Erst stürzt Firefox laufend ab, jetzt der komplette Windows 11 PC

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 21-02-2026
durchgeführt von ralfk (Administrator) auf PRIVAT-THINKPAD (LENOVO 20T8000VGE) (22-02-2026 14:20:36)
Gestartet von E:\OneDrive\Desktop\Trojaner Board\FRST64.exe
Geladene Profile: ralfk
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.7840 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iTunes_12139.1.59021.0_x64__nzyj5cx40ttqa\AMDS64\AppleMobileDeviceProcess.exe
(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe
(C:\Program Files (x86)\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebCaptureService.exe ->) (EMC Corporation -> EMC Corporation) C:\Program Files (x86)\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebToolkitHost.exe
(C:\Program Files (x86)\Jabra\Direct6\jabra-direct.exe ->) (GN Audio A/S -> GN Audio A/S) C:\Program Files (x86)\Jabra\Direct6\SoftphoneIntegrations.exe
(C:\Program Files (x86)\Jabra\Direct6\SoftphoneIntegrations.exe ->) (GN Audio -> GN Audio A/S) C:\Program Files (x86)\Jabra\Direct6\Jabra.Utilities\DeviceConnector\win32\jabra-device-connector.exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\Norton\Suite\NortonSvc.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\aswEngSrv.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.23.10022.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudCKKS.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudDrive.exe
(C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudPhotos.exe
(Canon Electronics Inc. -> Canon Electronics Inc.) C:\Program Files (x86)\Canon Electronics\DRC125\TouchDR.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~2.INF\DAX3API.exe
(DriverStore\FileRepository\fn.inf_amd64_4ad9b0573b01a792\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FNFA7F~1.INF\driver\shtctky.exe
(DriverStore\FileRepository\fn.inf_amd64_4ad9b0573b01a792\driver\tphkload.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\FNFA7F~1.INF\driver\tposd.exe
(DriverStore\FileRepository\u0408387.inf_amd64_b7529bf6e91141f0\B406011\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408387.inf_amd64_b7529bf6e91141f0\B406011\atieclxx.exe
(E:\OneDrive\Desktop\Trojaner Board\FRST64.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsNotepad_11.2510.14.0_x64__8wekyb3d8bbwe\Notepad\Notepad.exe <3>
(ETDService.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDCtrl.exe
(explorer.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\DYMO\DYMO Connect\DYMO.WebApi.Win.Host.exe
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Amazon.com Services LLC -> ) C:\Users\ralfk\AppData\Local\Amazon Drive\AmazonPhotos.exe
(explorer.exe ->) (Amazon.com Services LLC -> Amazon.com Services LLC) C:\Users\ralfk\AppData\Local\Amazon Music\Amazon Music Helper.exe
(explorer.exe ->) (DEVELOPER IN A BOX -> Developerinabox) C:\Program Files\Agent\AgentTray.exe
(explorer.exe ->) (GN Audio A/S -> GN Hearing A/S) C:\Program Files (x86)\Jabra\Direct6\jabra-direct.exe <4>
(explorer.exe ->) (Heiko Sommerfeldt -> Heiko Sommerfeldt) [Datei ist nicht signiert] [Datei wird verwendet] C:\Program Files (x86)\PhonerLite\PhonerLite.exe
(explorer.exe ->) (Marek Jasinski -> Marek Jasinski) C:\Program Files (x86)\FreeCommander XE\FreeCommander.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(explorer.exe ->) (Newell Brands Inc -> ) [Datei ist nicht signiert] C:\Program Files (x86)\DYMO\DYMO Connect\DYMOConnectLauncher.exe
(explorer.exe ->) (Nextcloud GmbH -> Deutsche Telekom AG) C:\Program Files\MagentaCLOUD\magentacloud.exe
(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\NortonUI.exe <4>
(Haufe-Lexware GmbH & Co. KG -> Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Kofax, Inc. -> Kofax) C:\Program Files (x86)\Kofax\Power PDF 41\PPDFLM.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <10>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\PrintIsolationHost.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <14>
(PrintCtrl.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com) C:\Windows\System32\PrintDisp.exe <2>
(services.exe ->) () [Datei ist nicht signiert] C:\Program Files (x86)\DYMO\DYMO Connect\PnpService\DYMO.Connect.PnP.Service.exe
(services.exe ->) (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://WWW.ALL2PDF.COM) C:\Windows\System32\PrintCtrl.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0408387.inf_amd64_b7529bf6e91141f0\B406011\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (DEVELOPER IN A BOX -> Developerinabox) C:\Program Files\Agent\Agent.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ETDService.exe
(services.exe ->) (EMC Corporation -> EMC Corporation) C:\Program Files (x86)\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebCaptureService.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\afwServ.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\aswidsagent.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\nllToolsSvc.exe
(services.exe ->) (Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\Norton\Suite\NortonSvc.exe
(services.exe ->) (Haufe-Lexware GmbH & Co. KG -> Haufe-Lexware GmbH & Co. KG) C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\fn.inf_amd64_4ad9b0573b01a792\driver\tphkload.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmsvc.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\LITSSvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\26.017.0126.0002\FileSyncHelper.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Locator.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MidiSrv.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (NortonLifeLock Inc. -> NortonLifeLock Inc.) C:\Program Files\Norton\Suite\wsc_proxy.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bbb0597391852f64\RtkAudUService64.exe <3>
(services.exe ->) (Reiner Kartengeraete GmbH und Co.KG -> REINER SCT) C:\Windows\SysWOW64\cjpcsc.exe
(services.exe ->) (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe
(services.exe ->) (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert] C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2587.10.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(sihost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudHome.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2511.3002.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\ApplePhotoStreams.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\APSDaemon.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\iCloudOutlookConfig64.exe
(svchost.exe ->) (5BD5593D-A41B-4F89-884E-B4F3E0FBAA75 -> Apple, Inc.) C:\Program Files\WindowsApps\AppleInc.iCloud_15.7.56.0_x64__nzyj5cx40ttqa\iCloud\secd.exe
(svchost.exe ->) (B4EC1033-EC1A-4672-B9A6-073B156CF1B8 -> INSTAR Deutschland GmbH) C:\Program Files\WindowsApps\INSTARDeutschlandGmbH.InstarVision_1.4.6.0_x64__v4jvt15wr9gya\InstarVision WP.Windows.exe
(svchost.exe ->) (Lenovo -> Lenovo) C:\Windows\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.195.0.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mmgaserver.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [PrintDisp] => C:\Windows\system32\PrintDisp.exe [595080 2019-03-21] (ActMask Group Co., Ltd -> ActMask Co.,Ltd - hxxp://www.all2pdf.com)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [CANON DR-C125 SVC] => rundll32.exe DRDcSvc.dll,EntryPointUserMessage (Keine Datei)
HKLM\...\Run: [NortonUI.exe] => C:\Program Files\Norton\Suite\AvLaunch.exe [889512 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
HKLM\...\Run: [DYMOWebApi] => C:\Program Files (x86)\DYMO\DYMO Connect\DYMO.WebApi.Win.Host.exe [103131420 2025-06-17] () [Datei ist nicht signiert]
HKLM\...\Run: [DymoOfficeHelper] => C:\Program Files (x86)\DYMO\DYMO Connect\DYMO.OfficeHelper.exe [185882 2025-06-17] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [PowerPDF Registry Controller] => C:\Program Files (x86)\Kofax\Power PDF 41\RegistryController.exe [324160 2021-06-21] (Kofax, Inc. -> Kofax)
HKLM-x32\...\Run: [PowerPdf1PPDFLM] => C:\Program Files (x86)\Kofax\Power PDF 41\PPDFLM.exe [2270976 2023-08-09] (Kofax, Inc. -> Kofax)
HKLM-x32\...\Run: [Display] => C:\Program Files (x86)\APC\PowerChute Personal Edition\DataCollectionLauncher.exe [480176 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9223104 2026-02-09] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [DR-C125 CaptureOnTouch] => C:\Program Files (x86)\Canon Electronics\DRC125\TouchDR.exe [977200 2013-08-19] (Canon Electronics Inc. -> Canon Electronics Inc.)
