Windows 10 Rechner laut Telekom mit Gootkit befallen

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 29.12.20
Scan-Zeit: 15:22
Protokolldatei: 54052d16-49e1-11eb-bc01-80fa5b649b08.json

-Softwaredaten-
Version: 4.3.0.98
Komponentenversion: 1.0.1130
Version des Aktualisierungspakets: 1.0.34969
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 19041.685)
CPU: x64
Dateisystem: NTFS
Benutzer: GENOVAC\steffen

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 346153
Erkannte Bedrohungen: 0
In die Quarantäne verschobene Bedrohungen: 0
Abgelaufene Zeit: 3 Min., 2 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 0
(keine bösartigen Elemente erkannt)

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 14-12-2020
durchgeführt von steffen (Administrator) auf GENOVAC-STEFFEN (Notebook N8xEJEK) (29-12-2020 15:44:39)
Gestartet von C:\Users\Steffen\Desktop
Geladene Profile: steffen
Platform: Windows 10 Pro Version 2004 19041.685 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <3>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.) C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <3>
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(Dropbox, Inc -> The Qt Company Ltd.) C:\Program Files (x86)\Dropbox\Client\112.4.321\QtWebEngineProcess.exe <2>
(Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(Flexera Software LLC -> Flexera) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(Garmin International, Inc. -> Garmin Ltd. or its subsidiaries) C:\Program Files (x86)\Garmin\Express\express.exe
(geek software GmbH -> geek software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe <2>
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAService.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe
(IDSA Production signing key -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\DSAUpdateService.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2970.0_x64__8j3eq9eme6ctt\GCP.ML.BackgroundSysTray\IGCCTray.exe
(INTEL CORP) C:\Program Files\WindowsApps\AppUp.IntelGraphicsExperience_1.100.2970.0_x64__8j3eq9eme6ctt\IGCC.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f9ca5049844dde2a\igfxCUIService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_dch.inf_amd64_f9ca5049844dde2a\igfxEM.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_51eba5fdc2382038\OneApp.IGCC.WinService.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_f48be35b3d221b44\IntelCpHDCPSvc.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_f48be35b3d221b44\IntelCpHeciSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv.exe
(Intel(R) Software Development Products -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe
(Intel(R) Software Development Products -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\sgx_psw.inf_amd64_fafb1d329fdfe2c6\aesm_service.exe
(Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(Logitech Inc -> Logitech) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOverlay.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\Logitech\LogiOptions\LogiOptions.exe
(Logitech Inc -> Logitech, Inc.) C:\ProgramData\Logishrd\LogiOptions\Software\Current\LogiOptionsMgr.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft SQL Server\90\Shared\sqlbrowser.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL12.BARTENDER\MSSQL\Binn\sqlservr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Users\Steffen\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.549981C3F5F10_2.2011.11613.0_x64__8wekyb3d8bbwe\Cortana.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2011.16.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Speech_OneCore\common\SpeechRuntime.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\SearchProtocolHost.exe
(Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd) C:\Windows\SysWOW64\Creative.UWPRPCService.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>
(N C P e GmbH Network Communications Products engineering -> ) C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe
(N C P e GmbH Network Communications Products engineering -> ) C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe
(N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpbudgetgui.exe
(N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH) C:\Program Files\LANCOM\Advanced VPN Client\ncpsec.exe
(Nalpeiron LTD -> Nalpeiron Ltd.) [Datei ist nicht signiert] C:\Windows\SysWOW64\nlssrv32.exe
(Nero AG -> Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvcvegpu.inf_amd64_3bfacd0d07055664\Display.NvContainer\NVDisplay.Container.exe <2>
(Open Source Developer, Dominik Reichl -> Dominik Reichl) C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>
(Seagull Scientific Inc. -> ) C:\Program Files\Seagull\BarTender 2019\Seagull.Notification.SystemTray.exe
(Seagull Scientific Inc. -> Seagull Scientific, Inc.) C:\Program Files\Seagull\BarTender 2019\BtSystem.Service.exe
(Seagull Scientific Inc. -> Seagull Scientific, Inc.) C:\Program Files\Seagull\BarTender 2019\Integration.Service.exe
(Seagull Scientific Inc. -> Seagull Scientific, Inc.) C:\Program Files\Seagull\BarTender 2019\Licensing.Service.exe
(Seagull Scientific Inc. -> Seagull Scientific, Inc.) C:\Program Files\Seagull\BarTender 2019\Maestro.Service.exe
(Seagull Scientific Inc. -> Seagull Scientific, Inc.) C:\Program Files\Seagull\BarTender 2019\PrintScheduler.Service.exe
(Shenzhen Moyea Software -> Leawo Software) C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe
(Sony) [Datei ist nicht signiert] C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe
(Sony) [Datei ist nicht signiert] C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPHelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [BarTenderNotification] => C:\Program Files\Seagull\BarTender 2019\Seagull.Notification.SystemTray.exe [128776 2019-04-23] (Seagull Scientific Inc. -> )
HKLM\...\Run: [NcpBudgetGui] => C:\Program Files\LANCOM\Advanced VPN Client\NcpBudgetGui.exe [6049600 2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH)
HKLM\...\Run: [NcpMonitor] => C:\Program Files\LANCOM\Advanced VPN Client\ncpmon.exe [13437760 2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH)
HKLM\...\Run: [DisplayLinkTrayApp] => C:\Program Files\DisplayLink Core Software\DisplayLinkTrayApp.exe [2206016 2019-05-09] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
