| |
| |||||||
Plagegeister aller Art und deren Bekämpfung: Spam Meldungen von Edge BenachrichtigungWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
 |
19.06.2023, 20:05
| #1 |
| |  Spam Meldungen von Edge Benachrichtigung Guten Tag Trojaner Board, seit heute kriege ich Benachrichtigungen vom Edge Browser über potentielle Bedrohungen und Werbung für Avira. Ich habe im Edge Browser zunächst die Berechtigungen und Zugänge blockiert - es handelt sich um "yourstend.auzrewebsite". Danach kamen keine weiteren Benachrichtigungen ein, nun bin trotzdem unsicher ob sich noch weitere Bedrohungen auf meinem Laptop befinden und dieser nach Möglichkeit korrumpiert ist. Vielleicht kann mir jemand von euch netterweise helfen, ich wäre sehr dankbar ! Für weitere Fragen oder Rückmeldungen bin ich jederzeit zur Verfügung. Habe bereits AdwCleaner und RK drüber laufen lassen. Danach FRST. Die folgenden Logs sind weiter unten zu finden. Mit freundlichen Grüßen Celteron AdwCleaner C00 Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-19-2023
# Duration: 00:00:08
# OS: Windows 10 (Build 19045.3086)
# Cleaned: 45
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
Deleted C:\Program Files (x86)\Chip Digital GmbH
Deleted C:\ProgramData\Application Data\Lavasoft\Web Companion
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
Deleted C:\Users\Chantal\AppData\Local\DOWNLOADED INSTALLATIONS\{31AD8258-894C-48D5-8149-C47506092754}
Deleted C:\Users\Chantal\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
Deleted C:\Users\Chantal\AppData\Roaming\DESKTOPICONAMAZON
Deleted C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
***** [ Files ] *****
Deleted C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
Deleted HKCU\Software\Lavasoft\Web Companion
Deleted HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
Deleted HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
Deleted HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
Deleted HKLM\Software\Classes\Installer\Features\DE9429122159FCC49A4DB945A3930DF7
Deleted HKLM\Software\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
Deleted HKLM\Software\Classes\Installer\Products\DE9429122159FCC49A4DB945A3930DF7
Deleted HKLM\Software\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
Deleted HKLM\Software\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E61B1AB66C44604797AC56F6BC3B0FF
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37A47D4566095BF44A2CA19FBDFA04A9
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B90A3D3F68EADC47B40D2D572B76E62
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\638EEBF8065E4B845AD5CAB77949D6CC
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\884DF2290FDFBE9408D20E763774932B
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F60B79E6444F2DE4EAC868B34B7EDADA
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FE90F95E2F75E9143B28CD4FD9C91A78
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DE9429122159FCC49A4DB945A3930DF7
Deleted HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
Deleted HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|DisplayIcon
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|DisplayName
Deleted HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|UninstallString
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{219249ED-9512-4CCF-A9D4-9B543A39D07F}
Deleted HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
Deleted HKLM\System\Setup\FirstBoot\Services\WCAssistantService
Deleted HKLM\System\Setup\FirstBoot\Services\chip1click
Deleted HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
Deleted HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
No Preinstalled Software cleaned.
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
AdwCleaner_Debug.log - [43556 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-19-2023
# Duration: 00:01:31
# OS: Windows 10 (Build 19045.3086)
# Scanned: 32101
# Detected: 77
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
PUP.Optional.Chip C:\Program Files (x86)\Chip Digital GmbH
PUP.Optional.Chip C:\Users\Chantal\AppData\Local\DOWNLOADED INSTALLATIONS\{31AD8258-894C-48D5-8149-C47506092754}
PUP.Optional.Chip C:\Windows\Installer\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Legacy C:\Users\Chantal\AppData\Roaming\DESKTOPICONAMAZON
PUP.Optional.WebCompanion C:\ProgramData\Application Data\Lavasoft\Web Companion
PUP.Optional.WebCompanion C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft\WebCompanion
PUP.Optional.WebCompanion C:\Users\Chantal\AppData\Local\Lavasoft\WEBCOMPANION.EXE_URL_SIQ0LWF3TZGXP2KHFKLLYBK3IDTBEHNG
***** [ Files ] *****
PUP.Optional.Booking C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Booking.com.lnk
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|DisplayIcon
PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|DisplayName
PUP.Adware.Heuristic HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{462d44f7-0f0f-45ff-b857-f52f2906e7e5}|UninstallString
PUP.Optional.Chip HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application\chip 1-click download service
PUP.Optional.Chip HKLM\Software\Classes\Installer\Features\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip HKLM\Software\Classes\Installer\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip HKLM\Software\Classes\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UpgradeCodes\04A063A0BBEACF54EAEF493C49D9E3F6
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\2E61B1AB66C44604797AC56F6BC3B0FF
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\37A47D4566095BF44A2CA19FBDFA04A9
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\5B90A3D3F68EADC47B40D2D572B76E62
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\638EEBF8065E4B845AD5CAB77949D6CC
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\884DF2290FDFBE9408D20E763774932B
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\F60B79E6444F2DE4EAC868B34B7EDADA
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\FE90F95E2F75E9143B28CD4FD9C91A78
PUP.Optional.Chip HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\E49AC3054380EEC4DA29AB71FAE408A9
PUP.Optional.Chip HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}
PUP.Optional.Chip HKLM\System\Setup\FirstBoot\Services\chip1click
PUP.Optional.Conduit HKCU\Software\Microsoft\Internet Explorer\Main|Start Page
PUP.Optional.Conduit HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}
PUP.Optional.Legacy HKLM\System\Setup\FirstBoot\Services\WCAssistantService
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\azlyrics.com
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\search.azlyrics.com
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\www.azlyrics.com
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\azlyrics.com
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\search.azlyrics.com
PUP.Optional.Legacy HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\www.azlyrics.com
PUP.Optional.Vondos HKLM\Software\Classes\Installer\Features\DE9429122159FCC49A4DB945A3930DF7
PUP.Optional.Vondos HKLM\Software\Classes\Installer\Products\DE9429122159FCC49A4DB945A3930DF7
PUP.Optional.Vondos HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DE9429122159FCC49A4DB945A3930DF7
PUP.Optional.Vondos HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{219249ED-9512-4CCF-A9D4-9B543A39D07F}
PUP.Optional.WebCompanion HKCU\Software\Lavasoft\Web Companion
PUP.Optional.WebCompanion HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKLM\Software\Wow6432Node\Lavasoft\Web Companion
PUP.Optional.WebCompanion HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
PUP.Optional.WebCompanion HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
Preinstalled.HPRegistrationService Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Preinstalled.HPRegistrationService Folder C:\ProgramData\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Preinstalled.HPRegistrationService Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D1E8F2D7-7794-4245-B286-87ED86C1893C}
Preinstalled.HPSupportAssistant Folder C:\HP\SUPPORT
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{E959FD01-BD01-4CC4-9BB8-4EBE8309BF37}
Preinstalled.HPSupportAssistant Registry HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPWelcome File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Welcome.lnk
Preinstalled.HPWelcome Folder C:\Program Files\HP\HP WELCOME
Preinstalled.HPWelcome Folder C:\ProgramData\HP\HP WELCOME
Preinstalled.HPWelcome Folder C:\Users\Chantal\AppData\Local\HP\HP WELCOME
Preinstalled.HPWelcome Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HPWelcome
Preinstalled.SamsungSmartSwitch File C:\Users\Chantal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Smart Switch.lnk
Preinstalled.SamsungSmartSwitch Folder C:\Program Files (x86)\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\Users\Chantal\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\Users\Internet\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
AdwCleaner_Debug.log - [17542 octets] - [19/06/2023 20:18:58]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S00].txt ##########
Code:
ATTFilter Program : RogueKiller Anti-Malware
Version : 15.10.0.0
x64 : Yes
Program Date : May 24 2023
Location : C:\Users\Internet\Desktop\RogueKiller_portable64.exe
Premium : No
Company : Adlice Software
Website : https://www.adlice.com/
Contact : https://adlice.com/contact/
Website : https://adlice.com/download/roguekiller/
Operating System : Windows 10 (10.0.19045) 64-bit
64-bit OS : Yes
Startup : 0
WindowsPE : No
User : Chantal
User is Admin : Yes
Date : 2023/06/19 18:15:06
Type : Removal
Aborted : No
Scan Mode : Standard
Duration : 3272
Found items : 15
Total scanned : 82889
Signatures Version : 20230619_080829
Truesight Driver : Yes
Updates Count : 8
************************* Warnings *************************
************************* Removal *************************
[PUP.ChipDe (Potenziell bösartig)] chip 1-click installer.exe -- %programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe -> Beendet [Tree]
[+] scan_what : 1
[+] vendors : PUP.ChipDe
[+] Name : chip 1-click installer.exe
[+] value : %programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe
[+] Type : Process
[+] file_hash : 1B94AAA71618D4ECBA665130AE54EF38B17794157123675B24641DC85A379426
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 0
[+] status : 3
[+] status_str : Beendet [Tree]
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.WebCompanion|PUP.BundleInstaller (Potenziell bösartig)] Lavasoft.WCAssistant.WinService.exe [LAVASOFT SOFTWARE CANADA INC] -- %programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe -> Beendet [Tree]
[+] scan_what : 1
[+] vendors : PUP.WebCompanion|PUP.BundleInstaller
[+] Name : Lavasoft.WCAssistant.WinService.exe [LAVASOFT SOFTWARE CANADA INC]
[+] value : %programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
[+] Type : Process
[+] file_hash : A134B8CECAD3F5B245FF53FD17801CD10EC18CE97B0C1262C197B078925B543D
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 1
[+] status : 3
[+] status_str : Beendet [Tree]
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.ChipDe (Potenziell bösartig)] chip1click -- %programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe -> Gestoppt
[+] scan_what : 0
[+] vendors : PUP.ChipDe
[+] Name : chip1click
[+] value : %programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe
[+] Type : Service
[+] file_hash : 1B94AAA71618D4ECBA665130AE54EF38B17794157123675B24641DC85A379426
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 2
[+] status : 3
[+] status_str : Gestoppt
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.Gen0 (Potenziell bösartig)] WCAssistantService [LAVASOFT SOFTWARE CANADA INC] -- %programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe -> ERROR [6D]
[+] scan_what : 0
[+] vendors : PUP.Gen0
[+] Name : WCAssistantService [LAVASOFT SOFTWARE CANADA INC]
[+] value : %programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe
[+] Type : Service
[+] file_hash : A134B8CECAD3F5B245FF53FD17801CD10EC18CE97B0C1262C197B078925B543D
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 3
[+] status : 4
[+] status_str : ERROR [6D]
[+] removed : No
[+] status_choice : 2
[+] malpe_score : 0
[PUP.Gen1 (Potenziell bösartig)] HKEY_USERS\.DEFAULT\Software\OCS -- -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.Gen1
[+] Name : HKEY_USERS\.DEFAULT\Software\OCS
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 4
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.Gen1 (Potenziell bösartig)] HKEY_USERS\S-1-5-21-827383328-2660241748-3898587492-1001\Software\OCS -- -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.Gen1
[+] Name : HKEY_USERS\S-1-5-21-827383328-2660241748-3898587492-1001\Software\OCS
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 5
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.Gen1 (Potenziell bösartig)] HKEY_USERS\S-1-5-18\Software\OCS -- -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.Gen1
[+] Name : HKEY_USERS\S-1-5-18\Software\OCS
[+] Type : Registry
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 6
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.WebCompanion|PUP.BundleInstaller (Potenziell bösartig)] HKEY_USERS\S-1-5-21-827383328-2660241748-3898587492-1001\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion -- [%programfiles(x86)%\Lavasoft\Web Companion\Application\WebCompanion.exe] -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.WebCompanion|PUP.BundleInstaller
[+] Name : HKEY_USERS\S-1-5-21-827383328-2660241748-3898587492-1001\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
[+] value : [%programfiles(x86)%\Lavasoft\Web Companion\Application\WebCompanion.exe]
[+] Type : Registry
[+] file_hash : C15BD6A976AD5929B356F283777F4915390DE6A59F58D859ADA5F60139B867B4
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 7
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.ChipDe (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\chip1click -- [%programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe] -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.ChipDe
[+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\chip1click
[+] value : [%programfiles(x86)%\Chip Digital GmbH\chip1click\chip 1-click installer.exe]
[+] Type : Registry
[+] file_hash : 1B94AAA71618D4ECBA665130AE54EF38B17794157123675B24641DC85A379426
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 8
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.Gen0 (Potenziell bösartig)] HKEY_LOCAL_MACHINE\System\ControlSet001\Services\WCAssistantService -- [%programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe] -> Gelöscht
[+] scan_what : 2
[+] vendors : PUP.Gen0
[+] Name : HKEY_LOCAL_MACHINE\System\ControlSet001\Services\WCAssistantService
[+] value : [%programfiles(x86)%\Lavasoft\Web Companion\Application\Lavasoft.WCAssistant.WinService.exe]
[+] Type : Registry
[+] file_hash : A134B8CECAD3F5B245FF53FD17801CD10EC18CE97B0C1262C197B078925B543D
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 9
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.WebCompanion|PUP.BundleInstaller (Potenziell bösartig)] Web Companion -- %APPDATA%\Lavasoft\Web Companion -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.WebCompanion|PUP.BundleInstaller
[+] Name : Web Companion
[+] value : %APPDATA%\Lavasoft\Web Companion
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 10
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.BundleInstaller (Potenziell bösartig)] Web Companion -- %programdata%\Lavasoft\Web Companion -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.BundleInstaller
[+] Name : Web Companion
[+] value : %programdata%\Lavasoft\Web Companion
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 11
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.ChipDe (Potenziell bösartig)] chip1click -- %programfiles(x86)%\Chip Digital GmbH\chip1click -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.ChipDe
[+] Name : chip1click
[+] value : %programfiles(x86)%\Chip Digital GmbH\chip1click
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 12
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[PUP.WebCompanion|PUP.BundleInstaller (Potenziell bösartig)] Web Companion -- %programfiles(x86)%\Lavasoft\Web Companion -> Gelöscht
[+] scan_what : 1
[+] vendors : PUP.WebCompanion|PUP.BundleInstaller
[+] Name : Web Companion
[+] value : %programfiles(x86)%\Lavasoft\Web Companion
[+] Type : File/Folder
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 3
[+] id : 13
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
[Adw.DownloadSponsor (Bösartig)] Calibre 32 Bit - CHIP-Installer.exe -- %SystemDrive%\Users\Internet\Downloads\Calibre 32 Bit - CHIP-Installer.exe -> Gelöscht
[+] scan_what : 1
[+] vendors : Adw.DownloadSponsor
[+] Name : Calibre 32 Bit - CHIP-Installer.exe
[+] value : %SystemDrive%\Users\Internet\Downloads\Calibre 32 Bit - CHIP-Installer.exe
[+] Type : File/Folder
[+] file_hash : B06D22658615DD7885AAAEACE4CE3F8BC1D8B0D0229A003EDDBE0C98CE4949AB
[+] file_vtscore : 0
[+] file_vttotal : 0
[+] is_malicious : Yes
[+] detection_level : 2
[+] id : 14
[+] status : 3
[+] status_str : Gelöscht
[+] removed : Yes
[+] status_choice : 2
[+] malpe_score : 0
|
|
19.06.2023, 20:05
| #2 |
| | weitere Logs FRST
__________________Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-06-2023
durchgeführt von Internet (ACHTUNG: der Benutzer ist kein Administrator) auf LAPTOP-8IJA6MO6 (HP HP 250 G5 Notebook PC) (19-06-2023 20:47:00)
Gestartet von C:\Users\Internet\Desktop\FRST64.exe
Geladene Profile: Chantal & Internet
Plattform: Microsoft Windows 10 Home Version 22H2 19045.3086 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\wfcrun32.exe
(explorer.exe ->) (ADLICE -> ) C:\Users\Internet\Desktop\RogueKiller_portable64.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\AMCore\mcshield.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe
(McAfee, Inc. -> McAfee, Inc.) C:\Program Files\Common Files\McAfee\platform\McUICnt.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
konnte nicht auf den Prozess zugreifen -> conhost.exe
konnte nicht auf den Prozess zugreifen -> csrss.exe
konnte nicht auf den Prozess zugreifen -> csrss.exe
konnte nicht auf den Prozess zugreifen -> dasHost.exe
konnte nicht auf den Prozess zugreifen -> dasHost.exe
konnte nicht auf den Prozess zugreifen -> dllhost.exe
konnte nicht auf den Prozess zugreifen -> dllhost.exe
konnte nicht auf den Prozess zugreifen -> dwm.exe
konnte nicht auf den Prozess zugreifen -> fontdrvhost.exe
konnte nicht auf den Prozess zugreifen -> fontdrvhost.exe
konnte nicht auf den Prozess zugreifen -> GoogleCrashHandler.exe
konnte nicht auf den Prozess zugreifen -> GoogleCrashHandler64.exe
konnte nicht auf den Prozess zugreifen -> GoogleUpdate.exe
konnte nicht auf den Prozess zugreifen -> HPSupportSolutionsFrameworkService.exe
konnte nicht auf den Prozess zugreifen -> LMS.exe
konnte nicht auf den Prozess zugreifen -> lsass.exe
konnte nicht auf den Prozess zugreifen -> mcapexe.exe
konnte nicht auf den Prozess zugreifen -> McCSPServiceHost.exe
konnte nicht auf den Prozess zugreifen -> McSvHost.exe
konnte nicht auf den Prozess zugreifen -> McVulCtr.exe
konnte nicht auf den Prozess zugreifen -> mfefire.exe
konnte nicht auf den Prozess zugreifen -> mfefire.exe
konnte nicht auf den Prozess zugreifen -> mfemms.exe
konnte nicht auf den Prozess zugreifen -> mfevtps.exe
konnte nicht auf den Prozess zugreifen -> mfevtps.exe
konnte nicht auf den Prozess zugreifen -> ModuleCoreService.exe
konnte nicht auf den Prozess zugreifen -> MoUsoCoreWorker.exe
konnte nicht auf den Prozess zugreifen -> MsMpEng.exe
konnte nicht auf den Prozess zugreifen -> NisSrv.exe
konnte nicht auf den Prozess zugreifen -> OfficeClickToRun.exe
konnte nicht auf den Prozess zugreifen -> pdf24.exe
konnte nicht auf den Prozess zugreifen -> PEFService.exe
konnte nicht auf den Prozess zugreifen -> PresentationFontCache.exe
konnte nicht auf den Prozess zugreifen -> RAVBg64.exe
konnte nicht auf den Prozess zugreifen -> RtkAudioService64.exe
konnte nicht auf den Prozess zugreifen -> SearchIndexer.exe
konnte nicht auf den Prozess zugreifen -> SecurityHealthService.exe
konnte nicht auf den Prozess zugreifen -> services.exe
konnte nicht auf den Prozess zugreifen -> SgrmBroker.exe
konnte nicht auf den Prozess zugreifen -> smss.exe
konnte nicht auf den Prozess zugreifen -> spoolsv.exe
konnte nicht auf den Prozess zugreifen -> ss_conn_service2.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> svchost.exe
konnte nicht auf den Prozess zugreifen -> VpnSvc.exe
konnte nicht auf den Prozess zugreifen -> wininit.exe
konnte nicht auf den Prozess zugreifen -> winlogon.exe
konnte nicht auf den Prozess zugreifen -> wlanext.exe
konnte nicht auf den Prozess zugreifen -> WmiPrvSE.exe
konnte nicht auf den Prozess zugreifen -> WUDFHost.exe
konnte nicht auf den Prozess zugreifen -> WUDFHost.exe
konnte nicht auf den Prozess zugreifen -> XtuService.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [StartCN] => c:\Program Files\AMD\CNext\CNext\cnext.exe [4926664 2016-02-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2016-01-29] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [472200 2019-03-04] (Geek Software GmbH -> Geek Software GmbH)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2237024 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [470112 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM\...\RunOnce: [SRS_APO_Install] => C:\WINDOWS\system32\SRSLabs\{176F4E15-8F7C-4833-ADED-81FAE8CCD186}\slInit64.dll [220800 2020-04-24] (DTS, Inc. -> SRS Labs, Inc.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114017640 2021-08-10] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Internet\AppData\Local\Microsoft\Teams\Update.exe [1789768 2019-08-21] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23979456 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [MicrosoftEdgeAutoLaunch_8F3D81AFF99A6A750B733B4DAFFB12B7] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4113824 2023-06-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\MountPoints2: {6d56cab0-2d82-11ec-b9fb-84ef1872f0a0} - "F:\OnePlus_setup.exe" /s
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\MountPoints2: {dc95cbf3-84aa-11eb-b99d-98e7f4dda46b} - "F:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\114.0.5735.134\Installer\chrmstp.exe [2023-06-16] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-05-08]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
Startup: C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-04-23]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job =>
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job =>
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{90ff1809-2c04-4b54-9cf6-1b0ba310e973}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{c533e8fc-2ece-41b1-9bcf-3e3120a70833}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default [2023-06-19]
Edge Extension: (Edge relevant text changes) - C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-04-24]
Edge Extension: (Zotero Connector) - C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nmhdhpibnnopknkmonacoephklnflpho [2023-06-12]
FireFox:
========
FF DefaultProfile: 2r8jb1om.default
FF DefaultProfile: 5764gdsb.default
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Zotero\Zotero\Profiles\2r8jb1om.default [2023-06-19]
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default [2023-06-19]
FF Extension: (Graffiti – Soft) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\graffiti-soft-colorway@mozilla.org.xpi [2023-05-24]
FF Extension: (Preisheld) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\{69c49344-90ec-458d-9811-a55878e26bd1}.xpi [2019-07-06]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-05-24]
FF HKLM\...\Firefox\Extensions: [{69c49344-90ec-458d-9811-a55878e26bd1}] - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi
FF Extension: (Preisheld) - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi [2019-05-17]
FF HKLM-x32\...\Firefox\Extensions: [{69c49344-90ec-458d-9811-a55878e26bd1}] - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi
FF HKLM-x32\...\Thunderbird\Extensions: [msktbird@mcafee.com] - C:\Program Files\McAfee\MSK
FF Extension: (McAfee Anti-Spam Thunderbird Extension) - C:\Program Files\McAfee\MSK [2017-04-02] [] [ist nicht signiert]
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-15] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @mcafee.com/MSC,version=10 -> C:\Program Files\mcafee\msc\npMcSnFFPl64.dll [2017-02-28] (McAfee, Inc. -> )
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-15] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @mcafee.com/MSC,version=10 -> C:\Program Files (x86)\McAfee\msc\npMcSnFFPl.dll [2017-02-28] (McAfee, Inc. -> )
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default [2023-02-11]
CHR Extension: (Proctorio) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmapakogndmenjcfoajifaaonnkpkei [2023-02-11]
CHR Extension: (Google Docs Offline) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-19]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-15] (Adobe Inc. -> Adobe)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11749376 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
S3 ClientAnalyticsService; C:\Program Files\Common Files\McAfee\ClientAnalytics\Legacy\McClientAnalytics.exe [1752992 2017-03-29] (McAfee, Inc. -> Intel Security)
S2 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [43616 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
R2 HomeNetSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26168 2015-12-20] (Hewlett-Packard Company -> Hewlett-Packard Company)
S2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
S3 Intel(R) WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-09-17] (Intel(R) Software Asset Manager -> Intel Corporation)
R3 lmhosts; C:\WINDOWS\System32\svchost.exe [55320 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 lmhosts; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 McAPExe; C:\Program Files\Common Files\McAfee\VSCore_15_6\McApExe.exe [994312 2017-03-13] (McAfee, Inc. -> McAfee, Inc.)