HKLM-x32\...\Run: [I16A] => C:\WINDOWS\twain_32\Brimi16a\Common\TwDsUiLaunch.exe [94952 2019-03-20] (Microsoft Windows Hardware Compatibility Publisher -> )
HKLM-x32\...\Run: [BrHelp] => C:\Program Files (x86)\Brother\Brother Help\BrotherHelp.exe [1939968 2014-10-22] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [DYMOWebApi] => C:\Program Files (x86)\DYMO\DYMO Connect\DYMO.WebApi.Win.Host.exe [103131420 2025-06-17] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [LexwareInfoService] => C:\Program Files (x86)\Lexware\Update Manager\LxUpdateManager.exe [413032 2025-04-01] (Haufe-Lexware GmbH & Co. KG -> Haufe-Lexware GmbH & Co. KG)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4745616 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4745616 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [4745616 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [Amazon Music Helper] => C:\Users\ralfk\AppData\Local\Amazon Music\Amazon Music Helper.exe [2364136 2022-08-30] (Amazon.com Services LLC -> Amazon.com Services LLC)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [MagentaCLOUD] => C:\Program Files\MagentaCLOUD\magentacloud.exe [14660392 2026-01-20] (Nextcloud GmbH -> Deutsche Telekom AG)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\ralfk\AppData\Local\Microsoft\Teams\Update.exe [2591920 2024-02-14] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [Agent Tray] => C:\Program Files\Agent\AgentTray.exe [928512 2024-07-13] (DEVELOPER IN A BOX -> Developerinabox)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [Amazon Photos] => C:\Users\ralfk\AppData\Local\Amazon Drive\AmazonPhotos.exe [451752 2026-01-23] (Amazon.com Services LLC -> )
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [] => [X]
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [DYMOConnectLauncher] => C:\Program Files (x86)\DYMO\DYMO Connect\DYMOConnectLauncher.exe [1616520 2025-06-17] (Newell Brands Inc -> ) [Datei ist nicht signiert]
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41732568 2026-02-17] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [Jabra Direct] => C:\Program Files (x86)\Jabra\Direct6\jabra-direct.exe [161139000 2025-07-28] (GN Audio A/S -> GN Hearing A/S)
HKU\S-1-5-21-3943033893-2207473497-676883496-1001\...\Run: [MicrosoftEdgeAutoLaunch_0263C612FDFBB3D15D2B18086DB296C8] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4342352 2026-02-20] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\ActMaskR: C:\Windows\System32\spool\prtprocs\x64\ActPrint.dll [51848 2018-09-14] (ActMask Group Co., Ltd -> ActMask Co.,Ltd)
HKLM\...\Print\Monitors\DYMO LabelWriter Monitor: C:\WINDOWS\system32\LW400MON.DLL [16384 2025-01-31] (Microsoft Windows Hardware Compatibility Publisher -> DYMO Corp.)
HKLM\...\Print\Monitors\HP 5B12 Status Monitor: C:\WINDOWS\system32\hpinksts5B12LM.dll [331664 2012-06-13] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet Pro 8100): C:\WINDOWS\system32\HPDiscoPM5B12.dll [741480 2012-11-01] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\Users\ralfk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PhonerLite.lnk [2022-03-31]
ShortcutTarget: PhonerLite.lnk -> C:\Program Files (x86)\PhonerLite\PhonerLite.exe (Heiko Sommerfeldt -> Heiko Sommerfeldt) [Datei ist nicht signiert] [Datei wird verwendet]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\APC UPS Status.lnk [2022-01-26]
ShortcutTarget: APC UPS Status.lnk -> C:\Program Files (x86)\APC\PowerChute Personal Edition\Display.exe (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Finanzmanager 2026 Zahlungserinnerung.lnk [2025-12-16]
ShortcutTarget: Finanzmanager 2026 Zahlungserinnerung.lnk -> C:\Windows\Installer\{B9F02A94-349B-459A-BDDE-2EBF45E439B3}\billmind.exe (Haufe-Lexware GmbH & Co. KG -> Haufe-Lexware GmbH & Co. KG)
GroupPolicy: Beschränkung ? <==== ACHTUNG
Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Edge: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {137F7893-DEAA-4016-8194-6D6C95A285CE} - \Lenovo\ImController\TimeBasedEvents\edad05d4-fb41-4faa-87b4-ad84fb1131bc -> Keine Datei <==== ACHTUNG
Task: {274A4746-BF9F-4EC7-86F1-156BC04ACFBF} - \Lenovo\ImController\TimeBasedEvents\77363324-2983-4774-9430-897b9c12434f -> Keine Datei <==== ACHTUNG
Task: {9DAC447C-6280-4F6F-96AE-9975D2825894} - \Lenovo\ImController\TimeBasedEvents\8223ec89-c107-45fb-b878-4e865fb1bdab -> Keine Datei <==== ACHTUNG
Task: {27092FBB-A498-4CFF-9BDD-41D4CF94A79A} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1612800 2026-01-23] (Adobe Inc. -> Adobe Inc.)
