Windows 10 läuft zäh und Konflikte mit VPN

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-08-2021
durchgeführt von System_X (Administrator) auf SYSTEM_X-PC (MSI MS-7695) (08-08-2021 19:40:17)
Gestartet von F:\backupMaxtor80gb\data\installationen
Geladene Profile: System_X
Platform: Windows 10 Pro Version 20H2 19042.1110 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

() [Datei ist nicht signiert] C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc. -> Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Advanced Micro Devices, Inc.) [Datei ist nicht signiert] C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe
(AppEx Networks Corporation -> AppEx Networks Corporation) C:\Program Files\AMD Quick Stream\AMDQuickStream.exe
(Corel Corporation -> WinZip Computing) C:\Program Files\WinZip\WzPreloader.exe
(Corel Corporation -> WinZip Computing, S.L.) C:\Program Files\WinZip\FAHWindow64.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitPhantomPDFUpdateService.exe
(FOXIT SOFTWARE INC. -> Foxit Software Inc.) F:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.102\GoogleCrashHandler64.exe
(Ingenium AI Solutions LTD -> SpyWatch) C:\Users\System_X\AppData\Roaming\Spywatch\SPYWATCH Information.exe
(Ingenium AI Solutions LTD -> SpyWatch) C:\Users\System_X\AppData\Roaming\Spywatch\SPYWATCH.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Users\System_X\AppData\Local\Microsoft\OneDrive\OneDrive.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe <2>
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12105.1001.23.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\oobe\UserOOBEBroker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atieclxx.exe
(Microsoft Windows Hardware Compatibility Publisher -> AMD) C:\Windows\System32\atiesrxx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <13>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Mozilla Corporation -> Mozilla Corporation) F:\Program Files (x86)\Mozilla Thunderbird\thunderbird.exe
(Notepad++ -> Don HO don.h@free.fr) F:\Program Files\Notepad++\notepad++.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe
(Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe <6>
(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\NordVPN.exe
(TEFINCOM S.A. -> TEFINCOM S.A.) C:\Program Files\NordVPN\nordvpn-service.exe
(VLC Mobile Remote) [Datei ist nicht signiert] C:\Program Files (x86)\VMR Connect\VMRHub.exe
(Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) C:\Users\System_X\AppData\Roaming\Zoom\bin\Zoom.exe <2>
(Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.) C:\Users\System_X\AppData\Roaming\Zoom\data\cef_x86\zCefAgent.exe <6>

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [WinZip UN] => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
HKLM\...\Run: [WinZip FAH] => C:\Program Files\WinZip\FAHConsole.exe [436704 2020-09-28] (Corel Corporation -> WinZip Computing, S.L.)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [165928 2021-06-28] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [6788032 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [706288 2021-04-09] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [767176 2015-11-04] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [VMR Connect] => C:\Program Files (x86)\VMR Connect\VMRHub.exe [242688 2021-05-22] (VLC Mobile Remote) [Datei ist nicht signiert]
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [AppEx Accelerator UI] => C:\Program Files\AMD Quick Stream\AMDQuickStream.exe [488640 2015-04-06] (AppEx Networks Corporation -> AppEx Networks Corporation)
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [Spywatch] => C:\Users\System_X\AppData\Roaming\Spywatch\SPYWATCH.EXE [2794880 2021-05-28] (Ingenium AI Solutions LTD -> SpyWatch)
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [NordVPN] => C:\Program Files\NordVPN\NordVPN.exe [277688 2021-05-14] (TEFINCOM S.A. -> TEFINCOM S.A.)
