Audacity.de Malware Hilfe!

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 17-03-2021
Ran by SYSTEM on MININT-68TTGOF (17-03-2021 22:30:39)
Running from e:\
Platform: Windows 10 Home Version 2004 19041.804 (X64) Language: Deutsch (Deutschland) -> Deutsch (Deutschland)
Boot Mode: Recovery
Default: ControlSet001
ATTENTION!:=====> If the system is bootable FRST must be run from normal or Safe mode to create a complete log.


==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [705728 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [] => [X]
HKU\onurt\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3412696 2021-02-13] (Valve -> Valve Corporation)
HKU\onurt\...\Run: [CiscoMeetingDaemon] => C:\Users\onurt\AppData\Local\WebEx\ciscowebexstart.exe [2499272 2021-02-05] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\onurt\...\Run: [PTOneClick] => C:\Program Files (x86)\Webex\Webex\Applications\ptoneclk.exe [7184192 2020-04-29] (Cisco WebEx LLC -> Cisco Webex LLC)
HKU\onurt\...\Run: [] => [X]
HKU\TEMP\...\Run: [OneDrive] => C:\Users\TEMP\AppData\Local\Microsoft\OneDrive\OneDrive.exe [1630368 2018-07-20] (Microsoft Corporation -> Microsoft Corporation) <==== ATTENTION
HKLM\...\Print\Monitors\HP C211 Status Monitor: C:\Windows\system32\hpinkstsC211LM.dll [333496 2013-01-08] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Deskjet 2540 series): C:\Windows\system32\HPDiscoPMC211.dll [763912 2014-03-06] (Hewlett Packard -> Hewlett-Packard Co.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2019 Fast Start.lnk [2019-11-13]
ShortcutTarget: SOLIDWORKS 2019 Fast Start.lnk -> C:\Windows\Installer\{F261BF5C-81C4-4E81-9ED6-D7EBFA2A9A5B}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC)