Task: {D6D8987E-90D7-40A3-AA1A-AD9B5327F061} - System32\Tasks\DropboxSystem\DropboxUpdater\DropboxUpdaterTaskSystem123.0.6299.144{6B9C63A8-7283-4B6A-9029-AB0419EEEB9C} => C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
Task: {AE306866-ADF2-4844-864B-E55685BA6CCA} - System32\Tasks\FinanzManager\Umsatzabruf FinanzManager für Datei 36ab7437-0005c016-43a7-6688-24d2-abcd => C:\Program Files (x86)\Lexware\Finanzmanager\2022\QW.EXE  -> "E:\OneDrive\Dokumente\Lexware\FinanzManager\QDATA1.QDF" /S /X
Task: {B29F920F-33DC-48B5-BC5E-3281EAF44A8B} - System32\Tasks\HPPSDrTelemetryWatch => C:\Program Files (x86)\HP\Diagnostics\TelemetryWatch\PSDrTelemetryWatch.exe [35360 2024-02-07] (HP Inc. -> )
Task: {8EE7474F-22C5-4A0D-8F6A-3DBA6797CA6C} - System32\Tasks\JumpingBytes\PureSyncElvralfk => "C:\Program Files (x86)\Jumping Bytes\PureSync\PureSyncHelper.exe"  exit (Keine Datei)
Task: {7896E7A9-F24A-470F-A351-B05AAF885581} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {C3FEF8D7-AF10-4676-9354-1AD66F5B3AA5} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {F37410C8-7365-41DC-9D44-303A17247799} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2025-09-10] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {859C98C1-32DC-4AA8-AF9C-5803C96461D4} - System32\Tasks\Lenovo\Power Manager\Background monitor => C:\WINDOWS\SysWOW64\Lenovo\PowerMgr\PowerMgr.exe [130488 2025-11-09] (Lenovo -> Lenovo)
Task: {032A99E6-9E2B-4545-A1F2-5C64D590000F} - System32\Tasks\Lenovo\Power Manager\Uninstall task => C:\WINDOWS\SysWOW64\PowerMgrInst.exe [67512 2025-11-09] (Lenovo -> )
Task: {E1CAFB1A-8462-45B1-BFCA-9AC7EDE4224B} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {9EA762D2-8015-43E5-82C2-F5B2EEA1757F} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [91048 2025-10-19] (Lenovo -> Lenovo Group Ltd.) -> C:\windows\system32\drivers\Lenovo\udc\Service\/onidle
Task: {297209FF-646E-45D8-9891-876273FE5959} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {CEFDEF94-161F-409D-A6BE-E05D61E70DFD} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {77230328-3059-4950-A88B-EFBBFA0F6D1C} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [246160 2025-10-19] (Lenovo -> Lenovo Group Ltd.)
Task: {EA710239-CC65-4046-B5A9-11E77FD8AB8B} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {140B9096-5D37-4F76-823E-9542511F06A6} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {A17742B7-078E-413F-B60A-77E48598CE9D} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {81A1ACC8-C350-4B94-A94D-D76A8F63D323} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {ABED6B60-481C-475A-84F2-164D8B9A8911} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {44F8137E-C0B7-42D2-9650-8B2F60FB3F6F} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {7659B643-7D04-48E1-AB33-45D95FDB0C0B} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {40986539-CE48-4B39-84FB-F8259ABE4698} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.SScanAndFix => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {94C9CFBA-234B-402F-A1D5-4E7C77A7FCAC} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {345F749E-8BA2-476C-9B58-C897D160C94C} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {BC9F2AF0-461C-406D-8D44-C8430B3AF4CE} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {3734A681-A853-47E2-BB49-3CC4C710FC2A} - System32\Tasks\Lenovo\Vantage\Schedule\NotificationCenter => C:\Program Files (x86)\Lenovo\VantageService\3.13.72.0\ScheduleEventAction.exe  NotificationCenter (Keine Datei)
Task: {A7FD663F-3DDA-4D43-B237-E5AF1130F751} - System32\Tasks\Lenovo\Vantage\Schedule\SmartLock.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {9CB54AC9-30CE-4685-B1C1-F68D77FEE8E0} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {401A9797-3B13-4B44-9BFC-7299D8D70F3B} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {AC7EFD09-6B2C-479A-BDF4-BA48DAD6B16C} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.22\x86\IdleScheduleEventAction.exe [173536 2026-02-10] (Lenovo -> )
Task: {F94F6EE2-DD2B-4667-8589-ABB03DDEE1E7} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\ScheduleEventAction.exe [276032 2026-01-30] (Lenovo -> Lenovo)
Task: {4A8D6C11-4AD8-4170-A2D0-2546CF959ED4} - System32\Tasks\Lenovo\Vantage\StartupFixPlan => C:\Program Files (x86)\Lenovo\VantageService\4.2.24.0\\uninstall.exe  /repair (Keine Datei)
Task: {75EE7971-F166-4244-9D83-677FBEE7C229} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16298792 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {00872401-6AFA-47CA-B4F4-C371843AC6A9} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28603712 2026-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {F35E3144-83F8-4037-A59B-31B83FFE6DA5} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73560 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {BED70D13-D783-4480-B2F5-E906A0AE4A89} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28603712 2026-02-05] (Microsoft Corporation -> Microsoft Corporation)
Task: {899AA3D5-B02E-47DE-9833-2D614FB829E7} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427808 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {6B5BF02C-1FD7-4B68-800B-205113D37BA3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427808 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {43B3402F-41E9-42D2-8D27-399D4F3D7B5D} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1349912 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {372C37EB-3C87-4388-AB52-77A1F2A255E5} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16298792 2026-02-09] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {7A8EE354-3ACC-40E1-BC14-9DE238E304FD} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC RebootDialog (Keine Datei)
Task: {2735BF7E-81B0-4BA1-847A-2B6A17883C6B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery RebootDialog (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {1A178331-D665-40B2-82A5-1EE04CCB93A8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3943033893-2207473497-676883496-1001 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [680064 2026-02-13] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {455AFA1A-470A-47A4-BF72-CA04298B57BC} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34944 2026-02-13] (Mozilla Corporation -> Mozilla Foundation)
