Verdacht auf Malware trotz unauffälliger Scans – Google-Sicherheitswarnung und Firefox-Probleme

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 22-10-2026
Ran by Max (administrator) on DESKTOP-TSSNE97 (HP HP ZBook Power 15.6 inch G9 Mobile Workstation PC) (23-10-2026 14:42:33)
Running from C:\Users\Max\Downloads\FRST64.exe
Loaded Profiles: Max
Platform: Microsoft Windows 11 Pro Version 25H2 26200.9711 (X64) Language: German (Germany) -> English (United Kingdom)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
(C:\Program Files\Common Files\Native Instruments\NTK\NTKDaemon.exe ->) (Native Instruments GmbH -> ) C:\Program Files\Common Files\Native Instruments\NTK\crashpad_handler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(C:\Program Files\Mozilla Firefox\firefox.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Firefox\crashhelper.exe
(C:\Program Files\Mozilla Thunderbird\thunderbird.exe ->) (Mozilla Corporation -> Mozilla Foundation) C:\Program Files\Mozilla Thunderbird\crashhelper.exe
(C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.Graphics.exe
(C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\PresentMonService.exe
(C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe ->) (Spotify AB -> ) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\crashpad_handler.exe
(C:\ProgramData\Ableton\Live 12 Suite\Program\Ableton Live 12 Suite.exe ->) (Ableton AG -> ) C:\ProgramData\Ableton\Live 12 Suite\Resources\Extensions\Index\Ableton Index.exe
(dllhost.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\BridgeCommunication.exe
(DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_helper.exe
(DriverStore\FileRepository\snapo64.inf_amd64_33d62b688b005396\SNAPOSS64.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude Corporation) C:\Windows\System32\DriverStore\FileRepository\snapo64.inf_amd64_33d62b688b005396\SNAPOS64.exe
(Dynalist Inc -> Obsidian) C:\Users\Max\AppData\Local\Programs\Obsidian\Obsidian.exe <3>
(explorer.exe ->) (Dynalist Inc -> Obsidian) C:\Users\Max\AppData\Local\Programs\Obsidian\Obsidian.exe
(explorer.exe ->) (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.) C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe
(explorer.exe ->) (IDRIX SARL -> IDRIX) C:\Program Files\VeraCrypt\VeraCrypt.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\OUTLOOK.EXE
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe
(explorer.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareAccessibilityHelper.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80b0ba89d6747cf\RtkAudUService64.exe
(explorer.exe ->) (Samsung Electronics CO., LTD. -> ) C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe
(explorer.exe ->) (Thesycon Software Solutions GmbH & Co. KG -> ) C:\Program Files\Ableton\USB Audio Driver\x64\AbletonAudioCpl.exe
(HP Inc. -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_61.52637.14262.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(HP Inc. -> HP Inc) C:\Program Files\WindowsApps\AD2F1837.myHP_61.52637.14262.0_x64__v10z8vjag6ke6\win32\HP.ContextAware.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\155.0.4283.62\msedgewebview2.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\UUS\amd64\MoNotificationUx.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <19>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <4>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\NVWMI\nvWmi64.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80b0ba89d6747cf\RtkAudUService64.exe
(services.exe ->) () [File not signed] C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Bromium UK Limited -> HP) C:\Program Files\HP\Security Update Service\4.4.34.927\SecurityUpdateService.exe
(services.exe ->) (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.) C:\Windows\System32\ELAN_MOC_Service.exe
(services.exe ->) (FOR TESTING ONLY - IPF_PreProd_Cert -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_683097297aaa9bb4\ipfsvc.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_b532962506597d3d\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\HotKeyServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\HPAudioAnalytics.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\LanWlanWwanSwitchingServiceUWP.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsfuservice.inf_amd64_03ebfd05b519032c\HpSfuService64.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_df5bc9f22dc3c742\x64\hpsvcsscan.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b45f13a105037dbe\jhi_service.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_6d3406ba86e014cf\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_92a56761ef7ba712\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_a952167d9e98b004\AS\IAS\IntelAudioService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MidiSrv.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia) C:\Windows\System32\FMService64.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Sonitude Corporation) C:\Windows\System32\DriverStore\FileRepository\snapo64.inf_amd64_33d62b688b005396\SNAPOSS64.exe
(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareService.exe
(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\Hardware\NIHostIntegrationAgent.exe
(services.exe ->) (Native Instruments GmbH -> Native Instruments GmbH) C:\Program Files\Common Files\Native Instruments\NTK\NTKDaemon.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\Display.NvContainer\NVDisplay.Container.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\NVWMI\nvWmi64.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80b0ba89d6747cf\RtkAudUService64.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(sihost.exe ->) (Ableton AG -> Ableton) C:\ProgramData\Ableton\Live 12 Suite\Program\Ableton Live 12 Suite.exe
(sihost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2608.18002.0_x64__8wekyb3d8bbwe\MicrosoftSecurityApp\MicrosoftSecurityApp.exe
(sihost.exe ->) (Musecy SM Ltd. -> Muse) C:\Program Files\WindowsApps\Muse.MuseHub_2.0.22.1414_x64__rb9pth70m6nz6\Muse.exe
(sihost.exe ->) (Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\SpotifyLauncher.exe
(Spotify AB -> Spotify Ltd) C:\Program Files\WindowsApps\SpotifyAB.SpotifyMusic_1.306.1921.0_x64__zpdnekdrzrea0\Spotify.exe <8>
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe OS Extension\AdobeNotificationClient.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe
(svchost.exe ->) (HP) [File not signed] C:\Program Files (x86)\HP\HP ICS\ICS.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.StartExperiencesApp_1.398.2.0_x64__8wekyb3d8bbwe\MicrosoftStartFeedProvider\MicrosoftStartFeedProvider.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\Max\AppData\Local\Microsoft\OneDrive\26.183.0920.0005\FileCoAuth.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\AppActions.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SoftLandingTask\SoftLandingTask.exe
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe <6>
(Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
Failed to access process -> vmmemCmZygote

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_e80b0ba89d6747cf\RtkAudUService64.exe [3495976 2026-08-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [CDAServer] => C:\Program Files\Common Files\Common Desktop Agent\CDASrv.exe [464608 2014-09-08] (Samsung Electronics CO., LTD. -> )
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [509936 2018-04-10] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [Focusrite Notifier] => C:\Program Files\Focusrite\Drivers\Focusrite Notifier.exe [906840 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering, Ltd.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3952720 2022-06-01] (Microsoft Windows Hardware Compatibility Publisher -> Logitech, Inc.)
