Windows 11: PUP "Trojaner erkannt" Fenster rechts lassen sich nicht schließen

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 22-05-2026
durchgeführt von hduel (Administrator) auf LENOVO-YOGA-14S (LENOVO 21DM) (29-05-2026 13:11:46)
Gestartet von C:\Users\hduel\Downloads\FRST64.exe
Geladene Profile: hduel & IntelTelemetryAgent
Plattform: Microsoft Windows 11 Pro Version 25H2 26200.8524 (X64) Sprache: Englisch (Vereinigte Staaten) -> Deutsch (Deutschland)
Standard-Browser: Brave
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Brother Industries, Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\Brother\ControlCenter3\BrccMCtl.exe
(C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSATray.exe
(C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\LenovoSmartNote.exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericMessagingAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(GenericTelemetryAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(IdeaNotebookAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(SettingsWidgetAddin).exe
(C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantage-(VantageCoreAddin).exe
(C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\Intel Graphics Software\PresentMonService.exe
(C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe ->) (8F32EFB2-B494-4AEC-A27C-4B0736252363 -> Lenovo Limited Company) C:\Program Files\WindowsApps\E046963F.AIMeetingManager_3.1.18.0_x64__k1h2ywk1493x8\AIMeetingManager\AIMeetingManager.exe
(C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\FaceBeautify.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\McAfee\WebAdvisor\servicehost.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\uihost.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\TeamViewer\TeamViewer_Service.exe ->) (TeamViewer Germany GmbH -> ) C:\Program Files\TeamViewer\crashpad_handler.exe
(C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe ->) (Mega Limited -> ) C:\Users\hduel\AppData\Local\MEGAsync\mega-desktop-app-gfxworker.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost\Lenovo.Modern.ImController.PluginHost.Device.exe
(C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\PluginHost86\Lenovo.Modern.ImController.PluginHost.Device.exe <2>
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\AppProvisioningPlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\LenovoOobePlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> ) C:\ProgramData\Lenovo\Udc\Hosts\x64\MessagingPlugin.exe
(drivers\Lenovo\udc\Service\UDClientService.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDCUserAgent.exe
(DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\DAX3_S~1.INF\DAX3API.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_helper.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyCapsLKNumLK.exe
(DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\FnHotkeyUtility.exe
(explorer.exe ->) (AceBIT GmbH -> AceBIT) C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe
(explorer.exe ->) (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe
(explorer.exe ->) (Lenovo -> Lenovo Limited Company) C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe
(explorer.exe ->) (Mega Limited -> Mega Limited) C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE
(explorer.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\ooditray.exe
(explorer.exe ->) (Surfshark B.V. -> Surfshark) C:\Program Files\Surfshark\Surfshark.exe
(Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe
(Lenovo -> Lenovo) C:\ProgramData\Lenovo\Vantage\Addins\BatteryWidgetAddin\3.0.0.191\BatteryWidgetHost\BatteryWidgetHost.exe
(LNBITSSvc.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\AutoModeDetect.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <15>
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories) C:\Windows\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\SurSvc.exe
(services.exe ->) (Intel Corporation -> ) C:\Program Files\Intel\SUR\QUEENCREEK\x64\esrv_svc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\CollectorService\collector_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_92899f2b73e871b4\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_9d96bfc242ae9e60\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe
(services.exe ->) (Lenovo -> Lenovo Group Ltd.) C:\Windows\System32\drivers\Lenovo\udc\Service\UDClientService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\LNBITSSvc.exe
(services.exe ->) (Lenovo -> Lenovo) C:\Windows\System32\YMC.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (McAfee, LLC -> McAfee, LLC) C:\Program Files\McAfee\WebAdvisor\servicehost.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\ElevocControlService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe
(services.exe ->) (O&O Software GmbH -> O&O Software GmbH) C:\Program Files\OO Software\DiskImage\oodiag.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe <2>
(services.exe ->) (Shenzhen Goodix Technology Co., Ltd. -> Goodix) C:\Windows\System32\drivers\SessionService.exe
(services.exe ->) (Surfshark B.V. -> Surfshark.Service) C:\Program Files\Surfshark\Surfshark.Service.exe
(services.exe ->) (TeamViewer Germany GmbH -> TeamViewer Germany GmbH) C:\Program Files\TeamViewer\TeamViewer_Service.exe
(services.exe ->) (Wacom Co., Ltd. -> Wacom Technology, Corp.) C:\Windows\System32\DriverStore\FileRepository\wtabletserviceisd.inf_amd64_578c2abb4f6ab065\WTabletServiceISD.exe <2>
(sihost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> WhatsApp.Root) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2616.100.0_x64__cv1g1gvanyjgm\WhatsApp.Root.exe
(svchost.exe ->) (Lenovo -> ) C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.302.5.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vdsldr.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoUsoCoreWorker.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [AMMW] => C:\Program Files\Lenovo\Ai Meeting Manager Service\Ammbkproc.exe [706400 2021-12-20] (Lenovo -> Lenovo Limited Company)
HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_694a408c00c467d4\RtkAudUService64.exe [1631096 2022-12-21] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [OODITRAY.EXE] => C:\Program Files\OO Software\DiskImage\ooditray.exe [8060688 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
HKLM-x32\...\Run: [BrMfcWnd] => C:\Program Files (x86)\Brother\Brmfcmon\BrMfcWnd.exe [1163264 2012-09-25] () [Datei ist nicht signiert]
HKLM-x32\...\Run: [ControlCenter3] => C:\Program Files (x86)\Brother\ControlCenter3\brctrcen.exe [114688 2008-12-24] (Brother Industries, Ltd.) [Datei ist nicht signiert]
HKLM-x32\...\Run: [Intel® Graphics Software] => C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.exe [448688 2026-03-11] (Intel Corporation -> Intel Corporation)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [BraveSoftware Update] => C:\Users\hduel\AppData\Local\BraveSoftware\Update\1.3.361.151\BraveUpdateCore.exe [199696 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Password Depot] => C:\Program Files\AceBIT\Password Depot 16\PasswordDepot.exe [28077256 2022-11-24] (AceBIT GmbH -> AceBIT)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\...\Run: [Surfshark] => C:\Program Files\Surfshark\Surfshark.exe [282368 2026-05-27] (Surfshark B.V. -> Surfshark)
HKU\S-1-5-21-3382910964-3051966042-937846204-1005\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\WINDOWS\system32\Ribbons.scr [176128 2026-04-01] (Microsoft Windows -> Microsoft Corporation)
HKLM\...\Windows x64\Print Processors\OPLAPP3: C:\Windows\System32\spool\prtprocs\x64\OPLAPP3.dll [43520 2012-04-05] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\Common XP64 Language Monitor: C:\WINDOWS\system32\oppflm64.dll [24064 2020-12-03] (Microsoft Windows Hardware Compatibility Publisher -> Oki Electric Industry Co., Ltd.)