Task: {0AB90487-8458-4A00-9211-CC455D5B5D2D} - System32\Tasks\Norton\Norton 360 Patcher => C:\Program Files\Common Files\Norton\Icarus\norton-suite\icarus.exe [9507552 2026-01-27] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {E17B60F1-DD11-4D68-AE3B-A8E01538C4AA} - System32\Tasks\Norton\Overseer => C:\Program Files\Common Files\Norton\Overseer\overseer.exe [2979552 2025-10-21] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {EAA0E0A7-E3F8-4831-AEFA-D3A4C82A4C2B} - System32\Tasks\Norton\Suite Emergency Update => C:\Program Files\Norton\Suite\AvEmUpdate.exe [5625000 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
Task: {A36070B7-94C0-4D92-BE2A-BA7CF33F83D1} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4393320 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {93D8C902-355E-4F50-888A-7E4849759671} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3943033893-2207473497-676883496-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4393320 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {3BD50297-ADF6-4EA9-8BB4-8603EAC16E2F} - System32\Tasks\OneDrive Startup Task-S-1-5-21-3943033893-2207473497-676883496-1001 => C:\Program Files\Microsoft OneDrive\26.017.0126.0002\OneDriveLauncher.exe [746384 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {64A094B2-360D-42FD-BEF7-1DB79E71293E} - System32\Tasks\Opera scheduled assistant Autoupdate 1680692182 => C:\Users\ralfk\AppData\Local\Programs\Opera\launcher.exe  -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\ralfk\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {FF287889-0971-4658-AF96-F635AC1136D2} - System32\Tasks\Opera scheduled Autoupdate 1680692176 => C:\Users\ralfk\AppData\Local\Programs\Opera\launcher.exe  --scheduledautoupdate $(Arg0) (Keine Datei)
Task: {13484011-35C6-48A2-9A59-6178B0552E20} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_bbb0597391852f64\RtkAudUService64.exe [3495904 2022-05-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {5005FC40-4F01-4BBD-B708-ED7AB95F912B} - System32\Tasks\ZoomUpdateTaskUser-S-1-5-21-3943033893-2207473497-676883496-1001 => C:\Users\ralfk\AppData\Roaming\Zoom\bin\Zoom.exe [462768 2025-11-26] (Zoom Video Communications, Inc. -> Zoom Communications, Inc.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2a0c613a-8aaf-4580-bb39-18bbeeadc06c}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2a0c613a-8aaf-4580-bb39-18bbeeadc06c}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{51c9b065-6ea0-4747-97fa-7fad81f08be0}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{51c9b065-6ea0-4747-97fa-7fad81f08be0}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{aba9bf17-7525-46c0-8078-f535f5b82cdc}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{d277d54b-0627-4f83-9864-56c9de01bcf5}: [DhcpNameServer] 172.20.10.1

FireFox:
========
FF DefaultProfile: o92973nl.default-release-1771764146922 -> 308046B0AF4A39CB
FF DefaultProfile: ioypjfnh.default-release-1-1760802809486 -> 368329B7A5AE0CE7
FF ProfilePath: C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\ioypjfnh.default-release-1-1760802809486 [2026-02-22]
FF Extension: (Language: Deutsch (German)) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\ioypjfnh.default-release-1-1760802809486\Extensions\langpack-de@firefox.mozilla.org.xpi [2026-02-20]
FF Extension: (New Tab) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\ioypjfnh.default-release-1-1760802809486\Extensions\newtab@mozilla.org.xpi [2026-02-21]
FF ProfilePath: C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\upwd5hfw.default [2021-11-01]
FF user.js: detected! => C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\upwd5hfw.default\user.js [2025-07-25]
FF ProfilePath: C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922 [2026-02-22]
FF Homepage: Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922 -> hxxp://www.t-online.de/
FF Extension: (Cisco Webex Extension) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\ciscowebexstart1@cisco.com.xpi [2026-02-22]
FF Extension: (iCloud-Lesezeichen) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\firefoxdav@icloud.com.xpi [2026-02-22]
FF Extension: (ProxTube) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\ich@maltegoetz.de.xpi [2026-02-22]
FF Extension: (New Tab) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\newtab@mozilla.org.xpi [2026-02-22]
FF Extension: (Firefox Relay) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\private-relay@firefox.com.xpi [2026-02-22]
FF Extension: (Malwarebytes Browser Guard) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{242af0bb-db11-4734-b7a0-61cb8a9b20fb}.xpi [2026-02-22]
FF Extension: (Purpling bubbles) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{69ab6730-1a1a-4d27-8aa4-f27a0e5f2de8}.xpi [2026-02-22]
FF Extension: (SecureSafe Password Manager) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{8d652add-7944-4a08-865c-53313531e463}.xpi [2026-02-22]
FF Extension: (Video DownloadHelper) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2026-02-22]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2026-02-22]
FF Extension: (DownThemAll!) - C:\Users\ralfk\AppData\Roaming\Mozilla\Firefox\Profiles\o92973nl.default-release-1771764146922\Extensions\{DDC359D1-844A-42a7-9AA1-88A850A938A8}.xpi [2026-02-22]
FF HKLM\...\Firefox\Extensions: [sweb2pdfextension.4@kofax.com] - C:\Program Files (x86)\Kofax\Power PDF 41\bin\SFirefoxExtn\kofax_pdf_create_40-1.0.0.14-fx.xpi
FF Extension: (Kofax PDF Create) - C:\Program Files (x86)\Kofax\Power PDF 41\bin\SFirefoxExtn\kofax_pdf_create_40-1.0.0.14-fx.xpi [2021-03-26]
FF HKLM-x32\...\Firefox\Extensions: [sweb2pdfextension.4@kofax.com] - C:\Program Files (x86)\Kofax\Power PDF 41\bin\SFirefoxExtn\kofax_pdf_create_40-1.0.0.14-fx.xpi
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-12-19] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2026-02-17] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @google.com/zxwebplugin -> C:\WINDOWS\system32\npzxwebplugin.dll [Keine Datei]
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-3943033893-2207473497-676883496-1001: www.wansview.com/HYPlayer -> C:\Program Files (x86)\HYPlayer\npHYPlayer.dll [2016-06-02] (IPC) [Datei ist nicht signiert]

Edge: 
=======
Edge Profile: C:\Users\ralfk\AppData\Local\Microsoft\Edge\User Data\Default [2026-02-22]
Edge HomePage: Default -> hxxp://www.msn.com/?pc=LCTE
Edge Extension: (Google Docs Offline) - C:\Users\ralfk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-11-27]
Edge Extension: (Edge relevant text changes) - C:\Users\ralfk\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-01]
Edge HKLM-x32\...\Edge\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [180216 2026-01-23] (Adobe Inc. -> Adobe Inc.)