HKLM\...\Run: [Logi Download Assistant] => C:\Program Files\LogiDownloadAssistant\bin\logi_download_assistant.exe [19199488 2026-05-19] (Logitech, Inc.) [File not signed]
HKLM-x32\...\Run: [HPNotifications] => C:\Program Files (x86)\HP\HP Notifications\HPNotifications.exe [1607816 2021-02-11] (HP Inc. -> HP)
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2025-12-21] (Adobe Inc. -> Adobe Inc.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-571881649-101344733-3185888103-1002\...\Run: [com.evernote.Evernote] => C:\Users\Max\AppData\Local\Programs\Evernote\Evernote.exe [186384464 2025-02-05] (Evernote Corporation -> Evernote Corporation)
HKU\S-1-5-21-571881649-101344733-3185888103-1002\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [5823128 2026-10-13] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-571881649-101344733-3185888103-1002\...\Run: [electron.app.Notion] => C:\Users\Max\AppData\Local\Programs\Notion\Notion.exe --open-at-login (No File)
HKU\S-1-5-21-571881649-101344733-3185888103-1002\...\Run: [MicrosoftEdgeAutoLaunch_0C0D5F59005A32876380EE3B976869A6] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [5438320 2026-10-16] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-571881649-101344733-3185888103-1002\...\Run: [GoogleUpdaterTaskUser157.0.8089.0] => C:\Users\Max\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
HKLM\...\Windows x64\Print Processors\us016PC: C:\Windows\System32\spool\prtprocs\x64\us016pc.dll [61736 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Codename Longhorn DDK provider)
HKLM\...\Print\Monitors\us016 Langmon: C:\WINDOWS\system32\us016lm.dll [40744 2022-02-24] (Microsoft Windows Hardware Compatibility Publisher -> )
AppInit_DLLs: c:\PROGRA~1\HP\SURECL~1\servers\BemHook.dll => No File
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Ableton USB Audio Control Panel Autostart.lnk [2024-10-20]
ShortcutTarget: Ableton USB Audio Control Panel Autostart.lnk -> C:\Program Files\Ableton\USB Audio Driver\x64\AbletonAudioCpl.exe (Thesycon Software Solutions GmbH & Co. KG -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\NIHardwareAccessibilityHelper.exe.lnk [2025-08-15]
ShortcutTarget: NIHardwareAccessibilityHelper.exe.lnk -> C:\Program Files\Common Files\Native Instruments\Hardware\NIHardwareAccessibilityHelper.exe (Native Instruments GmbH -> Native Instruments GmbH)
GroupPolicy: Restriction - Chrome <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {4B664E1F-0135-4E8C-9111-9EC7D8564C9C} - System32\Tasks\Adobe Creative Cloud => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2526688 2026-08-09] (Adobe Inc. -> Adobe Inc.)
Task: {FFCAC060-F32D-46D7-B285-75A677E275EB} - System32\Tasks\Adobe Uninstaller => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [446432 2026-08-09] (Adobe Inc. -> Adobe Inc.)
Task: {E0AE496B-3D72-4199-9443-AA18ED717B30} - System32\Tasks\GoogleUser\GoogleUpdater\GoogleUpdaterTaskUser157.0.8089.0{2BAF6901-F450-4A6E-83B9-B4857DD5C8CE} => C:\Users\Max\AppData\Local\Google\GoogleUpdater\157.0.8089.0\updater.exe [9958552 2026-10-06] (Google LLC -> Google LLC)
Task: {D5C82890-1F3E-4CE3-88EC-1CBE58277897} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [480264 2026-08-13] (HP Inc. -> HP Inc.)
Task: {462495A0-DED9-4816-85F8-53086EA08498} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1178696 2026-08-13] (HP Inc. -> HP Inc.)
Task: {10A29C9A-C44B-4CC1-87BB-47304EE2AFF9} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1178696 2026-08-13] (HP Inc. -> HP Inc.)