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114012032 2021-07-20] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-2965983169-4173802632-674656348-1000\...\Run: [Opera Browser Assistant] => C:\Users\System_X\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4096720 2021-08-02] (Opera Software AS -> Opera Software)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\92.0.4515.131\Installer\chrmstp.exe [2021-08-05] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Preloader.lnk [2021-05-28]
ShortcutTarget: WinZip Preloader.lnk -> C:\Program Files\WinZip\WzPreloader.exe (Corel Corporation -> WinZip Computing)
Startup: C:\Users\System_X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Spywatch.lnk [2021-05-28] <==== ACHTUNG
ShortcutTarget: Spywatch.lnk -> C:\Users\System_X\AppData\Roaming\Spywatch\SPYWATCH.EXE (Ingenium AI Solutions LTD -> SpyWatch) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {028085EF-80AD-4430-9B98-CEA08062FCF1} - \Microsoft\Windows\Setup\EOSNotify -> Keine Datei <==== ACHTUNG
Task: {0A984834-D009-41B3-9957-6A95DDE8B87D} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {199FA3DE-B9A0-4364-90E9-E4A9E3DB7FA7} - System32\Tasks\Opera scheduled assistant Autoupdate 1606677923 => C:\Users\System_X\AppData\Local\Programs\Opera\launcher.exe [2264784 2021-07-21] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\System_X\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {3382EAF8-E4C8-4687-BE24-A488BE2F89E7} - System32\Tasks\Microsoft\Windows\End Of Support\Notify1 => C:\WINDOWS\system32\sipnotify.exe
Task: {33FBF0D8-5ADE-471B-BED2-AF1B04A92CB5} - System32\Tasks\Microsoft\Windows\MobilePC\HotStart => {06DA0625-9701-43da-BFD7-FBEEA2180A1E}
Task: {340A1493-5406-498D-94EF-90D8DB5C40B7} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {38A77E2E-C2D3-4381-8B85-E0CBC65BCA6D} - System32\Tasks\WinZip Update Notifier 2 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {3A97BF76-9D66-44F9-9CC4-DB27F4CA3747} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {42EC1091-D311-47DC-86AC-DA2DB511FC23} - \Microsoft\Windows\Setup\EOSNotify2 -> Keine Datei <==== ACHTUNG
Task: {4321C5C0-ADD4-44A3-82DE-16B45FAB1D3B} - System32\Tasks\Microsoft\Windows\SideShow\SessionAgent => {45F26E9E-6199-477F-85DA-AF1EDfE067B1}
Task: {486D715E-6AA2-44CF-BC48-B6990CBB53C6} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControlsMigration => {343D770D-7788-47c2-B62A-B7C4CED925CB}
Task: {5091D259-3F74-443A-BEB2-35CA187779D2} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {59D8B55B-306C-43FD-9599-49C382F2D4C8} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5AF599F0-AA7E-4A5C-8A42-722A8BC61A98} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {5B42DD9C-5A26-4F27-BB95-34603F0997E5} - System32\Tasks\Microsoft\Windows\Shell\WindowsParentalControls => {DFA14C43-F385-4170-99CC-1B7765FA0E4A}
Task: {64CD4591-8EB0-4DF9-94AA-073F5155298E} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {691DE101-A7AB-4F9F-9D2D-C8C167EC01F3} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {7B7CFCFD-0295-4D7B-A02A-0249A995C5BA} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [681400 2021-07-23] (Mozilla Corporation -> Mozilla Foundation)
Task: {863256B1-F406-4F2F-B5A9-6C54148173E3} - System32\Tasks\Microsoft\Windows\SideShow\AutoWake => {E51DFD48-AA36-4B45-BB52-E831F02E8316}
Task: {907E0625-B84C-49E3-BA4E-B30A51DAF844} - System32\Tasks\Opera scheduled Autoupdate 1606677923 => C:\Users\System_X\AppData\Local\Programs\Opera\launcher.exe [2264784 2021-07-21] (Opera Software AS -> Opera Software)
Task: {913F802F-78E4-450A-89C1-AE381D3A18F1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {93CB01B0-28CD-4424-A112-80D1120A0442} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [6944304 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {949567E6-0D47-4B9F-983B-DE3D5BE02745} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-26] (Google LLC -> Google LLC)
