Windows 10: In awd spyware.socelars angezeigt

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-08-2020
durchgeführt von esthe (Administrator) auf DESKTOP-HD3T3RE (HP HP Pavilion Desktop 595-p0xxx) (02-09-2020 10:32:14)
Gestartet von C:\Users\esthe\OneDrive\Desktop
Geladene Profile: esthe
Platform: Windows 10 Home Version 2004 19041.450 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\AvastUI.exe <4>
(Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(EmoKill@ZiMADE.de) [Datei ist nicht signiert] C:\Program Files\EmoKill\EmoKill.exe
(Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\HPNetworkCommunicator.exe
(Hewlett Packard -> Hewlett-Packard Co.) C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe
(HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_0b214be229a13e84\jhi_service.exe
(Intel(R) pGFX 2020 -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iaahcic.inf_amd64_614656429f721e16\RstMwService.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.BingWeather_4.45.22232.0_x64__8wekyb3d8bbwe\Microsoft.Msn.Weather.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12008.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20032.12611.0_x64__8wekyb3d8bbwe\Music.UI.exe
(Microsoft Windows -> ) C:\Windows\System32\EoAExperiences.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor Corp. -> Realtek) C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe
(Shenzhen Huion Animation Technology Co.,LTD -> ) C:\Huion Tablet\Huion Tablet.exe
(Shenzhen Huion Animation Technology Co.,LTD -> ) C:\Huion Tablet\x64\TabletDriverCore.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [TabletDriver] => C:\Huion Tablet\Huion Tablet.exe [240360 2020-06-05] (Shenzhen Huion Animation Technology Co.,LTD -> )
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [109160 2020-09-01] (Avast Software s.r.o. -> AVAST Software)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [709152 2018-03-22] (HP Inc. -> HP Inc.)
HKLM-x32\...\Run: [RtlS5Wake] => C:\Program Files (x86)\Realtek\PCIE Wireless LAN\RtlS5Wake\RtlS5Wake.exe [2107232 2017-12-19] (Realtek Semiconductor Corp. -> Realtek)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKLM-x32\...\Run: [KeePass 2 PreLoad] => C:\Program Files (x86)\KeePass Password Safe 2\KeePass.exe [3074752 2020-05-07] (Open Source Developer, Dominik Reichl -> Dominik Reichl)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [483976 2020-08-13] (Geek Software GmbH -> Geek Software GmbH)
HKU\S-1-5-19\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [518656 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
HKU\S-1-5-21-2449738435-461352921-102530778-1001\...\Run: [HP Officejet Pro 8600 (NET)] => C:\Program Files\HP\HP Officejet Pro 8600\Bin\ScanToPCActivationApp.exe [2573416 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKU\S-1-5-21-2449738435-461352921-102530778-1001\...\Run: [TabletDriver] => C:\Huion Tablet\x64\TabletDriverCore.exe [320744 2020-05-08] (Shenzhen Huion Animation Technology Co.,LTD -> )
HKU\S-1-5-21-2449738435-461352921-102530778-1001\...\RunOnce: [Application Restart #1] => C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\brave.exe [2075816 2020-08-27] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\...\Print\Monitors\HP 5912 Status Monitor: C:\Windows\System32\hpinksts5912LM.dll [331664 2012-06-18] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet Pro 8600): C:\Windows\System32\HPDiscoPM5912.dll [741480 2012-10-17] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files (x86)\BraveSoftware\Brave-Browser\Application\85.1.13.82\Installer\chrmstp.exe [2020-08-28] (Brave Software, Inc.) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Huion Tablet.lnk [2020-07-02]
ShortcutTarget: Huion Tablet.lnk -> C:\Huion Tablet\Huion Tablet.exe (Shenzhen Huion Animation Technology Co.,LTD -> )
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PHOTOfunSTUDIO 8.3 PE.lnk [2019-03-17]
ShortcutTarget: PHOTOfunSTUDIO 8.3 PE.lnk -> C:\Program Files (x86)\Common Files\Panasonic\PHOTOfunSTUDIO AutoStart\AutoStartupService.exe (Panasonic Corporation -> Panasonic Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG
FF HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {00E20C1C-DACD-4F72-B0FD-A1E2EB86AAA0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\Product Configurator => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\ProductConfig.exe
Task: {0B1A039A-CA52-4E72-A9BE-1C0BD6F42595} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe
Task: {120346AF-13E3-4103-B67A-7DE85B7897B1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1C0C68BF-4C4C-40DD-8CBB-E9B505462FAF} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {1C230E18-3AE4-4211-93DB-9AD766BA5DF4} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSFReport.exe
Task: {2704D403-F3D4-448D-951B-880A1280E951} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-26] (Google Inc -> Google LLC)
Task: {2B891F9E-11F9-4051-AFD0-6CEC8D2D6BAB} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [1760360 2020-09-01] (Avast Software s.r.o. -> Avast Software)
Task: {2EFF43FF-8F82-4F1D-BA7F-360DD7B2AC76} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [976832 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3C97B98D-2B02-4E25-8605-CC585A313F26} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4AC0B970-8B7E-4E5D-A1A2-4A9F2B9B0928} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {4C4DED66-9E6F-4125-8951-948FCA647019} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [757184 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {50E932D4-88A8-4EAC-B182-F76593835201} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [510912 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {62E2DCCE-2750-432F-867F-549510F0DFFA} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_414_Plugin.exe [1475640 2020-08-12] (Adobe Inc. -> Adobe)
Task: {67295FE0-BB3A-4C80-8F79-37CFC0539C5E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156456 2019-04-26] (Google Inc -> Google LLC)
Task: {75A65396-DED3-499D-B5BE-48E7AFE9BC88} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {75B04037-7C3B-43A6-916C-4557411259FB} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe
Task: {82391D8F-7224-4554-AB9B-FF504593DA9F} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {828C7550-0E1B-4662-A9C9-9F0D19B3B8DA} - System32\Tasks\HPEA3JOBS => C:\Program [Argument = Files\HP\HP ePrint\hpeprint.exe /CheckJobs]
Task: {8C6140E0-14F3-43EA-8221-2C160EC7BFFC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe
Task: {9118A47D-38E4-4BD3-A259-ED100F698539} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {968A397D-20C5-47AA-88D3-0AB0D3CCB46D} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [469952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C21EB1DF-911D-4B28-BD96-7CFFA99EC061} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2449738435-461352921-102530778-1001Core => C:\Users\esthe\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {C66BC8B3-8BEC-4205-80D2-0DD1BFD18C8E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-12] (Adobe Inc. -> Adobe)
Task: {C8F0EEEF-B2D2-49F8-8950-B96AA5E8CE7C} - System32\Tasks\Agent Activation Runtime\S-1-5-21-2449738435-461352921-102530778-1001 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-06-21] (Microsoft Windows -> )
Task: {CE613C6B-C795-47A9-B24F-DEB0DB0A5379} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe
Task: {D4CB1FB0-07E8-4C41-9154-0BD195AF8A10} - System32\Tasks\HPCeeScheduleForesthe => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [97656 2018-09-11] (HP Inc. -> HP Inc.)
Task: {DC8C0381-5F0D-47C0-852E-98ABAF717B46} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2069952 2018-03-14] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {E34169FF-0645-4139-9323-B0740AF1C276} - System32\Tasks\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [3850336 2020-09-01] (Avast Software s.r.o. -> AVAST Software)
Task: {EBBB5B7C-7D75-4757-AD1B-7B4AE36021DB} - System32\Tasks\GoogleUpdateTaskUserS-1-5-21-2449738435-461352921-102530778-1001UA => C:\Users\esthe\AppData\Local\Google\Update\GoogleUpdate.exe
Task: {F1A7F9FF-C187-4707-BEE5-B8D8351533A7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1336400 2020-07-08] (Adobe Inc. -> Adobe Inc.)
Task: {FCABBC61-B389-4A2D-84BD-471144A9605C} - System32\Tasks\RTKCPL => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-03-30] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\HPCeeScheduleForesthe.job => C:\Program Files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2433ad73-b034-4f90-b0e4-92a642927ddd}: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{644db9a0-0d4d-43d1-b347-ac78a1936ef5}: [DhcpNameServer] 172.168.0.7