Task: {982F0742-CE09-42A5-A638-2D439839B13D} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [102400 2025-07-08] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {481DC351-7E79-470E-8F69-49CEE9EB3AD9} - System32\Tasks\HP\HP ICS\ICS => C:\Program Files (x86)\HP\HP ICS\ICS.exe [76824576 2022-05-06] (HP) [File not signed]
Task: {0728873B-9E3C-47FE-ACD4-EC001FB2AC5A} - System32\Tasks\HP\HP Wolf Security\Launch Console => C:\Program Files\HP\HP Client Security Manager\HP.ClientSecurityManager.exe [263752 2026-07-13] (HP Inc. -> HP Inc.)
Task: {B597665C-A2F0-4D37-B866-534EF1D4A93D} - System32\Tasks\Launch Adobe CCXProcess => C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [194112 2026-08-09] (Adobe Inc. -> Adobe Inc.)
Task: {EB1E27A6-A0B4-4512-883C-70856E9626D8} - System32\Tasks\Microsoft\Office\Office Actions Server => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16430896 2026-10-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {C33E3793-E27A-4A7C-8F34-F13B5FA9DFD7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29735232 2026-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {EA4C141F-914E-43BE-96CE-8F723C1407D9} - System32\Tasks\Microsoft\Office\Office Background Push Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE16\opushutil.exe [15108960 2026-10-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {38D8F0CC-9241-41A1-A134-B5BEA0481EAE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [29735232 2026-10-13] (Microsoft Corporation -> Microsoft Corporation)
Task: {4405FBC6-C246-47F9-B9E4-C96E565647AF} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-10-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {0A61EB51-E6A2-4C4A-807D-5BB9C0A97618} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [427296 2026-10-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {D144E639-5B99-4628-8ABA-D64107E5494C} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\operfmon.exe [1325424 2026-10-02] (Microsoft Corporation -> Microsoft Corporation)
Task: {2AFF8E7F-F468-4793-81CF-16A535B7B63E} - System32\Tasks\Microsoft\Office\Office Startup Maintenance => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\ActionsServer\ActionsServer.exe [16430896 2026-10-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (No File)
Task: {4F377EA7-6024-40A9-84A9-A1DF64484192} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1080448 2026-10-20] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {8A3F38F1-4048-47A5-8B1B-4F6671471F78} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-571881649-101344733-3185888103-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [1080448 2026-10-20] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {4F57E2E1-C128-47CC-8556-8EF63354E9C9} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [44160 2026-10-20] (Mozilla Corporation -> Mozilla Foundation)
Task: {329CF4E3-0C77-4EE3-A6C5-E0747B2BC40C} - System32\Tasks\NVIDIA App SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA App\CEF\NVIDIA App.exe [3346544 2026-04-07] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A120F86D-A9FB-4E16-B28C-9C62FCD0646E} - System32\Tasks\nWizard_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1546280 2022-08-24] (Nvidia Corporation -> NVIDIA Corporation) -> C:\Program Files\NVIDIA Corporation\nview\/installquiet
Task: {7D9B41AC-F03F-4C24-A084-E62E7675F460} - System32\Tasks\SoftLanding\S-1-5-21-571881649-101344733-3185888103-1002\SoftLandingRefreshForExpirationTask-{bb81c0f5-21c5-4153-b8eb-e09718bd964b} => {F576B2F9-7850-4226-ADB0-E5993FED4F02}

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d379a33b-12ae-40fa-bceb-fb75225dce83}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{d379a33b-12ae-40fa-bceb-fb75225dce83}\64259445A51224F6870264F6E60275C414E40273336303: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{d379a33b-12ae-40fa-bceb-fb75225dce83}\64259445A51224F6870264F6E60275C414E40273336303: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{d379a33b-12ae-40fa-bceb-fb75225dce83}\84F6D656F56424: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{d379a33b-12ae-40fa-bceb-fb75225dce83}\84F6D656F56424: [DhcpDomain] fritz.box

FireFox:
========
FF TaskBarID: 6F114386CDBCE31 -> C:\Users\Max\AppData\Local\Mozilla Firefox
FF TaskBarID: 308046B0AF4A39CB -> C:\Program Files\Mozilla Firefox
FF DefaultProfile: 2yd52xta.default-release -> 308046B0AF4A39CB
FF DefaultProfile: 2yd52xta.default-release -> 641D10338ABA448D
FF ProfilePath: C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\9eh18pfb.default [2026-10-21]
FF ProfilePath: C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release [2026-10-23]
FF Homepage: Mozilla\Firefox\Profiles\2yd52xta.default-release -> hxxps://calendar.google.com/calendar/r
FF Notifications: Mozilla\Firefox\Profiles\2yd52xta.default-release -> hxxps://pomofocus.io; hxxps://mapio.net; hxxps://mail.proton.me; hxxps://app.zoom.us
FF Extension: (LeechBlock NG) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\leechblockng@proginosko.com.xpi [2026-09-29]
FF Extension: (Unhook - Remove YouTube Recommended & Shorts) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\myallychou@gmail.com.xpi [2026-04-10]
FF Extension: (uBlock Origin) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\uBlock0@raymondhill.net.xpi [2026-09-27]
FF Extension: (Bitwarden Password Manager) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\{446900e4-71c2-419f-a6a7-df9c091e268b}.xpi [2025-07-07]
FF Extension: (Stylebot) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\{52bda3fd-dc48-4b3d-a7b9-58af57879f1e}.xpi [2026-10-17]
FF Extension: (Video Download Helper) - C:\Users\Max\AppData\Roaming\Mozilla\Firefox\Profiles\2yd52xta.default-release\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2026-10-21]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2026-08-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2026-08-09] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2026-08-22] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2026-08-09] (Adobe Inc. -> Adobe Systems)