HKLM\...\Run: [PowerDVD19Agent] => C:\Program Files\CyberLink\PowerDVD19\PowerDVD19Agent.exe [534848 2019-12-03] (CyberLink Corp. -> CyberLink Corp.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [LogiOptions] => C:\Program Files\Logitech\LogiOptions\LogiOptions.exe [1667208 2020-11-24] (Logitech Inc -> Logitech, Inc.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [117352 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3091136 2020-09-10] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [PowerDVD19Agent] => C:\Program Files\CyberLink\PowerDVD19\PowerDVD19Agent.exe [534848 2019-12-03] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [7992832 2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706680 2020-09-17] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Intel Driver & Support Assistant] => C:\Program Files (x86)\Intel\Driver and Support Assistant\DSATray.exe [285544 2020-12-07] (IDSA Production signing key -> Intel)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-329068152-746137067-1343024091-1646\...\Run: [XperiaCompanionAgent] => C:\Program Files (x86)\Sony\Xperia Companion\XperiaCompanionAgent.exe [1684480 2020-09-02] (Sony) [Datei ist nicht signiert]
HKU\S-1-5-21-329068152-746137067-1343024091-1646\...\Run: [GarminExpress] => C:\Program Files (x86)\Garmin\Express\express.exe [31046640 2020-09-21] (Garmin International, Inc. -> Garmin Ltd. or its subsidiaries)
HKLM\...\Windows x64\Print Processors\Canon iP7200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBA.DLL [30208 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MG6200 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDAU.DLL [30208 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Windows x64\Print Processors\Canon MX920 series Print Processor: C:\Windows\System32\spool\prtprocs\x64\CNMPDBL.DLL [30208 2012-09-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Cab Language Monitor: C:\WINDOWS\system32\CabNLM64.dll [823304 2018-10-08] (Euro Plus d.o.o. -> Cab Gmbh)
HKLM\...\Print\Monitors\Canon BJ FAX Language Monitor MX920 series: C:\WINDOWS\system32\CNCALBL.DLL [303104 2012-09-21] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor iP7200 series: C:\WINDOWS\system32\CNMLMBA.DLL [389120 2012-04-16] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MG6200 series: C:\WINDOWS\system32\CNMLMAU.DLL [385024 2012-03-14] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\Canon BJ Language Monitor MX920 series: C:\WINDOWS\system32\CNMLMBL.DLL [390656 2012-09-20] (Microsoft Windows Hardware Compatibility Publisher -> CANON INC.)
HKLM\...\Print\Monitors\us008 Langmon: C:\WINDOWS\system32\us008lm.dll [31256 2016-02-15] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM\...\Print\Monitors\ZDesigner Language Monitor: C:\WINDOWS\system32\zdnNLM64.dll [198144 2012-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Euro Plus d.o.o.)
HKLM\...\Print\Monitors\ZDesigner Port Monitor: C:\WINDOWS\system32\zdnPM64S.dll [111104 2012-03-29] (Microsoft Windows Hardware Compatibility Publisher -> Euro Plus d.o.o.)
HKLM\Software\...\Authentication\Credential Providers: [{B4841AC3-BB3F-4bbf-8F90-E25B45EF4CB4}] -> C:\WINDOWS\system32\NcpCredentialProvider.dll [2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH)
Startup: C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2020-04-20]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {05B32DE0-13D0-4B5F-8D1C-63477396C3A4} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {091152AE-8598-47F5-BC46-905D312A5C94} - System32\Tasks\Microsoft\Windows\GroupPolicy\{A7719E0F-10DB-4640-AD8C-490CC6AD5202} => C:\WINDOWS\system32\gpupdate.exe [30720 2020-10-14] (Microsoft Windows -> Microsoft Corporation)
Task: {0BFFFD2A-CBCA-41C5-8C81-D5B1ADA4DA01} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {0D08FE43-D41C-49EB-8096-257C1D16A7DA} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132-Logon => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3087184 2020-03-10] (Intel(R) Software Development Products -> Intel Corporation)
Task: {10ACACE0-018E-4FE6-A797-C96D43F8F872} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe
Task: {164084E9-CF91-4B43-8AE2-98E3BC8FAEE7} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\PushUpgrade => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {191790E8-9C26-4BC3-9C98-9C6BD6BCF3CD} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Schedule to run OMADMClient by client => C:\WINDOWS\system32\omadmclient.exe [434176 2020-09-09] (Microsoft Windows -> Microsoft Corporation)
Task: {260EA5E1-D9A7-48C2-917C-277F61FC7BED} - System32\Tasks\GarminUpdaterTask => C:\Program Files (x86)\Garmin\Express SelfUpdater\ExpressSelfUpdater.exe [40432 2020-09-21] (Garmin International, Inc. -> )
Task: {26579F1A-140F-456A-B233-B3A3D390D56D} - System32\Tasks\Agent Activation Runtime\S-1-5-21-329068152-746137067-1343024091-1646 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-12-09] (Microsoft Windows -> )
Task: {2CDCC0C2-A5C7-4999-930E-3F4DE66BA2FF} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)
Task: {3DB7C719-F159-4AE7-A01B-00922C3A847B} - System32\Tasks\RtkAudUService64_BG => C:\Windows\system32\RtkAudUService64.exe [833824 2019-02-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {5AE83225-2CDF-4F04-AF94-32D7AF3C63A0} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1149336 2020-12-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {63842276-3731-4697-BC47-C1A4A47D73BD} - System32\Tasks\G2MUpdateTask-S-1-5-21-329068152-746137067-1343024091-1646 => C:\Users\Steffen\AppData\Local\GoToMeeting\19228\g2mupdate.exe [31320 2020-12-19] (LogMeIn, Inc. -> LogMeIn, Inc.)
Task: {64F36DE0-EAFC-4FF0-A762-516FF382D32F} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Schedule #3 created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {695D151D-5EB2-4ED4-ADD1-76A990A00E51} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Win10 S Mode event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {6F8E8206-BA97-4404-8907-9645AAEABE87} - System32\Tasks\Opera scheduled Autoupdate 1608632701 => C:\Users\Steffen\AppData\Local\Programs\Opera\launcher.exe
Task: {7147E0E0-1F60-4B28-B128-2A51437371DB} - System32\Tasks\Opera scheduled assistant Autoupdate 1608632705 => C:\Users\Steffen\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Steffen\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {71A67976-64B8-44E4-8263-6C150FDC792B} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-05-04] (Dropbox, Inc -> Dropbox, Inc.)