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0683AD74-E740-466F-B06D-052E114CA04D} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [4051048 2021-03-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {06AF5893-CED7-495D-8A10-E913162368AF} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [960448 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {12DF3F8A-9612-48CA-AE38-2818FA70CA73} - System32\Tasks\Microsoft\Windows\HelloFace\FODCleanupTask => C:\Windows\System32\WinBioPlugIns\FaceFodUninstaller.exe [507392 2021-01-25] ()
Task: {15D06AB3-BEF9-4C5F-9491-809ED40ED4BC} - System32\Tasks\Software2 Updater Task => C:\Program Files\Software2\AppsAnywhere\AppsAnywhereUpdater.exe [1908784 2020-10-14] (Software2, Ltd -> Software2 Inc)
Task: {1ACE3175-BBB6-44C2-B7B4-0422151AECA6} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141136 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2008635C-172F-4A9F-9156-B328DD70C95B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [141136 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {26DB71D3-C1C6-4214-A650-FFD58BBC6C8B} - System32\Tasks\Software2 Request Client Startup Task => C:\Program Files\Software2\AppsAnywhere\AppsAnywhereLauncher.exe [132144 2020-10-14] (Software2, Ltd -> Software2 Inc)
Task: {2A31AEA5-FBA9-4949-AE3C-38439FBD22F3} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {2AA2031B-4725-4E2E-8D6D-5E38C5653587} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3747337354-906202891-3559345014-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {2C495456-737D-4130-AB1C-A534FF76CFF6} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [436160 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {37BD5BA7-E57A-487B-A00C-91BB2E1CE26F} - System32\Tasks\Intel PTT EK Recertification => C:\Program Files\Intel\iCLS Client\IntelPTTEKRecertification.exe [909112 2016-07-26] (Intel(R) Trusted Connect Service -> Intel(R) Corporation)
Task: {39B274BF-D474-4136-8D85-61680902E7CC} - System32\Tasks\ATK Package 36D18D69AFC3 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {4465084B-0678-4477-8ECD-EF9434287978} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {487F2525-6D16-45FB-B629-EF6FC7F74CEC} - \Anmeldedienst Synchronisierungshost_5267659 Gemeinsame -> No File <==== ATTENTION
Task: {4D1C7097-8F02-4D3C-B6D5-076250894C01} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5263D420-77C7-4C7A-ADE7-70BBC3FDB016} - System32\Tasks\RtHDVBg_ListenToDevice => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1473032 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {52CA8B13-C058-489E-9ED5-6DC4D7EEC25D} - System32\Tasks\Avira_Antivirus_Systray => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [2651216 2021-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {55187252-4DBB-4F47-9231-2D435F5E1B9C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-20] (Google Inc -> Google Inc.)
Task: {59BDDF2D-C017-4214-B288-F89AA411A3D5} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3747337354-906202891-3559345014-1002 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2021-01-25] ()
Task: {5CA3E8DE-03AA-4177-AE0A-992B5BDDBB4D} - System32\Tasks\SS2UILauncherRun => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [1143312 2016-11-10] (A-Volute -> )
Task: {6675D570-F081-4953-A267-BEE3A30C3AE8} - System32\Tasks\SS2svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2svc64.exe [259072 2016-11-10] ()
Task: {73B1257D-7098-4991-9DAB-3082B510DE1D} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5260176 2021-03-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {76EE6A5F-115E-444E-A701-9C6C897AE3E9} - System32\Tasks\ROG Gaming Center => C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingKey.exe [4705144 2017-05-10] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {7A961D0F-DFC6-4BC4-94D8-7D173248E3FF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [153168 2018-07-20] (Google Inc -> Google Inc.)
Task: {7CB5F6DE-DD37-4079-B231-3F3B5E0F0F2F} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service on boot if driver is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\tbtsvc.exe [2015968 2016-08-15] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {82CF3177-4F58-474C-8A97-05F97CE9F170} - System32\Tasks\AviraSystemSpeedupUpdate => C:\ProgramData\Avira\SystemSpeedup\Update\avira_speedup_setup_update.exe [29757392 2021-03-17] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {86C4B35C-06A9-49FC-BCF6-99325F8CD229} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application on login if service is up => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [222944 2016-08-15] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {8B642226-0845-44C9-9C82-C1D90BD52FDD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [1542080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {8BD3C293-BCF8-446A-9890-653B91FBD06D} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\Office16\OLicenseHeartbeat.exe [1511320 2021-03-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {9A637407-BFDD-4F8E-9D69-30E2B54F155C} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23079792 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {A5004152-6D10-4FB1-B57D-758A2A071E8F} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log