Task: {95C510BA-9BB5-4102-89B1-5B58E7D1081A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [7192192 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {982A438E-9D26-4030-B3BF-7F5EF8FF8766} - System32\Tasks\WinZip Update Notifier 3 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {A0CD771A-0858-4EE9-A7A3-16ABB77187A4} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A1522808-0229-4A44-B21E-CA519029ACE2} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {A3510081-EC92-4B1E-B414-E33168FAD994} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {A354C02A-B276-4D0D-A937-76AE142A38AA} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {AAE250E8-2F44-4F4A-A416-3F682C1492EA} - System32\Tasks\Microsoft\Windows\SideShow\SystemDataProviders => {7CCA6768-8373-4D28-8876-83E8B4E3A969}
Task: {ABCBA117-4A6F-4E81-906D-C68663EC0846} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {B0CBAB43-44FC-469B-A4CE-87426761FDCE} - System32\Tasks\Microsoft\Windows\PerfTrack\BackgroundConfigSurveyor => {EA9155A3-8A39-40b4-8963-D3C761B18371}
Task: {B10D0B96-ED6A-4AA8-9938-F55140C4B876} - System32\Tasks\Microsoft\Windows\End Of Support\Notify2 => C:\WINDOWS\system32\sipnotify.exe
Task: {BBD5EC7A-C32F-408B-99A3-692A4C3A73C1} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {C4B471D5-D41B-45F4-ABE8-1BF468B7D8A4} - System32\Tasks\Microsoft\Windows\SideShow\GadgetManager => {FF87090D-4A9A-4f47-879B-29A80C355D61}
Task: {C5A8994C-A705-4DA2-8431-16F886BD50A2} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {C8488067-87F4-4BBC-9883-B2067827F866} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {CCF57CA2-D0A8-46EF-B0B1-A11040A6B77C} - System32\Tasks\WinZip Update Notifier 1 => C:\Program Files\WinZip\WZUpdateNotifier.exe [2859928 2020-09-28] (Corel Corporation -> Corel Corporation)
Task: {CF785A90-CA7C-4665-A2A8-541FDE58FE36} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D273EA15-4499-4288-837B-A024D225D63A} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [7651984 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {DD258411-0DE9-4708-BD0E-E8A8DD92911A} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E4D648F9-DCB7-4B03-85B1-E501D6B45A97} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-11-26] (Google LLC -> Google LLC)
Task: {E788E000-AD0F-41EF-B237-6EE8C5E355BA} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FCA58B57-E2BA-43BE-82A4-38DB5CAC7BC8} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {FF7F4CF0-F051-4A62-8B81-7413F247FB48} - System32\Tasks\AMD Updater => C:\Program Files\AMD\CIM\\Bin64\InstallManagerApp.exe [10219208 2016-02-26] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{5d7c2cd5-9a75-1ac5-6245-118f1c411193}: [NameServer] 103.86.96.100,103.86.99.100
Tcpip\..\Interfaces\{7372BD0F-B956-43F7-AAD3-3B12560909F5}: [NameServer] 1.1.1.1,8.8.8.8
Tcpip\..\Interfaces\{7372BD0F-B956-43F7-AAD3-3B12560909F5}: [DhcpNameServer] 192.168.0.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\System_X\AppData\Local\Microsoft\Edge\User Data\Default [2021-08-08]
Edge Notifications: Default -> hxxps://www.facebook.com

FireFox:
========
FF DefaultProfile: avtxbt0o.default
FF ProfilePath: C:\Users\System_X\AppData\Roaming\Mozilla\Firefox\Profiles\avtxbt0o.default [2021-05-08]
FF Homepage: Mozilla\Firefox\Profiles\avtxbt0o.default -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=CO150101D&iDate=2021-05-08 09:52:15&bName=
FF NewTab: Mozilla\Firefox\Profiles\avtxbt0o.default -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=CO150101D&iDate=2021-05-08 09:52:15&bName=
FF ProfilePath: C:\Users\System_X\AppData\Roaming\Mozilla\Firefox\Profiles\w6ywzn9z.default-release [2021-08-08]
FF DownloadDir: F:\backupMaxtor80gb\data\installationen
FF Homepage: Mozilla\Firefox\Profiles\w6ywzn9z.default-release -> hxxps://www.google.com/
FF NewTab: Mozilla\Firefox\Profiles\w6ywzn9z.default-release -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=CO150101D&iDate=2021-05-08 09:52:15&bName=
FF Session Restore: Mozilla\Firefox\Profiles\w6ywzn9z.default-release -> ist aktiviert.