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default [2026-08-21]
Edge StartupUrls: Default -> "hxxp://google.com/"
Edge Extension: (Google Docs Offline) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-12-21]
Edge Extension: (video downloader - CocoCut) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hcppimlenafppomfhfmlfckomalgmmga [2026-07-19]
Edge Extension: (LeechBlock NG) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hnncfhodpmpjchmmcnimoimkcojdmfhl [2026-03-22]
Edge Extension: (Edge relevant text changes) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-02-03]
Edge Extension: (uBlock Origin) - C:\Users\Max\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2026-07-19]

Chrome: 
=======
CHR Profile: C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default [2026-08-21]
CHR DefaultSearchURL: Default -> hxxps://search.brave.com/search?q={searchTerms}
CHR DefaultSearchKeyword: Default -> search.brave.com
CHR DefaultSuggestURL: Default -> hxxps://search.brave.com/api/suggest?q={searchTerms}
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2026-06-15]
CHR Extension: (Google Docs Offline) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2026-06-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Max\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-12-06]
CHR HKU\S-1-5-21-571881649-101344733-3185888103-1002\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944608 2026-08-09] (Adobe Inc. -> Adobe Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12714304 2026-10-13] (Microsoft Corporation -> Microsoft Corporation)
R2 dptftcs; C:\WINDOWS\System32\DriverStore\FileRepository\dtt_sw.inf_amd64_683097297aaa9bb4\ipfsvc.exe [562040 2024-05-24] (FOR TESTING ONLY - IPF_PreProd_Cert -> Intel Corporation)
R2 ELAN_MOC_Service; C:\WINDOWS\System32\ELAN_MOC_Service.exe [249856 2026-06-12] (ELAN MICROELECTRONICS CORPORATION -> ELAN Microelectronics Corp.)
R2 FMAPOService; C:\WINDOWS\System32\FMService64.exe [1028024 2024-05-17] (Microsoft Windows Hardware Compatibility Publisher -> Fortemedia)
R2 Focusrite Control Server; C:\Program Files\Focusrite\Focusrite Control\Server\ControlServer.exe [1297920 2024-03-11] () [File not signed]
R2 HotKeyServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\HotKeyServiceUWP.exe [1487016 2026-03-13] (HP Inc. -> HP Inc.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [893984 2022-08-15] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\AppHelperCap.exe [909464 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPAudioAnalytics; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\HPAudioAnalytics.exe [496808 2026-03-13] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\DiagsCap.exe [907936 2025-09-30] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\NetworkCap.exe [903840 2025-09-30] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149448 2020-07-23] (HP Inc. -> HP)
R2 hpsvcsscan; C:\WINDOWS\System32\DriverStore\FileRepository\hpsvcsscancomp.inf_amd64_df5bc9f22dc3c742\x64\hpsvcsscan.exe [7142248 2026-02-18] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_bac3c2b2a2c0d811\x64\SysInfoCap.exe [909464 2025-09-30] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_b532962506597d3d\x64\TouchpointAnalyticsClientService.exe [639776 2025-10-01] (HP Inc. -> HP Inc.)
S2 Intel(R) Platform License Manager Service; C:\WINDOWS\System32\DriverStore\FileRepository\iclsclient.inf_amd64_b4ad878dc01a7e41\lib\PlatformLicenseManagerService.exe [741600 2024-03-13] (Intel Corporation -> Intel(R) Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_a952167d9e98b004\AS\IAS\IntelAudioService.exe [532960 2025-12-16] (Intel Corporation -> Intel)
R2 IntelGraphicsSoftwareService; C:\Program Files\WindowsApps\AppUp.IntelArcSoftware_26.36.2702.0_x64__8j3eq9eme6ctt\VFS\ProgramFilesX64\Intel\Intel Graphics Software\IntelGraphicsSoftware.Service.exe [324040 2026-10-14] (Intel Corporation -> Intel Corporation)
R2 ipfsvc; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_uf.exe [3084992 2024-05-23] (Intel Corporation -> Intel Corporation)
R2 LanWlanWwanSwitchingServiceUWP; C:\WINDOWS\System32\DriverStore\FileRepository\hpqkbsoftwarecompnent.inf_amd64_0d182501a33019e2\LanWlanWwanSwitchingServiceUWP.exe [594600 2026-03-13] (HP Inc. -> HP Inc.)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [11667696 2026-10-21] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [4291576 2026-10-21] (Malwarebytes Inc -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MpDefenderCoreService.exe [2398680 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 Muse Hub Updater Service; C:\Program Files\WindowsApps\Muse.MuseHub_2.0.22.1414_x64__rb9pth70m6nz6\Muse.Updater.exe [6213200 2024-11-01] (Musecy SM Ltd. -> Muse.Updater)
R2 NIHostIntegrationAgent; C:\Program Files\Common Files\Native Instruments\Hardware\NIHostIntegrationAgent.exe [27618648 2025-03-20] (Native Instruments GmbH -> Native Instruments GmbH)
R2 NTKDaemonService; C:\Program Files\Common Files\Native Instruments\NTK\NTKDaemon.exe [18193304 2025-10-09] (Native Instruments GmbH -> Native Instruments GmbH)
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\Display.NvContainer\NVDisplay.Container.exe [1702632 2026-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
R2 NVWMI; C:\WINDOWS\System32\DriverStore\FileRepository\nvblwi.inf_amd64_ec9e93908147d7d7\NVWMI\nvWmi64.exe [4568808 2026-03-18] (NVIDIA Corporation -> NVIDIA Corporation)
R2 SecurityUpdateService; C:\Program Files\HP\Security Update Service\4.4.34.927\SecurityUpdateService.exe [5314376 2026-10-01] (Bromium UK Limited -> HP)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [914752 2026-09-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SFUService; C:\WINDOWS\System32\DriverStore\FileRepository\hpsfuservice.inf_amd64_03ebfd05b519032c\HpSfuService64.exe [961192 2026-06-23] (HP Inc. -> HP Inc.)