S3 McAWFwk; C:\Program Files\Common Files\McAfee\ActWiz\McAWFwk.exe [352104 2015-09-29] (McAfee, Inc. -> McAfee, Inc.)
R2 mcbootdelaystartsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 mccspsvc; C:\Program Files\Common Files\McAfee\CSP\2.3.322.0\\McCSPServiceHost.exe [2054080 ] (McAfee, Inc. -> McAfee, Inc.)
R2 McMPFSvc; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 McNaiAnn; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
S3 McODS; C:\Program Files\mcafee\VirusScan\mcods.exe [1344472 2017-02-24] (McAfee, Inc. -> McAfee, Inc.)
S4 McOobeSv2; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 mcpltsvc; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 McProxy; C:\Program Files\Common Files\McAfee\platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R3 mfefire; C:\Program Files\Common Files\McAfee\SystemCore\\mfefire.exe [241040 ] (McAfee, Inc. -> McAfee, Inc.)
R2 mfemms; C:\Program Files\Common Files\McAfee\SystemCore\\mfemms.exe [385112 ] (McAfee, Inc. -> McAfee, Inc.)
R3 mfevtp; C:\windows\system32\mfevtps.exe [343792 2017-01-18] (McAfee, Inc. -> McAfee, Inc.)
R2 ModuleCoreService; C:\Program Files\Common Files\McAfee\ModuleCore\ModuleCoreService.exe [1551512 2017-02-26] (McAfee, Inc. -> McAfee, Inc.)
S3 MSK80Service; C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe [641520 2017-02-22] (McAfee, Inc. -> McAfee, Inc.)
R2 NlaSvc; C:\WINDOWS\System32\svchost.exe [55320 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 NlaSvc; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\system32\svchost.exe [55320 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 nsi; C:\WINDOWS\SysWOW64\svchost.exe [46504 2022-07-18] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2021-01-06] (Microsoft Windows -> Microsoft Corporation)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [472200 2019-03-04] (Geek Software GmbH -> Geek Software GmbH)
R2 PEFService; C:\Program Files\Common Files\Intel Security\PEF\CORE\PEFService.exe [1104304 2016-11-15] (McAfee, Inc. -> Intel Security, Inc.)
S2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [10043288 2023-05-06] (Avast Software s.r.o. -> AVAST Software)
S2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-11-25] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-11-25] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe [3232576 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe [133592 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [76664 2023-05-06] (Avast Software s.r.o. -> Avast Software)
R3 cfwids; C:\WINDOWS\System32\drivers\cfwids.sys [88464 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 HipShieldK; C:\WINDOWS\System32\drivers\HipShieldK.sys [207968 2016-02-24] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeaack; C:\WINDOWS\System32\drivers\mfeaack.sys [487184 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeavfk; C:\WINDOWS\System32\drivers\mfeavfk.sys [366328 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
S0 mfeelamk; C:\WINDOWS\System32\drivers\mfeelamk.sys [85048 2017-01-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> McAfee, Inc.)
R3 mfefirek; C:\WINDOWS\System32\drivers\mfefirek.sys [518704 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
R0 mfehidk; C:\WINDOWS\System32\drivers\mfehidk.sys [923640 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
R3 mfencbdc; C:\WINDOWS\System32\DRIVERS\mfencbdc.sys [498648 2017-01-19] (McAfee, Inc. -> McAfee, Inc.)
S3 mfencrk; C:\WINDOWS\System32\DRIVERS\mfencrk.sys [109320 2017-01-19] (McAfee, Inc. -> McAfee, Inc.)
R3 mfeplk; C:\WINDOWS\System32\drivers\mfeplk.sys [110256 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
R0 mfewfpk; C:\WINDOWS\System32\drivers\mfewfpk.sys [254800 2017-01-20] (McAfee, Inc. -> McAfee, Inc.)
R3 MpKsla3f0afc3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{62B877A7-A09E-4751-B083-83B6CA20B1D6}\MpKslDrv.sys [213288 2023-06-19] (Microsoft Windows -> Microsoft Corporation)
S3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377232 2017-03-11] (Windows Central Build Account - X -> MediaTek Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
U3 TrueSight; C:\Windows\System32\drivers\truesight.sys [41920 2023-06-19] (ADLICE (Julien ASCOET) -> )
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2023-06-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99568 2023-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-06-19 20:47 - 2023-06-19 20:47 - 000028724 _____ C:\Users\Internet\Desktop\FRST.txt
2023-06-19 20:33 - 2023-06-19 20:33 - 000001248 _____ C:\Users\Internet\Desktop\Google Chrome.lnk
2023-06-19 20:29 - 2023-06-19 20:29 - 000041920 _____ C:\WINDOWS\system32\Drivers\truesight.sys
2023-06-19 20:28 - 2023-06-19 19:09 - 035208624 _____ C:\Users\Internet\Desktop\RogueKiller_portable64.exe
2023-06-19 20:17 - 2023-06-19 20:21 - 000000000 ____D C:\AdwCleaner
2023-06-19 19:24 - 2023-06-19 19:24 - 000196077 _____ C:\Users\Internet\Downloads\Change Erfolgsfaktoren_Psychologie.pdf
2023-06-19 19:18 - 2023-06-19 20:13 - 000000000 ____D C:\ProgramData\RogueKiller
2023-06-19 19:12 - 2023-06-19 20:47 - 000000000 ____D C:\FRST
2023-06-19 19:12 - 2023-06-19 18:58 - 002383360 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2023-06-19 18:16 - 2023-06-19 18:17 - 000000000 ____D C:\Users\Internet\Desktop\Meine Bibliothek
2023-06-14 20:27 - 2023-06-14 20:27 - 000170628 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.27.25.jpeg
2023-06-14 20:26 - 2023-06-14 20:26 - 000134907 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.26.23.jpeg
2023-06-14 20:25 - 2023-06-14 20:25 - 000180878 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.25.40.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000526634 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.24.19.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000346182 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54 (2).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000329312 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.53.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000327494 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.50 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000316888 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000313413 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000288775 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.53 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000255965 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.50.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000360185 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.12.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000352397 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.13.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000161418 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.39.jpeg
2023-06-14 20:22 - 2023-06-14 20:23 - 000129273 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.38 (1).jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000361858 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.41.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000339089 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.40.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000329885 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.40 (1).jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000325747 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.43.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000280093 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.44.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000190616 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.37.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000172474 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.38.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000144278 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.45.jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000321557 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.44 (1).jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000206001 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.19.24.jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000152261 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.20.10.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000357861 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.12.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000346469 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.13.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000345386 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.13 (1).jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000321557 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.44.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000317671 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.14.jpeg
2023-06-14 20:15 - 2023-06-14 20:15 - 000210693 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.15.25.jpeg
2023-06-14 20:15 - 2023-06-14 20:15 - 000189081 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.15.36.jpeg
2023-06-14 20:14 - 2023-06-14 20:14 - 000295585 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.14.11.jpeg
2023-06-14 20:13 - 2023-06-14 20:14 - 000310926 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.53.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000332422 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.22.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000261781 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.24.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000259213 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.21.jpeg
2023-06-14 20:12 - 2023-06-14 20:13 - 000241760 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.12.47.jpeg
2023-06-14 20:12 - 2023-06-14 20:12 - 000253393 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.11.56.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000283890 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09 (1).jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000269949 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000258181 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.08.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000219043 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09 (2).jpeg
2023-06-14 20:09 - 2023-06-14 20:09 - 000292375 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.13.jpeg
2023-06-14 20:03 - 2023-06-14 20:03 - 012128199 _____ C:\Users\Internet\Downloads\WhatsApp Video 2023-06-14 at 20.02.44.mp4
2023-06-14 20:02 - 2023-06-14 20:02 - 000512069 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.02.44.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000816946 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.44.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000777098 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.42.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000707699 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.41 (1).jpeg
2023-06-14 20:00 - 2023-06-14 20:01 - 000707699 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.41.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000889263 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.38.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000775807 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.39.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000768961 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.40.jpeg
2023-06-14 19:58 - 2023-06-14 19:58 - 000064373 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.58.00.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000457032 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.17.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000278855 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.35.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000061591 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.46.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000234208 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.00 (1).jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000227104 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.01.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000211191 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.02.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000155057 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.00.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000134378 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.34.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000098715 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.51.jpeg
2023-06-14 19:48 - 2023-06-14 19:48 - 000314336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.48.20.jpeg
2023-06-14 19:46 - 2023-06-14 19:46 - 000195892 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.46.46.jpeg
2023-06-14 19:46 - 2023-06-14 19:46 - 000036037 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.46.14.jpeg
2023-06-14 19:45 - 2023-06-14 19:45 - 000212649 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.45.41.jpeg
2023-06-14 19:42 - 2023-06-14 19:42 - 000387976 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.42.45.jpeg
2023-06-14 19:39 - 2023-06-14 19:39 - 000416695 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.39.40.jpeg
2023-06-14 19:39 - 2023-06-14 19:39 - 000379043 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.39.18.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000109465 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.57.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000103517 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.58.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000087294 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.58 (1).jpeg
2023-06-14 19:36 - 2023-06-14 19:36 - 000128230 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.56.jpeg
2023-06-14 19:36 - 2023-06-14 19:36 - 000114901 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.55.jpeg
2023-06-14 19:33 - 2023-06-14 19:33 - 000185670 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.33.23.jpeg
2023-06-14 19:30 - 2023-06-14 19:31 - 000079175 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.27.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000269454 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.19.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000241942 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.18.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000162160 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.20.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000122165 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22 (1).jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000093454 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000085393 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22 (2).jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000078419 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.24.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000067351 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.26.jpeg
2023-06-14 19:29 - 2023-06-14 19:30 - 000577892 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.11.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000262644 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.15.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000246566 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.13.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000239103 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.15 (1).jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000222944 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.14 (1).jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000219412 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.12.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000194820 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.14.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000571936 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.40.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000561153 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.41 (1).jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000535070 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.41.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000264335 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.42.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000243494 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.24.25.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000187806 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.24.20.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000580961 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.39.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000568816 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.35.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000565913 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.32 (1).jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000555695 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33 (1).jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000554505 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000548118 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.32.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000542994 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.37.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000539945 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.36.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000347485 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33 (2).jpeg
2023-06-14 19:21 - 2023-06-14 19:21 - 000269222 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.21.10.jpeg
2023-06-14 19:21 - 2023-06-14 19:21 - 000263682 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.21.09.jpeg
2023-06-14 19:20 - 2023-06-14 19:20 - 000468630 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.20.16.jpeg
2023-06-14 19:20 - 2023-06-14 19:20 - 000444866 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.20.16 (1).jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000541578 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.32.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000530443 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.37.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000181722 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.42.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000176618 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.40 (1).jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000147336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.42.jpeg
2023-06-14 19:18 - 2023-06-14 19:18 - 000199076 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.40.jpeg
2023-06-14 19:16 - 2023-06-14 19:16 - 000470846 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.15.59.jpeg
2023-06-14 19:15 - 2023-06-14 19:15 - 000226511 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.15.16.jpeg
2023-06-14 19:13 - 2023-06-14 19:13 - 000244216 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.13.05.jpeg
2023-06-14 19:11 - 2023-06-14 19:11 - 000121492 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.10.49.jpeg
2023-06-14 19:10 - 2023-06-14 19:10 - 000164343 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.10.48.jpeg
2023-06-14 19:09 - 2023-06-14 19:09 - 000378336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.09.00.jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000220435 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.15 (1).jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000218042 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.15.jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000210570 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.14.jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000173045 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50.jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000171959 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50 (2).jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000151814 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50 (1).jpeg
2023-06-14 19:03 - 2023-06-14 19:03 - 000095254 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.02.30.jpeg
2023-06-14 11:02 - 2023-06-14 11:02 - 000000000 ___HD C:\$WinREAgent
2023-06-13 19:10 - 2023-06-13 19:10 - 000048949 _____ C:\Users\Internet\Downloads\8720230613_191050.pdf
2023-06-13 15:04 - 2023-06-13 15:04 - 000841313 _____ C:\Users\Internet\Downloads\giftcard.pdf
2023-06-13 14:37 - 2023-06-13 14:37 - 000126321 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.37.17.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000287381 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 13.43.07.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000129399 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.22.00 (1).jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000115384 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.20.18.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000084869 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.22.00.jpeg