Task: {7B64D2D6-CAE1-4F41-993D-BE0ADD8B1198} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {7BA051FE-DA30-4A7A-92A6-5052BE1A6C77} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Maintenance Schedule created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {80461CCA-5040-4547-83EA-41353B3222DD} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1741416 2020-12-28] (Avast Software s.r.o. -> Avast Software)
Task: {84879B5E-86A9-42A0-894F-DA5FCDB92164} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\OS Edition Upgrade event listener created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {84BFE03C-C447-44E9-B177-C659626F2A2E} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Schedule to run OMADMClient by server => C:\WINDOWS\system32\omadmclient.exe [434176 2020-09-09] (Microsoft Windows -> Microsoft Corporation)
Task: {922F14EF-043D-410D-A571-186AC55880F6} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [4621920 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
Task: {9392794C-73E9-4A6E-9EBE-451DFD3ECD7F} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => "C:\WINDOWS\System32\Wscript.exe" //B //NoLogo "C:\Program Files\Intel\SUR\QUEENCREEK\x64\task.vbs"
Task: {94D7ADA8-1479-4DDD-B443-F1297736A444} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4010416 2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {96CD5D7C-783D-466A-ACFB-26068AD07B60} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [693456 2020-12-23] (Mozilla Corporation -> Mozilla Foundation)
Task: {9EB70A79-A2A1-44C2-949D-F7CB604C93EF} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe [4010416 2020-12-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {ADACEABC-BE24-4A09-895E-F9BDA0D4D83B} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Passport for Work alert created by enrollment client => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {C1B3E7AD-6313-4DF1-8254-2EE38B1DA80E} - System32\Tasks\Microsoft\Windows\GroupPolicy\{3E0A038B-D834-4930-9981-E89C9BFF83AA} => C:\WINDOWS\system32\gpupdate.exe [30720 2020-10-14] (Microsoft Windows -> Microsoft Corporation)
Task: {CCE7A0AC-80BD-42DB-BF2A-35298D384D47} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-08] (Adobe Inc. -> Adobe)
Task: {D0A06576-F30F-402A-ABD7-95F67FD2D6C5} - System32\Tasks\Microsoft\Windows\EnterpriseMgmt\8F67560C-1499-48E9-B2BD-0E39B74F233D\Provisioning initiated session => C:\WINDOWS\system32\deviceenroller.exe [459776 2020-12-09] (Microsoft Windows -> Microsoft Corporation)
Task: {D2F6CDF3-E6A4-4D90-81EF-9D4394E04739} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
Task: {D7C56E01-EC21-4C4F-8DE7-F7440EF8F0BF} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [116584 2020-12-24] (Microsoft Corporation -> Microsoft Corporation)
Task: {DD0F2538-073F-4AA5-884F-B00DD9294C36} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-05-04] (Dropbox, Inc -> Dropbox, Inc.)
Task: {E5BE6A73-20A1-40B7-8513-C5F990CB18B9} - System32\Tasks\IntelSURQC-Upgrade-86621605-2a0b-4128-8ffc-15514c247132 => C:\Program Files\Intel\SUR\QUEENCREEK\Updater\bin\IntelSoftwareAssetManagerService.exe [3087184 2020-03-10] (Intel(R) Software Development Products -> Intel Corporation)
Task: {EFC65509-7FBC-4B96-B656-19628343AB14} - System32\Tasks\G2MUploadTask-S-1-5-21-329068152-746137067-1343024091-1646 => C:\Users\Steffen\AppData\Local\GoToMeeting\19228\g2mupload.exe [31320 2020-12-19] (LogMeIn, Inc. -> LogMeIn, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-329068152-746137067-1343024091-1646.job => C:\Users\Steffen\AppData\Local\GoToMeeting\19228\g2mupdate.exe
Task: C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-329068152-746137067-1343024091-1646.job => C:\Users\Steffen\AppData\Local\GoToMeeting\19228\g2mupload.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.143.229
Tcpip\..\Interfaces\{4e067918-de1a-4786-81ab-7f3bc2b09ba8}: [NameServer] 192.168.3.83,192.168.3.1
Tcpip\..\Interfaces\{4e067918-de1a-4786-81ab-7f3bc2b09ba8}: [DhcpNameServer] 192.168.3.1 1.1.1.1
Tcpip\..\Interfaces\{9006819f-7211-41e5-be53-5bc5637216e3}: [NameServer] 192.168.3.83,192.168.3.1
Tcpip\..\Interfaces\{9006819f-7211-41e5-be53-5bc5637216e3}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{ba38d5ae-b458-4e54-a943-8a5a5c15d380}: [DhcpNameServer] 192.168.143.229

Edge: 
======
DownloadDir: C:\Users\Steffen\Downloads
Edge DefaultProfile: Default
Edge Profile: C:\Users\Steffen\AppData\Local\Microsoft\Edge\User Data\Default [2020-12-28]
Edge DownloadDir: C:\Users\Steffen\Downloads
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\Steffen\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2020-12-28]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

FireFox:
========
FF DefaultProfile: 2nw9ud7g.default-1581500729590
FF ProfilePath: C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590 [2020-12-29]
FF DownloadDir: D:\Downloads
FF Homepage: Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590 -> hxxps://www.spiegel.de/
FF Session Restore: Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590 -> ist aktiviert.