HKLM\...\Print\Monitors\Oki Common XP64 Language Monitor: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\...\Print\Monitors\Oki Language Monitor v2 x64: C:\WINDOWS\system32\OKLMON64.DLL [27648 2009-06-25] (Microsoft Windows Hardware Compatibility Publisher -> Oki Data Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{49210152-871f-4ffa-961d-a172abcbc09d}] -> C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\148.0.7778.179\Installer\chrmstp.exe [7621272 2026-05-22] (Google LLC -> Google LLC)
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MEGAsync.lnk [2025-06-29]
ShortcutTarget: MEGAsync.lnk -> C:\Users\hduel\AppData\Local\MEGAsync\MEGAsync.exe (Mega Limited -> Mega Limited)
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\sclhelper.lnk [2025-12-05] <==== ACHTUNG
ShortcutTarget: sclhelper.lnk -> C:\Users\hduel\AppData\Roaming\SYSCLEANER\sclhelper.exe (Esperanza Pte. Ltd. -> Esperanza Pte. Ltd.) <==== ACHTUNG
Startup: C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Send to OneNote.lnk [2026-02-19]
ShortcutTarget: Send to OneNote.lnk -> C:\Program Files\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {E31F6AF0-D6D1-4AB8-8488-31711197F848} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005Core{95A73FE5-3A6D-41D0-8E3F-B590EB9AAF6E} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {0EF163AE-3FD5-4384-AC90-A0F633DF7460} - System32\Tasks\BraveSoftwareUpdateTaskUserS-1-5-21-3382910964-3051966042-937846204-1005UA{B8135846-5CE9-4603-A139-CBEF16C146EE} => C:\Users\hduel\AppData\Local\BraveSoftware\Update\BraveUpdate.exe [167440 2025-04-02] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {F1394801-624A-471B-BCC8-432339027A75} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem149.0.7814.0{54E4157F-1202-4112-ACCE-B3BE9DB2EFE3} => C:\Program Files (x86)\Google\GoogleUpdater\149.0.7814.0\updater.exe [8770200 2026-04-28] (Google LLC -> Google LLC)
Task: {0156E26A-A5A4-4A5D-97D7-58DDE0D00D6B} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Daily => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
Task: {802FA72D-0076-4091-AFC3-3C1ACCBF21CC} - System32\Tasks\GoogleUserPEH\RunPlatformExperienceHelper_Metrics => C:\Program Files\Google\Chrome\Application\PlatformExperienceHelper\platform_experience_helper.exe [3995288 2026-05-21] (Google LLC -> Google LLC)
Task: {1FE94625-240B-4FFC-9CDB-A3E8F5A423D1} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Monitor => C:\WINDOWS\system32\ImController.InfInstaller.exe [94496 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {6B460D53-2DFE-4486-9634-FBF7EAB773ED} - System32\Tasks\Lenovo\ImController\Lenovo iM Controller Scheduled Maintenance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> START ImControllerService
Task: {062840A8-94BE-4809-99F8-CEC52FFCCBE4} - System32\Tasks\Lenovo\ImController\Plugins\LenovoSystemUpdatePlugin_WeeklyTask => C:\WINDOWS\System32\reg.exe [110592 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> add hklm\SOFTWARE\Lenovo\SystemUpdatePlugin\scheduler /v start /t reg_dword /d 1 /f /reg:32
Task: {A2BA731F-847B-4154-B999-EEC6C38828A2} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\716a16a1-5006-498b-95a4-cd3d08007a19 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {5B7481B4-5634-4314-9BA0-61D0ECD33497} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\94f9125b-4199-4acb-8652-e060a3d414de => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {8B456EA8-49C8-4BF5-B05A-67C94C10F423} - System32\Tasks\Lenovo\ImController\TimeBasedEvents\a859f106-2531-482f-bd1b-9d325494c4a0 => C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
Task: {6CDD40FB-DA8E-4B68-9190-F922F2A2DC14} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [94032 2026-04-29] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {5251F79A-2C55-459B-B84C-65ECF5750B08} - System32\Tasks\Lenovo\LenovoNowLauncher => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.exe [468448 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\/task
Task: {C5B46F4C-4F48-48BA-AD98-05812D410AB8} - System32\Tasks\Lenovo\LenovoNowQuarterlyLaunch => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo)
Task: {DAA9FEF2-C810-4050-806F-740E65881B17} - System32\Tasks\Lenovo\LenovoNowTask => C:\Program Files (x86)\Lenovo\LenovoNow\x86\LenovoNow.Task.exe [471520 2026-03-10] (Lenovo -> Lenovo) -> C:\Program Files (x86)\Lenovo\LenovoNow\x86\$(EventData)
Task: {1404CD9B-D544-418A-8D7D-94DAE2A2046B} - System32\Tasks\Lenovo\UDC\Lenovo UDC Diagnostic Scan => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 210
Task: {65D0A3A3-A246-45C7-8B82-095DE378CAD3} - System32\Tasks\Lenovo\UDC\Lenovo UDC Idle Monitor => C:\windows\system32\drivers\Lenovo\udc\Service\UDCUserAgent.exe [91024 2026-04-01] (Lenovo -> Lenovo Group Ltd.) -> C:\windows\system32\drivers\Lenovo\udc\Service\/onidle
Task: {CD43D809-C72D-4013-9817-7BBC8A652E90} - System32\Tasks\Lenovo\UDC\Lenovo UDC Lazy Deployment => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 221
Task: {C815B070-B8D1-4072-850B-8D742FF5D276} - System32\Tasks\Lenovo\UDC\Lenovo UDC Maintainance Task => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> control udcservice 220
Task: {7BA1380E-5377-4D9D-B6B1-349FCD901047} - System32\Tasks\Lenovo\UDC\Lenovo UDC Monitor => C:\WINDOWS\system32\drivers\lenovo\udc\data\InfBackup\UdcInfInstaller.exe [257936 2026-04-01] (Lenovo -> Lenovo Group Ltd.)