R2 Agent; C:\Program Files\Agent\Agent.exe [216840 2024-07-13] (DEVELOPER IN A BOX -> Developerinabox)
R2 APC Data Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\dataserv.exe [14256 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
R2 APC UPS Service; C:\Program Files (x86)\APC\PowerChute Personal Edition\mainserv.exe [4261808 2019-06-07] (Schneider Electric -> Schneider Electric) [Datei ist nicht signiert]
S3 BrYNSvc; C:\Program Files (x86)\Browny02\BrYNSvc.exe [321536 2022-01-26] (Brother Industries, Ltd.) [Datei ist nicht signiert]
R2 cjpcsc; C:\Windows\SysWOW64\cjpcsc.exe [619464 2020-07-27] (Reiner Kartengeraete GmbH und Co.KG -> REINER SCT)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13269816 2026-02-05] (Microsoft Corporation -> Microsoft Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\System32\DbxSvc.exe [59048 2026-02-09] (Dropbox, Inc -> Dropbox, Inc.)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_2d3e2e42e0f8523f\DAX3API.exe [2549352 2024-08-16] (Dolby Laboratories, Inc. -> Dolby Laboratories)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\241.4.4853\DropboxElevationService.exe [1659336 2026-02-09] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterInternalService123.0.6299.144; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterService123.0.6299.144; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.144\updater.exe [5898168 2025-12-16] (Dropbox, Inc -> Dropbox, Inc.)
R2 DYMOConnectPnPService; C:\Program Files (x86)\DYMO\DYMO Connect\PnpService\DYMO.Connect.PnP.Service.exe [1706669 2025-06-17] () [Datei ist nicht signiert]
R2 Emc.Captiva.WebCaptureService; C:\Program Files (x86)\EMC Captiva\Captiva Cloud Runtime\Emc.Captiva.WebCaptureService.exe [46400 2013-03-25] (EMC Corporation -> EMC Corporation)
R3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\26.017.0126.0002\FileSyncHelper.exe [3618152 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [479656 2022-08-07] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [244232 2026-01-26] (HP Inc. -> HP Inc.)
R2 IBMPMSVC; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmsvc.exe [1067920 2025-10-27] (Lenovo -> Lenovo)
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S4 LenovoBrightCtrl; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\BrightnessControl.exe [157008 2025-02-26] (Lenovo -> Lenovo.)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2601.20.0\LenovoVantageService.exe [34368 2026-01-30] (Lenovo -> Lenovo)
R2 Lexware_Update_Service; C:\Program Files (x86)\Lexware\Update Service\Hmg.InstallationService.Service.exe [84328 2025-04-01] (Haufe-Lexware GmbH & Co. KG -> Haufe-Lexware GmbH & Co. KG)
R2 LITSSVC; C:\WINDOWS\System32\DriverStore\FileRepository\litsdrv.inf_amd64_0fefde8b58482d0b\x64\LITSSvc.exe [1143640 2025-02-26] (Lenovo -> Lenovo.)
S2 LPlatSvc; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\LPlatSvc.exe [895888 2025-10-27] (Lenovo -> Lenovo)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11247960 2026-02-02] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-03-05] (Malwarebytes Inc. -> Malwarebytes)
R3 nllbIDSAgent; C:\Program Files\Norton\Suite\aswidsagent.exe [8105128 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 Norton Antivirus; C:\Program Files\Norton\Suite\NortonSvc.exe [1041064 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 Norton Firewall; C:\Program Files\Norton\Suite\afwServ.exe [2639016 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 Norton Tools; C:\Program Files\Norton\Suite\nllToolsSvc.exe [1094312 2026-02-16] (Gen Digital Inc. -> Gen Digital Inc.)
R2 NortonWscReporter; C:\Program Files\Norton\Suite\wsc_proxy.exe [76552 2025-05-22] (NortonLifeLock Inc. -> NortonLifeLock Inc.)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\26.017.0126.0002\OneDriveUpdaterService.exe [3912552 2026-02-18] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [803088 2025-11-12] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 TPHKLOAD; C:\WINDOWS\System32\DriverStore\FileRepository\fn.inf_amd64_4ad9b0573b01a792\driver\TPHKLOAD.exe [315560 2025-11-30] (Lenovo -> Lenovo)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72616 2025-10-19] (Lenovo -> Lenovo Group Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [4414464 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [282480 2025-12-10] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [25584 2023-11-24] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0408387.inf_amd64_b7529bf6e91141f0\B406011\amdkmdag.sys [106394920 2024-10-10] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
S3 cjusb; C:\WINDOWS\System32\drivers\cjusb.sys [43224 2017-03-28] (REINER Kartengeraete GmbH & Co. KG -> REINER SCT)
S3 CSRBC; C:\WINDOWS\System32\Drivers\csrbc.sys [46384 2021-05-11] (Sena Technologies, Inc. -> CSR plc.)
S3 CYUSB3; C:\WINDOWS\System32\Drivers\CYUSB3.sys [57912 2021-12-23] (WDKTestCert FlyX,132817871662226341 -> Cypress Semiconductor)
R3 IBMPMDRV; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\ibmpmdrv.sys [56720 2025-10-27] (Lenovo -> Lenovo)
R0 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234600 2026-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-03-08] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [214632 2026-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-02] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 Netaapl; C:\WINDOWS\System32\drivers\netaapl64.sys [32352 2017-11-28] (Microsoft Windows Hardware Compatibility Publisher -> Apple Inc.)
R0 nllArDisk; C:\WINDOWS\System32\drivers\nllArDisk.sys [21088 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllArPot; C:\WINDOWS\System32\drivers\nllArPot.sys [286816 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllbidsdriver; C:\WINDOWS\System32\drivers\nllbidsdriver.sys [435808 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 nllbidsh; C:\WINDOWS\System32\drivers\nllbidsh.sys [304736 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 nllbuniv; C:\WINDOWS\System32\drivers\nllbuniv.sys [88160 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 nllElam; C:\WINDOWS\System32\drivers\nllElam.sys [29144 2025-08-11] (Microsoft Windows Early Launch Anti-Malware Publisher -> Gen Digital Inc.)
R1 nllKbd; C:\WINDOWS\System32\drivers\nllKbd.sys [32864 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllMonFlt; C:\WINDOWS\System32\drivers\nllMonFlt.sys [289888 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllNetHub; C:\WINDOWS\System32\drivers\nllNetHub.sys [586336 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllRdr; C:\WINDOWS\System32\drivers\nllRdr2.sys [97376 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 nllRvrt; C:\WINDOWS\System32\drivers\nllRvrt.sys [73312 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllSnx; C:\WINDOWS\System32\drivers\nllSnx.sys [898656 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 nllSP; C:\WINDOWS\System32\drivers\nllSP.sys [1315424 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 nllStm; C:\WINDOWS\System32\drivers\nllStm.sys [231008 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 nllVmm; C:\WINDOWS\System32\drivers\nllVmm.sys [404064 2026-02-16] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 PMDRVS; C:\WINDOWS\System32\DriverStore\FileRepository\ibmpmdrv.inf_amd64_ce00423f6224d769\x64\pmdrvs.sys [42384 2025-10-27] (Lenovo -> Lenovo)
R3 rtu53cx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx22x64.inf_amd64_1ee4faae43c39815\rtu53cx22x64.sys [1166376 2026-01-29] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 usbaud; C:\WINDOWS\System32\drivers\usbaud64w10.sys [99672 2020-09-23] (Synaptics Incorporated -> Synaptics Inc.)