FF Extension: (uBlock Origin) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590\Extensions\uBlock0@raymondhill.net.xpi [2020-12-29]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2020-12-28]
FF Extension: (Gesturefy) - C:\Users\Steffen\AppData\Roaming\Mozilla\Firefox\Profiles\2nw9ud7g.default-1581500729590\Extensions\{506e023c-7f2b-40a3-8066-bc5deb40aebe}.xpi [2020-09-08]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-08] (Adobe Inc. -> )
FF Plugin-x32: @java.com/DTPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\dtplugin\npDeployJava1.dll [2020-10-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.271.2 -> C:\Program Files (x86)\Java\jre1.8.0_271\bin\plugin2\npjp2.dll [2020-10-22] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-12] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Nero.com/KM -> C:\PROGRA~2\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL [2016-02-29] (Nero AG -> Nero AG)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-329068152-746137067-1343024091-1646: SkypeForBusinessPlugin-16.2 -> C:\Users\Steffen\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.498\npGatewayNpapi.dll [2019-07-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-329068152-746137067-1343024091-1646: SkypeForBusinessPlugin64-16.2 -> C:\Users\Steffen\AppData\Local\Microsoft\SkypeForBusinessPlugin\16.2.0.498\npGatewayNpapi-x64.dll [2019-07-03] (Microsoft Corporation -> Microsoft Corporation)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Opera: 
=======
OPR Extension: (Avira Safe Shopping) - C:\Users\Steffen\AppData\Roaming\Opera Software\Opera Stable\Extensions\dalelnnofafalcmkmnhdbigbjjkloabo [2020-12-22]
OPR Extension: (Rich Hints Agent) - C:\Users\Steffen\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-12-22]
OPR Extension: (Avira Password Manager) - C:\Users\Steffen\AppData\Roaming\Opera Software\Opera Stable\Extensions\ngohaaocccbohaffogpbgfpmpgbcgccg [2020-12-22]
OPR Extension: (Free Avira Phantom VPN – Entsperrt Webseiten) - C:\Users\Steffen\AppData\Roaming\Opera Software\Opera Stable\Extensions\pcgkmkjdikhiodinhloioejnpjgmfigd [2020-12-22]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-08] (Adobe Inc. -> Adobe)
S3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [8477080 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [621728 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [351848 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [58048 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R2 BarTender Integration Service; C:\Program Files\Seagull\BarTender 2019\Integration.Service.exe [35080 2019-04-23] (Seagull Scientific Inc. -> Seagull Scientific, Inc.)
R2 BarTender Licensing Service; C:\Program Files\Seagull\BarTender 2019\Licensing.Service.exe [33544 2019-04-23] (Seagull Scientific Inc. -> Seagull Scientific, Inc.)
R2 BarTender Print Scheduler; C:\Program Files\Seagull\BarTender 2019\PrintScheduler.Service.exe [32008 2019-04-23] (Seagull Scientific Inc. -> Seagull Scientific, Inc.)
R2 BarTender System Service; C:\Program Files\Seagull\BarTender 2019\BtSystem.Service.exe [386312 2019-04-23] (Seagull Scientific Inc. -> Seagull Scientific, Inc.)
R2 CdRomAccessAgentService; C:\Program Files (x86)\Common Files\cdagtsvc\cdagtsvc_v1.0.0_x86.exe [96336 2020-01-25] (Shenzhen Moyea Software -> Leawo Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-12-01] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-05-04] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2020-05-04] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [44552 2020-12-15] (Dropbox, Inc -> Dropbox, Inc.)
R2 Maestro; C:\Program Files\Seagull\BarTender 2019\Maestro.Service.exe [242440 2019-04-23] (Seagull Scientific Inc. -> Seagull Scientific, Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-28] (Malwarebytes Inc -> Malwarebytes)
R2 MSSQL$BARTENDER; C:\Program Files\Microsoft SQL Server\MSSQL12.BARTENDER\MSSQL\Binn\sqlservr.exe [370368 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 ncpclcfg; C:\Program Files\LANCOM\Advanced VPN Client\ncpclcfg.exe [1137472 2018-12-12] (N C P e GmbH Network Communications Products engineering -> )
R2 ncprwsnt; C:\Program Files\LANCOM\Advanced VPN Client\ncprwsnt.exe [3964736 2018-12-12] (N C P e GmbH Network Communications Products engineering -> )
R2 ncpsec; C:\Program Files\LANCOM\Advanced VPN Client\ncpsec.exe [615744 2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP engineering GmbH)
R2 nlsX86cc; C:\WINDOWS\SysWOW64\nlssrv32.exe [66560 2010-11-22] (Nalpeiron LTD -> Nalpeiron Ltd.) [Datei ist nicht signiert]
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5197552 2020-12-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S4 SQLAgent$BARTENDER; C:\Program Files\Microsoft SQL Server\MSSQL12.BARTENDER\MSSQL\Binn\SQLAGENT.EXE [613056 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
R2 UWPService; C:\WINDOWS\SysWOW64\Creative.UWPRPCService.exe [363968 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\NisSrv.exe [2491880 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2011.6-0\MsMpEng.exe [128376 2020-12-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 XperiaCompanionService; C:\Program Files\Sony\Xperia Companion\Service\XperiaCompanionService.exe [2575360 2020-09-02] (Sony) [Datei ist nicht signiert]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvcvegpu.inf_amd64_3bfacd0d07055664\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvcvegpu.inf_amd64_3bfacd0d07055664\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [36792 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [208672 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [332880 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [247888 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [97360 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [16832 2020-12-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> AVAST Software)