Task: {20CC96F8-0E2C-48A4-95CC-58198B2BDA49} - System32\Tasks\Lenovo\Vantage\Lenovo.Vantage.ServiceMaintainance => C:\WINDOWS\system32\sc.exe [102400 2025-07-09] (Microsoft Windows -> Microsoft Corporation) -> start LenovoVantageService
Task: {B700FF21-9331-4A15-92AA-61B8CF2CE9D4} - System32\Tasks\Lenovo\Vantage\Schedule\BatteryGaugeAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {23125073-12AC-42FC-A10F-4644168B40BF} - System32\Tasks\Lenovo\Vantage\Schedule\ConsumerAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {93160EAE-9B6B-4422-AC27-F5CC4168C37A} - System32\Tasks\Lenovo\Vantage\Schedule\DailyTelemetryTransmission => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {4CD0C5B1-6276-4CB7-B960-5B36952603A3} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {0709AF7C-51A5-4578-B304-1009BC72171E} - System32\Tasks\Lenovo\Vantage\Schedule\GenericMessagingAddin_Pulsation => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {D056AD18-32EB-41B3-920C-E6A03B1AC347} - System32\Tasks\Lenovo\Vantage\Schedule\HeartbeatAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {529412F0-792D-4C22-B5E1-7714DB5EFB75} - System32\Tasks\Lenovo\Vantage\Schedule\IdeaNotebookAddinDailyEvent => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {051A35F9-C1F4-40CB-A59F-E84C02D82423} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.MonthlyReport => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {E9AF3537-6AEA-4E28-BD90-362DAA523483} - System32\Tasks\Lenovo\Vantage\Schedule\Lenovo.Vantage.SmartPerformance.SScan => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {CC0CCEEE-3731-4C16-B27A-C70BD5845CDE} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoBatteryPartSalesMonthlyToast => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {D0F92AC3-8FBC-4D45-9A8E-47C9585B4F64} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoCompanionAppAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {ECB4BE4E-FC6E-4808-8F24-30028A8AEFFF} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSupportHealthReportSchedule => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {A7A7F4EA-8EF1-4D85-AFFC-0F57CAAE6CA8} - System32\Tasks\Lenovo\Vantage\Schedule\LenovoSystemUpdateAddin_WeeklyTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {FE3388D3-ED57-4DD1-AA07-BE4AECD8F4FF} - System32\Tasks\Lenovo\Vantage\Schedule\SettingsWidgetAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {189158B1-9094-4B23-9AB6-14C645B18B0B} - System32\Tasks\Lenovo\Vantage\Schedule\SmartLock.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {8FA97119-B992-44A8-BE06-18F3F20684B4} - System32\Tasks\Lenovo\Vantage\Schedule\SmartPerformance.ExpireReminder => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {CE6CE30F-C612-4B79-A7AE-74492E17AABA} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinDailyScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {0FB32116-56A8-4179-A428-BB4BCFC95323} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinIdleScheduleTask => C:\ProgramData\Lenovo\Vantage\Addins\VantageCoreAddin\1.1.0.32\x86\IdleScheduleEventAction.exe [173536 2026-05-22] (Lenovo -> )
Task: {88669291-5FC5-428E-BE74-9ED5133E84D5} - System32\Tasks\Lenovo\Vantage\Schedule\VantageCoreAddinWeekScheduleTask => C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\ScheduleEventAction.exe [276032 2026-05-20] (Lenovo -> Lenovo)
Task: {FEC6AAF2-EA2A-415E-BC24-A1B21FCE763E} - System32\Tasks\LSNUpdater => C:\Program Files (x86)\Lenovo\Smart Note\LSNUpdater.exe [33120 2021-12-10] (Lenovo -> )
Task: {6C2ADB0C-F4B3-4FFB-A8D8-CEBFF8F408A7} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-3382910964-3051966042-937846204-1005 => C:\Users\hduel\AppData\Local\MEGAsync\MEGAupdater.exe [1951760 2026-05-22] (Mega Limited -> )
Task: {C4F7482A-A723-4205-9FCB-DE3B237945A2} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {2B66F825-1C99-4ADB-B427-846628007389} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3895FD3E-3A75-4F57-B136-673D370B6BE3} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [73648 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {1ABB98FC-E12E-4418-B962-4BFC6064170F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28550040 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {B0D46D4E-1B88-4B15-863F-26FB29450DC5} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {271A2A7B-5263-48DC-AA7D-582E546C4946} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [426784 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {254EDEFB-4551-4F8A-8B8B-1D83FA4C14C0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1366888 2026-04-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {FB5E746C-7B23-46CE-B1ED-CDAA2FBD86CD} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16381224 2026-05-17] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (Keine Datei)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {0B589E44-3D4E-4664-BF5A-76D7CEE9474B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {564C5811-BFF6-4622-AC65-2D8AEE76A0C4} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3519DCDB-5367-4E38-97A0-3497B48116F2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F09D853D-9F64-4B58-A038-BC4B89EF81E5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpCmdRun.exe [1794752 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B4DA6A4D-1B55-483F-A1AF-11EFF827FEA8} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-3382910964-3051966042-937846204-1005 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [705152 2026-05-27] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (Der Dateneintrag hat 6 weitere Zeichen).