2023-06-10 13:43 - 2023-06-10 13:43 - 003091569 _____ C:\Users\Internet\Downloads\Challenges.zip
2023-06-08 10:24 - 2023-06-08 10:24 - 032154371 _____ C:\Users\Internet\Downloads\978-3-642-32392-8 (2).pdf
2023-06-04 15:34 - 2023-06-04 15:34 - 000068618 _____ C:\Users\Internet\Downloads\erfolgsnachweis_SS2023_2040027083 (1).pdf
2023-05-30 21:39 - 2023-05-30 21:39 - 002047302 _____ C:\Users\Internet\Downloads\Auto (15).zip
2023-05-30 12:26 - 2023-05-30 12:26 - 000182516 _____ C:\Users\Internet\Downloads\Ihre Jahresrechnung ist da (1).pdf
2023-05-30 12:26 - 2023-05-30 12:26 - 000125694 _____ C:\Users\Internet\Downloads\13.06.2022 (1).pdf
2023-05-29 15:31 - 2023-05-29 15:31 - 000798919 _____ C:\Users\Internet\Downloads\Prozessorientierung_ZFO.pdf
2023-05-28 15:43 - 2023-05-28 15:43 - 000044229 _____ C:\Users\Internet\Downloads\Briefmarken.1Stk.28.05.2023_1543.pdf
2023-05-28 15:36 - 2023-05-28 15:36 - 000045368 _____ C:\Users\Internet\Downloads\TestPrint.pdf
2023-05-25 21:05 - 2023-05-25 21:05 - 000068615 _____ C:\Users\Internet\Downloads\erfolgsnachweis_SS2023_2040027083.pdf
2023-05-25 12:38 - 2023-05-25 12:38 - 000000000 ____D C:\Users\Internet\Downloads\Design ohne Titel
2023-05-25 12:36 - 2023-05-25 12:36 - 006389274 _____ C:\Users\Internet\Downloads\Design ohne Titel.zip
2023-05-25 11:29 - 2023-05-25 11:29 - 002385259 _____ C:\Users\Internet\Downloads\Design ohne Titel.mp4
2023-05-24 22:15 - 2023-05-24 22:16 - 000000000 ____D C:\Users\Internet\AppData\Local\cache
2023-05-24 22:09 - 2023-05-24 22:17 - 000000000 ____D C:\Users\Internet\Desktop\Test
2023-05-24 22:08 - 2023-06-01 10:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2023-05-24 21:55 - 2023-05-24 21:55 - 001699543 _____ C:\Users\Internet\Downloads\Date (4).mp4
2023-05-24 21:34 - 2023-05-24 21:34 - 005200103 _____ C:\Users\Internet\Downloads\Date (3).mp4
2023-05-24 16:51 - 2023-05-24 16:51 - 002039202 _____ C:\Users\Internet\Downloads\Date (2).mp4
2023-05-24 16:48 - 2023-05-24 16:48 - 002281618 _____ C:\Users\Internet\Downloads\Date (1).mp4
2023-05-24 16:45 - 2023-05-24 16:45 - 002272628 _____ C:\Users\Internet\Downloads\Date.mp4
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-06-19 20:42 - 2022-02-19 16:47 - 000000000 ____D C:\Program Files (x86)\Google
2023-06-19 20:42 - 2021-12-16 17:44 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-06-19 20:38 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Local\Lavasoft
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Local\Downloaded Installations
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2023-06-19 20:18 - 2023-01-21 13:40 - 000000000 ____D C:\Users\Internet\Zotero
2023-06-19 20:14 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Roaming\Lavasoft
2023-06-19 20:14 - 2018-05-19 18:34 - 000000000 ____D C:\ProgramData\Lavasoft
2023-06-19 20:02 - 2018-02-11 13:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2023-06-19 19:18 - 2022-02-10 09:05 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-06-19 17:35 - 2021-01-06 16:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-06-19 14:49 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-06-19 14:49 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-06-19 14:48 - 2016-12-31 16:40 - 000000000 __SHD C:\Users\Internet\IntelGraphicsProfiles
2023-06-18 22:04 - 2017-01-01 18:47 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\Word
2023-06-18 15:44 - 2021-01-06 16:28 - 000002411 _____ C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-06-18 11:26 - 2023-01-16 17:05 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-06-18 11:26 - 2020-07-06 21:16 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-06-16 09:39 - 2022-02-19 16:48 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-06-15 09:50 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-06-14 18:54 - 2021-01-06 16:35 - 001886424 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-06-14 18:54 - 2019-12-07 16:50 - 000788322 _____ C:\WINDOWS\system32\perfh007.dat
2023-06-14 18:54 - 2019-12-07 16:50 - 000168384 _____ C:\WINDOWS\system32\perfc007.dat
2023-06-14 18:47 - 2021-01-06 16:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-06-14 18:47 - 2021-01-06 16:26 - 000008192 ___SH C:\DumpStack.log.tmp
2023-06-14 18:47 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-06-14 18:47 - 2016-09-18 09:14 - 000000000 ____D C:\ProgramData\AVAST Software
2023-06-14 18:02 - 2021-01-06 16:28 - 000000000 ____D C:\Users\Internet
2023-06-14 18:02 - 2021-01-06 16:26 - 000462752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-06-14 18:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-06-14 18:02 - 2016-09-18 09:22 - 000000000 ____D C:\Program Files (x86)\McAfee
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-06-14 11:13 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-06-14 11:10 - 2021-01-06 16:28 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-06-14 11:00 - 2016-12-31 15:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-06-14 10:57 - 2016-12-31 15:34 - 170078616 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-06-14 10:48 - 2018-02-12 20:31 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-06-12 18:29 - 2017-01-23 23:34 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\PowerPoint
2023-06-10 09:33 - 2018-02-11 18:57 - 000000000 ____D C:\Users\Internet\AppData\Local\Packages
2023-06-08 15:53 - 2017-01-01 18:47 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\Office
2023-06-01 10:12 - 2016-12-31 16:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-05-31 20:12 - 2023-01-17 19:57 - 000000000 ____D C:\Users\Internet\Documents\Budgetplanung
2023-05-29 16:41 - 2021-09-07 08:20 - 000000000 ____D C:\Users\Internet\AppData\Local\D3DSCache
2023-05-25 09:25 - 2016-12-31 16:24 - 000001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-05-24 22:07 - 2016-12-31 16:43 - 000000000 ____D C:\Users\Internet\AppData\LocalLow\Mozilla
==================== FLock ==============================
2023-05-15 15:20 C:\Config.Msi
2017-05-18 21:38 C:\MSOCache
2019-12-07 11:14 C:\PerfLogs
2023-06-16 09:40 C:\WINDOWS\system32\config
2019-12-07 11:31 C:\WINDOWS\system32\Configuration
2019-12-07 11:14 C:\WINDOWS\system32\DriverState
2019-12-07 16:52 C:\WINDOWS\system32\FxsTmp
2019-12-07 11:14 C:\WINDOWS\system32\ias
2021-01-06 16:25 C:\WINDOWS\system32\MsDtc
2019-12-07 11:14 C:\WINDOWS\system32\networklist
2023-06-19 17:35 C:\WINDOWS\system32\SleepStudy
2023-06-19 19:53 C:\WINDOWS\system32\sru
2023-06-19 20:21 C:\WINDOWS\system32\Tasks
2021-01-06 16:25 C:\WINDOWS\system32\Tasks_Migrated
2022-02-25 08:09 C:\WINDOWS\system32\WDI
2023-06-19 14:49 C:\Program Files\WindowsApps
2021-01-06 16:37 C:\WINDOWS\diagerr.xml
2021-01-06 16:37 C:\WINDOWS\diagwrn.xml
2023-05-12 18:42 C:\WINDOWS\iis.log
2019-10-04 23:59 C:\WINDOWS\InfusedApps
2021-05-18 08:19 C:\WINDOWS\LiveKernelReports
2019-12-07 11:14 C:\WINDOWS\ModemLogs
2023-06-19 20:38 C:\WINDOWS\Prefetch
2023-06-14 18:47 C:\WINDOWS\ServiceState
2023-06-19 20:42 C:\WINDOWS\SystemTemp
2019-12-07 11:31 C:\WINDOWS\SysWOW64\config
2019-12-07 11:31 C:\WINDOWS\SysWOW64\Configuration
2019-12-07 16:52 C:\WINDOWS\SysWOW64\FxsTmp
2019-12-07 11:14 C:\WINDOWS\SysWOW64\Msdtc
2019-12-07 11:14 C:\WINDOWS\SysWOW64\networklist
2019-12-07 11:14 C:\WINDOWS\SysWOW64\sru
2019-12-07 11:31 C:\WINDOWS\SysWOW64\Tasks
2021-01-06 16:25 C:\WINDOWS\system32\Drivers\DriverData
2023-05-06 10:31 C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job
2023-05-06 10:31 C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job
2021-01-06 16:31 C:\Users\Besuch
2022-12-15 20:19 C:\ProgramData\Packages
2019-12-07 16:54 C:\ProgramData\WindowsHolographicDevices
2019-07-10 17:44 C:\Users\Chantal\AppData\Local\ElevatedDiagnostics
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. der Benutzer ist kein Administrator -> Der Speicher fr die Startkonfigurationsdaten konnte nicht ge”ffnet werden.
Zugriff verweigert
==================== Ende von FRST.txt ========================
Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-06-2023
durchgeführt von Internet (19-06-2023 20:49:57)
Gestartet von C:\Users\Internet\Desktop
Microsoft Windows 10 Home Version 22H2 19045.3086 (X64) (2021-01-06 14:37:31)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-827383328-2660241748-3898587492-500 - Administrator - Disabled)
Besuch (S-1-5-21-827383328-2660241748-3898587492-1003 - Limited - Enabled) => C:\Users\Besuch
Chantal (S-1-5-21-827383328-2660241748-3898587492-1001 - Administrator - Enabled) => C:\Users\Chantal
DefaultAccount (S-1-5-21-827383328-2660241748-3898587492-503 - Limited - Disabled)
Gast (S-1-5-21-827383328-2660241748-3898587492-501 - Limited - Disabled)
Internet (S-1-5-21-827383328-2660241748-3898587492-1002 - Limited - Enabled) => C:\Users\Internet
WDAGUtilityAccount (S-1-5-21-827383328-2660241748-3898587492-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: McAfee VirusScan (Disabled - Up to date) {8BCDACFA-D264-3528-5EF8-E94FD0BC1FBC}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Disabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
FW: McAfee Firewall (Disabled) {B3F62DDF-980B-3470-75A7-407A2E6F58C7}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.465 - Adobe)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.9.159 - Adobe Systems, Inc.)
AMD Install Manager (HKLM\...\{5D614C0E-3D31-D114-4680-42ED3D24F55A}) (Version: 9.0.000.1 - Advanced Micro Devices, Inc.) Hidden
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AMD Settings - Branding (HKLM\...\{78ACE60E-0CB7-4935-BCD4-F33422105607}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.25.7922.7760 - Avast Software)
Balsamiq Wireframes (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\{2CC1ECA6-BAE1-41EB-A139-E019A408F5A4}_is1) (Version: 4.2.1 - Balsamiq)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{1E7FE48B-D11C-4B7A-BEEE-461ECC16BAAA}) (Version: 3.44.0 - Kovid Goyal)
Citrix Authentication Manager (HKLM-x32\...\{9364CFB6-8129-4098-B9CD-9C5AD0D6F701}) (Version: 20.6.200.272 - Citrix Systems, Inc.) Hidden
Citrix Web Helper (HKLM-x32\...\{ADFC0427-AB84-4DD5-A508-69EE37258977}) (Version: 20.9.5.18 - Citrix Systems, Inc.) Hidden
Citrix Workspace 2009 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 20.9.5.30 - Citrix Systems, Inc.)
Citrix Workspace Inside (HKLM-x32\...\{08958757-2C15-4B21-B2AE-69E3B298F079}) (Version: 20.9.5.65534 - Citrix Systems, Inc.) Hidden
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.3.6129 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - Ihr Firmenname) Hidden
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - CyberLink Corp.)
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discover HP Touchpoint Manager (HKLM-x32\...\{D0038AC4-2CD9-49E3-B40D-16C9B6DBD8EC}) (Version: 1.0.18.1 - HP)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.761.1 - Dropbox, Inc.) Hidden
e5 Secure Download Manager (HKLM-x32\...\{A66F82FB-85EE-48D2-B19C-3A98147D5167}) (Version: 3.2.249.0 - Kivuto Solutions Inc.)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 114.0.5735.134 - Google LLC)
HP Customer Experience Enhancements (HKLM-x32\...\{C9EF1AAF-B542-41C8-A537-1142DA5D4AEC}) (Version: 6.0.3.1 - Hewlett-Packard) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP)
HP ePrint SW (HKLM\...\{3C246BB4-8985-480D-8163-0E075A23AB04}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{7855A8A5-0B5B-41A9-AC8B-A50405FB72FE}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{7ADB025F-BFB1-480B-B3BF-B2FF8F115FB8}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{EFDACC2F-510D-4A1A-A988-196D58B4B915}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM-x32\...\{88970959-baf7-4864-a39a-69a58e8ae5cf}) (Version: 5.0.18701 - HP)
HP ePrint SW (HKLM-x32\...\{E2A0A04B-C0A4-49F5-A496-4B93E1D0710D}) (Version: 5.0.18701 - HP) Hidden
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8318.5320 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{E959FD01-BD01-4CC4-9BB8-4EBE8309BF37}) (Version: 8.1.52.1 - HP)
HP Support Solutions Framework (HKLM-x32\...\{A38E954F-9043-42BD-9DE9-246ED183791D}) (Version: 12.0.30.473 - HP)
HP System Event Utility (HKLM-x32\...\{09D0DB68-90EA-4015-983E-A0BD777D5A02}) (Version: 1.4.10 - HP Inc.)
HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - HP Inc.)
Intel(R) Chipset Device Software (HKLM\...\{FEBB7B48-CC1C-4A50-A497-FA21413F6BE9}) (Version: 10.1.1.14 - Intel Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.2.1183 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{B5F3C3A9-225A-4CAB-A56A-2CA278DC8EBE}) (Version: 11.0.2.1183 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{F76DCE2C-FE39-4B74-9393-6E57BC3E7136}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{CA0C143D-F121-405C-A863-D95BC462A444}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6518 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.1.1043 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{98A452E7-A559-4687-A58C-0C6A3EBEB625}) (Version: 14.8.1.1043 - Intel Corporation) Hidden
Intel(R) WiDi (HKLM\...\{6B15F1EF-F3A8-4C29-BF9E-18EB3683A83D}) (Version: 6.0.60.0 - Intel Corporation)
Intel(R) WiDi Software Asset Manager (HKLM-x32\...\{AC8973AF-7F4C-40F4-BFE1-C02FE95ED2C2}) (Version: 3.2.1184 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{D4090A45-7F76-4446-A4FA-D8B02E9CA582}) (Version: 18.1.1605.3087 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{619e726e-d2b4-4e28-9568-c964fd81ee6c}) (Version: 10.1.1.14 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (HKLM\...\{21D65C5B-7EB7-42A2-A596-56C275341D53}) (Version: 1.42.679.1 - Intel Corporation) Hidden
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
McAfee LiveSafe (HKLM-x32\...\MSC) (Version: 14.0 R13 - McAfee, Inc.)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.16327.20248 - Microsoft Corporation)
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.16327.20248 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 114.0.1823.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 114.0.1823.51 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (HKLM\...\{90150000-00E1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (HKLM\...\{90150000-002C-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\OneDriveSetup.exe) (Version: 23.114.0530.0001 - Microsoft Corporation)
Microsoft Project MUI (German) 2013 (HKLM\...\{90150000-00B4-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Project Professional 2013 (HKLM\...\{91150000-003B-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Project Professional 2013 (HKLM\...\Office15.PRJPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Teams) (Version: 1.2.00.19260 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{BB052C53-34CB-42DE-AF41-66FDFCEEC868}) (Version: 3.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127 (HKLM\...\{8678BA04-D161-45BE-ACA4-CC5D13073F35}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127 (HKLM\...\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.24.28127 (HKLM-x32\...\{EAC73207-74BD-4B13-AACF-8C0E751FA4E8}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.24.28127 (HKLM-x32\...\{2E72FA1F-BADB-4337-B8AE-F7C17EC57D1D}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 112.0 (x64 de)) (Version: 112.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 112.0.0.8496 - Mozilla)
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.16327.20248 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{CB242730-5A02-4F5C-A0E1-4FA65429DDA7}) (Version: 20.9.5.18 - Citrix Systems, Inc.) Hidden
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF24 Creator 8.8.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Preisheld (HKLM-x32\...\{6FEC43E5-6C49-4B28-B33F-687CE784C236}) (Version: 1.0.0.0 - Erik Lorenz)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.6.1001.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
RoomSketcher (HKLM-x32\...\RoomSketcher 1.0) (Version: 1.0 - RoomSketcher)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.50.0 - Samsung Electronics Co., Ltd.)
Shotcut (HKLM-x32\...\Shotcut) (Version: - )
Skype Version 8.75 (HKLM-x32\...\Skype_is1) (Version: 8.75 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.22032.14 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.22032.14 - Samsung Electronics Co., Ltd.)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.3.31.31 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.2.0.19260 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden
WhatsApp (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\WhatsApp) (Version: 2.2140.7 - WhatsApp)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zotero (HKLM-x32\...\Zotero 6.0.20 (x86 en-US)) (Version: 6.0.20 - Corporation for Digital Scholarship)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [0000-00-00] (Amazon.com)
AMD Link -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDLink_10.22.40028.0_x64__0a9344xs7nr4m [0000-00-00] (Advanced Micro Devices Inc.)
Discover HP Touchpoint Manager -> C:\Program Files\WindowsApps\AD2F1837.DiscoverHPTouchpointManager_1.0.15.1_x86__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_146.2.1055.0_x64__v10z8vjag6ke6 [0000-00-00] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [0000-00-00] (Netflix, Inc.)
Sandbox Coloring Pixel Art -> C:\Program Files\WindowsApps\2121MagicCraftGames.SandboxColoringPixelArt_8.1.0.0_x64__6nzhqfnh355zm [0000-00-00] (Magic Craft Games) [MS Ad]
Snapfish -> C:\Program Files\WindowsApps\AD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [0000-00-00] (Snapfish)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Studios) [MS Ad]
TripAdvisor Hotels Flights Restaurants -> C:\Program Files\WindowsApps\TripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [0000-00-00] (TripAdvisor LLC)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [0000-00-00] (Twitter Inc.)
WindowsAppRuntime.1.3 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.3_3000.851.1712.0_x64__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)
WindowsAppRuntime.1.3 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.3_3000.851.1712.0_x86__8wekyb3d8bbwe [0000-00-00] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
ContextMenuHandlers1: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2017-02-28] (McAfee, Inc. -> McAfee, Inc.)
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxDTCM.dll [2019-02-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
ContextMenuHandlers6: [McCtxMenuFrmWrk] -> {CCA9EFD3-29ED-430A-BA6D-E6BBFF0A60C2} => C:\Program Files\mcafee\msc\McCtxMenuFrmWrk.dll [2017-02-28] (McAfee, Inc. -> McAfee, Inc.)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Internet\Documents\budget1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97]
AlternateDataStreams: C:\Users\Internet\Documents\budget1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\mcpltsvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\McMPFSvc => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MCODS => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\mcpltsvc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
URLSearchHook: [S-1-5-21-827383328-2660241748-3898587492-1001] ACHTUNG => Standard URLSearchHook fehlt
SearchScopes: HKLM -> {9E1BD656-C4B8-4A66-BF8A-2D0CCD6E18D3} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {9E1BD656-C4B8-4A66-BF8A-2D0CCD6E18D3} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2023-02-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2023-03-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-12-20] (Hewlett-Packard Company -> Hewlett-Packard Company)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files\mcafee\msc\McSnIePl64.dll [2017-02-28] (McAfee, Inc. -> McAfee, Inc.)
Filter-x32: application/x-mfe-ipt - {3EF5086B-5478-4598-A054-786C45D75692} - C:\Program Files (x86)\McAfee\msc\McSnIePl.dll [2017-02-28] (McAfee, Inc. -> McAfee, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\sharepoint.com -> hxxps://fhburgenlandat.sharepoint.com
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-10-30 09:24 - 2015-10-30 09:21 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2017-01-21 19:00 - 2017-01-21 19:06 - 000000506 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.173.1 LAPTOP-8IJA6MO6.mshome.net # 2022 1 4 20 17 6 46 334
192.168.173.194 LGwebOSTV.mshome.net # 2017 1 6 28 17 6 46 334
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Calibre2\
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "Lync"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{03D40385-496F-4289-A1DD-746C3121A21B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => Keine Datei
FirewallRules: [{0B374925-FA35-4DFA-9793-1EDB641E0AE7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{463020B1-0224-44F7-B4A9-23FE3364B89D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{8A069F10-804B-408E-B713-31D81EA596B9}] => (Allow) C:\Program Files\Common Files\McAfee\Platform\McSvcHost\McSvHost.exe (McAfee, Inc. -> McAfee, Inc.)