FF Notifications: Mozilla\Firefox\Profiles\w6ywzn9z.default-release -> hxxps://www.waz.de; hxxps://www.wetter.com; hxxps://www.finanztrends.de; hxxps://www.instagram.com; hxxps://otupia.de; hxxps://deno-licina.com; hxxps://get-huusk.com; hxxps://www.chess.com; hxxps://tours.comewithyou.com
FF Extension: (AdBlock – der beste Ad-Blocker) - C:\Users\System_X\AppData\Roaming\Mozilla\Firefox\Profiles\w6ywzn9z.default-release\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2021-06-23]
FF Extension: (MyJDownloader Browser Erweiterung) - C:\Users\System_X\AppData\Roaming\Mozilla\Firefox\Profiles\w6ywzn9z.default-release\Extensions\jid1-OY8Xu5BsKZQa6A@jetpack.xpi [2021-06-25] [UpdateUrl:hxxps://my.jdownloader.org/extensions/firefox.json]
FF SearchPlugin: C:\Users\System_X\AppData\Roaming\Mozilla\Firefox\Profiles\w6ywzn9z.default-release\searchplugins\My Firefox Search.xml [2021-05-08]
FF HKLM\...\Firefox\Extensions: [FFExtnHTML2PDF@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi
FF Extension: (Foxit PDF Creator) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi [2020-11-23] []
FF HKLM\...\Firefox\Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi
FF Extension: (Foxit PDF Creator) - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi [2020-11-23]
FF HKLM-x32\...\Firefox\Extensions: [FFExtnHTML2PDF@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FFExtnHTML2PDF.xpi
FF HKLM-x32\...\Firefox\Extensions: [FireFoxNew-WebExtensions@foxitsoftware.com] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\FirefoxAddin\FireFoxNew-WebExtensions@foxitsoftware.com.xpi
FF Plugin: @java.com/DTPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\dtplugin\npDeployJava1.dll [2021-05-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.291.2 -> C:\Program Files\Java\jre1.8.0_291\bin\plugin2\npjp2.dll [2021-05-14] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit PhantomPDF Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\npFoxitPhantomPDFPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> F:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> F:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> F:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> F:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> F:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @videolan.org/vlc,version=3.0.14 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2021-05-10] (VideoLAN -> VideoLAN)
FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\eset_security_config_overlay.js [2021-08-08]

Chrome: 
=======
CHR Profile: C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default [2021-08-08]
CHR Extension: (Foxit PDF Creator) - C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default\Extensions\cifnddnffldieaamihfkhkdgnbhfmaci [2021-04-06]
CHR Extension: (Cookie Watch) - C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmogeohlpljgihhbafbnincahfmafbfn [2021-05-28]
CHR Extension: (AD&POP Block) - C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default\Extensions\mknlngfeicgfpljigaaeohppjdiaalid [2021-06-02]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-04-01]
CHR Extension: (Chrome Media Router) - C:\Users\System_X\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2021-08-03]
CHR HKLM\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2020-11-23]
CHR HKLM-x32\...\Chrome\Extension: [cifnddnffldieaamihfkhkdgnbhfmaci] - C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\plugins\Creator\ChromeAddin\ChromeAddin.crx [2020-11-23]

Opera: 
=======
OPR Profile: C:\Users\System_X\AppData\Roaming\Opera Software\Opera Stable [2021-08-08]
OPR Notifications: Opera Stable -> hxxps://www.facebook.com; hxxps://www.youtube.com
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\System_X\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2021-06-25]