Task: {B0AE3795-B118-46F7-A8A5-F52E2789B0BB} - System32\Tasks\SS2svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2svc32.exe [2573312 2016-11-10] ()
Task: {BEDA3094-CBED-4006-A56E-472FF80ED857} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3747337354-906202891-3559345014-1002 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {C3173970-3BD5-411C-B1D3-16B827175D26} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt application when hardware is detected => C:\Program Files (x86)\Intel\Thunderbolt Software\\ConditionalAppStarter.exe [222944 2016-08-15] (Intel(R) Client Connectivity Division SW -> Intel Corporation)
Task: {C3A151B9-1337-453F-907C-B7C72A6739D1} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23079792 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {C9C0CB87-80D2-4A55-8D2F-1FBAC3C6A944} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [728000 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {CA78A9DC-5CED-446F-BD58-0BFE72E2E79E} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe
Task: {D4D159BB-F0C8-4FF0-98A2-D722D90258C6} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [655296 2017-10-11] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {D91DA887-FC05-4330-821A-C3398FB075AB} - System32\Tasks\ATK Package A22126881260 => C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\SimAppExec.exe [122008 2015-09-22] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
Task: {E6F0FA7C-F09F-4C97-95F2-5E6C200DB470} - System32\Tasks\Intel\Thunderbolt\Start Thunderbolt service when hardware is detected => sc.exe start ThunderboltService
Task: {EF0FE61A-AC0C-45D8-A1A3-80661026BC03} - System32\Tasks\Avira_Security_Update => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [234200 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
Task: {F54DAD3F-4BCD-4B58-AC4F-649C0F3FBACB} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9037832 2016-10-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [1208432 2021-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntivirProtectedService; C:\Program Files (x86)\Avira\Antivirus\ProtectedService.exe [537472 2021-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [484904 2021-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [484904 2021-03-11] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [575776 2021-02-24] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AppsAnywhereService; C:\Program Files\Software2\AppsAnywhere\AppsAnywhereUpdaterService.exe [47152 2020-10-14] (Software2, Ltd -> Software2 Inc)
S2 AsHidService; C:\Program Files (x86)\ASUS\ATK Package\ATK Hotkey\AsHidSrv.exe [126648 2016-06-16] (ASUSTeK Computer Inc. -> ASUSTek Computer Inc.)
S2 AtherosSvc; C:\Program Files (x86)\Qualcomm\Bluetooth Suite\adminservice.exe [338312 2017-04-16] (Qualcomm Atheros -> Windows (R) Win 7 DDK provider)
S2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [636592 2020-11-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2988544 2020-06-03] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [384360 2020-12-01] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [247232 2021-03-10] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 AviraUpdaterService; C:\Program Files (x86)\Avira\SoftwareUpdater\Avira.SoftwareUpdater.ServiceHost.exe [161072 2020-12-16] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2018-07-26] (BattlEye Innovations e.K. -> )
S2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [8988552 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-10-19] (Microsoft Windows -> Microsoft Corporation)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2020-10-19] (Microsoft Windows -> Microsoft Corporation)
S2 RAS RDP Backend Service; C:\Program Files\Parallels\Client\x86\TuxWinClientService.exe [2969496 2020-09-07] (Parallels International GmbH -> Parallels International GmbH.)
S2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
S3 Rockstar Service; D:\Programme\Launcher\RockstarService.exe [1705088 2020-05-12] (Rockstar Games, Inc. -> Rockstar Games)
S3 ROGGamingCenterService; C:\Program Files (x86)\ASUS\ROG Gaming Center\ROGGamingCenterService.exe [40312 2017-06-08] (ASUSTeK Computer Inc. -> ASUSTeK COMPUTER INC.)
S4 ssh-agent; C:\Windows\System32\OpenSSH\ssh-agent.exe [384512 2019-10-15] ()