R2 SNAPOService; C:\WINDOWS\System32\DriverStore\FileRepository\snapo64.inf_amd64_33d62b688b005396\SNAPOSS64.exe [830232 2025-12-17] (Microsoft Windows Hardware Compatibility Publisher -> Sonitude Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\NisSrv.exe [5555528 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.26090.9-0\MsMpEng.exe [378168 2026-10-14] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 arturiausbmidi; C:\WINDOWS\System32\DriverStore\FileRepository\arturiausbmidi.inf_amd64_3b60ea58f3448d4a\arturiausbmidi.sys [434352 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 arturiausbmidiks; C:\WINDOWS\System32\DriverStore\FileRepository\arturiausbmidiks.inf_amd64_82108088788d0cec\arturiausbmidiks.sys [55480 2024-11-28] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 atc; C:\WINDOWS\System32\DRIVERS\atc.sys [5579176 2023-06-01] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender S.R.L. Bucharest, ROMANIA)
R3 bomebus; C:\WINDOWS\System32\drivers\bomebus.sys [56376 2018-05-16] (Bome Software GmbH & Co.KG -> Bome Software GmbH & Co. KG)
S3 bomemidi; C:\WINDOWS\system32\drivers\bomemidi.sys [50744 2018-05-16] (Bome Software GmbH & Co.KG -> Bome Software GmbH & Co. KG)
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [110592 2025-02-16] (Microsoft Corporation) [File not signed]
S3 Ccx01000; C:\WINDOWS\System32\drivers\Ccx01000.sys [692224 2026-10-13] (Microsoft Windows -> Microsoft Corporation)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [176976 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 e1dexpress; C:\WINDOWS\System32\DriverStore\FileRepository\e1d.inf_amd64_f3c6513565231a23\e1d.sys [609456 2022-11-14] (Intel Corporation -> Intel Corporation)
R1 ESProtectionDriver; \??\C:\WINDOWS\system32\drivers\mbae.sys [159296 2026-10-21] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 FocusritePCIeSwRoot; C:\WINDOWS\System32\drivers\FocusritePCIeSwRoot.sys [106208 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsb; C:\WINDOWS\System32\drivers\FocusriteUsb.sys [170312 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbAudio; C:\WINDOWS\System32\drivers\FocusriteUsbAudio.sys [109896 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbMidi; C:\WINDOWS\System32\drivers\FocusriteUsbMidi.sys [53576 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R3 FocusriteUsbSwRoot; C:\WINDOWS\System32\drivers\FocusriteUsbSwRoot.sys [112968 2023-11-27] (Focusrite Audio Engineering Ltd -> Focusrite Audio Engineering Ltd.)
R0 fse; C:\WINDOWS\System32\drivers\fse.sys [240968 2026-10-13] (Microsoft Windows -> Microsoft Corporation)
R1 Gemma; C:\WINDOWS\System32\DRIVERS\gemma.sys [1322912 2023-06-01] (Microsoft Windows Hardware Compatibility Publisher -> BitDefender S.R.L. Bucharest, ROMANIA)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_1421dec2010cc057\x64\hpcustomcapdriver.sys [18984 2024-05-07] (Microsoft Windows Hardware Compatibility Publisher -> HP Inc.)