OPR Extension: (Amazon Assistant für Opera) - C:\Users\System_X\AppData\Roaming\Opera Software\Opera Stable\Extensions\mmmbddcnnndpbdflpccgcknaaabgldak [2021-04-29]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AMD FUEL Service; C:\Program Files\AMD\ATI.ACE\Fuel\Fuel.Service.exe [344064 2015-08-04] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
R2 DirMngr; C:\Program Files (x86)\GNU\GnuPG\dirmngr.exe [242176 2009-08-07] () [Datei ist nicht signiert]
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-06-28] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [3079464 2021-06-28] (ESET, spol. s r.o. -> ESET)
R2 FoxitPhantomPDFUpdateService; C:\Program Files (x86)\Foxit Software\Foxit PhantomPDF\FoxitPhantomPDFUpdateService.exe [2357936 2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 FoxitReaderUpdateService; F:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe [2357936 2020-11-23] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
R2 nordvpn-service; C:\Program Files\NordVPN\nordvpn-service.exe [277688 2021-05-14] (TEFINCOM S.A. -> TEFINCOM S.A.)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [3892256 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [3943664 2018-04-20] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDWSCService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [233712 2018-02-06] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5395384 2021-07-16] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12757520 2020-12-14] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\NisSrv.exe [2599328 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2104.14-0\MsMpEng.exe [128376 2021-05-15] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
S2 AODDriver4.3; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59616 2014-02-11] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R2 APXACC; C:\WINDOWS\system32\DRIVERS\appexDrv.sys [229056 2015-04-03] (AppEx Networks Corporation -> AppEx Networks Corporation)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [159600 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 DRHARD64; C:\WINDOWS\system32\drivers\DRHARD64.sys [21984 2011-11-03] (Peter A. Gebhard Softwareentwicklung -> Licensed for Gebhard Software)
S3 drhard64.sys; C:\Program Files (x86)\drhard\Dr. Hardware 2021 21.4.5d\ [0 0000-00-00] () <==== ACHTUNG (Null Byte Datei/Ordner)
R2 DRHMSR64; C:\WINDOWS\system32\drivers\DRHMSR64.sys [13760 2013-07-21] (Peter A. Gebhard Softwareentwicklung -> )
R1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [169368 2021-06-18] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\WINDOWS\System32\DRIVERS\edevmon.sys [123424 2021-06-18] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\WINDOWS\System32\DRIVERS\eelam.sys [15824 2021-05-04] (Microsoft Windows Early Launch Anti-Malware Publisher -> ESET)
R1 ehdrv; C:\WINDOWS\system32\DRIVERS\ehdrv.sys [194728 2021-06-18] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\WINDOWS\system32\DRIVERS\ekbdflt.sys [43832 2021-06-18] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\WINDOWS\system32\DRIVERS\epfw.sys [70184 2021-06-18] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\WINDOWS\system32\DRIVERS\epfwwfp.sys [107408 2021-06-18] (ESET, spol. s r.o. -> ESET)
R2 NDivert; C:\WINDOWS\System32\drivers\NDivert.sys [105184 2021-05-17] (TEFINCOM S.A. -> )
R3 nlwt; C:\WINDOWS\system32\DRIVERS\nlwt.sys [39360 2021-06-07] (TEFINCOM S.A. -> WireGuard LLC)
R1 nordlwf; C:\WINDOWS\system32\DRIVERS\nordlwf.sys [38608 2020-12-14] (TEFINCOM S.A. -> TEFINCOM S.A.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [167280 2020-11-11] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R3 tapnordvpn; C:\WINDOWS\System32\drivers\tapnordvpn.sys [44896 2020-06-09] (TEFINCOM S.A. -> The OpenVPN Project)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [49560 2021-05-15] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [421112 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [73960 2021-05-15] (Microsoft Windows -> Microsoft Corporation)
S3 cpuz149; \??\C:\Users\System_X\AppData\Local\Temp\cpuz149\cpuz149_x64.sys [X] <==== ACHTUNG