S3 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [42424 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [176384 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [522480 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [108928 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84496 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [851256 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [469472 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [216984 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
S3 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [326064 2020-12-28] (Avast Software s.r.o. -> AVAST Software)
R2 CLFCL5.19; C:\WINDOWS\system32\DRIVERS\CLFCL5.19\000.fcl [46824 2019-12-02] (CyberLink Corp. -> CyberLink Corp.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [90344 2020-04-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 dlusbaudio; C:\WINDOWS\System32\drivers\dlusbaudio_x64.sys [238352 2017-09-18] (DISPLAYLINK -> DisplayLink Corp.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-12-28] (Malwarebytes Corporation -> Malwarebytes)
S3 ggsomc; C:\WINDOWS\System32\drivers\ggsomc.sys [32384 2018-03-14] (Sony Mobile Communications AB -> Sony Mobile Communications)
S3 libusb0; C:\WINDOWS\system32\DRIVERS\libusb0.sys [44480 2011-05-17] (Akeo Consulting -> hxxp://libusb-win32.sourceforge.net)
R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-12-29] (Malwarebytes Inc -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-28] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [197792 2020-12-29] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2020-12-29] (Malwarebytes Inc -> Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-12-28] (Malwarebytes Inc -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [139424 2020-12-29] (Malwarebytes Inc -> Malwarebytes)
R3 MBfilt; C:\WINDOWS\system32\drivers\MBfilt64.sys [43456 2019-05-06] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 ncpfilt; C:\WINDOWS\system32\DRIVERS\ncplelhp.sys [118424 2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP Engineering GmbH)
R3 ncplelhp; C:\WINDOWS\System32\drivers\ncplelhp.sys [118424 2018-12-12] (N C P e GmbH Network Communications Products engineering -> NCP Engineering GmbH)
S3 RRNetCap; C:\WINDOWS\system32\DRIVERS\rrnetcap.sys [37480 2013-02-14] (RapidSolution Software AG -> RapidSolution Software AG)
S4 RsFx0300; C:\WINDOWS\System32\DRIVERS\RsFx0300.sys [247488 2014-02-21] (Microsoft Corporation -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166752 2019-07-09] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [48536 2020-12-04] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [429296 2020-12-04] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [70896 2020-12-04] (Microsoft Windows -> Microsoft Corporation)
S3 WinDriver1200; C:\WINDOWS\system32\drivers\windrvr1200.sys [300488 2015-08-12] (Jungo Connectivity Ltd. -> Jungo Connectivity)
R3 WinDriver1230; C:\WINDOWS\system32\drivers\windrvr1230.sys [275920 2016-11-07] (Jungo Connectivity Ltd. -> Jungo Connectivity)
U3 aswbdisk; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-12-29 15:44 - 2020-12-29 15:45 - 000041178 _____ C:\Users\Steffen\Desktop\FRST.txt
2020-12-29 15:41 - 2020-12-29 14:46 - 002286592 _____ (Farbar) C:\Users\Steffen\Desktop\FRST64.exe
2020-12-29 15:38 - 2020-12-29 15:38 - 000001414 _____ C:\Users\Steffen\Desktop\Malwarebytes.txt
2020-12-29 14:47 - 2020-12-29 15:44 - 000000000 ____D C:\FRST
2020-12-29 14:35 - 2020-12-29 14:35 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2020-12-29 14:35 - 2020-12-29 14:35 - 000197792 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2020-12-29 14:35 - 2020-12-29 14:35 - 000139424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2020-12-29 14:35 - 2020-12-29 14:35 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2020-12-29 14:29 - 2020-12-29 14:33 - 000000000 ____D C:\AdwCleaner
2020-12-28 22:10 - 2020-12-28 22:10 - 000002120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast Free Antivirus.lnk
2020-12-28 22:10 - 2020-12-28 22:10 - 000002108 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2020-12-28 22:10 - 2020-12-28 22:10 - 000002108 _____ C:\ProgramData\Desktop\Avast Free Antivirus.lnk
2020-12-28 22:10 - 2020-12-28 22:10 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\Avast Software
2020-12-28 22:09 - 2020-12-29 08:57 - 000004264 _____ C:\WINDOWS\system32\Tasks\Avast Emergency Update
2020-12-28 22:09 - 2020-12-28 22:09 - 000851256 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000522480 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000469472 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000340576 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2020-12-28 22:09 - 2020-12-28 22:09 - 000332880 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000326064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000247888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000216984 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000208672 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000176384 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000108928 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000097360 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000084496 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000042424 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswKbd.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000036792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000016832 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswElam.sys
2020-12-28 22:09 - 2020-12-28 22:09 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2020-12-28 22:09 - 2020-12-28 22:09 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2020-12-28 22:08 - 2020-12-28 22:08 - 000000000 ____D C:\Program Files\Avast Software
2020-12-28 22:07 - 2020-12-29 14:45 - 000000000 ____D C:\ProgramData\Avast Software
2020-12-28 19:48 - 2020-12-28 21:24 - 000443836 _____ C:\WINDOWS\ntbtlog.txt