Task: {20C9EBDA-94CF-4806-8C26-AA7B80AF3CAB} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [33920 2026-05-27] (Mozilla Corporation -> Mozilla Foundation)
Task: {55D2B620-5917-42AC-8B15-25EA5ABEF66F} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {87D1556F-EE38-4D24-86D6-3D18C0DA83E5} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  /reporting (Keine Datei)
Task: {BF423E74-C1C5-428B-860D-04E742F13503} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-1001 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {390425A1-7A79-4BCC-A3E5-0D3A1102445E} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3382910964-3051966042-937846204-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Keine Datei)
Task: {85592341-D847-441F-8CDB-6CBFF560FBC9} - System32\Tasks\OO DiskImage {080533e5-4d27-4e0a-8db7-ad8feb1d7519} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {E9C8BAC3-D333-4929-A3DB-87284918F5AB} - System32\Tasks\OO DiskImage {087009a6-ffad-4f61-a03b-96ae987f3ad2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {80B3F13C-3094-485A-BBD8-1F76A6D7F875} - System32\Tasks\OO DiskImage {19b83258-1b16-47dc-bf2f-ba92280d21e7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {8F4864CD-B778-4C2E-91AE-55120CF186DA} - System32\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {0CEE552B-422A-4093-8201-BE9BA2C4A557} - System32\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {7905AACA-1E4B-41C9-AB8F-A67B85ED77A0} - System32\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {A02FB61A-23D7-4E27-92C2-10F670D5F352} - System32\Tasks\OO DiskImage {40889dea-cc7f-4277-984e-81ffd98ccbfe} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {5735471D-365B-44A2-9799-A62306F3011C} - System32\Tasks\OO DiskImage {4470a695-74ff-4698-8a4a-265f1faddf88} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {193850FB-B5A5-4A25-BE18-DEE04E58D4FD} - System32\Tasks\OO DiskImage {58ccbf24-062d-41bc-86fc-e5fdecba9f0a} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {490A2C39-6147-4DEE-BD50-860280B53129} - System32\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {5323EA76-3595-4A26-B51D-78A474A18578} - System32\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {3C649E58-BF84-41C8-BE5E-970D88A9C871} - System32\Tasks\OO DiskImage {6c9f7822-bc8a-44f5-9614-88da1f17de79} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {23F84720-4BAD-4F65-8F88-1C7D4306B0E8} - System32\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C3B98C42-3D9C-4D7B-9915-95B853DE7FA6} - System32\Tasks\OO DiskImage {7c149ff3-183e-47f3-b4d2-0048350ebbb2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C21A81BA-06C2-420C-BDBA-77D21A964F44} - System32\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {8E68914D-EE07-4E43-9AB2-B53A2DAC4AB7} - System32\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {B4C5AB36-FE43-4195-A4FC-4CB64186F549} - System32\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {D59C73C0-78DD-4666-A6BE-DB51D51EB236} - System32\Tasks\OO DiskImage {abf92fba-ee22-4f6a-9d45-7b619f0272b6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {73CEA15B-4FDB-4834-A5D0-0CCDEAFC93DE} - System32\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {068F0BC6-3749-4678-A98C-B67F06EC354D} - System32\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {31FB6184-6C8E-461C-AA35-370FA28F5E09} - System32\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {0FEDB132-0DAD-48BF-B765-F0E5E9901692} - System32\Tasks\OO DiskImage {cb0d08bf-5dee-4c25-be90-2eb3dc5eb93f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {C8939A4B-9B0F-4BF2-A221-FDFBDA90AAFA} - System32\Tasks\OO DiskImage {d1042081-19c2-44e8-8ab7-2acf148ae34c} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {55450491-456E-44BE-A3F1-3AE587898710} - System32\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {906F3F64-A478-4F64-8BF1-E56B0A1212DA} - System32\Tasks\OO DiskImage {f2eb5178-6552-4ebf-ad52-a0dcc434bf34} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {AA4EFF63-B3D0-495A-991C-B14D54DA278B} - System32\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {682220AF-7507-43AC-AE2E-C0530B948E65} - System32\Tasks\OO DiskImage {fd9b7c9f-2c66-41a6-916e-868099eeeaa6} => C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
Task: {CA9AC1E7-1F58-467B-B990-0E3C77BBA1DF} - System32\Tasks\SoftMakerUpdater => C:\Program Files\SoftMaker Office 2018\SoftMakerUpdaterTool.exe [6367440 2019-03-04] (SoftMaker Software GmbH -> )
Task: {BC359F39-32CA-4D58-8AE4-EF7BE228255A} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {2FD86584-EBD2-4736-A855-48E318E41354} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904536 2024-07-15] (Lenovo -> )
Task: {82091FF4-0120-4418-B466-1237C37B9AF5} - System32\Tasks\USER_ESRV_SVC_QUEENCREEK => C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe [454656 2025-09-09] (Microsoft Windows -> Microsoft Corporation) -> C:\Program Files\Intel\SUR\QUEENCREEK\x64\-Command "Start-Process -WindowStyle Hidden task.bat"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
Task: C:\WINDOWS\Tasks\OO DiskImage {1f8635c8-e78b-4506-befb-c6bb9ccc1967}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {1f8635c8-e78b-4506-befb-c6bb9ccc1967}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250524.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {2ec4eff5-a084-442c-9285-dfb73b969b8a}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {2ec4eff5-a084-442c-9285-dfb73b969b8a}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250622.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {34450140-638d-4780-8b4e-f0b3259a1e29}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {34450140-638d-4780-8b4e-f0b3259a1e29}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250918.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {633ff0ed-bc74-462b-b271-4bd56fe23b85}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {633ff0ed-bc74-462b-b271-4bd56fe23b85}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250420.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {68b38391-1cfa-410a-8a44-1d42952efc40}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {68b38391-1cfa-410a-8a44-1d42952efc40}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928[1].xml
Task: C:\WINDOWS\Tasks\OO DiskImage {6dfd33dd-cfd6-4262-90d3-8c45500cac52}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {6dfd33dd-cfd6-4262-90d3-8c45500cac52}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251119.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {99d297da-4565-4bf1-b42e-a32359900bdb}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {99d297da-4565-4bf1-b42e-a32359900bdb}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250510.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {9b8b5ba3-04a4-4fbf-a4f8-34211a2b8f48}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250831.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {a1326641-f5c5-4f34-92aa-a45623ad15d7}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {a1326641-f5c5-4f34-92aa-a45623ad15d7}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250723.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {ae436785-635c-477d-8983-091064a70787}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {ae436785-635c-477d-8983-091064a70787}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250611.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {b0f27559-0a5b-46b6-aac6-5b81c5368ee2}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250504.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {c60e5c85-c04f-4d4b-98c1-186055bb2eda}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {c60e5c85-c04f-4d4b-98c1-186055bb2eda}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250516.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {d481ac3b-f10e-4cb6-89aa-56903952e178}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {d481ac3b-f10e-4cb6-89aa-56903952e178}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20251027.xml