S3 DRHARD; \??\C:\WINDOWS\system32\DRIVERS\DRHARD.SYS [X]
S3 GPU-Z-v2; \??\C:\Users\System_X\AppData\Local\Temp\GPU-Z-v2.sys [X] <==== ACHTUNG
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-08-08 19:39 - 2021-08-08 19:40 - 000000000 ____D C:\FRST
2021-08-08 13:54 - 2021-08-08 13:54 - 000001950 _____ C:\Users\System_X\Desktop\Zoom.lnk
2021-08-08 13:45 - 2021-08-08 13:45 - 000000000 ____D C:\Users\System_X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Zoom
2021-08-05 23:51 - 2021-08-05 23:51 - 000000000 ____D C:\Users\System_X\AppData\Local\OneDrive
2021-08-03 22:46 - 2021-08-04 15:13 - 000000022 _____ C:\WINDOWS\S.dirmngr
2021-08-01 16:22 - 2021-08-01 16:22 - 000001577 _____ C:\Users\System_X\Desktop\Rechner.lnk
2021-07-30 19:47 - 2020-11-11 03:54 - 000167280 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2021-07-30 19:47 - 2020-11-11 03:54 - 000159600 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2021-07-30 19:45 - 2021-07-30 19:45 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2021-07-23 15:50 - 2021-07-23 15:50 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2021-07-22 11:50 - 2021-07-29 11:31 - 000000000 ____D C:\Program Files\Mozilla Firefox
2021-07-16 11:28 - 2021-07-16 11:28 - 002371072 _____ C:\WINDOWS\system32\rdpnano.dll
2021-07-16 11:28 - 2021-07-16 11:28 - 000452608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2021-07-16 11:28 - 2021-07-16 11:28 - 000084992 _____ (Microsoft Corporation) C:\WINDOWS\system32\wscui.cpl
2021-07-16 11:28 - 2021-07-16 11:28 - 000067584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wscui.cpl
2021-07-16 11:28 - 2021-07-16 11:28 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MsraLegacy.tlb
2021-07-16 11:28 - 2021-07-16 11:28 - 000007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\MsraLegacy.tlb
2021-07-16 11:28 - 2021-07-16 11:28 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rendezvousSession.tlb
2021-07-16 11:28 - 2021-07-16 11:28 - 000006656 _____ (Microsoft Corporation) C:\WINDOWS\system32\rendezvousSession.tlb
2021-07-16 11:27 - 2021-07-16 11:27 - 002260992 _____ C:\WINDOWS\system32\TextInputMethodFormatter.dll
2021-07-16 11:27 - 2021-07-16 11:27 - 001823280 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi
2021-07-16 11:27 - 2021-07-16 11:27 - 001393504 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi
2021-07-16 11:27 - 2021-07-16 11:27 - 001314128 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecConfig.efi
2021-07-16 11:27 - 2021-07-16 11:27 - 000570880 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2021-07-16 11:27 - 2021-07-16 11:27 - 000097792 _____ C:\WINDOWS\system32\Drivers\cimfs.sys
2021-07-16 11:27 - 2021-07-16 11:27 - 000060928 _____ C:\WINDOWS\system32\runexehelper.exe
2021-07-16 11:27 - 2021-07-16 11:27 - 000011357 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim
2021-07-14 10:25 - 2021-07-14 10:25 - 000000000 ____D C:\ProgramData\ATI
2021-07-14 10:21 - 2021-07-14 10:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Catalyst Control Center

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2021-08-08 19:23 - 2020-11-26 16:04 - 000000000 ____D C:\Program Files (x86)\Google
2021-08-08 17:53 - 2020-11-19 00:50 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2021-08-08 17:08 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2021-08-08 16:37 - 2020-11-26 16:05 - 000000000 ____D C:\Users\System_X\AppData\LocalLow\Mozilla
2021-08-08 16:25 - 2021-05-28 22:01 - 000000000 ____D C:\Users\System_X\AppData\Roaming\Spywatch
2021-08-08 16:25 - 2021-03-28 17:16 - 000000000 ___RD C:\Users\System_X\OneDrive
2021-08-08 13:45 - 2021-01-04 18:22 - 000000000 ____D C:\Users\System_X\AppData\Roaming\Zoom
2021-08-08 13:11 - 2021-03-28 17:09 - 001930124 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2021-08-08 13:11 - 2019-12-07 16:51 - 000821510 _____ C:\WINDOWS\system32\perfh007.dat
2021-08-08 13:11 - 2019-12-07 16:51 - 000183344 _____ C:\WINDOWS\system32\perfc007.dat