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp17win10.msn.com/?pc=HCTE
SearchScopes: HKU\S-1-5-21-2449738435-461352921-102530778-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 

Edge: 
======
DownloadDir: C:\Users\esthe\Downloads
Edge Extension: (uBlock Origin) -> EdgeExtension_37833NikRollsuBlockOrigin_f8jsg5mm64m62 => C:\Program Files\WindowsApps\37833NikRolls.uBlockOrigin_1.15.24.0_neutral__f8jsg5mm64m62 [2020-03-05]
Edge Extension: (Avast Online Security) -> EdgeExtension_51CA791EAvastOnlineSecurity_s1d0xtrs8dx04 => C:\Program Files\WindowsApps\51CA791E.AvastOnlineSecurity_19.4.444.0_neutral__s1d0xtrs8dx04 [2020-03-05]
Edge Extension: (360 Viewer) -> EdgeExtension_Microsoft360Viewer_8wekyb3d8bbwe => C:\Program Files\WindowsApps\Microsoft.360Viewer_2.3.5.0_neutral__8wekyb3d8bbwe [2020-02-25]
Edge DefaultProfile: Default
Edge Profile: C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default [2020-09-01]
Edge DownloadDir: C:\Users\esthe\Downloads
Edge Extension: (Dark Theme for Edge) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\albginmgopmdjohhpejfkhnpokfpecon [2020-06-21]
Edge Extension: (Hotspot Shield Free VPN Proxy - Unlimited VPN) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cdbkakmeogejmlpgioplhjkaablahbmj [2020-08-03]
Edge Extension: (HTTPS Everywhere) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fchjpkplmbeeeaaogdbhjbgbknjobohb [2020-06-21]
Edge Extension: (Avast Online Security) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdgpikaaheckgdijjmepmdjjkbceakif [2020-06-21]
Edge Extension: (Dark Reader) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ifoakfbpdcdoeenechcleahebpibofpc [2020-07-29]
Edge Extension: (Privacy Badger) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\mkejgcgkdlddbggjhhflekkondicpnop [2020-08-27]
Edge Extension: (uBlock Origin) - C:\Users\esthe\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\odfafepnkmbhccpbejgmiehpchacaeak [2020-08-25]