FirewallRules: [{33FB0893-46D8-406A-B9F6-8E3F54056486}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe => Keine Datei
FirewallRules: [{81842C48-A33A-4ACA-8611-A806567AC733}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\Next\WirelessDisplay.exe => Keine Datei
FirewallRules: [{12EB12FD-1F31-4D12-AA7E-F422353BA930}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe => Keine Datei
FirewallRules: [{5A6F7C46-9AED-460E-B424-C1BFD03206FD}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe => Keine Datei
FirewallRules: [{AED1F8E1-2ADC-41F2-BCCE-C9F6E5A32018}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{C49E378D-CA6B-42A1-B112-33D25EFE49DC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{2445A0EE-E135-42F2-BE34-21DA93201669}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E5381FF3-FECD-46E7-9394-28B8516FCACB}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)
FirewallRules: [{D9C0B452-1EC4-4D4A-9926-73CE858A06F3}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{6516A6E1-463A-4D87-A72B-AA6165C50674}] => (Allow) c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE => Keine Datei
FirewallRules: [{4A523437-0E0A-4BEB-9A9D-82B77DFA4FFC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2E302E13-EE11-450A-BB6C-E48E4E9DFC27}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{411E34CD-571B-42E0-BBA6-EEC4C4C0DE67}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2F8E8D84-77BB-414E-9BC3-119EF3B683E3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{59237B46-67A2-4D9A-A253-420D6B395817}C:\programmierung\eclipse\eclipse.exe] => (Block) C:\programmierung\eclipse\eclipse.exe (Eclipse Foundation, Inc. -> )
FirewallRules: [UDP Query User{CDD1290E-76B9-42B6-AA25-A29B916FD020}C:\programmierung\eclipse\eclipse.exe] => (Block) C:\programmierung\eclipse\eclipse.exe (Eclipse Foundation, Inc. -> )
FirewallRules: [TCP Query User{37921094-B5B3-496E-9A45-4844B63FD974}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{6407B439-CF85-4BD7-A2F9-1CC498AFAAD9}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EF7CF130-C35D-4D3A-AD22-819B42542CB4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3797F4F9-CF8A-4059-84CE-36731AEC7C92}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{92C336A3-2706-461D-9671-04F91B6648C7}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{C7D5EEB6-2302-43F2-ACFD-8E024E645323}] => (Allow) C:\Users\Chantal\AppData\Local\Programs\Opera\62.0.3331.43\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [TCP Query User{B89CFA4A-EB4C-421E-BB37-053FF0E1DACA}C:\users\internet\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\internet\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{BCF817B8-DC83-4E74-BB63-A7A456FCB35C}C:\users\internet\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\internet\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3BEEF4F2-4EAE-4BD3-B7EA-C601059068DD}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{034AC791-B9C8-403C-99FD-82148EF0DCD4}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{11B1C976-7037-4EE3-8789-5AA65D51A772}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{26354581-6E21-4904-A47C-99A598B5255B}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{BDC0235F-4644-4E5E-B541-8A31D7E2C262}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{37AA498F-A9E4-4FC0-9F31-BCDD8CAE8BDB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{05E0DDF0-1D8A-496B-9D6A-E8E84630FE87}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{63E6F62F-5A2A-4FF2-9356-57E4126CBD4F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{33AF2557-FE97-4AC1-A262-5C5F73D74B77}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{01144DE0-DCE0-4C58-84F8-ED4874602D3F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D2C38A5A-B6BC-43C7-9803-77FD517265E5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{2DF90582-B735-430A-8BC1-2514C444A54E}C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe] => (Allow) C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{4F053E24-2ED5-47FD-869E-92211D9C7667}C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe] => (Allow) C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{0A42C63F-9EBF-4F38-8AA9-63B2C13588EB}C:\users\internet\desktop\test\moonlight.exe] => (Allow) C:\users\internet\desktop\test\moonlight.exe (Cameron Gutman -> Moonlight Game Streaming Project)
FirewallRules: [UDP Query User{2CD6E4AA-24F3-4A17-AE36-E36E310632C0}C:\users\internet\desktop\test\moonlight.exe] => (Allow) C:\users\internet\desktop\test\moonlight.exe (Cameron Gutman -> Moonlight Game Streaming Project)
FirewallRules: [{41FCA4CA-4E7C-4E0D-8533-C55729BFA021}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8BAB05F4-A2AE-41EC-B510-CBD4E27A3DC9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7D6880B7-4D79-4C7F-AF48-1379880BFD65}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{13ACED7A-8B05-463C-842E-F3469F15435B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{21839CE7-3A64-4063-9223-3D24D5CAF711}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CE713E0E-AD1D-4E9D-A8F5-1FCA5901E9B1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{49E17838-16DB-4C83-937A-CF19606C2525}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F69B3590-BE91-45A9-999B-1FE7E3831808}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9027CB2D-A4C3-4846-9D91-EDE48CFDC289}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{CD8ACAC1-BE93-477C-857B-8EC12BF4FFAB}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\114.0.1823.51\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert (Total:222.81 GB) (Free:107.31 GB) (48%)
Überprüfen Sie den "VSS" Dienst
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (06/16/2023 09:37:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-8IJA6MO6.local already in use; will try LAPTOP-8IJA6MO6-2.local instead
Error: (06/16/2023 09:37:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 4 LAPTOP-8IJA6MO6.local. Addr 192.168.0.75
Error: (06/16/2023 09:37:56 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.75:5353 16 LAPTOP-8IJA6MO6.local. AAAA 2A02:8109:B840:2EB8:E7A6:3FFA:AD39:A83C
Error: (06/14/2023 06:49:25 PM) (Source: SecurityCenter) (EventID: 17) (User: )
Description: Das Sicherheitscenter konnte den Aufrufer nicht überprüfen. Der Fehler %1 ist aufgetreten.
Error: (06/14/2023 06:47:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-8IJA6MO6.local already in use; will try LAPTOP-8IJA6MO6-2.local instead
Error: (06/14/2023 06:47:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 2; will deregister 4 LAPTOP-8IJA6MO6.local. Addr 192.168.0.75
Error: (06/14/2023 06:47:21 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.75:5353 16 LAPTOP-8IJA6MO6.local. AAAA 2A02:8109:B840:2EB8:6D3F:870E:7281:A627
Error: (06/14/2023 06:47:14 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Systemfehler:
=============
Error: (06/19/2023 08:21:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast SecureLine VPN" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office Click-to-Run Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Citrix Workspace Updater Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SynTPEnh Caller Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Event Log" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Content Protection HDCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HPWMISVC" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Windows Defender:
================
Date: 2023-06-19 20:33:59
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8A99C68A-C98B-4917-8726-ADF162353B16}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Benutzerdefinierte Überprüfung
Benutzer: LAPTOP-8IJA6MO6\Internet
Date: 2023-06-19 20:33:49
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {89236E5D-9AD7-4BE4-8910-C439404C0062}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Vollständige Überprüfung
Benutzer: LAPTOP-8IJA6MO6\Internet
Date: 2023-06-19 20:33:49
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Benutzer
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: Unknown
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
Date: 2023-06-19 20:33:19
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
Date: 2023-06-19 20:31:41
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
CodeIntegrity:
===============
Date: 2023-06-19 18:23:28
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
BIOS: Insyde F.14 08/01/2016
Hauptplatine: HP 81EC
Prozessor: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 51%
Installierter physikalischer RAM: 8082.91 MB
Verfügbarer physikalischer RAM: 3926.82 MB
Summe virtueller Speicher: 9458.91 MB
Verfügbarer virtueller Speicher: 5032.98 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:222.81 GB) (Free:107.31 GB) (Model: SanDisk SD8SNAT-256G-1006) NTFS
Drive d: (RECOVERY) (Fixed) (Total:14.44 GB) (Free:1.74 GB) (Model: SanDisk SD8SNAT-256G-1006) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (USB) (Removable) (Total:3.63 GB) (Free:3.53 GB) FAT32
\\?\Volume{3d048761-238e-4bb3-a4a6-f2e7ede7f5a4}\ () (Fixed) (Total:0.96 GB) (Free:0.4 GB) NTFS
\\?\Volume{b299f827-c17d-455e-b893-60ebdf9bb198}\ () (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
==================== MBR & Partitionstabelle ====================
==================== Ende von Addition.txt =======================
|
|
19.06.2023, 20:15
| #3 | ||
| /// Winkelfunktion /// TB-Süch-Tiger™   | Spam Meldungen von Edge BenachrichtigungZitat:
Zitat:
 DownloadquellenLade keine Software von Chip.de, Softonic.de, sourceforge.net, openoffice.de, VLC.de, audacity.de, gimp24.de oder updatestar.com. Die dort angebotene Software wird häufig mit einem sog. "Installer" verteilt, mit dem man sich nur unerwünschte Software (Potentially unwanted programs, kurz PUP) oder Adware installiert. Auf manchen Seiten wird direkt PUP / Adware zum Download angeboten. Für Windows gibt es seit einiger Zeit einen brauchbaren Paketmanager, der mit einfachen Befehlen es erlaubt, automatisiert Software herunterzuladen und zu installieren. Das erspart eine Menge Arbeit, denn ohne einen Paketmanager muss man jedes Programm selbst prüfen und separat manuell updaten, vorher manuell noch runterladen etc. pp. - siehe auch --> chocolatey Paketmanager für Windows Wir empfehlen dringend, alle Programme, sofern verfügbar, über chocolatey zu installieren. Falls du schon mit Linux zu tun hattest, wird dir die Syntax sehr vertraut sein. Die FAQs zu choco findest du da --> Chocolatey: Häufig gestellte Fragen (englisch) Selbstverständlich darfst du auch Fragen zu chocolatey im o.g. Thread zu chocolatey stellen. Für den seltenen Fall, dass du das benötigte Programm nicht im repository von chocolatey findest: Lade diese Software immer direkt beim jeweiligen Hersteller / Entwickler.
__________________ |
|
19.06.2023, 20:18
| #4 | |
| | Spam Meldungen von Edge BenachrichtigungZitat:
|
|
19.06.2023, 20:21
| #5 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Spam Meldungen von Edge Benachrichtigung Gib dem User "Internet" Adminrechte. Dann neue FRST-Logs.
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
19.06.2023, 20:50
| #6 |
| | Logs mit Adminrechten FRTS Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 19-06-2023
durchgeführt von Internet (Administrator) auf LAPTOP-8IJA6MO6 (HP HP 250 G5 Notebook PC) (19-06-2023 21:39:23)
Gestartet von C:\Users\Internet\Desktop\FRST64.exe
Geladene Profile: Internet
Plattform: Microsoft Windows 10 Home Version 22H2 19045.3086 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSettings.exe
(atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atieclxx.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxEM.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.272\GoogleCrashHandler64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\lpksetup.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\atiesrxx.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\AVAST Software\SecureLine VPN\VpnSvc.exe
(services.exe ->) (Citrix Systems, Inc. -> Citrix Systems, Inc.) C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe
(services.exe ->) (CyberLink Corp. -> ) C:\Program Files\CyberLink\Shared files\RichVideo64.exe
(services.exe ->) (Geek Software GmbH -> Geek Software GmbH) C:\Program Files (x86)\PDF24\pdf24.exe
(services.exe ->) (Hewlett-Packard Company -> HP Inc.) C:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_fddb643595e0b8d0\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Windows\SysWOW64\XtuService.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_5acc9ca73ae7cf4c\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.19041.3025_none_7e36ee127c6f13fc\TiWorker.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(winlogon.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\userinit.exe
==================== Registry (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\System32\LogiLDA.dll [3942864 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM-x32\...\Run: [HPMessageService] => C:\Program Files (x86)\HP\HP System Event\HPMSGSVC.exe [657424 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
HKLM-x32\...\Run: [PowerDVD14Agent] => C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe [795336 2016-01-29] (CyberLink Corp. -> CyberLink Corp.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2016-09-22] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [PDFPrint] => C:\Program Files (x86)\PDF24\pdf24.exe [472200 2019-03-04] (Geek Software GmbH -> Geek Software GmbH)
HKLM-x32\...\Run: [ConnectionCenter] => C:\Program Files (x86)\Citrix\ICA Client\concentr.exe [2237024 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKLM-x32\...\Run: [Redirector] => C:\Program Files (x86)\Citrix\ICA Client\redirector.exe [470112 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\Run: [Opera Browser Assistant] => C:\Users\Chantal\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3970456 2023-05-16] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Chantal\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Chantal\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\RunOnce: [Uninstall 17.3.6943.0625_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Chantal\AppData\Local\Microsoft\OneDrive\17.3.6943.0625_1\amd64" (Keine Datei)
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\RunOnce: [Uninstall 17.3.6943.0625_1] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Chantal\AppData\Local\Microsoft\OneDrive\17.3.6943.0625_1" (Keine Datei)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [114017640 2021-08-10] (Skype Software Sarl -> Skype Technologies S.A.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [com.squirrel.Teams.Teams] => C:\Users\Internet\AppData\Local\Microsoft\Teams\Update.exe [1789768 2019-08-21] (Microsoft 3rd Party Application Component -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [Lync] => C:\Program Files (x86)\Microsoft Office\root\Office16\lync.exe [23979456 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Run: [MicrosoftEdgeAutoLaunch_8F3D81AFF99A6A750B733B4DAFFB12B7] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [4113824 2023-06-15] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\MountPoints2: {6d56cab0-2d82-11ec-b9fb-84ef1872f0a0} - "F:\OnePlus_setup.exe" /s
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\MountPoints2: {dc95cbf3-84aa-11eb-b99d-98e7f4dda46b} - "F:\HiSuiteDownLoader.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\114.0.5735.134\Installer\chrmstp.exe [2023-06-16] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Avast SecureLine VPN.lnk [2023-05-08]
ShortcutTarget: Avast SecureLine VPN.lnk -> C:\Program Files\AVAST Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
Startup: C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\An OneNote senden.lnk [2022-04-23]
ShortcutTarget: An OneNote senden.lnk -> C:\Program Files (x86)\Microsoft Office\root\Office16\ONENOTEM.EXE (Microsoft Corporation -> Microsoft Corporation)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {1014753F-11EE-4808-93CC-D0EF024FD414} - System32\Tasks\Avast Software\Avast SecureLine VPN Bug Report => C:\Program Files\Avast Software\SecureLine VPN\AvBugReport.exe [5030808 2023-05-06] (Avast Software s.r.o. -> AVAST Software) -> --send "dumps|report" --silent --product 11 --programpath "C:\Program Files\Avast Software\SecureLine VPN" --configpath "C:\ProgramData\Avast Software\SecureLine VPN" --path "C:\ProgramData\Avast Software\SecureLine VPN\log" --path "C:\ProgramData\Avast Software\Icarus\Logs" --logpath "C:\ProgramDat (Der Dateneintrag hat 80 mehr Zeichen).