2020-12-28 19:48 - 2020-12-28 19:48 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2020-12-28 17:49 - 2020-12-28 17:49 - 000001435 _____ C:\WINDOWS\system32\default_error_stack-000042-000000.txt
2020-12-28 17:38 - 2020-12-28 17:38 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2020-12-28 17:38 - 2020-12-28 17:38 - 000001993 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2020-12-28 17:38 - 2020-12-28 17:38 - 000001981 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2020-12-28 17:38 - 2020-12-28 17:38 - 000001981 _____ C:\ProgramData\Desktop\Malwarebytes.lnk
2020-12-28 17:38 - 2020-12-28 17:38 - 000000000 ____D C:\Users\Steffen\AppData\Local\mbam
2020-12-28 17:38 - 2020-12-28 17:37 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys
2020-12-28 17:38 - 2020-12-28 17:37 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys
2020-12-28 17:37 - 2020-12-28 17:37 - 000000000 ____D C:\ProgramData\Malwarebytes
2020-12-28 17:36 - 2020-12-28 17:36 - 000000000 ____D C:\Program Files\Malwarebytes
2020-12-26 09:14 - 2020-12-26 09:14 - 000001425 _____ C:\WINDOWS\system32\default_error_stack-000041-000000.txt
2020-12-25 21:05 - 2020-12-25 21:05 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000040-000000.txt
2020-12-25 13:37 - 2020-12-25 13:37 - 000001435 _____ C:\WINDOWS\system32\default_error_stack-000039-000000.txt
2020-12-23 09:27 - 2020-12-23 09:27 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2020-12-23 00:56 - 2020-12-25 13:37 - 000000000 ____D C:\Program Files\Mozilla Firefox
2020-12-22 15:15 - 2020-12-22 15:15 - 000000000 ____D C:\Users\Steffen\AppData\Local\Deployment
2020-12-22 15:15 - 2020-12-22 15:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logitech
2020-12-22 15:15 - 2020-12-22 15:15 - 000000000 ____D C:\Program Files\Logitech
2020-12-22 15:04 - 2020-12-22 15:04 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000038-000000.txt
2020-12-22 15:03 - 2020-12-22 15:03 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avira
2020-12-22 14:56 - 2020-12-22 14:56 - 000000000 ____D C:\Users\Steffen\AppData\Local\Opera Software
2020-12-22 11:31 - 2020-12-22 11:31 - 000000000 ____D C:\Users\Public\Security Sessions
2020-12-22 11:25 - 2020-12-22 11:25 - 000004436 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1608632705
2020-12-22 11:25 - 2020-12-22 11:25 - 000004200 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1608632701
2020-12-22 11:24 - 2020-12-22 11:24 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2020-12-22 11:24 - 2020-12-22 11:24 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\Opera Software
2020-12-22 11:23 - 2020-12-22 15:04 - 000000000 ____D C:\Program Files (x86)\Avira
2020-12-22 11:23 - 2020-12-22 15:03 - 000000000 ____D C:\ProgramData\Avira
2020-12-22 11:23 - 2020-12-22 11:31 - 000000000 ____D C:\Users\Steffen\AppData\Local\Avira
2020-12-17 22:58 - 2020-12-17 22:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2020-12-17 08:41 - 2020-12-17 08:41 - 000001425 _____ C:\WINDOWS\system32\default_error_stack-000037-000000.txt
2020-12-15 22:09 - 2020-12-15 22:09 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-stable.sys
2020-12-15 22:09 - 2020-12-15 22:09 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-dev.sys
2020-12-15 22:09 - 2020-12-15 22:09 - 000047600 _____ (Dropbox, Inc.) C:\WINDOWS\system32\Drivers\dbx-canary.sys
2020-12-15 22:09 - 2020-12-15 22:09 - 000044552 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2020-12-15 18:24 - 2020-12-15 18:24 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000036-000000.txt
2020-12-15 12:00 - 2020-11-17 12:40 - 002098072 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 001507224 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 001161112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 001027992 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvml.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 000673520 _____ C:\WINDOWS\system32\nvofapi64.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 000670616 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 000591768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe
2020-12-15 12:00 - 2020-11-17 12:40 - 000556440 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2020-12-15 12:00 - 2020-11-17 12:40 - 000543128 _____ C:\WINDOWS\SysWOW64\nvofapi.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 007707544 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 006858992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 004175256 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 002509720 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 001584368 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 000813464 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 000656112 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2020-12-15 12:00 - 2020-11-17 12:39 - 000445848 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe
2020-12-15 12:00 - 2020-11-17 12:38 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe
2020-12-15 12:00 - 2020-11-17 12:37 - 005977488 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2020-12-15 12:00 - 2020-11-17 12:21 - 000080930 _____ C:\WINDOWS\system32\nvinfo.pb
2020-12-14 08:37 - 2020-12-14 08:37 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000035-000000.txt
2020-12-10 10:02 - 2020-12-29 14:35 - 000000000 ___RD C:\Users\Steffen\Genovac
2020-12-09 16:53 - 2020-12-09 16:53 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000034-000000.txt