S3 usbser; C:\Windows\SysWOW64\drivers\usbser.sys [26112 2013-07-04] (Microsoft Corporation) [Datei ist nicht signiert]
S3 vl810filter; C:\WINDOWS\System32\Drivers\vl810filter.sys [26176 2019-05-07] (VIA TECHNOLOGIES, INC. -> VIA Labs, Inc.)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [20880 2025-12-10] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [627104 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [102816 2025-12-10] (Microsoft Windows -> Microsoft Corporation)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-03-17] (Microsoft Windows -> Microsoft Corporation)
R3 WSDScan; C:\WINDOWS\System32\DriverStore\FileRepository\sti.inf_amd64_a6dc64e436f22951\WSDScan.sys [61440 2025-09-10] (Microsoft Windows -> Microsoft Corporation)
U3 FamilySvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-02-22 14:16 - 2026-02-22 14:22 - 000000000 ____D C:\FRST
2026-02-22 13:49 - 2026-02-22 13:49 - 000746904 _____ C:\WINDOWS\system32\perfh007.dat
2026-02-22 13:49 - 2026-02-22 13:49 - 000158970 _____ C:\WINDOWS\system32\perfc007.dat
2026-02-22 13:42 - 2026-02-22 13:42 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox Privater Modus.lnk
2026-02-22 13:42 - 2026-02-22 13:42 - 000001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-02-22 13:42 - 2026-02-22 13:42 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-02-22 13:42 - 2026-02-22 13:42 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-02-22 13:42 - 2026-02-22 13:42 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-02-22 13:41 - 2026-02-22 13:41 - 000383792 _____ (Mozilla) C:\Users\ralfk\Downloads\Firefox Installer (4).exe
2026-02-22 13:12 - 2026-02-22 13:17 - 000000000 ___HD C:\$SysReset
2026-02-22 13:10 - 2026-02-22 13:10 - 002132888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-02-21 13:01 - 2026-02-16 12:12 - 000323752 _____ (Gen Digital Inc.) C:\WINDOWS\system32\nllBoot.exe
2026-02-20 21:22 - 2026-02-20 21:22 - 000383792 _____ (Mozilla) C:\Users\ralfk\Downloads\Firefox Installer (3).exe
2026-02-20 21:21 - 2026-02-20 21:21 - 000383792 _____ (Mozilla) C:\Users\ralfk\Downloads\Firefox Installer (2).exe
2026-02-20 20:28 - 2026-02-20 20:28 - 000383792 _____ (Mozilla) C:\Users\ralfk\Downloads\Firefox Installer (1).exe
2026-02-20 19:53 - 2026-02-20 19:53 - 000383792 _____ (Mozilla) C:\Users\ralfk\Downloads\Firefox Installer.exe
2026-02-17 19:24 - 2026-02-17 19:24 - 000020148 _____ C:\Users\ralfk\Downloads\GVP_SE_Strafkammern_2025.pdf
2026-02-17 19:22 - 2026-02-17 19:22 - 000952984 _____ C:\Users\ralfk\Downloads\GVP_LG_Hannover_2025.pdf
2026-02-17 11:46 - 2026-02-22 12:45 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-02-17 11:30 - 2026-02-17 11:30 - 000539054 _____ C:\Users\ralfk\Downloads\pachtvertrag_muster_kostenlos_.pdf
2026-02-17 11:29 - 2026-02-17 11:29 - 000149543 _____ C:\Users\ralfk\Downloads\Anlage_Pachtvertrag.pdf
2026-02-17 11:25 - 2026-02-17 11:25 - 000027735 _____ C:\Users\ralfk\Downloads\Landpachtvertrag_fuer_Einzelgrundstuecke.pdf
2026-02-16 13:03 - 2026-02-16 13:03 - 000338136 _____ C:\Users\ralfk\Downloads\2026-01-05 Organisationsplan der LWK Niedersachsen Stand 05.01.2026.pdf
2026-02-14 19:46 - 2026-02-14 19:46 - 000593097 _____ C:\Users\ralfk\Downloads\Ackerdokumentation.pdf
2026-02-14 19:38 - 2026-02-14 19:38 - 000101892 _____ C:\Users\ralfk\Downloads\2021-03-15-APB-2021-Streubesitz.pdf
2026-02-14 19:37 - 2026-02-14 19:37 - 000011352 _____ C:\Users\ralfk\Downloads\Musterbrief_Beispiel_2.pdf
2026-02-12 15:19 - 2026-02-12 15:19 - 000018786 _____ C:\Users\ralfk\Downloads\Buchungsliste.csv
2026-02-12 14:16 - 2026-02-12 14:16 - 000026735 _____ C:\Users\ralfk\Downloads\Umsaetze_DE58255914133160528100_2026.02.01.csv
2026-02-12 13:54 - 2026-02-12 13:54 - 000025141 _____ C:\Users\ralfk\Downloads\Umsaetze_DE58255914133160528100_2025.12.31.csv
2026-02-11 21:51 - 2026-02-11 21:51 - 000000000 ____D C:\WINDOWS\system32\braille-tables
2026-02-11 16:26 - 2026-02-11 16:26 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2026-02-11 16:25 - 2026-02-09 13:01 - 000059048 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2026-02-10 15:53 - 2026-02-10 15:53 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-02-09 21:13 - 2026-02-09 21:13 - 009292537 _____ C:\Users\ralfk\Downloads\Umschau Garbsen_07.02.2026.pdf
2026-02-09 15:29 - 2026-02-09 15:29 - 118791667 _____ C:\Users\ralfk\Downloads\impdata2024.csv
2026-02-09 14:42 - 2026-02-09 14:42 - 005141824 _____ C:\Users\ralfk\Downloads\Techem_Download_Dokumente(1).zip
2026-02-09 14:40 - 2026-02-09 14:40 - 001354304 _____ C:\Users\ralfk\Downloads\Techem_Download_Dokumente.zip
2026-02-08 18:43 - 2026-02-08 18:43 - 000745121 _____ C:\Users\ralfk\Downloads\Karten Mario Barth.pdf
2026-02-06 12:09 - 2024-10-10 22:07 - 000977704 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000856872 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000856872 _____ C:\WINDOWS\system32\vulkaninfo.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000737600 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000737600 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000682320 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000667896 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000610728 _____ C:\WINDOWS\system32\GameManager64.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000549296 _____ C:\WINDOWS\system32\libsmi_guest.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000537384 _____ C:\WINDOWS\system32\atieah64.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000524696 _____ C:\WINDOWS\system32\libsmi_host.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000504112 _____ C:\WINDOWS\system32\EEURestart.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000473520 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000464280 _____ C:\WINDOWS\SysWOW64\GameManager32.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000406448 _____ C:\WINDOWS\SysWOW64\atieah32.exe
2026-02-06 12:09 - 2024-10-10 22:07 - 000267184 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atig6txx.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000229272 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atigktxx.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000211064 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\aticfx64.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000196504 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000184728 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000174952 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\aticfx32.dll
2026-02-06 12:09 - 2024-10-10 22:07 - 000148888 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 011757240 _____ C:\WINDOWS\system32\amdsmi.exe