Task: {13C0E6AD-1E51-4C87-A1D8-9423F28A751E} - System32\Tasks\Avast Software\Avast SecureLine VPN Update => C:\Program Files\Common Files\Avast Software\Icarus\avast-vpn\icarus.exe [7092120 2023-04-26] (Avast Software s.r.o. -> Avast Software)
Task: {1B84EE3E-C692-41BA-A6F9-924991027855} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [123872 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {200E49FC-7699-415F-8FCD-562CCB1D8588} - System32\Tasks\Avast SecureLine VPN Update => C:\Program Files\Avast Software\SecureLine VPN\VpnUpdate.exe [1243544 2023-05-06] (Avast Software s.r.o. -> AVAST Software)
Task: {22154817-76A9-4026-A688-3E1EF597786C} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {24333430-6B6A-40C6-A04C-184A44D66673} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Updater => C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\Modules\HPSSFUpdater.exe [595656 2015-11-13] (Hewlett-Packard Company -> Hewlett-Packard)
Task: {25459864-889D-4E94-B2ED-56A0FAA4EF68} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Quick Start => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [458296 2015-12-21] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {32CEA317-F2B9-4B8C-85A3-04B8F3A3F7C8} - System32\Tasks\Hewlett-Packard\HP Support Assistant\PC Health Analysis => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\HPSF.exe [458296 2015-12-21] (Hewlett-Packard Company -> Hewlett-Packard Company)
Task: {33A9580F-A0D1-4FB3-89F7-3CB95B4A09D7} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec-Logon => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-09-17] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {3B147D3B-D49A-41DD-89C9-C47A449C2EF5} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3C261144-00CF-481D-B123-6DE978F0BEC8} - System32\Tasks\GoogleUpdateTaskMachineUA{3639A51A-0D08-4E3B-8641-FBA9B6F21C93} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-19] (Google LLC -> Google LLC)
Task: {3D883D9E-6C45-4A2A-810C-71D4FBDB4648} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {42CF93D3-F22E-482E-AA6D-F92208F59B84} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office\Office15\msoia.exe [376496 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {453DAD99-9E59-42F2-B74E-9AB66877952A} - System32\Tasks\Mozilla\Firefox Default Browser Agent E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\default-browser-agent.exe [718752 2023-05-24] (Mozilla Corporation -> Mozilla Foundation)
Task: {4AF1D574-F68F-4458-86F7-EC0E9010016B} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
Task: {4C5844DE-6093-430D-BDCA-5F2233F1CE29} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files (x86)\Microsoft Office\root\vfs\ProgramFilesCommonx86\Microsoft Shared\Office16\OLicenseHeartbeat.exe [689144 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C6F6A52-75E2-4893-95D5-6179EC7069D3} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_465_Plugin.exe [1504312 2020-12-15] (Adobe Inc. -> Adobe)
Task: {590A14E7-A002-4E3F-ACF1-7B6FB4AB4156} - System32\Tasks\GoogleUpdateTaskMachineCore{397D3C0B-58EF-41B9-A908-35CE032A9E70} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2022-02-19] (Google LLC -> Google LLC)
Task: {6DEDBC96-44EB-49F1-A5B6-B338DDA4F6A8} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
Task: {728CB71F-403B-4794-B713-40960C593286} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files (x86)\Microsoft Office\root\Office16\sdxhelper.exe [123872 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {73B5EB57-6284-4237-A9DE-974DE142FDB5} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-15] (Adobe Inc. -> Adobe)
Task: {88E81741-7755-4EEE-8CFD-D6638D982164} - System32\Tasks\Opera scheduled assistant Autoupdate 1562437039 => C:\Users\Chantal\AppData\Local\Programs\Opera\launcher.exe [42724048 2021-09-13] (Opera Software AS -> Opera Software) -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\Chantal\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {8B366A56-5FBF-44F9-8B78-5EF96A86A0D6} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26513416 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {97F01017-DCA3-4810-99CF-2C2982A7A359} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {9DB5326C-DEEB-401C-AC40-93EDA1DBEFD0} - System32\Tasks\Opera scheduled Autoupdate 1562437035 => C:\Users\Chantal\AppData\Local\Programs\Opera\launcher.exe [42724048 2021-09-13] (Opera Software AS -> Opera Software)
Task: {9DB634DE-1B21-4796-A661-7982CC185661} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [677280 2023-05-24] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {9F6A51A0-6C0A-40F7-9368-C483665DF81F} - System32\Tasks\Microsoft\Office\Office Serviceability Manager => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\officesvcmgr.exe [3843776 2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2F49A56-E82F-4B7F-A631-ED1E3A8006DB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {A577EB61-AE89-42CA-99AB-E9D38DAE9289} - System32\Tasks\Microsoft Office 15 Sync Maintenance for LAPTOP-8IJA6MO6-Internet LAPTOP-8IJA6MO6 => C:\Program Files\Microsoft Office\Office15\MsoSync.exe [470720 2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {ABE4E936-6E22-4736-95C6-2B3CAA2A6BBC} - System32\Tasks\Intel\Intel Telemetry 2 => C:\Program Files\Intel\Telemetry 2.0\lrio.exe [1698000 2015-06-05] (Intel(R) Software -> Intel Corporation)
Task: {B4DA4091-6C9A-4877-B06E-35109AA1D95D} - System32\Tasks\Avast SecureLine => C:\Program Files\AVAST Software\SecureLine\SecureLine.exe /nogui (Keine Datei)
Task: {CF798CF2-76AF-47B2-844F-096E5D98E937} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Active Health Launcher => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe [190504 2015-12-20] (Hewlett-Packard Company -> Hewlett-Packard)
Task: {D5C756E4-B012-41C8-BCAB-2B7C3FFA4B2A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26513416 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {D6DE8A1B-FB25-4C61-8496-8C6EF3B13D09} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [52104 2017-05-17] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
Task: {DBF13B84-C3FF-4448-9CF5-334434B5C4C7} - System32\Tasks\IntelWiDi-Upgrade-91ba0caa-28a7-4f47-8d08-f71b4b10fbec => C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-09-17] (Intel(R) Software Asset Manager -> Intel Corporation)
Task: {F1BDF888-2D72-4A48-861C-BE9E53302900} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F37D31D5-A2F4-4479-916B-7C2B5C98BE5B} - System32\Tasks\DropboxOEM => C:\Program Files (x86)\Dropbox\DropboxOEM\DropboxOEM.exe [584488 2016-09-21] (Dropbox, Inc -> )
Task: {F504D4A0-361C-423E-9F3D-07C66BE3B9E4} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (Keine Datei)
Task: {FCC2282D-C2BF-488F-8724-EE8C94783E3D} - System32\Tasks\HPDAS => C:\Program -> Files\HP\HP ePrint\HP.DeliveryAndStatus.Desktop.App.exe /CheckJobs
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{90ff1809-2c04-4b54-9cf6-1b0ba310e973}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{c533e8fc-2ece-41b1-9bcf-3e3120a70833}: [DhcpNameServer] 192.168.0.1
Edge:
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\WINDOWS\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default [2023-06-19]
Edge Extension: (Edge relevant text changes) - C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-04-24]
Edge Extension: (Zotero Connector) - C:\Users\Internet\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\nmhdhpibnnopknkmonacoephklnflpho [2023-06-12]
FireFox:
========
FF DefaultProfile: 2r8jb1om.default
FF DefaultProfile: 5764gdsb.default
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Zotero\Zotero\Profiles\2r8jb1om.default [2023-06-19]
FF ProfilePath: C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default [2023-06-19]
FF Extension: (Graffiti – Soft) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\graffiti-soft-colorway@mozilla.org.xpi [2023-05-24]
FF Extension: (Preisheld) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\{69c49344-90ec-458d-9811-a55878e26bd1}.xpi [2019-07-06]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Internet\AppData\Roaming\Mozilla\Firefox\Profiles\5764gdsb.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2023-05-24]
FF HKLM\...\Firefox\Extensions: [{69c49344-90ec-458d-9811-a55878e26bd1}] - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi
FF Extension: (Preisheld) - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi [2019-05-17]
FF HKLM-x32\...\Firefox\Extensions: [{69c49344-90ec-458d-9811-a55878e26bd1}] - C:\Program Files (x86)\Preisheld\ff\preisheld-1.0.1-fx.xpi
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_32_0_0_465.dll [2020-12-15] (Adobe Inc. -> )
FF Plugin: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\Office15\NPSPWRAP.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_465.dll [2020-12-15] (Adobe Inc. -> )
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\windows\SysWOW64\Adobe\Director\np32dsw_1219159.dll [2015-06-26] (Adobe Systems, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @Citrix.com/npican -> C:\Program Files (x86)\Citrix\ICA Client\npicaN.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel(R) Identity Protection Technology Software -> Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\dtplugin\npDeployJava1.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.111.2 -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\plugin2\npjp2.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2022-11-03] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR Profile: C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default [2023-02-11]
CHR Extension: (Proctorio) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\fpmapakogndmenjcfoajifaaonnkpkei [2023-02-11]
CHR Extension: (Google Docs Offline) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-02-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Internet\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-02-19]
==================== Dienste (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2020-12-15] (Adobe Inc. -> Adobe)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11749376 2023-05-15] (Microsoft Corporation -> Microsoft Corporation)
R2 CWAUpdaterService; C:\Program Files (x86)\Citrix\ICA Client\Receiver\UpdaterService.exe [43616 2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-17] (Dropbox, Inc -> Dropbox, Inc.)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [26168 2015-12-20] (Hewlett-Packard Company -> Hewlett-Packard Company)
R2 HPWMISVC; c:\Program Files (x86)\HP\HP System Event\HPWMISVC.exe [606224 2016-01-11] (Hewlett-Packard Company -> HP Inc.)
S3 Intel(R) WiDi SAM; C:\Program Files (x86)\Intel Corporation\Intel WiDi\Intel(R) Software Asset Manager\bin\IntelSoftwareAssetManagerService.exe [19088 2015-09-17] (Intel(R) Software Asset Manager -> Intel Corporation)
S3 OfficeSvcManagerAddons; C:\WINDOWS\system32\dllhost.exe /Processid:{2CA2E202-932F-4BA2-8771-195BB86398F5} [21312 2021-01-06] (Microsoft Windows -> Microsoft Corporation)
R2 PDF24; C:\Program Files (x86)\PDF24\pdf24.exe [472200 2019-03-04] (Geek Software GmbH -> Geek Software GmbH)
R2 RichVideo64; C:\Program Files\CyberLink\Shared files\RichVideo64.exe [389896 2014-04-14] (CyberLink Corp. -> )
R2 SecureLine; C:\Program Files\Avast Software\SecureLine VPN\VpnSvc.exe [10043288 2023-05-06] (Avast Software s.r.o. -> AVAST Software)
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2021-11-25] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2021-11-25] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe [3232576 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe [133592 2023-06-14] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Treiber (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R3 AmUStor; C:\WINDOWS\system32\drivers\AmUStorU.sys [136760 2019-05-07] (Alcorlink Corp. -> )
S3 AppleLowerFilter; C:\WINDOWS\System32\drivers\AppleLowerFilter.sys [35976 2020-10-09] (WDKTestCert build,132303256403278908 -> Apple Inc.)
S3 aswVpnRdr; C:\WINDOWS\System32\drivers\aswVpnRdr.sys [76664 2023-05-06] (Avast Software s.r.o. -> Avast Software)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 mt7612US; C:\WINDOWS\System32\drivers\mt7612US.sys [377232 2017-03-11] (Windows Central Build Account - X -> MediaTek Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2023-06-14] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99568 2023-06-14] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-06-19 21:34 - 2023-06-19 21:35 - 000054473 _____ C:\Users\Internet\Desktop\Addition.txt
2023-06-19 21:31 - 2023-06-19 21:40 - 000032133 _____ C:\Users\Internet\Desktop\FRST.txt
2023-06-19 21:30 - 2023-06-19 21:33 - 000000000 ____D C:\Users\Chantal\AppData\Local\PlaceholderTileLogoFolder
2023-06-19 21:30 - 2023-06-19 21:30 - 000000000 ____D C:\Users\Chantal\AppData\Roaming\ICAClient
2023-06-19 21:30 - 2023-06-19 21:30 - 000000000 ____D C:\Users\Chantal\AppData\Local\D3DSCache
2023-06-19 21:30 - 2023-06-19 21:30 - 000000000 ____D C:\Users\Chantal\AppData\Local\Citrix
2023-06-19 21:30 - 2023-06-19 21:30 - 000000000 ____D C:\Users\Chantal\AppData\Local\CEF
2023-06-19 21:28 - 2023-06-19 21:31 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-827383328-2660241748-3898587492-1001
2023-06-19 21:28 - 2023-06-19 21:29 - 000000000 ____D C:\Users\Chantal\AppData\Local\Intel
2023-06-19 21:28 - 2023-06-19 21:28 - 000002277 _____ C:\Users\Chantal\Desktop\Google Chrome.lnk
2023-06-19 21:28 - 2023-06-19 21:28 - 000000000 ____D C:\Users\Chantal\Downloads\opera autoupdate
2023-06-19 21:28 - 2023-06-19 21:28 - 000000000 ____D C:\Users\Chantal\AppData\Local\Google
2023-06-19 21:28 - 2023-06-19 21:28 - 000000000 ____D C:\Users\Chantal\AppData\Local\CrashDumps
2023-06-19 21:11 - 2023-06-19 21:11 - 000000000 ____D C:\Users\Internet\AppData\Local\CrashDumps
2023-06-19 21:10 - 2023-06-19 21:10 - 000003160 _____ C:\WINDOWS\system32\Tasks\StartCN
2023-06-19 21:10 - 2023-06-19 21:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Settings
2023-06-19 21:10 - 2023-06-19 21:10 - 000000000 ____D C:\Program Files (x86)\AMD
2023-06-19 21:09 - 2023-06-19 21:09 - 000000000 ____D C:\Program Files\Common Files\ATI Technologies
2023-06-19 21:09 - 2023-06-19 21:09 - 000000000 ____D C:\AMD
2023-06-19 21:09 - 2017-07-04 09:47 - 010331016 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdvlk64.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 008488840 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdvlk32.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 002545032 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 002207112 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 001049480 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000933256 _____ (AMD) C:\WINDOWS\system32\coinst_17.10.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000555400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000486792 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000129928 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000120712 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000100232 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmcl64.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000083848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdmcl32.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000077704 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\ati2erec.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000053640 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll
2023-06-19 21:09 - 2017-07-04 09:47 - 000051080 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll
2023-06-19 21:09 - 2017-07-04 06:37 - 000154384 _____ C:\WINDOWS\system32\samu_krnl_ci.sbin
2023-06-19 21:09 - 2017-07-04 06:37 - 000120368 _____ C:\WINDOWS\system32\kapp_ci.sbin
2023-06-19 21:09 - 2017-07-04 06:37 - 000114704 _____ C:\WINDOWS\system32\kapp_si.sbin
2023-06-19 21:09 - 2017-07-04 06:36 - 000000144 _____ C:\WINDOWS\SysWOW64\amd-vulkan32.json
2023-06-19 21:09 - 2017-07-04 06:36 - 000000144 _____ C:\WINDOWS\system32\amd-vulkan64.json
2023-06-19 21:08 - 2023-06-19 21:09 - 000000000 ____D C:\WINDOWS\LastGood.Tmp
2023-06-19 21:08 - 2023-06-19 21:08 - 000000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_esif_lf_01011.Wdf
2023-06-19 21:08 - 2023-06-19 21:08 - 000000000 ____D C:\WINDOWS\system32\Intel
2023-06-19 20:33 - 2023-06-19 20:33 - 000001248 _____ C:\Users\Internet\Desktop\Google Chrome.lnk
2023-06-19 20:28 - 2023-06-19 19:09 - 035208624 _____ C:\Users\Internet\Desktop\RogueKiller_portable64.exe
2023-06-19 20:17 - 2023-06-19 20:21 - 000000000 ____D C:\AdwCleaner
2023-06-19 19:24 - 2023-06-19 19:24 - 000196077 _____ C:\Users\Internet\Downloads\Change Erfolgsfaktoren_Psychologie.pdf
2023-06-19 19:18 - 2023-06-19 20:13 - 000000000 ____D C:\ProgramData\RogueKiller
2023-06-19 19:12 - 2023-06-19 21:40 - 000000000 ____D C:\FRST
2023-06-19 19:12 - 2023-06-19 18:58 - 002383360 _____ (Farbar) C:\Users\Internet\Desktop\FRST64.exe
2023-06-19 18:16 - 2023-06-19 18:17 - 000000000 ____D C:\Users\Internet\Desktop\Meine Bibliothek
2023-06-14 20:27 - 2023-06-14 20:27 - 000170628 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.27.25.jpeg
2023-06-14 20:26 - 2023-06-14 20:26 - 000134907 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.26.23.jpeg
2023-06-14 20:25 - 2023-06-14 20:25 - 000180878 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.25.40.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000526634 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.24.19.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000346182 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54 (2).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000329312 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.53.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000327494 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.50 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000316888 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54.jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000313413 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.54 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000288775 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.53 (1).jpeg
2023-06-14 20:24 - 2023-06-14 20:24 - 000255965 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.50.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000360185 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.12.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000352397 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.23.13.jpeg
2023-06-14 20:23 - 2023-06-14 20:23 - 000161418 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.39.jpeg
2023-06-14 20:22 - 2023-06-14 20:23 - 000129273 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.38 (1).jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000361858 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.41.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000339089 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.40.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000329885 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.40 (1).jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000325747 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.43.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000280093 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.44.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000190616 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.37.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000172474 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.22.38.jpeg
2023-06-14 20:22 - 2023-06-14 20:22 - 000144278 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.21.45.jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000321557 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.44 (1).jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000206001 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.19.24.jpeg
2023-06-14 20:20 - 2023-06-14 20:20 - 000152261 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.20.10.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000357861 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.12.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000346469 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.13.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000345386 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.13 (1).jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000321557 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.44.jpeg
2023-06-14 20:16 - 2023-06-14 20:16 - 000317671 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.16.14.jpeg
2023-06-14 20:15 - 2023-06-14 20:15 - 000210693 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.15.25.jpeg
2023-06-14 20:15 - 2023-06-14 20:15 - 000189081 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.15.36.jpeg
2023-06-14 20:14 - 2023-06-14 20:14 - 000295585 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.14.11.jpeg
2023-06-14 20:13 - 2023-06-14 20:14 - 000310926 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.53.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000332422 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.22.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000261781 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.24.jpeg
2023-06-14 20:13 - 2023-06-14 20:13 - 000259213 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.13.21.jpeg
2023-06-14 20:12 - 2023-06-14 20:13 - 000241760 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.12.47.jpeg
2023-06-14 20:12 - 2023-06-14 20:12 - 000253393 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.11.56.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000283890 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09 (1).jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000269949 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000258181 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.08.jpeg
2023-06-14 20:10 - 2023-06-14 20:10 - 000219043 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.09 (2).jpeg
2023-06-14 20:09 - 2023-06-14 20:09 - 000292375 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.09.13.jpeg
2023-06-14 20:03 - 2023-06-14 20:03 - 012128199 _____ C:\Users\Internet\Downloads\WhatsApp Video 2023-06-14 at 20.02.44.mp4
2023-06-14 20:02 - 2023-06-14 20:02 - 000512069 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 20.02.44.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000816946 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.44.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000777098 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.42.jpeg
2023-06-14 20:01 - 2023-06-14 20:01 - 000707699 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.41 (1).jpeg
2023-06-14 20:00 - 2023-06-14 20:01 - 000707699 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.41.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000889263 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.38.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000775807 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.39.jpeg
2023-06-14 20:00 - 2023-06-14 20:00 - 000768961 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.59.40.jpeg
2023-06-14 19:58 - 2023-06-14 19:58 - 000064373 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.58.00.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000457032 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.17.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000278855 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.35.jpeg