R3 iaLPSS2_GPIO2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_gpio2_adl.inf_amd64_302e75596cffa74a\iaLPSS2_GPIO2_ADL.sys [150616 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_I2C_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_i2c_adl.inf_amd64_e736c048ca307ed2\iaLPSS2_I2C_ADL.sys [220224 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_SPI_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_spi_adl.inf_amd64_334c460fea9b11a4\iaLPSS2_SPI_ADL.sys [171608 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 iaLPSS2_UART2_ADL; C:\WINDOWS\System32\DriverStore\FileRepository\ialpss2_uart2_adl.inf_amd64_43d5df63d19fde70\iaLPSS2_UART2_ADL.sys [329320 2022-10-18] (Intel Corporation -> Intel Corporation)
R3 IntcUSB; C:\WINDOWS\System32\DriverStore\FileRepository\intcusb.inf_amd64_7e96b5cfecffcac7\IntcUSB.sys [949216 2025-12-16] (Intel Corporation -> Intel(R) Corporation)
R3 IntelGNA; C:\WINDOWS\System32\DriverStore\FileRepository\gna.inf_amd64_04d4eecc5838a558\gna.sys [88760 2022-07-06] (Intel Corporation -> Intel Corporation)
R3 ipf_acpi; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_acpi.inf_amd64_d8fafa4e2f98ceba\ipf_acpi.sys [88768 2024-05-23] (Intel Corporation -> Intel Corporation)
R3 ipf_cpu; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_cpu.sys [88144 2024-05-23] (Intel Corporation -> Intel Corporation)
R3 ipf_lf; C:\WINDOWS\System32\DriverStore\FileRepository\ipf_cpu.inf_amd64_a50addc1f126c381\ipf_lf.sys [499392 2024-05-23] (Intel Corporation -> Intel Corporation)
S3 KslD; C:\WINDOWS\System32\drivers\wd\KslD.sys [82968 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [155000 2026-10-13] (Microsoft Windows -> Microsoft Corporation)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [235624 2026-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2026-10-21] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [217704 2026-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [133224 2026-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [245864 2026-10-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; \??\C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2026-10-21] (Malwarebytes Inc -> )
S3 nimm3dfu; C:\WINDOWS\System32\drivers\nimm3dfu.sys [39824 2018-10-16] (Native Instruments GmbH -> Native Instruments GmbH)
R3 nvpcf; C:\WINDOWS\System32\drivers\nvpcf.sys [308456 2026-03-17] (NVIDIA Corporation -> NVIDIA Corporation)
R2 SSPORT; \??\C:\windows\system32\Drivers\SSPORT.sys [14224 2022-05-02] (Microsoft Windows Hardware Compatibility Publisher -> )
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174416 2026-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 USBMidi2; C:\WINDOWS\System32\DriverStore\FileRepository\usbmidi2.inf_amd64_b65e0d0af0d372e6\USBMidi2.sys [106496 2026-10-13] (Microsoft Windows -> Microsoft Corporation)
R1 veracrypt; C:\WINDOWS\System32\drivers\veracrypt.sys [817672 2023-04-14] (Microsoft Windows Hardware Compatibility Publisher -> IDRIX)
S3 vkrnlintvsc; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsc.inf_amd64_ae7c1fb85fc0224e\vkrnlintvsc.sys [79168 2025-02-16] (Microsoft Windows -> Microsoft Corporation)
R3 vkrnlintvsp; C:\WINDOWS\System32\DriverStore\FileRepository\wvkrnlintvsp.inf_amd64_249e734e16ab4232\vkrnlintvsp.sys [87504 2026-08-13] (Microsoft Windows -> Microsoft Corporation)
S3 vlflt; C:\WINDOWS\System32\DRIVERS\vlflt.sys [481184 2023-06-01] (Microsoft Windows Hardware Compatibility Publisher -> Bitdefender)
S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-06-11] (Microsoft Windows -> Microsoft Corporation)
S4 WdAiNisDrv; C:\WINDOWS\System32\drivers\wd\WdAiNisDrv.sys [51224 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [21632 2026-10-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [669712 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [138264 2026-10-14] (Microsoft Windows -> Microsoft Corporation)
R3 WiManHu; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_1bb2c76cfbc82913\WiManHu\WiManHu.sys [218568 2026-02-11] (Intel Corporation -> Intel Corporation)
S3 WSDPrintDevice; C:\WINDOWS\System32\DriverStore\FileRepository\wsdprint.inf_amd64_1f9e32519098c0b6\WSDPrint.sys [57344 2025-02-16] (Microsoft Windows -> Microsoft Corporation)

==================== SvcHost (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-10-23 14:42 - 2026-10-23 14:44 - 000045981 _____ C:\Users\Max\Downloads\FRST.txt
2026-10-23 14:41 - 2026-10-23 14:43 - 000000000 ____D C:\FRST
2026-10-23 14:40 - 2026-10-23 14:41 - 002457088 _____ (Farbar) C:\Users\Max\Downloads\FRST64.exe
2026-10-21 21:50 - 2026-10-21 21:50 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2026-10-21 21:49 - 2026-10-22 21:57 - 000000000 ____D C:\Users\Max\AppData\Local\Malwarebytes
2026-10-21 21:49 - 2026-10-21 21:49 - 000002101 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2026-10-21 21:49 - 2026-10-21 21:49 - 000002089 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2026-10-21 21:49 - 2026-10-21 21:49 - 000000000 ____D C:\Users\Max\AppData\Local\Sentry