2026-02-06 12:09 - 2024-10-10 22:06 - 004385224 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 004190104 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 002245416 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 002100552 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 001725920 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 001617816 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 001617816 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 001355504 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 001074808 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000943912 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000801600 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000771480 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000678696 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000570288 _____ C:\WINDOWS\system32\amdgfxinfo64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000545584 _____ C:\WINDOWS\system32\dgtrayicon.exe
2026-02-06 12:09 - 2024-10-10 22:06 - 000471360 _____ C:\WINDOWS\system32\amdlogum.exe
2026-02-06 12:09 - 2024-10-10 22:06 - 000434072 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000232688 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdihk64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000187856 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdihk32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000167544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000157536 _____ C:\WINDOWS\system32\atidxx64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000142768 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000139184 _____ C:\WINDOWS\system32\amdxc64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000138592 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000131144 _____ C:\WINDOWS\SysWOW64\atidxx32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000118576 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000115120 _____ C:\WINDOWS\SysWOW64\amdxc32.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000075184 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000051504 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2026-02-06 12:09 - 2024-10-10 22:06 - 000048424 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 105401160 _____ C:\WINDOWS\system32\amd_comgr.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 088606528 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 019434392 _____ (Advanced Micro Devices Inc.) C:\WINDOWS\system32\amdhip64.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 001400488 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000572312 _____ C:\WINDOWS\system32\amdmiracast.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000177984 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000177048 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000167528 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000152640 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000145808 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000138600 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll
2026-02-06 12:09 - 2024-10-10 22:05 - 000103368 _____ C:\WINDOWS\system32\clinfo.exe
2026-02-06 12:09 - 2024-10-10 21:30 - 109632368 _____ C:\WINDOWS\system32\amdxc64.so
2026-02-02 17:36 - 2026-02-19 20:21 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox Web-Apps
2026-01-28 19:04 - 2026-01-28 19:04 - 000001226 _____ C:\Users\ralfk\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Amazon Photos.lnk
2026-01-28 19:04 - 2026-01-28 19:04 - 000000000 ____D C:\Users\ralfk\AppData\Local\Amazon Drive

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-02-22 14:23 - 2021-06-19 16:22 - 000000000 ____D C:\ProgramData\TEMP
2026-02-22 14:12 - 2024-09-23 13:32 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Jabra Direct
2026-02-22 14:11 - 2021-12-24 13:37 - 000000000 ____D C:\Users\ralfk\AppData\Local\Norton
2026-02-22 13:49 - 2025-03-17 21:32 - 001729504 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-02-22 13:49 - 2024-04-01 08:24 - 000000000 ____D C:\WINDOWS\INF
2026-02-22 13:43 - 2022-02-10 10:05 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-02-22 13:18 - 2021-06-19 17:31 - 000000000 ____D C:\Users\ralfk\AppData\Local\CrashDumps
2026-02-22 13:16 - 2021-07-26 11:08 - 000000000 ____D C:\Users\ralfk\AppData\Local\Dropbox
2026-02-22 13:15 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-02-22 13:12 - 2024-02-11 14:30 - 000000000 ___RD C:\Users\ralfk\iCloudPhotos
2026-02-22 13:12 - 2024-02-11 14:30 - 000000000 ___RD C:\Users\ralfk\iCloudDrive
2026-02-22 13:12 - 2021-06-18 13:27 - 000000000 ____D C:\Users\ralfk\AppData\Local\D3DSCache
2026-02-22 13:11 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-02-22 13:11 - 2023-11-28 12:44 - 000000000 ___SD C:\Users\ralfk\MagentaCLOUD
2026-02-22 13:11 - 2023-11-28 10:15 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\MagentaCLOUD
2026-02-22 13:10 - 2025-03-17 21:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-02-22 13:10 - 2025-03-17 21:29 - 000016790 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-02-22 13:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2026-02-22 13:10 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-02-22 13:10 - 2024-04-01 08:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-02-22 13:10 - 2021-06-19 15:42 - 000000000 ____D C:\ProgramData\Norton
2026-02-22 13:10 - 2020-05-06 19:33 - 000012288 ___SH C:\DumpStack.log.tmp
2026-02-22 13:06 - 2024-04-01 08:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-02-22 12:29 - 2021-06-19 17:55 - 000000000 ____D C:\Users\ralfk\AppData\LocalLow\Temp
2026-02-22 11:58 - 2025-03-17 20:41 - 000000000 ____D C:\Users\ralfk
2026-02-22 11:58 - 2021-06-18 20:25 - 000000000 ____D C:\ProgramData\Package Cache
2026-02-22 11:37 - 2024-04-06 18:28 - 000000000 ____D C:\Users\ralfk\AppData\Local\Malwarebytes
2026-02-22 11:23 - 2021-04-14 10:00 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-02-22 11:17 - 2025-03-17 21:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-02-21 20:37 - 2025-03-17 18:37 - 000000000 ___DC C:\WINDOWS\Panther
2026-02-21 19:45 - 2021-07-26 11:08 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Dropbox
2026-02-21 19:44 - 2021-07-12 19:15 - 000000000 ____D C:\WINDOWS\TempInst
2026-02-21 18:00 - 2024-04-01 08:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-02-21 18:00 - 2021-06-18 13:44 - 000000000 ____D C:\ProgramData\Packages
2026-02-21 18:00 - 2021-06-18 13:27 - 000000000 ____D C:\Users\ralfk\AppData\Local\Packages
2026-02-21 14:02 - 2021-11-01 09:22 - 000001600 _____ C:\WINDOWS\storelibdebug.txt
2026-02-21 13:05 - 2025-05-22 11:06 - 000002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security.lnk
2026-02-21 13:05 - 2024-04-01 08:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-02-21 13:01 - 2025-05-22 11:05 - 000000000 ____D C:\WINDOWS\system32\Tasks\Norton
2026-02-20 21:25 - 2021-12-21 12:04 - 000000000 ____D C:\Program Files\net.downloadhelper.coapp
2026-02-20 21:18 - 2021-08-08 14:40 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2026-02-20 19:13 - 2022-04-04 11:46 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\JabraSDK
2026-02-20 18:53 - 2021-06-19 16:13 - 000000180 _____ C:\WINDOWS\setscan.ini
2026-02-19 20:38 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2026-02-19 20:38 - 2021-12-19 18:41 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\dvdcss