Task: C:\WINDOWS\Tasks\OO DiskImage {f852ba26-43cf-4ab9-8f05-911b0a246c1f}.job => C:\Program Files\OO Software\DiskImage\oodiag.exe,/run {f852ba26-43cf-4ab9-8f05-911b0a246c1f}O&O DiskImage C:\ProgramData\OO Software\DiskImage\Aufgaben\Aufgabe20250928.xml

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{27080194-2dfc-48fe-9973-59daf5f4c445}: [DhcpNameServer] 192.168.40.12 192.168.40.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\75C414E4D2545354531363: [DhcpDomain] Speedport_W_921V_1_48_000
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\960586F6E6560267F6E602865627D616E6E602822392: [DhcpNameServer] 172.20.10.1
Tcpip\..\Interfaces\{2de281dc-0b2d-4ed8-b4d7-f09d04978103}\A54554F55374F59347A7A72673: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{94c4241e-7070-4b03-b530-98aa8d4ee789}: [DhcpNameServer] 192.168.40.24 192.168.40.1

FireFox:
========
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: i13zqc65.default-release -> 308046B0AF4A39CB
FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\vwlb9ebn.default [2025-04-29]
FF ProfilePath: C:\Users\hduel\AppData\Roaming\Mozilla\Firefox\Profiles\i13zqc65.default-release [2026-05-29]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-02-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-12-08] (Microsoft Corporation -> Microsoft Corporation)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\hduel\AppData\Local\Microsoft\Edge\User Data\Default [2026-05-29]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

Chrome: 
=======
CHR Profile: C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default [2026-05-29]
CHR Notifications: Default -> hxxps://calendar.google.com; hxxps://d8cm5ge071bc73bf6t8g.datacoreworks.co.in; hxxps://de.aliexpress.com; hxxps://forum.kinesis.money; hxxps://gab.com; hxxps://ii1c4fst6drl7e.datacoreworks.co.in; hxxps://kundenbereich.check24.de; hxxps://meet.google.com; hxxps://www.mydealz.de,*"; hxxps://www.trip.com; hxxps://www.turkishairlines.com; hxxps://www.youtube.com
CHR DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}
CHR DefaultSearchKeyword: Default -> duckduckgo.com
CHR DefaultNewTabURL: Default -> hxxps://duckduckgo.com/chrome_newtab
CHR DefaultSuggestURL: Default -> hxxps://duckduckgo.com/ac/?q={searchTerms}&type=list
CHR Extension: (AdBlocker Expert) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\akjpkhfbhcikhabnieacjihhhhdlnfpa [2026-05-29]
CHR Extension: (WOT Website-Sicherheit und Schutz für sicheres Surfen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2026-03-23]
CHR Extension: (DuckDuckGo) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkdgflcldnnnapblkhphbgpggdiikppg [2026-05-27]
CHR Extension: (Ecosia) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\eedlgdlajadkbbjoobobefphmfkcchfk [2026-04-17]
CHR Extension: (Avast Passwords) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\emhginjpijfggbofeediiojmdlmlkoik [2025-05-28]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2026-05-26]
CHR Extension: (Google Docs Offline) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-05-28]
CHR Extension: (Malwarebytes Browser Guard) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2026-05-19]
CHR Extension: (Magical: Text Expander & Autofill) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\iibninhmiggehlcdolcilmhacighjamp [2026-04-17]
CHR Extension: (WEB.DE MailCheck) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jaogepninmlbinccpbiakcgiolijlllo [2025-05-28]
CHR Extension: (Cisco Webex Extension) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlhmfgmfgeifomenelglieieghnjghma [2025-05-28]
CHR Extension: (Tag Assistant) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\kejbdjndbnbjgmefkgdddjlbokphdefk [2026-05-26]
CHR Extension: (PowerPoint Online) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdafamggmaaaginooondinjgkgcbpnhp [2025-05-28]
CHR Extension: (Boomerang for Gmail) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\mdanidgdpmkimeiiojknlnekblgmpdll [2026-05-27]
CHR Extension: (MetaMask) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-29]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\hduel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-05-28]
CHR HKLM\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM\...\Chrome\Extension: [ggojliohohbachojmcgelnjmnjmjgidn]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [fheoggkfdfchfphceeifdbepaooicaho]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]

Brave: 
=======
BRA DefaultProfile: Default
BRA Profile: C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2026-05-28]
BRA Extension: (MetaMask) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\nkbihfbeogaeaoehlefnkodbefgpgknn [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Brave First Party Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2026-05-08]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2026-05-28]
BRA Extension: (Brave NTP background images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2026-04-27]
BRA Extension: (Brave Ad Block Updater (Mobile app promo blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Cookie notice blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2026-05-28]
BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2026-02-02]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2026-04-27]
BRA Extension: (Brave Ad Block Updater (Brave Default Adblock Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2026-05-28]
BRA Extension: (Brave Ads Resources) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2026-05-07]
BRA Extension: (Brave Ad Block Updater (Brave Default Privacy Filters (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2026-05-28]
BRA Extension: (Brave Ad Block Updater (German website ad blocker (plaintext))) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2026-05-28]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2026-05-28]
BRA Extension: (Brave User Agent) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\nlpaeekllejnmhoonlpcefpfnpbajbpe [2026-05-28]
BRA Extension: (Brave NTP sponsored images) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2026-05-28]
BRA Extension: (P3A Configuration) - C:\Users\hduel\AppData\Local\BraveSoftware\Brave-Browser\User Data\P3AConfig [2025-08-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13353792 2026-05-14] (Microsoft Corporation -> Microsoft Corporation)
R2 DolbyDAXAPI; C:\WINDOWS\System32\DriverStore\FileRepository\dax3_swc_aposvc.inf_amd64_91e825316dd5b8b9\DAX3API.exe [2356792 2022-11-29] (Dolby Laboratories, Inc. -> Dolby Laboratories)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_d6f52e3fdecf287d\ipfsvc.exe [546416 2022-11-15] (Intel Corporation -> Intel Corporation)