2021-08-08 13:11 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2021-08-07 17:35 - 2021-03-28 17:16 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-2965983169-4173802632-674656348-1000
2021-08-07 17:35 - 2021-03-28 17:10 - 000002414 _____ C:\Users\System_X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2021-08-07 12:56 - 2021-06-02 17:02 - 000000000 ____D C:\Users\System_X\AppData\Roaming\vlc
2021-08-07 12:21 - 2021-06-07 23:43 - 000000000 ____D C:\Users\System_X\AppData\Local\NordVPN
2021-08-07 12:21 - 2020-11-19 01:53 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2021-08-07 12:21 - 2020-11-19 01:53 - 000002284 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2021-08-07 12:21 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2021-08-07 12:21 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2021-08-06 09:49 - 2021-03-28 22:42 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2021-08-06 00:09 - 2021-03-28 17:10 - 000000000 ____D C:\Users\System_X
2021-08-05 13:34 - 2020-11-26 16:05 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2021-08-05 13:34 - 2020-11-26 16:05 - 000002208 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2021-08-04 15:13 - 2021-03-28 17:05 - 000008192 ___SH C:\DumpStack.log.tmp
2021-08-04 15:13 - 2021-03-25 00:24 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2021-08-04 15:13 - 2020-12-23 22:17 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2021-08-04 15:13 - 2020-11-19 01:51 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2021-08-03 22:46 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2021-08-03 19:55 - 2020-11-26 16:05 - 000000000 ____D C:\ProgramData\Mozilla
2021-08-03 11:08 - 2021-03-28 17:12 - 000003632 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2021-08-03 11:08 - 2021-03-28 17:12 - 000003508 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2021-08-03 10:46 - 2021-03-28 17:12 - 000004470 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1606677923
2021-08-02 09:12 - 2020-11-19 01:53 - 000003700 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2021-08-02 09:12 - 2020-11-19 01:53 - 000003576 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2021-07-29 11:31 - 2020-11-26 16:05 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2021-07-28 11:22 - 2021-06-23 19:19 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2021-07-26 14:41 - 2020-11-27 18:08 - 000000000 ____D C:\Users\System_X\AppData\Roaming\Electrum
2021-07-23 15:50 - 2020-11-26 16:05 - 000000936 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2021-07-23 14:18 - 2021-03-28 17:12 - 000004232 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1606677923
2021-07-23 14:18 - 2020-11-29 21:25 - 000001424 _____ C:\Users\System_X\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2021-07-16 15:35 - 2020-11-19 00:50 - 000258000 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2021-07-16 15:32 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\Dism
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\Provisioning
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2021-07-16 15:32 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\System
2021-07-16 11:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2021-07-16 11:01 - 2020-11-27 22:11 - 000000000 ____D C:\WINDOWS\system32\MRT
2021-07-16 10:54 - 2020-11-27 22:11 - 133422552 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2021-07-16 09:45 - 2021-03-28 22:42 - 000740152 _____ (Microsoft Corporation) C:\WINDOWS\system32\sedplugins.dll
2021-07-16 09:45 - 2021-03-28 22:42 - 000486712 _____ (Microsoft Corporation) C:\WINDOWS\system32\QualityUpdateAssistant.dll
2021-07-14 10:21 - 2020-11-26 16:23 - 000000000 ____D C:\Program Files (x86)\ATI Technologies
2021-07-14 10:18 - 2020-11-28 19:03 - 000000000 ____D C:\AMD
2021-07-09 16:00 - 2021-06-08 18:22 - 000000000 ____D C:\Users\System_X\AppData\Roaming\TS3Client

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================