2020-12-09 12:05 - 2020-12-09 12:05 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2020-12-09 12:05 - 2020-12-09 12:05 - 002755584 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2020-12-09 12:05 - 2020-12-09 12:05 - 002260480 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 001822272 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2020-12-09 12:05 - 2020-12-09 12:05 - 001393496 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2020-12-09 12:05 - 2020-12-09 12:05 - 001333248 _____ C:\WINDOWS\SysWOW64\TextInputMethodFormatter.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000363520 _____ C:\WINDOWS\system32\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000287232 _____ C:\WINDOWS\system32\CoreMas.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000266240 _____ C:\WINDOWS\SysWOW64\Windows.Internal.UI.Shell.WindowTabManager.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000240640 _____ C:\WINDOWS\SysWOW64\CoreMas.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000165376 _____ C:\WINDOWS\system32\DataStoreCacheDumpTool.exe
2020-12-09 12:05 - 2020-12-09 12:05 - 000102912 _____ (Microsoft Corporation) C:\WINDOWS\system32\ncpa.cpl
2020-12-09 12:05 - 2020-12-09 12:05 - 000100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ncpa.cpl
2020-12-09 12:05 - 2020-12-09 12:05 - 000089088 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.proxystub.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000073216 _____ C:\WINDOWS\system32\windows.applicationmodel.conversationalagent.internal.proxystub.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2020-12-09 12:05 - 2020-12-09 12:05 - 000048640 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000039936 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2020-12-09 12:05 - 2020-12-09 12:05 - 000013312 _____ C:\WINDOWS\system32\agentactivationruntimestarter.exe
2020-12-09 12:05 - 2020-12-09 12:05 - 000010912 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2020-12-09 12:05 - 2020-12-09 12:05 - 000010752 _____ C:\WINDOWS\SysWOW64\agentactivationruntimestarter.exe
2020-12-09 12:05 - 2020-12-09 12:05 - 000001370 _____ C:\WINDOWS\system32\ThirdPartyNoticesBySHS.txt
2020-12-03 13:12 - 2020-12-03 13:12 - 001781088 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2020-12-03 13:12 - 2020-12-03 13:12 - 001781088 _____ C:\WINDOWS\system32\vulkaninfo.exe
2020-12-03 13:12 - 2020-12-03 13:12 - 001377120 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2020-12-03 13:12 - 2020-12-03 13:12 - 001377120 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2020-12-03 13:12 - 2020-12-03 13:12 - 001087704 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 001087704 _____ C:\WINDOWS\system32\vulkan-1.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000419224 _____ C:\WINDOWS\system32\ze_loader.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000295304 _____ C:\WINDOWS\system32\libmfxhw64.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000243680 _____ C:\WINDOWS\SysWOW64\libmfxhw32.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000161416 _____ (Intel Corporation) C:\WINDOWS\system32\intel_gfx_api-x64.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000140184 _____ C:\WINDOWS\system32\ze_validation_layer.dll
2020-12-03 13:12 - 2020-12-03 13:12 - 000136920 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\intel_gfx_api-x86.dll
2020-12-03 13:11 - 2020-12-03 13:11 - 026664344 _____ (Intel Corporation) C:\WINDOWS\system32\mfxplugin64_hw.dll
2020-12-03 13:11 - 2020-12-03 13:11 - 013509528 _____ (Intel Corporation) C:\WINDOWS\SysWOW64\mfxplugin32_hw.dll
2020-12-03 13:11 - 2020-12-03 13:11 - 000499096 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2020-12-03 13:11 - 2020-12-03 13:11 - 000361880 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2020-12-02 18:16 - 2020-12-02 18:16 - 000001426 _____ C:\WINDOWS\system32\default_error_stack-000033-000000.txt
2020-12-01 08:43 - 2020-12-21 23:39 - 000000000 ____D C:\Users\Steffen\Geneious 2021.0 Data
2020-12-01 08:37 - 2020-12-01 08:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Geneious Prime

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2020-12-29 15:44 - 2020-10-14 14:02 - 000000000 ____D C:\Users\Steffen\Documents\Outlook-Dateien
2020-12-29 15:35 - 2019-05-09 15:32 - 000000033 ____H C:\WINDOWS\SLsb2
2020-12-29 15:13 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2020-12-29 15:09 - 2019-05-06 16:17 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\KeePass
2020-12-29 14:39 - 2020-06-10 19:38 - 001627488 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2020-12-29 14:39 - 2019-12-07 15:51 - 000704666 _____ C:\WINDOWS\system32\perfh007.dat
2020-12-29 14:39 - 2019-12-07 15:51 - 000147644 _____ C:\WINDOWS\system32\perfc007.dat
2020-12-29 14:39 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2020-12-29 14:38 - 2019-05-06 15:01 - 000000000 ____D C:\ProgramData\Mozilla
2020-12-29 14:37 - 2019-05-06 15:01 - 000000000 ____D C:\Users\Steffen\AppData\LocalLow\Mozilla
2020-12-29 14:35 - 2020-10-13 09:51 - 000000000 ___RD C:\Users\Steffen\OneDrive - Genovac
2020-12-29 14:35 - 2019-05-06 14:49 - 000000000 __SHD C:\Users\Steffen\IntelGraphicsProfiles
2020-12-29 14:34 - 2020-06-10 19:42 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2020-12-29 14:34 - 2020-06-10 19:36 - 000008192 ___SH C:\DumpStack.log.tmp
2020-12-29 14:34 - 2020-01-25 17:52 - 000000000 ____D C:\ProgramData\NVIDIA
2020-12-29 14:34 - 2019-12-07 10:03 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2020-12-29 14:34 - 2019-05-06 13:53 - 000000000 ____D C:\Intel
2020-12-29 08:57 - 2020-02-17 15:47 - 000000000 ____D C:\Users\Steffen\AppData\Local\CrashDumps
2020-12-29 01:22 - 2020-06-10 19:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2020-12-28 22:09 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2020-12-27 14:30 - 2019-05-06 22:36 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\foobar2000
2020-12-27 12:08 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2020-12-27 11:59 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2020-12-25 13:37 - 2019-05-06 15:01 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2020-12-24 21:44 - 2020-05-04 08:32 - 000000000 ___RD C:\Users\Steffen\Dropbox