2026-02-18 20:53 - 2022-10-12 08:26 - 000002080 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2026-02-18 20:51 - 2025-03-17 21:34 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2026-02-18 20:48 - 2025-03-17 21:34 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3943033893-2207473497-676883496-1001
2026-02-18 20:48 - 2025-03-17 21:34 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-3943033893-2207473497-676883496-1001
2026-02-18 20:48 - 2025-03-17 21:34 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2026-02-18 20:48 - 2021-08-08 14:41 - 000002030 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-02-18 13:04 - 2021-06-18 16:54 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Microsoft\Word
2026-02-17 21:03 - 2021-06-18 20:06 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Microsoft\Excel
2026-02-17 10:29 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2026-02-16 14:22 - 2021-12-19 18:39 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\vlc
2026-02-16 12:34 - 2025-04-13 19:14 - 000000000 ____D C:\WINDOWS\Minidump
2026-02-16 12:12 - 2025-05-22 11:06 - 001315424 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllSP.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000898656 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllSnx.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000586336 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllNetHub.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000435808 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllbidsdriver.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000404064 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllVmm.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000304736 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllbidsh.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000289888 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllMonFlt.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000286816 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllArPot.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000097376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllRdr2.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000088160 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllbuniv.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000073312 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllRvrt.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000032864 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllKbd.sys
2026-02-16 12:12 - 2025-05-22 11:06 - 000021088 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\nllArDisk.sys
2026-02-15 15:18 - 2021-04-14 10:04 - 000000000 ____D C:\Program Files\Microsoft Office
2026-02-13 21:02 - 2021-06-18 20:26 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\DYMOConnect
2026-02-13 20:45 - 2021-06-18 14:39 - 000000000 ____D C:\Users\ralfk\AppData\Roaming\Microsoft\Office
2026-02-13 14:17 - 2025-03-17 21:34 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-02-13 14:17 - 2025-03-17 21:34 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-02-11 21:51 - 2025-12-10 20:23 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-02-11 21:51 - 2024-04-01 17:37 - 000000000 ____D C:\WINDOWS\InboxApps
2026-02-11 21:51 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-02-11 21:51 - 2024-04-01 17:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-02-11 21:51 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2026-02-11 21:51 - 2024-04-01 17:33 - 000000000 ____D C:\WINDOWS\system32\de
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\WUModels
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\UUS
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-02-11 21:51 - 2024-04-01 08:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-02-11 21:51 - 2024-04-01 08:21 - 000000000 ____D C:\WINDOWS\servicing
2026-02-11 18:51 - 2021-06-20 10:00 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-02-11 18:49 - 2021-06-20 10:00 - 221154392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-02-11 18:48 - 2024-04-01 08:26 - 001416664 _____ C:\WINDOWS\system32\vulkan-1.dll
2026-02-11 18:48 - 2024-04-01 08:26 - 001266136 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2026-02-11 17:46 - 2021-06-20 12:07 - 000000000 ____D C:\ProgramData\Lexware
2026-02-11 17:06 - 2025-03-17 21:30 - 003276288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-02-11 16:25 - 2021-07-26 11:08 - 000000000 ____D C:\Program Files (x86)\Dropbox
2026-02-06 11:30 - 2023-11-28 10:14 - 000001973 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MagentaCLOUD.lnk
2026-02-06 11:30 - 2023-11-28 10:14 - 000000000 ____D C:\Program Files\MagentaCLOUD
2026-02-02 13:25 - 2025-10-09 18:45 - 000234600 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys
2026-02-02 13:25 - 2021-11-09 13:19 - 000245864 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys
2026-01-28 19:47 - 2023-10-01 19:42 - 000004786 _____ C:\Users\ralfk\advanced_ip_scanner_MAC.bin
2026-01-28 19:47 - 2023-10-01 19:42 - 000000015 _____ C:\Users\ralfk\advanced_ip_scanner_Comments.bin
2026-01-28 19:47 - 2023-10-01 19:42 - 000000015 _____ C:\Users\ralfk\advanced_ip_scanner_Aliases.bin
2026-01-26 10:45 - 2025-03-17 21:34 - 000000000 ____D C:\WINDOWS\system32\Tasks\HP
2026-01-26 10:45 - 2022-02-08 15:26 - 000000000 ____D C:\Program Files\HPPrintScanDoctor

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2022-01-26 20:39 - 2022-01-26 20:39 - 000021368 _____ (Schneider Electric) C:\Users\ralfk\en_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000021368 _____ (Schneider Electric) C:\Users\ralfk\es_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000021880 _____ (Schneider Electric) C:\Users\ralfk\fr_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000021880 _____ (Schneider Electric) C:\Users\ralfk\grm_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000021368 _____ (Schneider Electric) C:\Users\ralfk\it_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000020344 _____ (Schneider Electric) C:\Users\ralfk\jp_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 001079808 _____ (Microsoft Corporation) C:\Users\ralfk\mfc80u.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000626688 _____ (Microsoft Corporation) C:\Users\ralfk\msvcr80.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 013923704 _____ (Schneider Electric) C:\Users\ralfk\PCPE Setup.exe
2022-01-26 20:39 - 2022-01-26 20:39 - 000021368 _____ (Schneider Electric) C:\Users\ralfk\pt_res.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000018808 _____ () C:\Users\ralfk\ResourceReader.dll
2022-01-26 20:39 - 2022-01-26 20:39 - 000020856 _____ (Schneider Electric) C:\Users\ralfk\ru_res.dll
2022-09-04 13:40 - 2022-09-04 13:40 - 008241144 _____ () C:\Users\ralfk\SenaBluetoothDeviceManagerForWindows-v4.3.5-setup_x64.exe
2022-01-26 20:39 - 2022-01-26 20:39 - 000019832 _____ (Schneider Electric) C:\Users\ralfk\zh_res.dll
2021-07-16 17:24 - 2021-07-16 17:24 - 000000017 _____ () C:\Users\ralfk\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================