S2 StreamingCore; C:\Program Files\Numecent\Application Jukebox Player\StreamingCore.exe [7361408 2020-12-10] (Numecent, Inc. -> Numecent, Inc.)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\NisSrv.exe [2483624 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WebexPluginsService; C:\Program Files (x86)\Webex\Plugins\webexservice.exe [146168 2020-03-13] (Cisco WebEx LLC -> Cisco WebEx LLC)
S3 WebexService; C:\Program Files (x86)\Webex\Webex\Applications\WebExService.exe [144440 2019-02-21] (Cisco WebEx LLC -> Cisco WebEx LLC)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2102.3-0\MsMpEng.exe [128392 2021-03-06] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AcpiPmi; C:\Windows\System32\drivers\acpipmi.sys [18432 2019-12-07] (Microsoft Corporation)
S1 afunix; C:\Windows\system32\drivers\afunix.sys [41984 2020-09-10] (Microsoft Corporation)
S1 afunix; C:\Windows\SysWOW64\drivers\afunix.sys [29696 2020-09-10] (Microsoft Corporation)
S1 ahcache; C:\Windows\System32\DRIVERS\ahcache.sys [292864 2019-12-07] (Microsoft Corporation)
S3 applockerfltr; C:\Windows\System32\drivers\applockerfltr.sys [18432 2020-10-19] (Microsoft Corporation)
S3 AsusPTPDrv; C:\Windows\System32\drivers\AsusPTPFilter.sys [108504 2019-04-24] (ASUSTek Computer Inc. -> ASUSTek COMPUTER INC.)
S1 ATKWMIACPIIO; C:\Program Files (x86)\ASUS\ATK Package\ATK WMIACPI\atkwmiacpi64.sys [20096 2015-05-08] (Microsoft Windows Hardware Compatibility Publisher -> ASUSTek Computer Inc.)
S0 avdevprot; C:\Windows\System32\DRIVERS\avdevprot.sys [78936 2019-06-07] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avelam; C:\Windows\System32\drivers\avelam.sys [22336 2019-03-20] (Microsoft Windows Early Launch Anti-Malware Publisher -> Avira Operations GmbH & Co. KG)
S2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [206896 2021-02-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [199312 2021-02-09] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [46704 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [89736 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S0 avusbflt; C:\Windows\System32\Drivers\avusbflt.sys [45472 2019-03-20] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
S3 bcmfn2; C:\Windows\System32\drivers\bcmfn2.sys [9728 2019-12-07] (Windows (R) Win 7 DDK provider)
S1 Beep; C:\Windows\System32\Drivers\Beep.sys [10240 2019-12-07] (Microsoft Corporation)
S3 bowser; C:\Windows\System32\DRIVERS\bowser.sys [117760 2021-01-25] (Microsoft Corporation)
S3 BthA2dp; C:\Windows\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation)
S3 BthEnum; C:\Windows\System32\drivers\BthEnum.sys [113664 2021-01-25] (Microsoft Corporation)
S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation)
S3 BthLEEnum; C:\Windows\System32\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys [106496 2020-09-10] (Microsoft Corporation)
S3 BthMini; C:\Windows\System32\drivers\BTHMINI.sys [45568 2021-01-25] (Microsoft Corporation)
S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation)
S3 BthPan; C:\Windows\System32\drivers\bthpan.sys [133632 2019-12-07] (Microsoft Corporation)
S3 BTHPORT; C:\Windows\System32\drivers\BTHport.sys [1559040 2021-01-25] (Microsoft Corporation)
S3 BTHUSB; C:\Windows\System32\drivers\BTHUSB.sys [110592 2021-01-25] (Microsoft Corporation)
S1 CimFS; C:\Windows\System32\Drivers\CimFS.sys [91136 2019-12-07] ()
S3 circlass; C:\Windows\System32\drivers\circlass.sys [52224 2019-12-07] (Microsoft Corporation)
S2 CldFlt; C:\Windows\System32\drivers\cldflt.sys [495104 2021-02-14] (Microsoft Corporation)
S1 FileCrypt; C:\Windows\System32\drivers\filecrypt.sys [59392 2019-12-07] (Microsoft Corporation)
S1 GpuEnergyDrv; C:\Windows\System32\drivers\gpuenergydrv.sys [8704 2019-12-07] (Microsoft Corporation)
S3 HdAudAddService; C:\Windows\System32\drivers\HdAudio.sys [430080 2020-08-12] (Microsoft Corporation)
S3 HidBth; C:\Windows\System32\drivers\hidbth.sys [120320 2020-08-12] (Microsoft Corporation)
S3 HidIr; C:\Windows\System32\drivers\hidir.sys [48640 2019-12-07] (Microsoft Corporation)
S3 HIDSwitch; C:\Windows\System32\drivers\AsRadioControl.sys [32696 2020-11-19] (ASUSTek Computer Inc. -> ASUS)
S3 HwNClx0101; C:\Windows\System32\Drivers\mshwnclx.sys [30208 2019-12-07] (Microsoft Corporation)
S3 IndirectKmd; C:\Windows\System32\drivers\IndirectKmd.sys [47104 2020-10-19] (Microsoft Corporation)
S3 intelpmax; C:\Windows\System32\drivers\intelpmax.sys [30720 2019-12-07] (Microsoft Corporation)
S3 IpFilterDriver; C:\Windows\System32\DRIVERS\ipfltdrv.sys [90112 2019-12-07] (Microsoft Corporation)
S3 IPNAT; C:\Windows\System32\drivers\ipnat.sys [225280 2019-12-07] (Microsoft Corporation)
S2 lltdio; C:\Windows\System32\drivers\lltdio.sys [72704 2019-12-07] (Microsoft Corporation)
S2 luafv; C:\Windows\system32\drivers\luafv.sys [140800 2021-01-25] (Microsoft Corporation)