2020-12-24 14:33 - 2019-05-09 11:22 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2020-12-23 09:27 - 2020-02-12 10:40 - 000000965 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2020-12-22 15:04 - 2020-06-10 19:36 - 000464256 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2020-12-22 15:04 - 2020-03-05 22:57 - 000000662 _____ C:\WINDOWS\Tasks\G2MUploadTask-S-1-5-21-329068152-746137067-1343024091-1646.job
2020-12-22 15:04 - 2020-03-05 22:57 - 000000566 _____ C:\WINDOWS\Tasks\G2MUpdateTask-S-1-5-21-329068152-746137067-1343024091-1646.job
2020-12-22 15:04 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2020-12-22 15:03 - 2019-05-07 16:53 - 000000000 ____D C:\ProgramData\Package Cache
2020-12-21 22:24 - 2019-05-06 14:31 - 000000160 _____ C:\WINDOWS\system32\config\netlogon.ftl
2020-12-21 21:27 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2020-12-19 20:30 - 2020-01-21 11:52 - 000002419 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2020-12-19 10:24 - 2019-05-06 16:02 - 000000000 ____D C:\VNTI Sequencing
2020-12-19 09:51 - 2020-06-10 19:42 - 000003816 _____ C:\WINDOWS\system32\Tasks\G2MUploadTask-S-1-5-21-329068152-746137067-1343024091-1646
2020-12-19 09:51 - 2020-06-10 19:42 - 000003720 _____ C:\WINDOWS\system32\Tasks\G2MUpdateTask-S-1-5-21-329068152-746137067-1343024091-1646
2020-12-19 09:51 - 2020-03-05 22:57 - 000000000 ____D C:\Users\Steffen\AppData\Local\GoToMeeting
2020-12-17 22:58 - 2020-05-04 08:29 - 000000000 ____D C:\Program Files (x86)\Dropbox
2020-12-17 14:47 - 2019-05-06 14:50 - 000000000 ____D C:\Users\Steffen\AppData\Local\PlaceholderTileLogoFolder
2020-12-15 18:26 - 2019-05-06 14:49 - 000000000 ____D C:\Users\Steffen\AppData\Local\Packages
2020-12-15 18:23 - 2019-05-06 13:53 - 000000000 ____D C:\Program Files\Intel
2020-12-15 18:22 - 2019-05-06 13:53 - 000000000 ____D C:\Program Files (x86)\Intel
2020-12-15 12:00 - 2020-01-25 17:42 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-12-14 08:37 - 2020-01-25 17:42 - 000299701 _____ C:\ProgramData\NVDisplayContainerWatchdog.log_backup1
2020-12-14 08:37 - 2020-01-25 17:42 - 000080015 _____ C:\ProgramData\NVDisplay.ContainerLocalSystem.log_backup1
2020-12-14 08:37 - 2020-01-25 17:42 - 000010981 _____ C:\ProgramData\DisplaySessionContainer1.log_backup1
2020-12-14 00:26 - 2020-01-27 18:23 - 000022739 _____ C:\ProgramData\DisplaySessionContainer8.log_backup1
2020-12-13 01:05 - 2020-01-27 17:25 - 000020997 _____ C:\ProgramData\DisplaySessionContainer7.log_backup1
2020-12-12 14:56 - 2019-05-08 13:46 - 000002136 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2020-12-12 13:20 - 2020-01-27 00:14 - 000013726 _____ C:\ProgramData\DisplaySessionContainer6.log_backup1
2020-12-12 09:51 - 2020-01-26 14:28 - 000013426 _____ C:\ProgramData\DisplaySessionContainer5.log_backup1
2020-12-12 00:57 - 2020-01-26 13:59 - 000029621 _____ C:\ProgramData\DisplaySessionContainer4.log_backup1
2020-12-11 20:51 - 2019-05-26 17:08 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\Mp3tag
2020-12-11 20:17 - 2020-06-10 19:42 - 000003364 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-329068152-746137067-1343024091-1646
2020-12-11 20:17 - 2020-06-10 18:05 - 000002385 _____ C:\Users\Steffen\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2020-12-11 00:10 - 2020-01-26 11:05 - 000012086 _____ C:\ProgramData\DisplaySessionContainer3.log_backup1
2020-12-10 17:34 - 2020-01-25 18:42 - 000011714 _____ C:\ProgramData\DisplaySessionContainer2.log_backup1
2020-12-10 10:02 - 2020-06-10 18:05 - 000000000 ____D C:\Users\Steffen
2020-12-09 20:26 - 2020-01-25 17:20 - 000001510 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver & Support Assistant.lnk
2020-12-09 20:16 - 2020-01-25 17:42 - 000001205 _____ C:\ProgramData\NvcDispCorePlugin.log_backup1
2020-12-09 16:52 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender
2020-12-09 16:52 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender
2020-12-09 12:07 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2020-12-09 00:17 - 2020-02-10 00:09 - 000022037 _____ C:\ProgramData\DisplaySessionContainer11.log_backup1
2020-12-08 17:11 - 2020-06-10 19:42 - 000004588 _____ C:\WINDOWS\system32\Tasks\Adobe Flash Player NPAPI Notifier
2020-12-08 17:11 - 2019-12-07 10:18 - 000842296 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2020-12-08 17:11 - 2019-12-07 10:18 - 000175160 _____ (Adobe) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl
2020-12-08 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Macromed
2020-12-08 17:11 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Macromed
2020-12-08 13:16 - 2020-02-09 00:32 - 000013033 _____ C:\ProgramData\DisplaySessionContainer10.log_backup1
2020-12-08 09:57 - 2019-05-09 10:02 - 000000000 ____D C:\Users\Steffen\Documents\Benutzerdefinierte Office-Vorlagen
2020-12-08 00:31 - 2020-01-29 20:13 - 000011741 _____ C:\ProgramData\DisplaySessionContainer9.log_backup1
2020-12-05 23:21 - 2019-06-07 19:05 - 000000000 ____D C:\Users\Steffen\AppData\Roaming\PlateManager
2020-12-04 22:08 - 2019-05-06 11:28 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2020-12-02 00:45 - 2020-02-10 17:34 - 000011293 _____ C:\ProgramData\DisplaySessionContainer12.log_backup1
2020-12-01 08:43 - 2020-07-14 09:46 - 000000000 ____D C:\Users\Steffen\Geneious 2020.2 Data
2020-12-01 08:42 - 2020-07-02 12:28 - 000000000 ____D C:\Program Files\Geneious Prime
2020-11-30 09:06 - 2020-06-10 19:42 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2020-11-30 09:06 - 2020-06-10 19:42 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2019-10-22 13:32 - 2019-10-22 13:36 - 000038519 _____ () C:\Users\Steffen\AppData\Roaming\Durch Trennzeichen getrennte Werte.ADR
2019-06-15 17:39 - 2020-05-02 16:36 - 000011776 _____ () C:\Users\Steffen\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-03-31 15:58 - 2020-03-31 15:58 - 000000017 _____ () C:\Users\Steffen\AppData\Local\resmon.resmoncfg
2019-09-18 11:48 - 2019-09-18 14:17 - 000000152 _____ () C:\Users\Steffen\AppData\Local\STAR.trace

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================