R2 DSAService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAService.exe [133736 2026-03-24] (Intel Corporation -> Intel)
R2 DSAUpdateService; C:\Program Files (x86)\Intel\Driver and Support Assistant\x86\DSAUpdateService.exe [133224 2026-03-24] (Intel Corporation -> Intel)
R2 ElevocService; C:\WINDOWS\System32\ElevocControlService.exe [326592 2022-09-01] (Microsoft Windows Hardware Compatibility Publisher -> )
R2 ImControllerService; C:\WINDOWS\Lenovo\ImController\Service\Lenovo.Modern.ImController.exe [113224 2024-06-26] (Lenovo -> Lenovo Group Ltd.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_fc84dfa25a6a7727\lib\PlatformLicenseManagerService.exe [741488 2023-12-14] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_cbcebe813d4324dc\AS\IAS\IntelAudioService.exe [528928 2022-12-13] (Intel Corporation -> Intel)
R2 IntelCollectorService; C:\Program Files\Intel\CollectorService\collector_service.exe [8480464 2026-04-16] (Intel Corporation -> Intel Corporation)
R2 IntelGraphicsSoftwareService; C:\Program Files\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe [323760 2026-03-11] (Intel Corporation -> Intel Corporation)
R2 IntelTelemetryAgent; C:\Program Files\Intel\TelemetryAgent\telemetry_agent.exe [5432528 2026-04-16] (Intel Corporation -> Intel Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_uf.exe [2781336 2022-11-11] (Intel Corporation -> Intel Corporation)
R2 LenovoFnAndFunctionKeys; C:\WINDOWS\System32\DriverStore\FileRepository\lenovofnandfunctionkeys.inf_amd64_5e21bf389d23855a\LenovoUtilityService.exe [199744 2026-03-09] (Lenovo -> Lenovo)
R2 LenovoVantageService; C:\Program Files (x86)\Lenovo\VantageService\4.2601.31.0\LenovoVantageService.exe [34368 2026-05-20] (Lenovo -> Lenovo)
R2 LITSSVC; C:\WINDOWS\System32\LNBITSSvc.exe [1872000 2025-10-23] (Lenovo -> Lenovo)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11481048 2026-05-01] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-02] (Malwarebytes Inc. -> Malwarebytes)
R2 McAfee WebAdvisor; C:\Program Files\McAfee\WebAdvisor\ServiceHost.exe [999552 2026-05-27] (McAfee, LLC -> McAfee, LLC)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MpDefenderCoreService.exe [2096384 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OO DiskImage; C:\Program Files\OO Software\DiskImage\oodiag.exe [13342480 2025-01-16] (O&O Software GmbH -> O&O Software GmbH)
R2 PresentMonSharedService; C:\Program Files\Intel\PresentMonSharedService\PresentMonService.exe [3444296 2026-01-15] (Intel Corporation -> Intel(R) Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [877528 2026-05-27] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SmartAppearanceAISVC; C:\Program Files\Lenovo\Lenovo Smart Appearance Components\Components\SmartAppearanceSVC.exe [55136 2021-11-04] (Lenovo -> Lenovo)
R2 SmartNoteService; C:\Program Files (x86)\Lenovo\Smart Note\SmartNote.Service.exe [92000 2021-12-10] (Lenovo -> Lenovo)
R2 Surfshark Service; C:\Program Files\Surfshark\Surfshark.Service.exe [174336 2026-05-27] (Surfshark B.V. -> Surfshark.Service)
R2 TeamViewer; C:\Program Files\TeamViewer\TeamViewer_Service.exe [26931024 2026-05-20] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)
R2 UDCService; C:\WINDOWS\System32\drivers\Lenovo\udc\Service\UDClientService.exe [72592 2026-04-01] (Lenovo -> Lenovo Group Ltd.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\NisSrv.exe [4484680 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26040.7-0\MsMpEng.exe [290704 2026-05-20] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 YMC; C:\WINDOWS\System32\YMC.exe [927784 2025-09-07] (Lenovo -> Lenovo)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 bhtsddr; C:\WINDOWS\System32\drivers\bhtsddr.sys [175320 2022-08-22] (BayHub Technology Inc. -> BayHubTech)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [573440 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [204800 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-04-05] (Microsoft Corporation) [Datei ist nicht signiert]
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88784 2022-08-09] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_f2084be6bb835256\ipf_acpi.sys [87192 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_cpu.sys [80536 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_7218f3b363a821fe\ipf_lf.sys [445080 2022-11-11] (Intel Corporation -> Intel Corporation)
R3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82312 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [236136 2026-05-29] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-02] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-02-28] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 ovpn-dco; C:\WINDOWS\System32\drivers\ovpn-dco.sys [131984 2025-03-03] (WDKTestCert lev,133391533294737317 -> OpenVPN, Inc)
S3 rtu53cx22x64; C:\WINDOWS\System32\DriverStore\FileRepository\rtu53cx22x64.inf_amd64_191dda4f2e7775ce\rtu53cx22x64.sys [1082176 2023-08-03] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 SharkDivert; C:\Program Files\Surfshark\Resources\x64\sharkdivert.sys [184480 2026-03-04] (Microsoft Windows Hardware Compatibility Publisher -> Surfshark)
R3 WacHIDRouterISDF; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)
S3 WacHIDRouterISDFV; C:\WINDOWS\System32\drivers\WacHIDRouterISDF.sys [131280 2022-12-07] (Wacom Co., Ltd. -> Wacom Technology, Corp.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [21888 2026-05-20] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [606600 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [100784 2026-05-20] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_24ebe64bf61b0c49\WiManHu\WiManHu.sys [206448 2022-05-02] (Intel Corporation -> Intel Corporation)
S3 WireGuard; C:\WINDOWS\System32\drivers\wireguard.sys [489368 2025-11-18] (Microsoft Windows Hardware Compatibility Publisher -> WireGuard LLC)
R3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-04-05] (Microsoft Windows -> Microsoft Corporation)
S3 LenovoDiagnosticsDriver; \??\C:\ProgramData\Lenovo\Vantage\Addins\LenovoHardwareScanAddin\4.4.0.15\LenovoDiagnosticsDriver.sys (Keine Datei)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-05-29 13:12 - 2026-05-29 13:12 - 000748376 _____ C:\WINDOWS\system32\perfh007.dat
2026-05-29 13:12 - 2026-05-29 13:12 - 000159426 _____ C:\WINDOWS\system32\perfc007.dat
2026-05-29 13:11 - 2026-05-29 13:12 - 000061928 _____ C:\Users\hduel\Downloads\FRST.txt
2026-05-29 13:11 - 2026-05-29 13:12 - 000000000 ____D C:\FRST
2026-05-29 13:10 - 2026-05-29 13:10 - 002449408 _____ (Farbar) C:\Users\hduel\Downloads\FRST64.exe
2026-05-29 13:07 - 2026-05-29 13:07 - 000001417 _____ C:\WINDOWS\system32\default_error_stack-000000-000000.txt
2026-05-29 12:34 - 2026-05-29 12:59 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job
2026-05-29 12:33 - 2026-05-29 13:07 - 000000000 ____D C:\WINDOWS\pss
2026-05-28 23:57 - 2026-05-28 23:57 - 000869204 _____ C:\Users\hduel\Documents\Eva Air FlugplanungWarenkorb.pdf
2026-05-28 22:01 - 2026-05-28 22:01 - 000000987 _____ C:\Users\Public\Desktop\Surfshark.lnk
2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Surfshark
2026-05-28 22:01 - 2026-05-28 22:01 - 000000000 ____D C:\Program Files\Common Files\ovpn-dco