S3 MbbCx; C:\Windows\System32\drivers\MbbCx.sys [386048 2020-08-12] (Microsoft Corporation)
S3 Microsoft_Bluetooth_AvrcpTransport; C:\Windows\System32\drivers\Microsoft.Bluetooth.AvrcpTransport.sys [65024 2019-12-07] (Microsoft Corporation)
S2 MMCSS; C:\Windows\system32\drivers\mmcss.sys [53248 2020-10-19] (Microsoft Corporation)
S3 Modem; C:\Windows\System32\drivers\modem.sys [47104 2021-01-25] (Microsoft Corporation)
S3 monitor; C:\Windows\System32\drivers\monitor.sys [80896 2020-09-10] (Microsoft Corporation)
S3 MRxDAV; C:\Windows\system32\drivers\mrxdav.sys [157696 2019-12-07] (Microsoft Corporation)
S3 MsBridge; C:\Windows\System32\drivers\bridge.sys [127488 2019-12-07] (Microsoft Corporation)
S3 mshidumdf; C:\Windows\System32\drivers\mshidumdf.sys [12288 2019-12-07] (Microsoft Corporation)
S3 MSKSSRV; C:\Windows\System32\drivers\MSKSSRV.sys [34816 2020-11-16] (Microsoft Corporation)
S2 MsLldp; C:\Windows\System32\drivers\mslldp.sys [78848 2019-12-07] (Microsoft Corporation)
S3 NativeWifiP; C:\Windows\System32\DRIVERS\nwifi.sys [740352 2021-02-14] (Microsoft Corporation)
S1 NdisCap; C:\Windows\System32\drivers\ndiscap.sys [54272 2019-12-07] (Microsoft Corporation)
S3 NdisImPlatform; C:\Windows\System32\drivers\NdisImPlatform.sys [135168 2020-10-19] (Microsoft Corporation)
S3 NdisTapi; C:\Windows\System32\DRIVERS\ndistapi.sys [28672 2020-10-19] (Microsoft Corporation)
S3 NdisWan; C:\Windows\System32\drivers\ndiswan.sys [206848 2020-09-10] (Microsoft Corporation)
S3 ndiswanlegacy; C:\Windows\System32\DRIVERS\ndiswan.sys [206848 2020-09-10] (Microsoft Corporation)
S3 ndproxy; C:\Windows\System32\DRIVERS\NDProxy.sys [93696 2020-10-19] (Microsoft Corporation)
S2 Ndu; C:\Windows\System32\drivers\Ndu.sys [131584 2019-12-07] (Microsoft Corporation)
S3 NetAdapterCx; C:\Windows\System32\drivers\NetAdapterCx.sys [207360 2021-02-14] (Microsoft Corporation)
S1 NetBT; C:\Windows\System32\DRIVERS\netbt.sys [341504 2020-10-19] (Microsoft Corporation)
S1 netfilter2; C:\Windows\System32\drivers\netfilter2.sys [79504 2016-09-18] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S1 nsiproxy; C:\Windows\System32\drivers\nsiproxy.sys [48640 2020-10-19] (Microsoft Corporation)
S2 PEAUTH; C:\Windows\System32\drivers\peauth.sys [822784 2020-09-10] (Microsoft Corporation)
S3 PNPMEM; C:\Windows\System32\drivers\pnpmem.sys [17408 2019-12-07] (Microsoft Corporation)
S3 PptpMiniport; C:\Windows\System32\drivers\raspptp.sys [101888 2020-09-10] (Microsoft Corporation)
S3 Qcamain10x64; C:\Windows\System32\drivers\Qcamain10x64.sys [2342912 2019-12-07] (Qualcomm Atheros, Inc.)
S3 QWAVEdrv; C:\Windows\system32\drivers\qwavedrv.sys [53248 2019-12-07] (Microsoft Corporation)
S3 RasAcd; C:\Windows\System32\DRIVERS\rasacd.sys [20480 2020-10-19] (Microsoft Corporation)
S3 RasAgileVpn; C:\Windows\System32\drivers\AgileVpn.sys [118784 2020-11-16] (Microsoft Corporation)
S3 Rasl2tp; C:\Windows\System32\drivers\rasl2tp.sys [110080 2020-09-10] (Microsoft Corporation)
S3 RasSstp; C:\Windows\System32\drivers\rassstp.sys [86016 2020-09-10] (Microsoft Corporation)
S3 rdpbus; C:\Windows\System32\drivers\rdpbus.sys [28672 2019-12-07] (Microsoft Corporation)
S3 RDPDR; C:\Windows\System32\drivers\rdpdr.sys [174080 2021-01-25] (Microsoft Corporation)
S3 RFCOMM; C:\Windows\System32\drivers\rfcomm.sys [213504 2019-12-07] (Microsoft Corporation)
S3 rhproxy; C:\Windows\System32\drivers\rhproxy.sys [115712 2019-12-07] (Microsoft Corporation)
S2 rspndr; C:\Windows\System32\drivers\rspndr.sys [89088 2019-12-07] (Microsoft Corporation)
S3 scfilter; C:\Windows\System32\DRIVERS\scfilter.sys [44032 2020-11-16] (Microsoft Corporation)
S3 spaceparser; C:\Windows\System32\drivers\spaceparser.sys [26624 2019-12-07] (Microsoft Corporation)
S3 srv2; C:\Windows\System32\DRIVERS\srv2.sys [782848 2021-01-25] (Microsoft Corporation)
S3 srvnet; C:\Windows\System32\DRIVERS\srvnet.sys [315392 2020-11-16] (Microsoft Corporation)
S3 StillCam; C:\Windows\system32\DRIVERS\serscan.sys [13312 2020-08-12] (Microsoft Corporation)
S2 StreamingFSD; C:\Windows\System32\DRIVERS\StreamingFSD.sys [857280 2020-12-10] (Numecent, Inc. -> Numecent, Inc.)
S3 Synth3dVsc; C:\Windows\System32\drivers\Synth3dVsc.sys [67072 2019-12-07] (Microsoft Corporation)
S2 tcpipreg; C:\Windows\System32\drivers\tcpipreg.sys [54784 2019-12-07] (Microsoft Corporation)
S3 TsUsbFlt; C:\Windows\System32\drivers\tsusbflt.sys [66560 2019-12-07] (Microsoft Corporation)
S3 TsUsbGD; C:\Windows\System32\drivers\TsUsbGD.sys [37888 2019-12-07] (Microsoft Corporation)
S3 tunnel; C:\Windows\System32\drivers\tunnel.sys [129024 2019-12-07] (Microsoft Corporation)
S3 UcmCx0101; C:\Windows\System32\Drivers\UcmCx.sys [160256 2019-12-07] (Microsoft Corporation)
S3 UcmTcpciCx0101; C:\Windows\System32\Drivers\UcmTcpciCx.sys [188416 2019-12-07] (Microsoft Corporation)