2026-10-21 21:48 - 2026-10-21 21:48 - 000000000 ____D C:\ProgramData\Malwarebytes
2026-10-21 21:47 - 2026-10-21 21:48 - 000000000 ____D C:\Program Files\Malwarebytes
2026-10-21 21:47 - 2026-10-21 21:47 - 002906704 _____ (Malwarebytes) C:\Users\Max\Downloads\MBSetup-7.7.exe
2026-10-21 15:52 - 2026-10-21 15:52 - 000698006 _____ C:\WINDOWS\system32\perfh007.dat
2026-10-21 15:52 - 2026-10-21 15:52 - 000150942 _____ C:\WINDOWS\system32\perfc007.dat
2026-10-21 14:51 - 2026-10-21 14:51 - 000000000 ____D C:\WINDOWS\Microsoft Antimalware
2026-10-21 01:39 - 2026-10-22 23:24 - 000000000 ____D C:\WINDOWS\CbsTemp
2026-10-20 19:50 - 2026-10-21 13:06 - 000000000 ____D C:\Program Files\Mozilla Firefox
2026-10-15 23:35 - 2026-10-22 13:03 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2026-10-13 20:42 - 2026-10-13 20:42 - 000091797 _____ C:\WINDOWS\SysWOW64\ctac.json
2026-10-13 20:42 - 2026-10-13 20:42 - 000091797 _____ C:\WINDOWS\system32\ctac.json
2026-10-13 20:42 - 2026-10-13 20:42 - 000039736 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2026-10-13 20:42 - 2026-10-13 20:42 - 000039736 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2026-10-13 20:42 - 2026-10-13 20:42 - 000004985 _____ C:\WINDOWS\system32\DeviceFeatureDDF.json
2026-10-08 22:21 - 2026-10-08 22:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi Download Assistant
2026-10-03 20:15 - 2026-10-03 20:15 - 118715181 _____ C:\Users\Max\Downloads\Foundation Course-20261003T181528Z-1-001.zip
2026-10-02 08:29 - 2026-10-02 08:29 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2026-09-28 20:01 - 2026-10-04 18:53 - 000001311 _____ C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Discord.lnk
2026-09-28 06:54 - 2026-10-23 03:08 - 000016615 _____ C:\Users\Max\Desktop\Japan Expenses.xlsx
2026-09-28 06:54 - 2026-09-28 06:54 - 000000165 ____H C:\Users\Max\Desktop\~$Japan Expenses.xlsx

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-10-23 14:45 - 2024-07-14 14:19 - 000000000 ____D C:\Program Files (x86)\Steam
2026-10-23 14:42 - 2025-10-19 19:57 - 000000000 ____D C:\Users\WsiAccount
2026-10-23 14:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2026-10-23 14:16 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioDatabase
2026-10-23 13:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2026-10-23 13:28 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2026-10-23 12:25 - 2025-12-19 22:33 - 000000000 ____D C:\Users\Max\Desktop\Max's PKM
2026-10-23 12:06 - 2025-08-25 23:42 - 001806236 _____ C:\Users\Max\AppData\LocalLow\48ebf18c1401a68f92c3442631cd352566de8f82437b3b83c09d3cd5306c2405
2026-10-23 11:46 - 2025-08-25 23:42 - 000001138 _____ C:\Users\Max\AppData\LocalLow\286efa2f40f3ea9ae1d33a1f2ba97746c0d967f4f30197efe6f04cadeb0ccbab
2026-10-23 09:50 - 2025-02-16 22:55 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2026-10-23 03:14 - 2023-04-18 13:11 - 000000000 ____D C:\Users\Max\AppData\Roaming\Anki2
2026-10-23 03:14 - 2023-04-12 13:14 - 000000000 ____D C:\Users\Max\AppData\Roaming\Microsoft\Word
2026-10-23 03:14 - 2023-04-12 13:03 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2026-10-23 03:08 - 2023-04-14 12:52 - 000000000 ____D C:\Users\Max\AppData\Roaming\Microsoft\Excel
2026-10-23 01:37 - 2025-12-06 21:58 - 000002564 _____ C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2026-10-22 23:24 - 2025-12-19 22:30 - 000000000 ____D C:\Users\Max\AppData\Roaming\obsidian
2026-10-22 22:02 - 2025-08-28 01:02 - 000000130 _____ C:\Users\Max\AppData\LocalLow\981c0756294e2a37d655c063711bcd570123439c3bd0e71a07f5025540c89aaa
2026-10-22 21:24 - 2025-08-28 01:02 - 000038099 _____ C:\Users\Max\AppData\LocalLow\49798e1ee2c5c0ce6eda1c74ff925d13e6fdfec02e09593f177958860a4ad850
2026-10-22 19:40 - 2025-02-16 23:23 - 000003574 _____ C:\WINDOWS\system32\Tasks\Launch Adobe CCXProcess
2026-10-22 12:40 - 2025-12-28 20:10 - 000000000 ____D C:\Users\Max\AppData\Roaming\The Froosh Amp
2026-10-22 12:40 - 2023-04-12 11:36 - 000000000 ____D C:\Users\Max\AppData\Local\D3DSCache
2026-10-22 05:18 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2026-10-21 22:25 - 2026-09-13 14:55 - 000267029 _____ C:\WINDOWS\system32\InstallMonitorLog.csv
2026-10-21 21:49 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2026-10-21 21:49 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2026-10-21 21:49 - 2023-04-12 11:29 - 000000000 ____D C:\Users\Max\AppData\Local\Packages
2026-10-21 21:49 - 2022-06-02 22:21 - 000000000 ____D C:\ProgramData\Packages
2026-10-21 21:01 - 2023-04-13 19:27 - 000000000 ____D C:\Users\Max\AppData\Local\CrashDumps
2026-10-21 15:52 - 2025-02-16 23:22 - 001637736 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2026-10-21 15:49 - 2025-11-16 14:05 - 000000130 _____ C:\Users\Max\AppData\LocalLow\06e56d9ebcd506c23ac3cac74ddecd166d6f9406d3c9d85c69c6ee31400f2447
