files (x86)\Adobe
2024-11-19 22:02 - 2018-12-22 01:06 - 000000000 ____D C:\Users\const\Documents\Wohnung
2024-11-19 12:44 - 2024-01-25 18:37 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2359067757-2565054429-883763901-1001
2024-11-18 10:42 - 2018-12-21 17:13 - 000001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2024-11-17 16:50 - 2018-04-01 18:03 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2024-11-17 15:35 - 2018-06-28 23:30 - 000001013 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2024-11-13 11:57 - 2018-12-21 22:06 - 000000879 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk
2024-11-13 11:57 - 2018-12-21 22:06 - 000000000 ____D C:\Users\const\AppData\Roaming\Notepad++
2024-11-12 23:24 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2024-11-12 23:23 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-11-12 23:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-11-12 23:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2024-11-12 23:18 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2024-11-12 23:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2024-11-12 23:17 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\appraiser
2024-11-12 23:08 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2024-11-12 23:08 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-11-12 23:08 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack
2024-11-12 23:07 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2024-11-12 23:07 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-11-12 20:57 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-11-12 20:51 - 2021-03-12 21:12 - 003016192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2024-11-12 20:03 - 2018-03-31 20:52 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-11-12 19:56 - 2018-03-31 20:52 - 202035632 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-11-12 19:55 - 2017-11-08 07:46 - 000000000 ____D C:\ProgramData\Package Cache
2024-11-11 16:38 - 2019-11-23 13:26 - 000000000 ____D C:\Users\const\Documents\Rechnungen
2024-11-08 13:25 - 2018-11-04 23:11 - 000000000 ____D C:\Users\const\AppData\Local\CrashDumps
2024-11-07 11:11 - 2024-08-13 15:02 - 000000000 ____D C:\Users\const\Downloads\Tickets offen
2024-11-06 11:54 - 2017-12-18 17:10 - 000000000 ___RD C:\Users\const\OneDrive
2024-11-05 20:55 - 2018-12-22 00:58 - 000000000 ____D C:\Users\const\Documents\Briefe diverse Empfänger
2024-10-31 15:44 - 2024-08-13 10:00 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WD Discovery
2024-10-31 15:44 - 2024-08-13 09:59 - 000000000 ____D C:\Program Files (x86)\Western Digital
2024-10-31 15:08 - 2018-03-31 20:59 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2019-01-23 13:21 - 2019-01-24 09:07 - 000000132 _____ () C:\Users\const\AppData\Roaming\Adobe CS6-PNG-Format - Voreinstellungen
2022-10-11 10:48 - 2024-03-07 15:22 - 000001456 _____ () C:\Users\const\AppData\Local\Adobe Für Web speichern 13.0 Prefs
2021-01-27 15:51 - 2021-01-27 15:51 - 000003584 _____ () C:\Users\const\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2019-01-05 14:58 - 2019-01-05 14:58 - 000000000 _____ () C:\Users\const\AppData\Local\oobelibMkey.log
2022-04-05 15:14 - 2022-04-05 15:14 - 000000879 _____ () C:\Users\const\AppData\Local\recently-used.xbel
2019-07-11 20:57 - 2022-03-24 22:53 - 000007604 _____ () C:\Users\const\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================