S3 UcmUcsiAcpiClient; C:\Windows\System32\drivers\UcmUcsiAcpiClient.sys [36864 2019-12-07] (Microsoft Corporation)
S3 UcmUcsiCx0101; C:\Windows\System32\Drivers\UcmUcsiCx.sys [113152 2020-09-10] (Microsoft Corporation)
S3 usbaudio; C:\Windows\system32\drivers\usbaudio.sys [210432 2021-02-14] (Microsoft Corporation)
S3 usbaudio2; C:\Windows\System32\drivers\usbaudio2.sys [260608 2019-12-07] (Microsoft Corporation)
S3 usbcir; C:\Windows\System32\drivers\usbcir.sys [107520 2019-12-07] (Microsoft Corporation)
S3 usbprint; C:\Windows\System32\drivers\usbprint.sys [35328 2019-12-07] (Microsoft Corporation)
S3 usbscan; C:\Windows\System32\drivers\usbscan.sys [49152 2020-08-12] (Microsoft Corporation)
S3 VirtualRender; C:\Windows\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys [11264 2019-12-07] (Microsoft Corporation)
S2 wanarp; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2020-10-19] (Microsoft Corporation)
S3 wanarpv6; C:\Windows\System32\DRIVERS\wanarp.sys [93184 2020-10-19] (Microsoft Corporation)
S3 wcnfs; C:\Windows\system32\drivers\wcnfs.sys [93184 2019-12-07] (Microsoft Corporation)
S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [49544 2021-03-06] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [420088 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 wdiwifi; C:\Windows\System32\DRIVERS\wdiwifi.sys [958976 2021-02-14] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [72952 2021-03-06] (Microsoft Windows -> Microsoft Corporation)
S3 WinNat; C:\Windows\System32\drivers\winnat.sys [259584 2020-09-10] (Microsoft Corporation)
S3 WINUSB; C:\Windows\System32\drivers\WinUSB.SYS [107008 2019-12-07] (Microsoft Corporation)
S3 WSDPrintDevice; C:\Windows\System32\drivers\WSDPrint.sys [23552 2019-12-07] (Microsoft Corporation)
S3 WSDScan; C:\Windows\system32\DRIVERS\WSDScan.sys [26112 2020-08-12] (Microsoft Corporation)
S3 WudfPf; C:\Windows\System32\drivers\WudfPf.sys [136192 2019-12-07] (Microsoft Corporation)
S3 WUDFRd; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Corporation)
S3 WUDFWpdFs; C:\Windows\System32\drivers\WUDFRd.sys [315392 2019-12-07] (Microsoft Corporation)
S3 xboxgip; C:\Windows\System32\drivers\xboxgip.sys [324608 2020-11-16] (Microsoft Corporation)
S3 xinputhid; C:\Windows\System32\drivers\xinputhid.sys [48640 2020-11-16] (Microsoft Corporation)
UpperFilters: [{71A27CDD-812A-11D0-BEC7-08002BE2092F}] -> [volsnap avusbflt]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (All) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-17 22:30 - 2021-03-17 22:30 - 000000000 ____D C:\FRST
2021-03-17 21:51 - 2021-03-17 21:51 - 000000000 ____D C:\Users\Public\Security Sessions
2021-03-17 21:36 - 2021-03-17 21:38 - 000000000 ____D C:\AdwCleaner
2021-03-17 21:34 - 2021-03-17 21:34 - 000003710 _____ C:\Windows\System32\Tasks\Avira_Security_Update
2021-03-17 21:34 - 2021-03-17 21:34 - 000003374 _____ C:\Windows\System32\Tasks\Avira_Antivirus_Systray
2021-03-17 21:34 - 2021-02-09 18:03 - 000206896 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avgntflt.sys
2021-03-17 21:34 - 2021-02-09 18:03 - 000199312 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avipbb.sys
2021-03-17 21:34 - 2019-06-07 14:09 - 000078936 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avdevprot.sys
2021-03-17 21:34 - 2019-03-20 18:50 - 000089736 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avnetflt.sys
2021-03-17 21:34 - 2019-03-20 18:50 - 000046704 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avkmgr.sys
2021-03-17 21:34 - 2019-03-20 18:50 - 000045472 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avusbflt.sys
2021-03-17 21:34 - 2019-03-20 18:50 - 000022336 _____ (Avira Operations GmbH & Co. KG) C:\Windows\System32\Drivers\avelam.sys
2021-03-17 21:27 - 2021-03-17 21:27 - 000000000 ____H C:\Windows\System32\Drivers\Msft_Kernel_avusbflt_01011.Wdf
2021-03-17 21:24 - 2021-03-17 21:51 - 000000000 ____D C:\Users\onurt\AppData\Local\Avira
2021-03-17 21:24 - 2021-03-17 21:51 - 000000000 ____D C:\ProgramData\Avira
2021-03-17 21:24 - 2021-03-17 21:34 - 000001310 _____ C:\Users\Public\Desktop\Avira.lnk
2021-03-17 21:24 - 2021-03-17 21:34 - 000000000 ____D C:\Program Files (x86)\Avira
2021-03-17 21:24 - 2021-03-17 21:24 - 000003782 _____ C:\Windows\System32\Tasks\AviraSystemSpeedupUpdate
2021-03-17 21:24 - 2021-03-17 21:24 - 000000000 ____D C:\Users\Public\Speedup Sessions
2021-03-17 21:19 - 2021-03-17 21:20 - 000000000 ____D C:\Users\onurt\AppData\Roaming\audacity
2021-03-17 21:19 - 2021-03-17 21:19 - 000000000 ____D C:\Users\onurt\AppData\Local\Audacity
2021-03-17 21:13 - 2021-03-17 21:13 - 000000408 _____ C:\Users\Public\Desktop\updatepush.com.lnk
2021-03-17 21:13 - 2021-03-17 21:13 - 000000000 ____D C:\Users\onurt\AppData\Roaming\npm
2021-03-17 21:13 - 2021-03-17 21:13 - 000000000 ____D C:\Program Files (x86)\nodejs