2026-05-27 23:22 - 2026-05-29 09:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-05-27 11:13 - 2026-05-27 11:13 - 000037366 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-05-27 11:13 - 2026-05-27 11:13 - 000004066 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-05-27 10:10 - 2026-05-27 23:23 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.006
2026-05-27 07:46 - 2026-05-27 07:46 - 000000000 ____D C:\Users\TEMP.Font Driver Host.006
2026-05-19 20:48 - 2026-05-19 20:48 - 000003600 _____ C:\WINDOWS\system32\Tasks\USER_ESRV_SVC_QUEENCREEK
2026-05-19 20:48 - 2026-04-24 12:14 - 000049648 _____ (Intel(R) Corporation) C:\WINDOWS\system32\Drivers\semav6msr64.sys
2026-05-19 08:35 - 2026-05-19 08:36 - 000000000 ____D C:\Users\hduel\Documents\Ausweisdokumente
2026-05-19 08:35 - 2026-05-19 08:35 - 000000000 ____D C:\Users\hduel\Documents\Neuer Ordner
2026-05-17 15:47 - 2026-05-17 15:47 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-05-13 00:04 - 2026-05-13 00:04 - 000000000 ____D C:\WINDOWS\SecureBoot
2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\UMFD-0.Font Driver Host.005
2026-05-07 07:36 - 2026-05-07 07:36 - 000000000 ____D C:\Users\TEMP.Font Driver Host.005
2026-05-03 10:22 - 2026-05-03 10:22 - 000190976 _____ C:\Users\hduel\Downloads\Gmail - Deine Bestellung bei medimops (# 262487461 ).pdf
2026-05-01 21:45 - 2026-05-01 21:45 - 000000000 ____D C:\Users\hduel\AppData\Local\Sentry
2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-05-01 09:49 - 2026-05-01 09:49 - 000085913 _____ C:\WINDOWS\system32\ctac.json
2026-04-30 07:46 - 2026-04-30 07:46 - 008715231 _____ C:\Users\hduel\Downloads\Keumgang Short.mp4

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2026-05-29 13:12 - 2025-11-19 00:20 - 000000000 ____D C:\ProgramData\Surfshark
2026-05-29 13:12 - 2025-04-05 06:09 - 001729568 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-05-29 13:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-05-29 13:12 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-05-29 13:11 - 2025-12-10 21:51 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\19c27d4cc46ac3fd6df4e439370b45bad0160b30816e254c560d4dd8b88c330a
2026-05-29 13:11 - 2025-06-07 16:43 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\862d29cda0e11323204b0e9107710543301e63bae4f898f932473a92e9ddbb08
2026-05-29 13:09 - 2025-11-19 00:20 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Surfshark
2026-05-29 13:09 - 2025-04-29 13:10 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-05-29 13:08 - 2025-04-04 23:27 - 000013140 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-05-29 13:08 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-05-29 13:07 - 2026-01-11 22:52 - 000000000 ____D C:\Program Files\TeamViewer
2026-05-29 13:07 - 2025-04-04 23:30 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-05-29 13:07 - 2024-04-01 09:21 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2026-05-29 13:07 - 2024-03-21 13:54 - 000000000 ____D C:\ProgramData\Goodix
2026-05-29 13:07 - 2021-09-29 23:08 - 000012288 ___SH C:\DumpStack.log.tmp
2026-05-29 13:04 - 2025-06-07 16:44 - 000013496 _____ C:\Users\hduel\AppData\LocalLow\e6863278dac5c92b8de9c3587a83e7caf83b0c86fe3d61c204aabf43494b2647
2026-05-29 13:04 - 2025-06-07 16:39 - 000055450 _____ C:\Users\hduel\AppData\LocalLow\db0e362fc5496b848e455e3b37be69d99a54d0f25c1bea2043cf543ccca00332
2026-05-29 12:35 - 2025-04-02 12:21 - 000000000 ____D C:\Users\hduel\AppData\Local\CrashDumps
2026-05-29 12:33 - 2025-04-02 12:16 - 000000000 ____D C:\Users\hduel\AppData\Local\Malwarebytes
2026-05-29 12:29 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-05-29 11:58 - 2025-04-02 12:22 - 000000000 ____D C:\Users\hduel\Documents\Password Depot
2026-05-29 08:39 - 2025-06-08 13:35 - 000167000 _____ C:\Users\hduel\AppData\LocalLow\69e7b4fd919b7d417e92cf35a6c07323b9890426afe8a4147a911cff7fd7b1d0
2026-05-29 08:39 - 2025-06-08 13:35 - 000000298 _____ C:\Users\hduel\AppData\LocalLow\c0b0a919203ae87adfc9f4627f6c1c9e1e873aafeee3d34d3b8f4fdd74446a60
2026-05-29 08:39 - 2025-06-07 16:39 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\b6e15e59adf65281d0253e2636f29e82013e92027a2d7aa9e338ccf745fc5014
2026-05-29 07:59 - 2025-06-07 16:43 - 000319397 _____ C:\Users\hduel\AppData\LocalLow\86edfdf5bd824465412ccbcaa84e9ecac77630ec05d77dc79aaf55dbd04a431a
2026-05-28 22:06 - 2025-04-02 12:00 - 000002622 _____ C:\Users\hduel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2026-05-28 22:06 - 2025-04-02 12:00 - 000002585 _____ C:\Users\hduel\Desktop\Brave.lnk
2026-05-28 22:01 - 2025-11-19 00:19 - 000000000 ____D C:\Program Files\Surfshark
2026-05-28 13:05 - 2025-12-10 21:51 - 000651939 _____ C:\Users\hduel\AppData\LocalLow\bbf76672888b767211ac2ed00d5fd77a880425cf39a68791d89947e7a8bd9a44
2026-05-28 07:57 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\D3DSCache
2026-05-28 07:49 - 2025-06-07 16:42 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\d18c7cecdddbcdb04ba86fcda501b25d77b715442f87c259c61456169a0430d6
2026-05-27 23:26 - 2025-04-04 23:23 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-05-27 23:24 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-05-27 23:23 - 2025-04-24 11:21 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-05-27 23:23 - 2025-04-04 23:23 - 000505304 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-05-27 23:22 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\quz-PE
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mi-NZ
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ta-IN
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\quz-PE
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mt-MT
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mk-MK
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mi-NZ
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\es-MX
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-05-27 23:22 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-05-27 23:22 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-05-27 22:04 - 2025-06-07 16:45 - 000002264 _____ C:\Users\hduel\AppData\LocalLow\4223439fc4b2af89111f38c20246a29fbcacb124c56847ecf354f94e14b44acd
2026-05-27 22:02 - 2025-06-07 16:39 - 000000026 _____ C:\Users\hduel\AppData\LocalLow\72e8ee8127e83811ef1b3dfc180ec191271c2508131e6705908b94b528984ce2
2026-05-27 17:10 - 2025-04-29 13:10 - 000001076 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-05-27 11:18 - 2025-04-04 23:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-05-27 11:12 - 2025-04-04 23:28 - 003261440 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-05-27 10:10 - 2026-02-04 14:00 - 000392320 _____ (Mozilla Foundation) C:\Users\hduel\Desktop\Firefox.exe
2026-05-26 14:43 - 2025-11-28 17:47 - 000000000 ____D C:\Users\hduel\Documents\ATU
2026-05-26 12:42 - 2025-06-08 08:56 - 000000130 _____ C:\Users\hduel\AppData\LocalLow\fe35852a2006dce95e9b7137a925e330333bec4e151c973f6616d0159ca2c579
2026-05-26 08:59 - 2025-04-02 11:48 - 000000000 ____D C:\Users\hduel\AppData\Local\Packages
2026-05-26 08:36 - 2025-10-18 07:44 - 000000000 ____D C:\WINDOWS\system32\Tasks\GoogleUserPEH
2026-05-25 23:03 - 2025-06-08 08:56 - 000080555 _____ C:\Users\hduel\AppData\LocalLow\de59740c052e2827fd84e8070e9a4c77f0651984687b766aa7f88a0a8262325f