FireFox:
========
FF DefaultProfile: 303j2t9k.default-1577480292134
FF ProfilePath: C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134 [2020-09-02]
FF DownloadDir: D:\Esther\verschiedenes\downloads
FF NewTab: Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134 -> about:newtab
FF Notifications: Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134 -> hxxps://mail.protonmail.com
FF Extension: (Disconnect) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\2.0@disconnect.me.xpi [2020-05-28]
FF Extension: (Facebook Container) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\@contain-facebook.xpi [2020-04-14]
FF Extension: (Firefox Multi-Account Containers) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\@testpilot-containers.xpi [2020-07-18]
FF Extension: (Windscribe - Free Proxy and Ad Blocker) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\@windscribeff.xpi [2020-04-16]
FF Extension: (Dark Reader) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\addon@darkreader.org.xpi [2020-07-28]
FF Extension: (Forecastfox (fix version)) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\forecastfox@s3_fix_version.xpi [2020-03-04]
FF Extension: (FoxyProxy Standard) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\foxyproxy@eric.h.jung.xpi [2020-07-30]
FF Extension: (HTTPS Everywhere) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\https-everywhere@eff.org.xpi [2020-08-20]
FF Extension: (Decentraleyes) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-04-02]
FF Extension: (Privacy Badger) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2020-08-27]
FF Extension: (Grammatik- und Rechtschreibprüfung - LanguageTool) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\languagetool-webextension@languagetool.org.xpi [2020-07-27]
FF Extension: (Print Edit WE) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\printedit-we@DW-dev.xpi [2020-09-01]
FF Extension: (Swisscows) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\swisscows@swisscows.ch.xpi [2020-02-11]
FF Extension: (Avast Online Security) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\wrc@avast.com.xpi [2020-06-18]
FF Extension: (Flagfox) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b}.xpi [2020-09-01]
FF Extension: (Stay secure with CyberGhost VPN Free Proxy) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{585280b0-ee78-428a-92c5-3fb3c0b85460}.xpi [2020-02-20] [UpdateUrl:hxxps://clients2.google.com/service/update2/crx]
FF Extension: (User-Agent Switcher and Manager) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{a6c4a591-f1b2-4f03-b3ff-767e5bedf4e7}.xpi [2020-08-11]
FF Extension: (Video DownloadHelper) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2020-03-31]
FF Extension: (MultiTranslate) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{c8f79b34-c3ff-4ce4-bdf4-eefa15c87f98}.xpi [2020-05-29]
FF Extension: (Read Aloud: A Text to Speech Voice Reader) - C:\Users\esthe\AppData\Roaming\Mozilla\Firefox\Profiles\303j2t9k.default-1577480292134\Extensions\{ddc62400-f22d-4dd3-8b4a-05837de53c2e}.xpi [2020-07-04]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_414.dll [2020-08-12] (Adobe Inc. -> )
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_414.dll [2020-08-12] (Adobe Inc. -> )
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=3 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: @tools.brave.com/BraveSoftware Update;version=9 -> C:\Program Files (x86)\BraveSoftware\Update\1.3.99.0\npBraveUpdate3.dll [2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-08-17] (Adobe Inc. -> Adobe Systems Inc.)

Chrome: 
=======
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-08-12] (Adobe Inc. -> Adobe)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7824280 2020-09-01] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [357848 2020-09-01] (Avast Software s.r.o. -> AVAST Software)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [58048 2020-09-01] (Avast Software s.r.o. -> AVAST Software)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [157320 2020-03-12] (Brave Software, Inc. -> BraveSoftware Inc.)
R2 EmoKill; C:\Program Files\EmoKill\EmoKill.exe [179200 2020-08-29] (EmoKill@ZiMADE.de) [Datei ist nicht signiert]
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1031704 2016-06-03] (Hewlett-Packard Company -> HP)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [628768 2017-07-13] (HP Inc. -> HP Inc.)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [483976 2020-08-13] (Geek Software GmbH -> Geek Software GmbH)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)