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2021-03-17 22:26 - 2019-12-07 10:03 - 000786432 _____ C:\Windows\System32\config\BBI
2021-03-17 22:25 - 2020-08-12 19:05 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2021-03-17 22:17 - 2017-08-01 13:18 - 000000000 ____D C:\ProgramData\NVIDIA
2021-03-17 22:15 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-03-17 21:45 - 2020-05-16 01:19 - 000000000 ____D C:\Users\onurt\AppData\Roaming\GameRanger
2021-03-17 21:38 - 2020-08-12 19:08 - 001722792 _____ C:\Windows\System32\PerfStringBackup.INI
2021-03-17 21:38 - 2019-12-07 15:50 - 000746440 _____ C:\Windows\System32\perfh007.dat
2021-03-17 21:38 - 2019-12-07 15:50 - 000150810 _____ C:\Windows\System32\perfc007.dat
2021-03-17 21:38 - 2019-12-07 10:13 - 000000000 ____D C:\Windows\INF
2021-03-17 21:38 - 2017-08-01 13:35 - 000000000 ____D C:\ProgramData\ASUS
2021-03-17 21:38 - 2017-05-04 19:14 - 000000000 ____D C:\Program Files (x86)\ASUS
2021-03-17 21:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Windows\ELAMBKUP
2021-03-17 21:30 - 2020-08-12 18:56 - 001383232 _____ C:\Windows\System32\FNTCACHE.DAT
2021-03-17 21:30 - 2020-08-12 18:56 - 000008192 ___SH C:\DumpStack.log.tmp
2021-03-17 21:30 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\ServiceState
2021-03-17 21:30 - 2019-11-13 20:04 - 000000000 ____D C:\Users\onurt\AppData\Local\Software2
2021-03-17 21:29 - 2018-07-26 17:24 - 000000000 ____D C:\Program Files (x86)\Steam
2021-03-17 21:24 - 2017-08-01 13:16 - 000000000 ____D C:\ProgramData\Package Cache
2021-03-17 20:47 - 2020-08-12 18:56 - 000000000 ____D C:\Windows\System32\SleepStudy
2021-03-17 19:53 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2021-03-17 19:53 - 2017-08-01 13:40 - 000000000 ____D C:\Program Files\Microsoft Office
2021-03-17 16:34 - 2018-07-22 18:31 - 000000000 ____D C:\Users\onurt\AppData\Local\PlaceholderTileLogoFolder
2021-03-17 16:20 - 2020-08-25 11:24 - 000002276 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-03-17 16:20 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-03-17 16:20 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\AppReadiness
2021-03-17 16:18 - 2020-08-12 19:05 - 000003378 _____ C:\Windows\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3747337354-906202891-3559345014-1002
2021-03-17 16:18 - 2018-07-20 18:35 - 000000000 ___RD C:\Users\onurt\OneDrive
2021-03-17 16:15 - 2020-08-25 11:24 - 000003700 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-03-17 16:15 - 2020-08-25 11:24 - 000003576 _____ C:\Windows\System32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-03-17 16:15 - 2018-07-20 18:16 - 000002254 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-03-06 15:54 - 2018-07-21 14:35 - 000000000 ____D C:\Windows\System32\Drivers\wd
2021-02-28 14:17 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\Registration
2021-02-24 23:07 - 2021-01-22 15:14 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-02-24 21:24 - 2017-08-01 13:18 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2021-02-24 14:41 - 2020-04-17 17:46 - 000000000 ____D C:\Users\onurt\AppData\LocalLow\WebEx
2021-02-24 14:41 - 2020-04-17 17:46 - 000000000 ____D C:\Users\onurt\AppData\Local\WebEx
2021-02-24 13:53 - 2018-07-20 18:33 - 000000000 ____D C:\Users\onurt\AppData\Local\Packages
2021-02-24 13:38 - 2019-06-10 22:29 - 000000000 ____D C:\Users\onurt\AppData\Local\ElevatedDiagnostics
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SysWOW64\Keywords
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\SystemResources
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\System32\oobe
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\System32\Keywords
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\System32\es-MX
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\PolicyDefinitions
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Windows\bcastdvr
2021-02-22 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-02-22 17:16 - 2019-12-07 10:03 - 000000000 ____D C:\Windows\servicing