2026-10-21 15:14 - 2025-08-25 23:22 - 000013497 _____ C:\Users\Max\AppData\LocalLow\19cba8bb7c48fdfb12bda34b03712a9057f03d374edd105673e20ce6a008ee41
2026-10-21 15:14 - 2025-08-15 14:58 - 000000000 ____D C:\ProgramData\boost_interprocess
2026-10-21 15:12 - 2025-02-16 23:23 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2026-10-21 15:12 - 2025-02-16 23:16 - 000018834 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2026-10-21 15:12 - 2024-11-05 00:57 - 000000000 ____D C:\Users\Max\AppData\Local\MuseSampler
2026-10-21 15:12 - 2024-11-05 00:57 - 000000000 ____D C:\Users\Max\AppData\Local\Muse Hub
2026-10-21 15:12 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ServiceState
2026-10-21 15:12 - 2023-04-12 11:38 - 000000000 ___RD C:\Users\Max\OneDrive
2026-10-21 15:12 - 2023-03-02 13:18 - 000000000 ____D C:\ProgramData\NVIDIA
2026-10-21 15:11 - 2022-06-02 22:20 - 000012288 ___SH C:\DumpStack.log.tmp
2026-10-21 13:44 - 2024-04-01 09:21 - 001048576 _____ C:\WINDOWS\system32\config\BBI
2026-10-21 13:06 - 2025-02-16 22:55 - 000001623 _____ C:\WINDOWS\system32\config\VSMIDK
2026-10-21 13:06 - 2023-04-12 13:03 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2026-10-21 13:05 - 2025-02-16 23:14 - 000000000 ____D C:\Users\Max
2026-10-21 12:36 - 2026-08-22 10:29 - 000002133 _____ C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-21 12:36 - 2025-02-16 23:23 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla
2026-10-21 12:36 - 2023-04-12 13:03 - 000001073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2026-10-21 09:33 - 2025-05-24 11:28 - 000000000 ____D C:\WINDOWS\Minidump
2026-10-21 09:33 - 2023-04-12 09:53 - 009670162 ____N C:\WINDOWS\Minidump\102126-27765-01.dmp
2026-10-20 21:12 - 2024-12-20 23:55 - 000000000 ____D C:\Users\Max\OneDrive\Documents\12 Guitar practice routine
2026-10-20 07:51 - 2025-02-16 23:23 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2026-10-20 07:51 - 2025-02-16 23:23 - 000003464 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2026-10-19 09:16 - 2026-03-15 19:23 - 000001063 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2026-10-18 23:33 - 2023-03-02 13:14 - 000000000 ____D C:\Program Files\Microsoft Office
2026-10-18 10:16 - 2022-06-02 22:20 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2026-10-15 15:09 - 2025-02-16 23:23 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-571881649-101344733-3185888103-1002
2026-10-15 15:09 - 2025-02-16 23:23 - 000003560 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-571881649-101344733-3185888103-1002
2026-10-15 15:09 - 2025-02-16 23:23 - 000003372 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-571881649-101344733-3185888103-1002
2026-10-15 15:09 - 2023-04-12 11:38 - 000002381 _____ C:\Users\Max\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2026-10-14 08:15 - 2022-06-02 22:20 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2026-10-14 07:43 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\USOPrivate
2026-10-14 04:25 - 2025-02-16 22:55 - 000630016 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2026-10-14 04:24 - 2025-12-10 05:18 - 000000000 ____D C:\WINDOWS\system32\NarratorMCAT
2026-10-14 04:24 - 2025-07-14 02:47 - 000000000 ____D C:\WINDOWS\system32\ruxim
2026-10-14 04:24 - 2024-04-01 18:36 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2026-10-14 04:24 - 2024-04-01 18:36 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Sysprep
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\setup
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\BrowserCore
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2026-10-14 04:24 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System
2026-10-14 04:24 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing
2026-10-14 04:23 - 2025-06-23 19:55 - 000000000 ____D C:\Users\Max\AppData\Roaming\discord
2026-10-13 20:42 - 2025-02-16 22:57 - 003387392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2026-10-13 20:03 - 2023-04-12 11:53 - 000000000 ____D C:\WINDOWS\system32\MRT
2026-10-13 19:56 - 2023-04-12 11:53 - 230303336 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2026-10-13 10:34 - 2022-09-17 23:43 - 000000000 ____D C:\Program Files\HP
2026-10-08 22:21 - 2026-06-15 21:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2026-10-08 22:21 - 2026-06-15 21:22 - 000000000 ____D C:\ProgramData\Logi
2026-10-08 22:21 - 2026-06-15 21:22 - 000000000 ____D C:\Program Files\LogiDownloadAssistant
2026-10-04 18:53 - 2025-06-23 19:55 - 000000000 ____D C:\Users\Max\AppData\Local\Discord
2026-10-01 07:21 - 2023-04-12 09:53 - 009718741 ____N C:\WINDOWS\Minidump\100126-22250-01.dmp
2026-09-28 07:54 - 2023-04-14 17:26 - 000000000 ____D C:\Users\Max\AppData\Roaming\Evernote

==================== Files in the root of some directories ========

2023-06-07 11:59 - 2023-06-07 11:59 - 000001456 _____ () C:\Users\Max\AppData\Local\Adobe Save for Web 13.0 Prefs

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================