2023-06-14 19:57 - 2023-06-14 19:57 - 000061591 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.57.46.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000234208 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.00 (1).jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000227104 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.01.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000211191 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.02.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000155057 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.00.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000134378 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.34.jpeg
2023-06-14 19:56 - 2023-06-14 19:56 - 000098715 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.56.51.jpeg
2023-06-14 19:48 - 2023-06-14 19:48 - 000314336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.48.20.jpeg
2023-06-14 19:46 - 2023-06-14 19:46 - 000195892 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.46.46.jpeg
2023-06-14 19:46 - 2023-06-14 19:46 - 000036037 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.46.14.jpeg
2023-06-14 19:45 - 2023-06-14 19:45 - 000212649 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.45.41.jpeg
2023-06-14 19:42 - 2023-06-14 19:42 - 000387976 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.42.45.jpeg
2023-06-14 19:39 - 2023-06-14 19:39 - 000416695 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.39.40.jpeg
2023-06-14 19:39 - 2023-06-14 19:39 - 000379043 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.39.18.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000109465 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.57.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000103517 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.58.jpeg
2023-06-14 19:37 - 2023-06-14 19:37 - 000087294 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.58 (1).jpeg
2023-06-14 19:36 - 2023-06-14 19:36 - 000128230 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.56.jpeg
2023-06-14 19:36 - 2023-06-14 19:36 - 000114901 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.35.55.jpeg
2023-06-14 19:33 - 2023-06-14 19:33 - 000185670 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.33.23.jpeg
2023-06-14 19:30 - 2023-06-14 19:31 - 000079175 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.27.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000269454 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.19.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000241942 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.18.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000162160 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.20.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000122165 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22 (1).jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000093454 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000085393 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.22 (2).jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000078419 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.24.jpeg
2023-06-14 19:30 - 2023-06-14 19:30 - 000067351 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.30.26.jpeg
2023-06-14 19:29 - 2023-06-14 19:30 - 000577892 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.29.11.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000262644 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.15.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000246566 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.13.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000239103 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.15 (1).jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000222944 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.14 (1).jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000219412 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.12.jpeg
2023-06-14 19:28 - 2023-06-14 19:28 - 000194820 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.25.14.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000571936 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.40.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000561153 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.41 (1).jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000535070 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.41.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000264335 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.42.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000243494 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.24.25.jpeg
2023-06-14 19:24 - 2023-06-14 19:24 - 000187806 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.24.20.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000580961 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.39.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000568816 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.35.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000565913 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.32 (1).jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000555695 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33 (1).jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000554505 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000548118 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.32.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000542994 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.37.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000539945 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.36.jpeg
2023-06-14 19:23 - 2023-06-14 19:23 - 000347485 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.22.33 (2).jpeg
2023-06-14 19:21 - 2023-06-14 19:21 - 000269222 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.21.10.jpeg
2023-06-14 19:21 - 2023-06-14 19:21 - 000263682 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.21.09.jpeg
2023-06-14 19:20 - 2023-06-14 19:20 - 000468630 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.20.16.jpeg
2023-06-14 19:20 - 2023-06-14 19:20 - 000444866 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.20.16 (1).jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000541578 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.32.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000530443 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.37.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000181722 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.42.jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000176618 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.40 (1).jpeg
2023-06-14 19:19 - 2023-06-14 19:19 - 000147336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.19.42.jpeg
2023-06-14 19:18 - 2023-06-14 19:18 - 000199076 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.18.40.jpeg
2023-06-14 19:16 - 2023-06-14 19:16 - 000470846 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.15.59.jpeg
2023-06-14 19:15 - 2023-06-14 19:15 - 000226511 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.15.16.jpeg
2023-06-14 19:13 - 2023-06-14 19:13 - 000244216 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.13.05.jpeg
2023-06-14 19:11 - 2023-06-14 19:11 - 000121492 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.10.49.jpeg
2023-06-14 19:10 - 2023-06-14 19:10 - 000164343 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.10.48.jpeg
2023-06-14 19:09 - 2023-06-14 19:09 - 000378336 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.09.00.jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000220435 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.15 (1).jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000218042 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.15.jpeg
2023-06-14 19:07 - 2023-06-14 19:07 - 000210570 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.07.14.jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000173045 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50.jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000171959 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50 (2).jpeg
2023-06-14 19:06 - 2023-06-14 19:06 - 000151814 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.05.50 (1).jpeg
2023-06-14 19:03 - 2023-06-14 19:03 - 000095254 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-14 at 19.02.30.jpeg
2023-06-14 11:02 - 2023-06-14 11:02 - 000000000 ___HD C:\$WinREAgent
2023-06-13 19:10 - 2023-06-13 19:10 - 000048949 _____ C:\Users\Internet\Downloads\8720230613_191050.pdf
2023-06-13 15:04 - 2023-06-13 15:04 - 000841313 _____ C:\Users\Internet\Downloads\giftcard.pdf
2023-06-13 14:37 - 2023-06-13 14:37 - 000126321 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.37.17.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000287381 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 13.43.07.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000129399 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.22.00 (1).jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000115384 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.20.18.jpeg
2023-06-13 14:29 - 2023-06-13 14:29 - 000084869 _____ C:\Users\Internet\Downloads\WhatsApp Image 2023-06-13 at 14.22.00.jpeg
2023-06-10 13:43 - 2023-06-10 13:43 - 003091569 _____ C:\Users\Internet\Downloads\Challenges.zip
2023-06-08 10:24 - 2023-06-08 10:24 - 032154371 _____ C:\Users\Internet\Downloads\978-3-642-32392-8 (2).pdf
2023-06-04 15:34 - 2023-06-04 15:34 - 000068618 _____ C:\Users\Internet\Downloads\erfolgsnachweis_SS2023_2040027083 (1).pdf
2023-05-30 21:39 - 2023-05-30 21:39 - 002047302 _____ C:\Users\Internet\Downloads\Auto (15).zip
2023-05-30 12:26 - 2023-05-30 12:26 - 000182516 _____ C:\Users\Internet\Downloads\Ihre Jahresrechnung ist da (1).pdf
2023-05-30 12:26 - 2023-05-30 12:26 - 000125694 _____ C:\Users\Internet\Downloads\13.06.2022 (1).pdf
2023-05-29 15:31 - 2023-05-29 15:31 - 000798919 _____ C:\Users\Internet\Downloads\Prozessorientierung_ZFO.pdf
2023-05-28 15:43 - 2023-05-28 15:43 - 000044229 _____ C:\Users\Internet\Downloads\Briefmarken.1Stk.28.05.2023_1543.pdf
2023-05-28 15:36 - 2023-05-28 15:36 - 000045368 _____ C:\Users\Internet\Downloads\TestPrint.pdf
2023-05-25 21:05 - 2023-05-25 21:05 - 000068615 _____ C:\Users\Internet\Downloads\erfolgsnachweis_SS2023_2040027083.pdf
2023-05-25 12:38 - 2023-05-25 12:38 - 000000000 ____D C:\Users\Internet\Downloads\Design ohne Titel
2023-05-25 12:36 - 2023-05-25 12:36 - 006389274 _____ C:\Users\Internet\Downloads\Design ohne Titel.zip
2023-05-25 11:29 - 2023-05-25 11:29 - 002385259 _____ C:\Users\Internet\Downloads\Design ohne Titel.mp4
2023-05-24 22:15 - 2023-05-24 22:16 - 000000000 ____D C:\Users\Internet\AppData\Local\cache
2023-05-24 22:09 - 2023-05-24 22:17 - 000000000 ____D C:\Users\Internet\Desktop\Test
2023-05-24 22:08 - 2023-06-01 10:12 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2023-05-24 21:55 - 2023-05-24 21:55 - 001699543 _____ C:\Users\Internet\Downloads\Date (4).mp4
2023-05-24 21:34 - 2023-05-24 21:34 - 005200103 _____ C:\Users\Internet\Downloads\Date (3).mp4
2023-05-24 16:51 - 2023-05-24 16:51 - 002039202 _____ C:\Users\Internet\Downloads\Date (2).mp4
2023-05-24 16:48 - 2023-05-24 16:48 - 002281618 _____ C:\Users\Internet\Downloads\Date (1).mp4
2023-05-24 16:45 - 2023-05-24 16:45 - 002272628 _____ C:\Users\Internet\Downloads\Date.mp4
==================== Ein Monat (geänderte) ==================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2023-06-19 21:39 - 2022-02-19 16:47 - 000000000 ____D C:\Program Files (x86)\Google
2023-06-19 21:39 - 2021-12-16 17:44 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-06-19 21:39 - 2021-01-06 16:37 - 000005372 _____ C:\WINDOWS\system32\Tasks\Microsoft Office 15 Sync Maintenance for LAPTOP-8IJA6MO6-Internet LAPTOP-8IJA6MO6
2023-06-19 21:39 - 2021-01-06 16:37 - 000004028 _____ C:\WINDOWS\system32\Tasks\Avast SecureLine VPN Update
2023-06-19 21:39 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-06-19 21:39 - 2016-12-31 16:40 - 000000000 __SHD C:\Users\Internet\IntelGraphicsProfiles
2023-06-19 21:39 - 2016-09-18 09:14 - 000000000 ____D C:\ProgramData\AVAST Software
2023-06-19 21:38 - 2021-01-06 16:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-06-19 21:38 - 2021-01-06 16:26 - 000008192 ___SH C:\DumpStack.log.tmp
2023-06-19 21:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-06-19 21:38 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-06-19 21:38 - 2019-12-07 11:03 - 001310720 _____ C:\WINDOWS\system32\config\BBI
2023-06-19 21:33 - 2021-01-06 16:37 - 000004484 _____ C:\WINDOWS\system32\Tasks\Opera scheduled assistant Autoupdate 1562437039
2023-06-19 21:31 - 2021-01-06 16:37 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-827383328-2660241748-3898587492-1001
2023-06-19 21:31 - 2021-01-06 16:35 - 001886424 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-06-19 21:31 - 2021-01-06 16:28 - 000002408 _____ C:\Users\Chantal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-06-19 21:31 - 2019-12-07 16:50 - 000788322 _____ C:\WINDOWS\system32\perfh007.dat
2023-06-19 21:31 - 2019-12-07 16:50 - 000168384 _____ C:\WINDOWS\system32\perfc007.dat
2023-06-19 21:31 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-06-19 21:31 - 2018-02-11 18:58 - 000000000 ____D C:\Users\Chantal\AppData\Local\Packages
2023-06-19 21:30 - 2016-12-24 18:05 - 000000000 ____D C:\Users\Chantal\AppData\Local\AMD
2023-06-19 21:29 - 2021-01-06 16:37 - 000004248 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1562437035
2023-06-19 21:29 - 2021-01-06 16:37 - 000004176 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{4AC0E577-CD51-4710-B4F3-5D2DF4E7741F}
2023-06-19 21:29 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-06-19 21:29 - 2019-07-06 20:17 - 000001440 _____ C:\Users\Chantal\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2023-06-19 21:28 - 2021-01-06 16:31 - 000000000 ____D C:\Users\Chantal\AppData\Roaming\Microsoft\Crypto
2023-06-19 21:28 - 2021-01-06 16:28 - 000000000 ____D C:\Users\Chantal\AppData\Roaming\Microsoft\Windows
2023-06-19 21:28 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-06-19 21:28 - 2018-05-19 18:37 - 000000000 ___RD C:\Users\Chantal\3D Objects
2023-06-19 21:28 - 2017-04-22 17:15 - 000000000 ____D C:\Users\Chantal\AppData\Local\ConnectedDevicesPlatform
2023-06-19 21:28 - 2016-12-24 18:04 - 000000000 __SHD C:\Users\Chantal\IntelGraphicsProfiles
2023-06-19 21:28 - 2016-11-20 23:46 - 000000000 __RHD C:\Users\Public\AccountPictures
2023-06-19 21:09 - 2017-01-22 04:29 - 000000000 ____D C:\Program Files\AMD
2023-06-19 21:09 - 2016-12-31 16:41 - 000000000 ____D C:\Users\Internet\AppData\Local\AMD
2023-06-19 21:06 - 2016-09-18 09:22 - 000000000 ____D C:\ProgramData\McAfee
2023-06-19 21:06 - 2016-09-18 09:22 - 000000000 ____D C:\Program Files (x86)\McAfee
2023-06-19 20:57 - 2019-12-07 11:03 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-06-19 20:56 - 2018-02-11 13:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee
2023-06-19 20:56 - 2015-10-30 08:28 - 000000000 ____D C:\Users\Default.migrated
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Local\Lavasoft
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Local\Downloaded Installations
2023-06-19 20:21 - 2018-05-19 18:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2023-06-19 20:18 - 2023-01-21 13:40 - 000000000 ____D C:\Users\Internet\Zotero
2023-06-19 20:14 - 2018-05-19 18:34 - 000000000 ____D C:\Users\Chantal\AppData\Roaming\Lavasoft
2023-06-19 20:14 - 2018-05-19 18:34 - 000000000 ____D C:\ProgramData\Lavasoft
2023-06-19 19:18 - 2022-02-10 09:05 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-06-19 17:35 - 2021-01-06 16:26 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-06-18 22:04 - 2017-01-01 18:47 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\Word
2023-06-18 15:44 - 2021-12-13 10:10 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-827383328-2660241748-3898587492-1002
2023-06-18 15:44 - 2021-01-06 16:37 - 000003384 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-827383328-2660241748-3898587492-1002
2023-06-18 15:44 - 2021-01-06 16:28 - 000002411 _____ C:\Users\Internet\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-06-18 11:26 - 2023-01-16 17:05 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-06-18 11:26 - 2020-07-06 21:16 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-06-16 09:39 - 2022-02-19 16:48 - 000002246 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2023-06-15 20:37 - 2022-02-19 16:47 - 000004002 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA{3639A51A-0D08-4E3B-8641-FBA9B6F21C93}
2023-06-15 20:37 - 2022-02-19 16:47 - 000003878 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore{397D3C0B-58EF-41B9-A908-35CE032A9E70}
2023-06-14 18:02 - 2021-01-06 16:28 - 000000000 ____D C:\Users\Internet
2023-06-14 18:02 - 2021-01-06 16:26 - 000462752 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-06-14 18:02 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-06-14 18:01 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-06-14 11:13 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-06-14 11:10 - 2021-01-06 16:28 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-06-14 11:00 - 2016-12-31 15:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-06-14 10:57 - 2016-12-31 15:34 - 170078616 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-06-14 10:48 - 2018-02-12 20:31 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-06-14 10:45 - 2021-01-06 16:37 - 000003756 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-06-14 10:45 - 2021-01-06 16:37 - 000003632 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2023-06-12 18:29 - 2017-01-23 23:34 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\PowerPoint
2023-06-10 09:33 - 2018-02-11 18:57 - 000000000 ____D C:\Users\Internet\AppData\Local\Packages
2023-06-08 15:53 - 2017-01-01 18:47 - 000000000 ____D C:\Users\Internet\AppData\Roaming\Microsoft\Office
2023-06-01 10:12 - 2016-12-31 16:24 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-05-31 20:12 - 2023-01-17 19:57 - 000000000 ____D C:\Users\Internet\Documents\Budgetplanung
2023-05-29 16:41 - 2021-09-07 08:20 - 000000000 ____D C:\Users\Internet\AppData\Local\D3DSCache
2023-05-25 09:25 - 2016-12-31 16:24 - 000001235 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-05-24 22:07 - 2016-12-31 16:43 - 000000000 ____D C:\Users\Internet\AppData\LocalLow\Mozilla
==================== SigCheck ============================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
==================== Ende von FRST.txt ========================
|
|
19.06.2023, 20:51
| #7 |
| | Logs mit Adminrechten Addition Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 19-06-2023
durchgeführt von Internet (19-06-2023 21:42:12)
Gestartet von C:\Users\Internet\Desktop
Microsoft Windows 10 Home Version 22H2 19045.3086 (X64) (2021-01-06 14:37:31)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
Administrator (S-1-5-21-827383328-2660241748-3898587492-500 - Administrator - Disabled)
Besuch (S-1-5-21-827383328-2660241748-3898587492-1003 - Limited - Enabled) => C:\Users\Besuch
Chantal (S-1-5-21-827383328-2660241748-3898587492-1001 - Administrator - Enabled) => C:\Users\Chantal
DefaultAccount (S-1-5-21-827383328-2660241748-3898587492-503 - Limited - Disabled)
Gast (S-1-5-21-827383328-2660241748-3898587492-501 - Limited - Disabled)
Internet (S-1-5-21-827383328-2660241748-3898587492-1002 - Administrator - Enabled) => C:\Users\Internet
WDAGUtilityAccount (S-1-5-21-827383328-2660241748-3898587492-504 - Limited - Disabled)
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: McAfee VirusScan (Disabled - Up to date) {30AC4D1E-F45E-3AA6-6448-D23DAB3B5501}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.465 - Adobe)
Adobe Shockwave Player 12.1 (HKLM-x32\...\Adobe Shockwave Player) (Version: 12.1.9.159 - Adobe Systems, Inc.)
AMD Install Manager (HKLM\...\{5D614C0E-3D31-D114-4680-42ED3D24F55A}) (Version: 9.0.000.1 - Advanced Micro Devices, Inc.) Hidden
AMD Install Manager (HKLM\...\AMD Catalyst Install Manager) (Version: 5.00 - Advanced Micro Devices, Inc.)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0517.1614.27405 - Advanced Micro Devices, Inc.)
Avast SecureLine VPN (HKLM\...\Avast SecureLine) (Version: 5.25.7922.7760 - Avast Software)
Balsamiq Wireframes (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\{2CC1ECA6-BAE1-41EB-A139-E019A408F5A4}_is1) (Version: 4.2.1 - Balsamiq)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
calibre (HKLM-x32\...\{1E7FE48B-D11C-4B7A-BEEE-461ECC16BAAA}) (Version: 3.44.0 - Kovid Goyal)
Citrix Authentication Manager (HKLM-x32\...\{9364CFB6-8129-4098-B9CD-9C5AD0D6F701}) (Version: 20.6.200.272 - Citrix Systems, Inc.) Hidden
Citrix Web Helper (HKLM-x32\...\{ADFC0427-AB84-4DD5-A508-69EE37258977}) (Version: 20.9.5.18 - Citrix Systems, Inc.) Hidden
Citrix Workspace 2009 (HKLM-x32\...\CitrixOnlinePluginPackWeb) (Version: 20.9.5.30 - Citrix Systems, Inc.)
Citrix Workspace Inside (HKLM-x32\...\{08958757-2C15-4B21-B2AE-69E3B298F079}) (Version: 20.9.5.65534 - Citrix Systems, Inc.) Hidden
CyberLink Power Media Player 14 (HKLM-x32\...\{32C8E300-BDB4-4398-92C2-E9B7D8A233DB}) (Version: 14.0.3.6129 - CyberLink Corp.)
CyberLink PowerDirector 12 (HKLM\...\{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - Ihr Firmenname) Hidden
CyberLink PowerDirector 12 (HKLM-x32\...\InstallShield_{E1646825-D391-42A0-93AA-27FA810DA093}) (Version: 12.0.6.4925 - CyberLink Corp.)
DisableMSDefender (HKLM\...\{74FE39A0-FB76-47CD-84BA-91E2BBB17EF2}) (Version: 1.0.0 - Hewlett-Packard Company) Hidden
Discover HP Touchpoint Manager (HKLM-x32\...\{D0038AC4-2CD9-49E3-B40D-16C9B6DBD8EC}) (Version: 1.0.18.1 - HP)
Dropbox 25 GB (HKLM-x32\...\{0867A88D-764F-366E-9E21-130DA8B472C3}) (Version: 3.1.18.0 - Dropbox, Inc.)
Dropbox Update Helper (HKLM-x32\...\{099218A5-A723-43DC-8DB5-6173656A1E94}) (Version: 1.3.761.1 - Dropbox, Inc.) Hidden
e5 Secure Download Manager (HKLM-x32\...\{A66F82FB-85EE-48D2-B19C-3A98147D5167}) (Version: 3.2.249.0 - Kivuto Solutions Inc.)
Energy Star (HKLM\...\{5CB22648-35F8-41BC-9C35-1E41FE6E12A5}) (Version: 1.1.1 - HP Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 114.0.5735.134 - Google LLC)
HP Customer Experience Enhancements (HKLM-x32\...\{C9EF1AAF-B542-41C8-A537-1142DA5D4AEC}) (Version: 6.0.3.1 - Hewlett-Packard) Hidden
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP)
HP ePrint SW (HKLM\...\{3C246BB4-8985-480D-8163-0E075A23AB04}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{7855A8A5-0B5B-41A9-AC8B-A50405FB72FE}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{7ADB025F-BFB1-480B-B3BF-B2FF8F115FB8}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM\...\{EFDACC2F-510D-4A1A-A988-196D58B4B915}) (Version: 5.0.18701 - HP) Hidden
HP ePrint SW (HKLM-x32\...\{88970959-baf7-4864-a39a-69a58e8ae5cf}) (Version: 5.0.18701 - HP)
HP ePrint SW (HKLM-x32\...\{E2A0A04B-C0A4-49F5-A496-4B93E1D0710D}) (Version: 5.0.18701 - HP) Hidden
HP Recovery Manager (HKLM-x32\...\{64BAA990-F1FC-4145-A7B1-E41FBBC9DA47}) (Version: 1.2.1510 - HP) Hidden
HP Registration Service (HKLM\...\{D1E8F2D7-7794-4245-B286-87ED86C1893C}) (Version: 1.2.8318.5320 - Hewlett-Packard)
HP Support Assistant (HKLM-x32\...\{E959FD01-BD01-4CC4-9BB8-4EBE8309BF37}) (Version: 8.1.52.1 - HP)
HP Support Solutions Framework (HKLM-x32\...\{A38E954F-9043-42BD-9DE9-246ED183791D}) (Version: 12.0.30.473 - HP)
HP System Event Utility (HKLM-x32\...\{09D0DB68-90EA-4015-983E-A0BD777D5A02}) (Version: 1.4.10 - HP Inc.)
HP Welcome (HKLM\...\HPWelcome) (Version: 1.0 - HP Inc.)