==================== KnownDLLs (Whitelisted) =========================


==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\rpcss.dll => MD5 is legit
C:\Windows\System32\dnsapi.dll => MD5 is legit
C:\Windows\SysWOW64\dnsapi.dll => MD5 is legit
C:\Windows\System32\dllhost.exe => MD5 is legit
C:\Windows\SysWOW64\dllhost.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

==================== Association (Whitelisted) =============


==================== Restore Points  =========================

Restore point date: 2021-03-17 20:30
Restore point date: 2021-03-17 21:38
Restore point date: 2021-03-17 22:11

==================== Memory info =========================== 

Percentage of memory in use: 8%
Total physical RAM: 16340.73 MB
Available physical RAM: 14988.25 MB
Total Virtual: 16340.73 MB
Available Virtual: 15041.25 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:475.89 GB) (Free:381.58 GB) NTFS
Drive d: (DATA) (Fixed) (Total:931.51 GB) (Free:655.47 GB) NTFS
Drive e: () (Removable) (Total:28.63 GB) (Free:28.62 GB) FAT32
Drive f: (RECOVERY) (Fixed) (Total:0.78 GB) (Free:0.27 GB) NTFS
Drive x: (Boot) (Fixed) (Total:0.5 GB) (Free:0.49 GB) NTFS

\\?\Volume{a91008fd-8dd9-4689-820d-a145bd368e5c}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.22 GB) FAT32

==================== MBR & Partition Table ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: A7C89327)

Partition: GPT.

==========================================================
Disk: 1 (Size: 931.5 GB) (Disk ID: 735FF930)

Partition: GPT.

==========================================================
Disk: 2 (Protective MBR) (Size: 28.6 GB) (Disk ID: 00000000)

Partition: GPT.
==================== End of FRST.txt ========================