2026-05-24 21:21 - 2025-06-18 08:18 - 000106753 _____ C:\Users\hduel\AppData\LocalLow\958686ab2b834bf192b725c1aaa2eba6764ecb25ef121e647d36ce887f103ac7
2026-05-24 11:15 - 2025-08-24 09:25 - 000000000 ____D C:\Users\hduel\Documents\Solaranlage
2026-05-23 22:27 - 2021-09-29 23:09 - 000002449 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-05-22 20:08 - 2025-06-29 23:59 - 000000000 ____D C:\Users\hduel\AppData\Local\MEGAsync
2026-05-22 20:08 - 2023-01-06 13:04 - 000000000 ____D C:\ProgramData\Packages
2026-05-22 06:53 - 2025-05-28 09:39 - 000002250 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-05-22 06:53 - 2025-05-28 09:39 - 000002209 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2026-05-20 20:53 - 2025-11-28 09:16 - 000000000 ____D C:\Users\hduel\AppData\Roaming\Telegram Desktop
2026-05-20 09:10 - 2021-09-29 23:09 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-05-19 20:48 - 2022-06-01 22:41 - 000000000 ____D C:\Program Files\Intel
2026-05-18 08:40 - 2025-06-04 09:31 - 000000000 ____D C:\Users\hduel\Documents\Wärmepumpe
2026-05-17 15:44 - 2022-06-01 22:36 - 000000000 ____D C:\Program Files\Microsoft Office
2026-05-17 15:17 - 2025-04-24 11:20 - 000000000 ____D C:\Users\hduel\Documents\SoftMaker
2026-05-17 00:25 - 2025-04-04 23:24 - 000000000 ____D C:\Users\hduel
2026-05-15 14:19 - 2025-11-28 12:12 - 000000000 ____D C:\Users\hduel\Downloads\Telegram Desktop
2026-05-15 14:16 - 2025-04-24 17:12 - 000000000 ____D C:\Users\hduel\Documents\KIA
2026-05-14 19:04 - 2025-05-08 08:35 - 000000000 ____D C:\Users\hduel\AppData\Local\LenovoServiceBridge
2026-05-13 13:40 - 2026-03-05 18:05 - 000000000 ____D C:\Users\hduel\Documents\Hausverwaltung
2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2026-05-13 00:04 - 2025-04-05 09:14 - 000000000 ____D C:\WINDOWS\system32\de
2026-05-13 00:04 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ur-PK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ug-CN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\tt-RU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\te-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ta-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\sq-AL
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-plocm
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\qps-ploc
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\pa-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\or-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\nn-NO
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ne-NP
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mt-MT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mr-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ml-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\mk-MK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lo-LA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\lb-LU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kok-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\km-KH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\kk-KZ
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ka-GE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\is-IS
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hy-AM
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\hi-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gu-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\gd-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ga-IE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fil-PH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\fa-IR
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\cy-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\bn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\be-BY
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\as-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\am-ET
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\af-ZA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ur-PK
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ug-CN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\tt-RU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\te-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\sq-AL
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-plocm
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\qps-ploc
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\pa-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\or-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\nn-NO
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ne-NP
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\mr-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ml-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lo-LA
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\lb-LU
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kok-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\km-KH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\kk-KZ
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ka-GE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\is-IS
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\id-ID
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hy-AM
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\hi-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gu-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\gd-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ga-IE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fil-PH
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\fa-IR
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\et-EE
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\cy-GB
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\bn-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\be-BY
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\as-IN
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\am-ET
2026-05-13 00:04 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\af-ZA
2026-05-12 23:57 - 2023-01-06 13:13 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-05-12 23:51 - 2023-01-06 13:13 - 220340424 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-05-12 19:58 - 2025-09-21 14:28 - 000000432 _____ C:\WINDOWS\BRWMARK.INI
2026-05-12 13:07 - 2025-07-05 16:51 - 000206672 _____ C:\Users\hduel\AppData\LocalLow\ee0b3fd139baf022c59877657128b2116b2e69b0155adf8732a4ded74261b1f1
2026-05-08 09:17 - 2025-04-16 18:01 - 000000000 ____D C:\Users\hduel\Documents\DAK
2026-05-07 15:32 - 2025-04-21 07:45 - 000000000 ____D C:\Users\hduel\Documents\Kinesis
2026-05-05 18:55 - 2025-12-10 21:50 - 000074858 _____ C:\Users\hduel\AppData\LocalLow\de8f38afd23996add4871c35de10c91d8534eab617f698cb8660702056cd76f5
2026-05-02 17:32 - 2025-07-09 22:05 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-05-02 17:32 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Photo Viewer
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2026-05-02 17:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-05-01 06:59 - 2025-04-04 23:30 - 000003754 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-05-01 06:59 - 2025-04-04 23:30 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-04-29 16:22 - 2025-07-04 06:42 - 000000000 ____D C:\Users\hduel\Documents\Fenitzerplatz

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================