Intel(R) Chipset Device Software (HKLM\...\{FEBB7B48-CC1C-4A50-A497-FA21413F6BE9}) (Version: 10.1.1.14 - Intel Corporation) Hidden
Intel(R) Dynamic Platform and Thermal Framework (HKLM-x32\...\{654EE65D-FAA4-4EA6-8C07-DC94E6A304D4}) (Version: 8.1.10605.221 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.2.1183 - Intel Corporation)
Intel(R) Management Engine Components (HKLM\...\{B5F3C3A9-225A-4CAB-A56A-2CA278DC8EBE}) (Version: 11.0.2.1183 - Intel Corporation) Hidden
Intel(R) Management Engine Components (HKLM\...\{F76DCE2C-FE39-4B74-9393-6E57BC3E7136}) (Version: 1.0.0.0 - Intel Corporation) Hidden
Intel(R) ME UninstallLegacy (HKLM\...\{CA0C143D-F121-405C-A863-D95BC462A444}) (Version: 1.0.1.0 - Intel Corporation) Hidden
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 25.20.100.6518 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 14.8.1.1043 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{98A452E7-A559-4687-A58C-0C6A3EBEB625}) (Version: 14.8.1.1043 - Intel Corporation) Hidden
Intel(R) WiDi (HKLM\...\{6B15F1EF-F3A8-4C29-BF9E-18EB3683A83D}) (Version: 6.0.60.0 - Intel Corporation)
Intel(R) WiDi Software Asset Manager (HKLM-x32\...\{AC8973AF-7F4C-40F4-BFE1-C02FE95ED2C2}) (Version: 3.2.1184 - Intel Corporation) Hidden
Intel(R) Wireless Bluetooth(R) (HKLM-x32\...\{D4090A45-7F76-4446-A4FA-D8B02E9CA582}) (Version: 18.1.1605.3087 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (HKLM-x32\...\{619e726e-d2b4-4e28-9568-c964fd81ee6c}) (Version: 10.1.1.14 - Intel(R) Corporation) Hidden
Intel® PROSet/Wireless Software (HKLM-x32\...\{f8c930bd-0a68-425f-8c11-87723d1e2c97}) (Version: 20.90.0 - Intel Corporation)
Intel® PROSet/Wireless WiFi Software (HKLM\...\{EF71AFFB-85B5-407C-A301-39EA25F98313}) (Version: 20.90.0.2270 - Intel Corporation) Hidden
Intel® Trusted Connect Service Client (HKLM\...\{21D65C5B-7EB7-42A2-A596-56C275341D53}) (Version: 1.42.679.1 - Intel Corporation) Hidden
Java 8 Update 111 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java 8 Update 111 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180111F0}) (Version: 8.0.1110.14 - Oracle Corporation)
Java SE Development Kit 8 Update 111 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180111}) (Version: 8.0.1110.14 - Oracle Corporation)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.16327.20248 - Microsoft Corporation)
Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.16327.20248 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 114.0.1823.51 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 114.0.1823.51 - Microsoft Corporation)
Microsoft HEVC Media Extension Installation for Microsoft.HEVCVideoExtension_1.0.2512.0_x64__8wekyb3d8bbwe (x64) (HKLM\...\{B0169E83-757B-EF66-E2F0-391944D785BC}) (Version: 1.0.0.0 - Microsoft Corporation) Hidden
Microsoft Office 32-bit Components 2013 (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Korrekturhilfen 2013 - Deutsch (HKLM\...\{90150000-001F-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office OSM MUI (German) 2013 (HKLM\...\{90150000-00E1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing (German) 2013 (HKLM\...\{90150000-002C-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - English (HKLM\...\{90150000-001F-0409-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Proofing Tools 2013 - Italiano (HKLM\...\{90150000-001F-0410-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared 32-bit MUI (German) 2013 (HKLM\...\{90150000-00C1-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Office Shared MUI (German) 2013 (HKLM\...\{90150000-006E-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft OneDrive (HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\OneDriveSetup.exe) (Version: 23.114.0530.0001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\OneDriveSetup.exe) (Version: 23.114.0530.0001 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-827383328-2660241748-3898587492-1003\...\OneDriveSetup.exe) (Version: 17.3.6917.0607 - Microsoft Corporation)
Microsoft Project MUI (German) 2013 (HKLM\...\{90150000-00B4-0407-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Project Professional 2013 (HKLM\...\{91150000-003B-0000-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
Microsoft Project Professional 2013 (HKLM\...\Office15.PRJPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft Teams (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\Teams) (Version: 1.2.00.19260 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{BB052C53-34CB-42DE-AF41-66FDFCEEC868}) (Version: 3.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61030 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005 (HKLM\...\{929FBD26-9020-399B-9A7A-751D61F0B942}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005 (HKLM\...\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (HKLM-x32\...\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (HKLM-x32\...\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}) (Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.24.28127 (HKLM-x32\...\{282975d8-55fe-4991-bbbb-06a72581ce58}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)
Microsoft Visual C++ 2019 X64 Additional Runtime - 14.24.28127 (HKLM\...\{8678BA04-D161-45BE-ACA4-CC5D13073F35}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.24.28127 (HKLM\...\{7DC387B8-E6A2-480C-8EF9-A6E51AE81C19}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.24.28127 (HKLM-x32\...\{EAC73207-74BD-4B13-AACF-8C0E751FA4E8}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.24.28127 (HKLM-x32\...\{2E72FA1F-BADB-4337-B8AE-F7C17EC57D1D}) (Version: 14.24.28127 - Microsoft Corporation) Hidden
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 112.0 (x64 de)) (Version: 112.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 112.0.0.8496 - Mozilla)
OEM Application Profile (HKLM-x32\...\{B4B7FD8F-06FC-E277-4F29-8F75F8281D8F}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.16327.20248 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.16130.20218 - Microsoft Corporation) Hidden
Online Plug-in (HKLM-x32\...\{CB242730-5A02-4F5C-A0E1-4FA65429DDA7}) (Version: 20.9.5.18 - Citrix Systems, Inc.) Hidden
Opera Stable 79.0.4143.22 (HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\Opera 79.0.4143.22) (Version: 79.0.4143.22 - Opera Software)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (HKLM\...\{90150000-001F-040C-1000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDF24 Creator 8.8.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: - PDF24.org)
Preisheld (HKLM-x32\...\{6FEC43E5-6C49-4B28-B33F-687CE784C236}) (Version: 1.0.0.0 - Erik Lorenz)
Realtek Card Reader (HKLM-x32\...\{5BC2B5AB-80DE-4E83-B8CF-426902051D0A}) (Version: 10.0.10586.31222 - Realtek Semiconduct Corp.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.6.1001.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8940.1 - Realtek Semiconductor Corp.)
RoomSketcher (HKLM-x32\...\RoomSketcher 1.0) (Version: 1.0 - RoomSketcher)
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.50.0 - Samsung Electronics Co., Ltd.)
Shotcut (HKLM-x32\...\Shotcut) (Version: - )
Skype Version 8.75 (HKLM-x32\...\Skype_is1) (Version: 8.75 - Skype Technologies S.A.)
Smart Switch (HKLM-x32\...\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.22032.14 - Samsung Electronics Co., Ltd.) Hidden
Smart Switch (HKLM-x32\...\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}) (Version: 4.2.22032.14 - Samsung Electronics Co., Ltd.)
swMSM (HKLM-x32\...\{612C34C7-5E90-47D8-9B5C-0F717DD82726}) (Version: 12.0.0.1 - Adobe Systems, Inc) Hidden
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.5.10.75 - Synaptics Incorporated)
Teams Machine-Wide Installer (HKLM-x32\...\{39AF0813-FA7B-4860-ADBE-93B9B214B914}) (Version: 1.2.0.19260 - Microsoft Corporation)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{32DC821E-4A7D-4878-BEE8-337FA153D7F2}) (Version: 2.63.0.0 - Microsoft Corporation) Hidden
UpdateAssistant (HKLM\...\{52C1DD03-104E-4AC6-9DC6-21D585721ED1}) (Version: 1.19.0.0 - Microsoft Corporation) Hidden
WhatsApp (HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\WhatsApp) (Version: 2.2140.7 - WhatsApp)
Windows Setup Remediations (x64) (KB4023057) (HKLM\...\{5534e02f-0f5d-40dd-ba92-bea38d22384d}.sdb) (Version: - )
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Zotero (HKLM-x32\...\Zotero 6.0.20 (x86 en-US)) (Version: 6.0.20 - Corporation for Digital Scholarship)
Packages:
=========
Amazon -> C:\Program Files\WindowsApps\Amazon.com.Amazon_2018.519.2815.0_x64__343d40qqvtj1t [2023-03-19] (Amazon.com)
AMD Link -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDLink_10.22.40028.0_x64__0a9344xs7nr4m [2023-03-11] (Advanced Micro Devices Inc.)
Discover HP Touchpoint Manager -> C:\Program Files\WindowsApps\AD2F1837.DiscoverHPTouchpointManager_1.0.15.1_x86__v10z8vjag6ke6 [2022-01-18] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_146.2.1055.0_x64__v10z8vjag6ke6 [2023-06-19] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-08-06] (Microsoft Corporation)
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2021-01-18] (Microsoft Corporation) [MS Ad]
Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.98.1805.0_x64__mcm4njqhnhss8 [2022-02-17] (Netflix, Inc.)
Sandbox Coloring Pixel Art -> C:\Program Files\WindowsApps\2121MagicCraftGames.SandboxColoringPixelArt_8.1.0.0_x64__6nzhqfnh355zm [2018-09-29] (Magic Craft Games) [MS Ad]
Snapfish -> C:\Program Files\WindowsApps\AD2F1837.HPConnectedPhotopoweredbySnapfish_6.1.736.0_x86__v10z8vjag6ke6 [2023-03-19] (Snapfish)
Solitaire & Casual Games -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.16.3140.0_x64__8wekyb3d8bbwe [2023-03-21] (Microsoft Studios) [MS Ad]
TripAdvisor Hotels Flights Restaurants -> C:\Program Files\WindowsApps\TripAdvisorLLC.TripAdvisorHotelsFlightsRestaurants_1.5.10.0_x64__qj0v5chwq8f2g [2023-03-17] (TripAdvisor LLC)
Twitter -> C:\Program Files\WindowsApps\9E2F88E3.TWITTER_7.0.1.0_neutral__wgeqdkkx372wm [2021-06-15] (Twitter Inc.)
WindowsAppRuntime.1.3 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.3_3000.851.1712.0_x64__8wekyb3d8bbwe [2023-06-09] (Microsoft Corporation)
WindowsAppRuntime.1.3 -> C:\Program Files\WindowsApps\Microsoft.WindowsAppRuntime.1.3_3000.851.1712.0_x86__8wekyb3d8bbwe [2023-06-09] (Microsoft Corporation)
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-827383328-2660241748-3898587492-1002_Classes\CLSID\{04271989-C4D2-0339-CD36-CCF0C65723D3} -> [OneDrive - Fachhochschule Burgenland GmbH] => C:\Users\Internet\OneDrive - Fachhochschule Burgenland GmbH [2022-12-13 19:18]
CustomCLSID: HKU\S-1-5-21-827383328-2660241748-3898587492-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Internet\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19163.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-827383328-2660241748-3898587492-1002_Classes\CLSID\{2cc1eca6-bae1-41eb-a139-e019a408f5a4}\localserver32 -> C:\Users\Internet\AppData\Local\Programs\Balsamiq\Balsamiq Wireframes\BalsamiqWireframes.exe (Balsamiq) [Datei ist nicht signiert]
CustomCLSID: HKU\S-1-5-21-827383328-2660241748-3898587492-1002_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\Internet\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.19163.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-05-17] (Advanced Micro Devices, Inc.) [Datei ist nicht signiert]
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxDTCM.dll [2019-02-25] (Microsoft Windows Hardware Compatibility Publisher -> Intel Corporation)
==================== Codecs (Nicht auf der Ausnahmeliste) ====================
==================== Verknüpfungen & WMI ========================
==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
2020-04-28 12:23 - 2020-04-28 12:23 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems32.dll] C:\Program Files (x86)\Microsoft Office\root\Office16\AppVIsvSubsystems32.dll
2020-04-28 12:23 - 2020-04-28 12:23 - 000000000 ____L (Microsoft Corporation) [simlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R32.dll] C:\Program Files (x86)\Microsoft Office\root\Office16\c2r32.dll
2016-09-09 14:19 - 2016-09-09 14:19 - 000912384 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Charts.dll
2015-07-02 11:58 - 2015-07-02 11:58 - 005496320 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Core.dll
2015-06-25 16:03 - 2015-06-25 16:03 - 005804544 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Gui.dll
2015-06-25 16:00 - 2015-06-25 16:00 - 001061376 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Network.dll
2015-06-25 16:23 - 2015-06-25 16:23 - 003187712 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Qml.dll
2015-06-25 16:28 - 2015-06-25 16:28 - 002924544 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Quick.dll
2015-06-25 16:08 - 2015-06-25 16:08 - 005444608 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Widgets.dll
2015-06-25 16:58 - 2015-06-25 16:58 - 000277504 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5WinExtras.dll
2015-06-25 15:59 - 2015-06-25 15:59 - 000193024 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files\AMD\CNext\CNext\Qt5Xml.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\Users\Internet\Documents\budget1.jpeg:3or4kl4x13tuuug3Byamue2s4b [97]
AlternateDataStreams: C:\Users\Internet\Documents\budget1.jpeg:{4c8cc155-6c1e-11d1-8e41-00c04fb9386d} [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://hp15-comm.msn.com/?pc=HRTE
SearchScopes: HKLM -> {9E1BD656-C4B8-4A66-BF8A-2D0CCD6E18D3} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {9E1BD656-C4B8-4A66-BF8A-2D0CCD6E18D3} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1001 -> {9E1BD656-C4B8-4A66-BF8A-2D0CCD6E18D3} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1002 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-827383328-2660241748-3898587492-1002 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2023-02-06] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_111\bin\ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2023-03-05] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_111\bin\jp2ssv.dll [2016-12-31] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2015-12-20] (Hewlett-Packard Company -> Hewlett-Packard Company)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office\Office15\MSOSB.DLL [2014-01-23] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2023-05-03] (Microsoft Corporation -> Microsoft Corporation)
Filter-x32: application/x-ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica; charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=euc-jp - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=ISO-8859-1 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS936 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS949 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=MS950 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF-8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: application/x-ica;charset=UTF8 - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
Filter-x32: ica - {CFB6322E-CC85-4d1b-82C7-893888A236BC} - C:\Program Files (x86)\Citrix\ICA Client\IcaMimeFilter.dll [2020-09-23] (Citrix Systems, Inc. -> Citrix Systems, Inc.)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-827383328-2660241748-3898587492-1001\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\sharepoint.com -> hxxps://fhburgenlandat.sharepoint.com
==================== Hosts Inhalt: =========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2015-10-30 09:24 - 2015-10-30 09:21 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts
2017-01-21 19:00 - 2017-01-21 19:06 - 000000506 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
192.168.173.1 LAPTOP-8IJA6MO6.mshome.net # 2022 1 4 20 17 6 46 334
192.168.173.194 LGwebOSTV.mshome.net # 2017 1 6 28 17 6 46 334
==================== Andere Bereiche ===========================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\Intel\iCLS Client\;C:\Program Files\Intel\iCLS Client\;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files\Intel\Intel(R) Management Engine Components\DAL;C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT;C:\Program Files\Intel\Intel(R) Management Engine Components\IPT;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files\Intel\WiFi\bin\;C:\Program Files\Common Files\Intel\WirelessCommon\;C:\Program Files (x86)\Calibre2\
HKU\S-1-5-21-827383328-2660241748-3898587492-1001\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\Hewlett-Packard Backgrounds\backgroundDefault.jpg
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\Control Panel\Desktop\\Wallpaper -> c:\windows\web\wallpaper\theme1\img13.jpg
HKU\S-1-5-21-827383328-2660241748-3898587492-1003\Control Panel\Desktop\\Wallpaper -> C:\windows\web\wallpaper\Hewlett-Packard Backgrounds\backgroundDefault.jpg
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 0)
ist aktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "Skype for Desktop"
HKU\S-1-5-21-827383328-2660241748-3898587492-1002\...\StartupApproved\Run: => "Lync"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{03D40385-496F-4289-A1DD-746C3121A21B}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe => Keine Datei
FirewallRules: [{0B374925-FA35-4DFA-9793-1EDB641E0AE7}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{463020B1-0224-44F7-B4A9-23FE3364B89D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{33FB0893-46D8-406A-B9F6-8E3F54056486}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\SmartAgentTest.exe => Keine Datei
FirewallRules: [{81842C48-A33A-4ACA-8611-A806567AC733}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\Next\WirelessDisplay.exe => Keine Datei
FirewallRules: [{12EB12FD-1F31-4D12-AA7E-F422353BA930}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiAppOld.exe => Keine Datei
FirewallRules: [{5A6F7C46-9AED-460E-B424-C1BFD03206FD}] => (Allow) C:\Program Files\Intel Corporation\Intel WiDi\WiDiApp.exe => Keine Datei
FirewallRules: [{AED1F8E1-2ADC-41F2-BCCE-C9F6E5A32018}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVD Cinema\PowerDVDCinema.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{C49E378D-CA6B-42A1-B112-33D25EFE49DC}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Movie\PowerDVDMovie.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{2445A0EE-E135-42F2-BE34-21DA93201669}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD14Agent.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{E5381FF3-FECD-46E7-9394-28B8516FCACB}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\Kernel\DMS\CLMSServerPDVD14.exe (CyberLink Corp. -> CyberLink)
FirewallRules: [{D9C0B452-1EC4-4D4A-9926-73CE858A06F3}] => (Allow) C:\Program Files (x86)\CyberLink\PowerDVD14\PowerDVD.exe (CyberLink Corp. -> CyberLink Corp.)
FirewallRules: [{6516A6E1-463A-4D87-A72B-AA6165C50674}] => (Allow) c:\Program Files\CyberLink\PowerDirector12\PDR10.EXE => Keine Datei
FirewallRules: [{4A523437-0E0A-4BEB-9A9D-82B77DFA4FFC}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2E302E13-EE11-450A-BB6C-E48E4E9DFC27}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{411E34CD-571B-42E0-BBA6-EEC4C4C0DE67}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{2F8E8D84-77BB-414E-9BC3-119EF3B683E3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [TCP Query User{59237B46-67A2-4D9A-A253-420D6B395817}C:\programmierung\eclipse\eclipse.exe] => (Block) C:\programmierung\eclipse\eclipse.exe (Eclipse Foundation, Inc. -> )
FirewallRules: [UDP Query User{CDD1290E-76B9-42B6-AA25-A29B916FD020}C:\programmierung\eclipse\eclipse.exe] => (Block) C:\programmierung\eclipse\eclipse.exe (Eclipse Foundation, Inc. -> )
FirewallRules: [TCP Query User{37921094-B5B3-496E-9A45-4844B63FD974}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [UDP Query User{6407B439-CF85-4BD7-A2F9-1CC498AFAAD9}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{EF7CF130-C35D-4D3A-AD22-819B42542CB4}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3797F4F9-CF8A-4059-84CE-36731AEC7C92}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{92C336A3-2706-461D-9671-04F91B6648C7}] => (Allow) C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe (Intel Corporation -> )
FirewallRules: [{C7D5EEB6-2302-43F2-ACFD-8E024E645323}] => (Allow) C:\Users\Chantal\AppData\Local\Programs\Opera\62.0.3331.43\opera.exe (Opera Software AS -> Opera Software)
FirewallRules: [TCP Query User{B89CFA4A-EB4C-421E-BB37-053FF0E1DACA}C:\users\internet\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\internet\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [UDP Query User{BCF817B8-DC83-4E74-BB63-A7A456FCB35C}C:\users\internet\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\internet\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{3BEEF4F2-4EAE-4BD3-B7EA-C601059068DD}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{034AC791-B9C8-403C-99FD-82148EF0DCD4}] => (Allow) C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{11B1C976-7037-4EE3-8789-5AA65D51A772}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{26354581-6E21-4904-A47C-99A598B5255B}] => (Allow) C:\Program Files\Avast Software\SecureLine VPN\Vpn.exe (Avast Software s.r.o. -> AVAST Software)
FirewallRules: [{BDC0235F-4644-4E5E-B541-8A31D7E2C262}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{37AA498F-A9E4-4FC0-9F31-BCDD8CAE8BDB}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe => Keine Datei
FirewallRules: [{05E0DDF0-1D8A-496B-9D6A-E8E84630FE87}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{63E6F62F-5A2A-4FF2-9356-57E4126CBD4F}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe => Keine Datei
FirewallRules: [{33AF2557-FE97-4AC1-A262-5C5F73D74B77}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{01144DE0-DCE0-4C58-84F8-ED4874602D3F}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{D2C38A5A-B6BC-43C7-9803-77FD517265E5}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{2DF90582-B735-430A-8BC1-2514C444A54E}C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe] => (Allow) C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{4F053E24-2ED5-47FD-869E-92211D9C7667}C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe] => (Allow) C:\users\internet\desktop\test\iperf-3.1.3-win64\iperf3.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{0A42C63F-9EBF-4F38-8AA9-63B2C13588EB}C:\users\internet\desktop\test\moonlight.exe] => (Allow) C:\users\internet\desktop\test\moonlight.exe (Cameron Gutman -> Moonlight Game Streaming Project)
FirewallRules: [UDP Query User{2CD6E4AA-24F3-4A17-AE36-E36E310632C0}C:\users\internet\desktop\test\moonlight.exe] => (Allow) C:\users\internet\desktop\test\moonlight.exe (Cameron Gutman -> Moonlight Game Streaming Project)
FirewallRules: [{41FCA4CA-4E7C-4E0D-8533-C55729BFA021}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{8BAB05F4-A2AE-41EC-B510-CBD4E27A3DC9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{7D6880B7-4D79-4C7F-AF48-1379880BFD65}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{13ACED7A-8B05-463C-842E-F3469F15435B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3402.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{21839CE7-3A64-4063-9223-3D24D5CAF711}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{CE713E0E-AD1D-4E9D-A8F5-1FCA5901E9B1}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{49E17838-16DB-4C83-937A-CF19606C2525}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{F69B3590-BE91-45A9-999B-1FE7E3831808}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.98.3407.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{9027CB2D-A4C3-4846-9D91-EDE48CFDC289}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)
FirewallRules: [{CD8ACAC1-BE93-477C-857B-8EC12BF4FFAB}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\114.0.1823.51\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6367BBD2-52C3-4DAC-A1F7-2CB540425229}] => (Allow) C:\Users\Chantal\AppData\Local\Programs\Opera\79.0.4143.22\opera.exe (Opera Software AS -> Opera Software)
==================== Wiederherstellungspunkte =========================
14-06-2023 11:01:40 Windows Modules Installer
19-06-2023 21:10:23 Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
19-06-2023 21:10:35 Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
==================== Fehlerhafte Geräte im Gerätemanager ============
==================== Fehlereinträge in der Ereignisanzeige: ========================
Applikationsfehler:
==================
Error: (06/19/2023 09:43:05 PM) (Source: HP Active Health) (EventID: 91) (User: )
Description: Unhandled Exception. Application will terminate immediately.
System.ArgumentNullException: Der Wert darf nicht NULL sein.
bei System.Threading.Monitor.Enter(Object obj)
bei HP.ActiveHealth.Commons.Security.HashStore.Validate(String filePath)
bei HP.ActiveHealth.Core.Program..ctor(String[] args, Boolean mustCheckSignature, Boolean validateIni)
bei HP.ActiveHealth.Core.ActiveHealthMain.Main(String[] args)
Error: (06/19/2023 09:39:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: Local Hostname LAPTOP-8IJA6MO6.local already in use; will try LAPTOP-8IJA6MO6-2.local instead
Error: (06/19/2023 09:39:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: ProbeCount 1; will deregister 4 LAPTOP-8IJA6MO6.local. Addr 192.168.0.75
Error: (06/19/2023 09:39:12 PM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: mDNSCoreReceiveResponse: Received from 192.168.0.75:5353 16 LAPTOP-8IJA6MO6.local. AAAA 2A02:8109:B840:2EB8:6D3F:870E:7281:A627
Error: (06/19/2023 09:39:05 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/19/2023 09:39:05 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=25, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/19/2023 09:39:05 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=17, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Error: (06/19/2023 09:39:05 PM) (Source: Microsoft-Windows-EapHost) (EventID: 2002) (User: NT-AUTORITÄT)
Description: Überspringen: Eap method DLL path Fehler bei der Überprüfung. Fehler: Type-ID=43, Autor-ID=9, Lieferant-ID=0, Lieferant-Typ=0
Systemfehler:
=============
Error: (06/19/2023 08:21:02 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Avast SecureLine VPN" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Microsoft Office Click-to-Run Service" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Citrix Workspace Updater Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "SynTPEnh Caller Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) PROSet/Wireless Event Log" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Intel(R) Content Protection HDCP Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "PDF24" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 60000 Millisekunden durchgeführt: Neustart des Diensts.
Error: (06/19/2023 08:21:01 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "HPWMISVC" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
Windows Defender:
================
Date: 2023-06-19 20:33:59
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8A99C68A-C98B-4917-8726-ADF162353B16}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Benutzerdefinierte Überprüfung
Benutzer: LAPTOP-8IJA6MO6\Internet
Date: 2023-06-19 20:33:49
Description:
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {89236E5D-9AD7-4BE4-8910-C439404C0062}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Vollständige Überprüfung
Benutzer: LAPTOP-8IJA6MO6\Internet
Date: 2023-06-19 20:33:49
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Benutzer
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: Unknown
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
Date: 2023-06-19 20:33:19
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
Date: 2023-06-19 20:31:41
Description:
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=BrowserModifier:Win32/Istuni&threatid=265835&enterprise=0
Name: BrowserModifier:Win32/Istuni
Schweregrad: Hoch
Kategorie: Browserveränderer
Pfad: file:_C:\Program Files (x86)\Preisheld\ff\instui.exe
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Echtzeitschutz
Benutzer: LAPTOP-8IJA6MO6\Internet
Prozessname: C:\Windows\explorer.exe
Sicherheitsversion: AV: 1.391.1975.0, AS: 1.391.1975.0, NIS: 1.391.1975.0
Modulversion: AM: 1.1.23050.3, NIS: 1.1.23050.3
CodeIntegrity:
===============
Date: 2023-06-19 21:41:48
Description:
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igd10iumd64.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
BIOS: Insyde F.14 08/01/2016
Hauptplatine: HP 81EC
Prozessor: Intel(R) Core(TM) i5-6200U CPU @ 2.30GHz
Prozentuale Nutzung des RAM: 47%
Installierter physikalischer RAM: 8082.91 MB
Verfügbarer physikalischer RAM: 4240.46 MB
Summe virtueller Speicher: 9362.91 MB
Verfügbarer virtueller Speicher: 5731.03 MB
==================== Laufwerke ================================
Drive c: (Windows) (Fixed) (Total:222.81 GB) (Free:104.66 GB) (Model: SanDisk SD8SNAT-256G-1006) NTFS
Drive d: (RECOVERY) (Fixed) (Total:14.44 GB) (Free:1.74 GB) (Model: SanDisk SD8SNAT-256G-1006) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (USB) (Removable) (Total:3.63 GB) (Free:3.53 GB) FAT32
\\?\Volume{3d048761-238e-4bb3-a4a6-f2e7ede7f5a4}\ () (Fixed) (Total:0.96 GB) (Free:0.4 GB) NTFS
\\?\Volume{b299f827-c17d-455e-b893-60ebdf9bb198}\ () (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32
==================== MBR & Partitionstabelle ====================
==========================================================
Disk: 0 (Size: 238.5 GB) (Disk ID: 49100E72)
Partition: GPT.
==========================================================
Disk: 1 (Size: 3.6 GB) (Disk ID: 001C52CB)
Partition 1: (Active) - (Size=3.6 GB) - (Type=FAT32)
==================== Ende von Addition.txt =======================
|
|
19.06.2023, 21:01
| #8 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Spam Meldungen von Edge Benachrichtigung Nach adwCleaner muss da dringend aufgeräumt werden. Das ist uralte Schrottsoftware drauf. adwCleaner Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags. adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
20.06.2023, 16:28
| #9 |
| | Spam Meldungen von Edge Benachrichtigung AdwCleaner S002 Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-20-2023
# Duration: 00:00:11
# OS: Windows 10 (Build 19045.3086)
# Scanned: 32094
# Detected: 31
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
Preinstalled.HPRegistrationService Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Preinstalled.HPRegistrationService Folder C:\ProgramData\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Preinstalled.HPRegistrationService Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D1E8F2D7-7794-4245-B286-87ED86C1893C}
Preinstalled.HPSupportAssistant Folder C:\HP\SUPPORT
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Folder C:\Users\Internet\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{E959FD01-BD01-4CC4-9BB8-4EBE8309BF37}
Preinstalled.HPWelcome File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Welcome.lnk
Preinstalled.HPWelcome Folder C:\Program Files\HP\HP WELCOME
Preinstalled.HPWelcome Folder C:\ProgramData\HP\HP WELCOME
Preinstalled.HPWelcome Folder C:\Users\Chantal\AppData\Local\HP\HP WELCOME
Preinstalled.HPWelcome Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HPWelcome
Preinstalled.SamsungSmartSwitch File C:\Users\Chantal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Smart Switch.lnk
Preinstalled.SamsungSmartSwitch Folder C:\Program Files (x86)\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\Users\Chantal\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Folder C:\Users\Internet\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
AdwCleaner_Debug.log - [66764 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
AdwCleaner[C00].txt - [7260 octets] - [19/06/2023 20:21:09]
AdwCleaner[S01].txt - [5429 octets] - [19/06/2023 20:24:46]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S02].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-20-2023
# Duration: 00:00:10
# OS: Windows 10 (Build 19045.3086)
# Cleaned: 31
# Awaiting reboot:1
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Deleted Preinstalled.HPRegistrationService Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Deleted Preinstalled.HPRegistrationService Folder C:\ProgramData\HEWLETT-PACKARD\HP REGISTRATION SERVICE
Deleted Preinstalled.HPRegistrationService Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{D1E8F2D7-7794-4245-B286-87ED86C1893C}
Deleted Preinstalled.HPSupportAssistant Folder C:\HP\SUPPORT
Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP CUSTOMER FEEDBACK
Deleted Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\ProgramData\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Local\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\Chantal\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Folder C:\Users\Internet\AppData\Roaming\HEWLETT-PACKARD\HP SUPPORT FRAMEWORK
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{335F9A62-FE4B-40CD-B4ED-BB4DE21DC95D}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{C0ABBA07-B636-47B8-B9E1-BB96D7CD4831}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Classes\CLSID\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E76FD755-C1BA-4DCB-9F13-99BD91223ADE}
Deleted Preinstalled.HPSupportAssistant Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{E959FD01-BD01-4CC4-9BB8-4EBE8309BF37}
Deleted Preinstalled.HPWelcome File C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP Welcome.lnk
Deleted Preinstalled.HPWelcome Folder C:\Program Files\HP\HP WELCOME
Deleted Preinstalled.HPWelcome Folder C:\ProgramData\HP\HP WELCOME
Deleted Preinstalled.HPWelcome Folder C:\Users\Chantal\AppData\Local\HP\HP WELCOME
Deleted Preinstalled.HPWelcome Registry HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\HPWelcome
Deleted Preinstalled.SamsungSmartSwitch File C:\Users\Chantal\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Smart Switch.lnk
Deleted Preinstalled.SamsungSmartSwitch Folder C:\Program Files (x86)\SAMSUNG\SMART SWITCH PC
Deleted Preinstalled.SamsungSmartSwitch Folder C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SAMSUNG\SMART SWITCH PC
Deleted Preinstalled.SamsungSmartSwitch Folder C:\Users\Chantal\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Deleted Preinstalled.SamsungSmartSwitch Folder C:\Users\Internet\AppData\Roaming\SAMSUNG\SMART SWITCH PC
Deleted Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\InstallShield_{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
Deleted Preinstalled.SamsungSmartSwitch Registry HKLM\Software\Wow6432Node\\Microsoft\Windows\CurrentVersion\Uninstall\{74FA5314-85C8-4E2A-907D-D9ECCCB770A7}
Needs Reboot Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
***** Reboot Required to Complete *****
***** [ Folders ] *****
Cleaning failed C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
AdwCleaner_Debug.log - [85672 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
AdwCleaner[C00].txt - [7260 octets] - [19/06/2023 20:21:09]
AdwCleaner[S01].txt - [5429 octets] - [19/06/2023 20:24:46]
AdwCleaner[S02].txt - [5227 octets] - [20/06/2023 17:13:18]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-20-2023
# Duration: 00:00:13
# OS: Windows 10 (Build 19045.3086)
# Scanned: 32097
# Detected: 1
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
AdwCleaner_Debug.log - [89375 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
AdwCleaner[C00].txt - [7260 octets] - [19/06/2023 20:21:09]
AdwCleaner[S01].txt - [5429 octets] - [19/06/2023 20:24:46]
AdwCleaner[S02].txt - [5227 octets] - [20/06/2023 17:13:18]
AdwCleaner[C02].txt - [6021 octets] - [20/06/2023 17:14:47]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S03].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start: 06-20-2023
# Duration: 00:00:00
# OS: Windows 10 (Build 19045.3086)
# Cleaned: 1
# Awaiting reboot:1
# Failed: 0
***** [ Services ] *****
No malicious services cleaned.
***** [ Folders ] *****
No malicious folders cleaned.
***** [ Files ] *****
No malicious files cleaned.
***** [ DLL ] *****
No malicious DLLs cleaned.
***** [ WMI ] *****
No malicious WMI cleaned.
***** [ Shortcuts ] *****
No malicious shortcuts cleaned.
***** [ Tasks ] *****
No malicious tasks cleaned.
***** [ Registry ] *****
No malicious registry entries cleaned.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries cleaned.
***** [ Chromium URLs ] *****
No malicious Chromium URLs cleaned.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries cleaned.
***** [ Firefox URLs ] *****
No malicious Firefox URLs cleaned.
***** [ Hosts File Entries ] *****
No malicious hosts file entries cleaned.
***** [ Preinstalled Software ] *****
Needs Reboot Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
[+] Delete Tracing Keys
[+] Reset Winsock
*************************
***** Reboot Required to Complete *****
***** [ Folders ] *****
Cleaning failed C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
*************************
AdwCleaner_Debug.log - [94166 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
AdwCleaner[C00].txt - [7260 octets] - [19/06/2023 20:21:09]
AdwCleaner[S01].txt - [5429 octets] - [19/06/2023 20:24:46]
AdwCleaner[S02].txt - [5227 octets] - [20/06/2023 17:13:18]
AdwCleaner[C02].txt - [6021 octets] - [20/06/2023 17:14:47]
AdwCleaner[S03].txt - [1861 octets] - [20/06/2023 17:17:41]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C03].txt ##########
Code:
ATTFilter # -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build: 08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support: https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start: 06-20-2023
# Duration: 00:00:14
# OS: Windows 10 (Build 19045.3086)
# Scanned: 32097
# Detected: 1
***** [ Services ] *****
No malicious services found.
***** [ Folders ] *****
No malicious folders found.
***** [ Files ] *****
No malicious files found.
***** [ DLL ] *****
No malicious DLLs found.
***** [ WMI ] *****
No malicious WMI found.
***** [ Shortcuts ] *****
No malicious shortcuts found.
***** [ Tasks ] *****
No malicious tasks found.
***** [ Registry ] *****
No malicious registry entries found.
***** [ Chromium (and derivatives) ] *****
No malicious Chromium entries found.
***** [ Chromium URLs ] *****
No malicious Chromium URLs found.
***** [ Firefox (and derivatives) ] *****
No malicious Firefox entries found.
***** [ Firefox URLs ] *****
No malicious Firefox URLs found.
***** [ Hosts File Entries ] *****
No malicious hosts file entries found.
***** [ Preinstalled Software ] *****
Preinstalled.HPSupportAssistant Folder C:\Program Files (x86)\HEWLETT-PACKARD\HP SUPPORT SOLUTIONS
AdwCleaner_Debug.log - [98222 octets] - [19/06/2023 20:18:58]
AdwCleaner[S00].txt - [11707 octets] - [19/06/2023 20:20:32]
AdwCleaner[C00].txt - [7260 octets] - [19/06/2023 20:21:09]
AdwCleaner[S01].txt - [5429 octets] - [19/06/2023 20:24:46]
AdwCleaner[S02].txt - [5227 octets] - [20/06/2023 17:13:18]
AdwCleaner[C02].txt - [6021 octets] - [20/06/2023 17:14:47]
AdwCleaner[S03].txt - [1861 octets] - [20/06/2023 17:17:41]
AdwCleaner[C03].txt - [2265 octets] - [20/06/2023 17:18:21]
########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S04].txt ##########
|
|
20.06.2023, 21:09
| #10 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Spam Meldungen von Edge Benachrichtigung Ok. Dann macht bitte mit Malwarebytes weiter und danach neue FRST-Logs.
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.06.2023, 16:15
| #11 |
| /// TB-Ausbilder | Spam Meldungen von Edge Benachrichtigung Fehlende Rückmeldung Dieses Thema wurde aus unseren Abos gelöscht. Somit bekommen wir keine Benachrichtigung über neue Antworten. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema. Hinweis: Das Verschwinden der Symptome bedeutet nicht, dass Dein Rechner schon sauber ist. Jeder andere bitte hier klicken und ein eigenes Thema erstellen! |
|
| Themen zu Spam Meldungen von Edge Benachrichtigung |
| benachrichtigungen, blockiert, browser, detected, dll, error, explorer, failed, firefox, frage, helper, internet, internet explorer, laptop, malwarebytes, microsoft, registry, service.exe, software, spam, system, trojaner, trojaner board, werbung, windows, wmi |
Linear-Darstellung
