Trojaner vermutet

Pampel_ · 16.07.2023, 17:33

Ich habe den AdwCleaner laufen lassen, auf "In Quarantäne verschieben" geklickt, nochmal laufen lassen und die Logdatei vom angegebenen Pfad gepostet.
Was mache ich falsch?

cosinus · 16.07.2023, 17:47

Lies meinen Beitrag #13 nochmal richtig

Pampel_ · 16.07.2023, 18:26

Ich fürchte, Du hast es mit einemIT-Legastheniker mit einem massiven Brett vor dem Kopf zu tun! Habe ich die Logdatei nicht zwischen Code Tags gesetzt? Ist es gar die falsche oder unvollständige Datei? Oder brauchst Du nochmal die FRST und Addition-Datei? Hätte ich die in Quarantäne gestzten Dateien löschen sollen? Ein weiterer Scan brachte mich is zu der Stelle, wo Dateien zum Verschieben in Quarantäne vorgeschlagen werden, was aber nicht der Fall war, weshalb ich nicht weiter kam.
ICH WEISS ES NICHT!

cosinus · 16.07.2023, 18:53

Das meine ich:

Zitat:

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.

Pampel_ · 16.07.2023, 19:00

genau das habe ich gemacht. Ich bin bis zu der Stelle gekommen an der es heisst "in Quarantäne verschieben". Hier ging es nicht weiter, weil keine Felder markiert waren.

cosinus · 16.07.2023, 19:05

Ich hab den Eindruck, dass du immer noch nicht verstanden hast, warum du adwCleaner wiederholen solltest. Es geht darum, dass adwCleaner nichts mehr findet.

Pampel_ · 16.07.2023, 19:14

Ich habe trotz mehrfachem Scan und Neustart zwei mal vorinstallierte Software in der Liste

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    07-16-2023
# Duration: 00:00:00
# OS:       Windows 10 (Build 19045.3208)
# Cleaned:  5
# Awaiting reboot:4
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.DellSupportAssistAgent   Folder   C:\ProgramData\DELL\SUPPORTASSIST
Needs Reboot  Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Needs Reboot  Preinstalled.DellSupportAssistAgent   Folder   C:\Program Files\DELL\SUPPORTASSISTAGENT
Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATESERVICE
Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATESERVICE


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed   C:\Program Files (x86)\DELL\UPDATESERVICE
Cleaning failed   C:\Program Files\DELL\SAREMEDIATION\PLUGIN
Cleaning failed   C:\Program Files\DELL\SUPPORTASSISTAGENT
Cleaning failed   C:\ProgramData\DELL\UPDATESERVICE

*************************

AdwCleaner[S00].txt - [7434 octets] - [16/07/2023 14:45:46]
AdwCleaner[C00].txt - [4228 octets] - [16/07/2023 14:46:47]
AdwCleaner[S01].txt - [4321 octets] - [16/07/2023 14:52:00]
AdwCleaner[S02].txt - [4382 octets] - [16/07/2023 15:14:01]
AdwCleaner[S03].txt - [4443 octets] - [16/07/2023 18:04:29]
AdwCleaner[S04].txt - [4504 octets] - [16/07/2023 19:00:17]
AdwCleaner[S05].txt - [4565 octets] - [16/07/2023 19:13:07]
AdwCleaner[S06].txt - [4626 octets] - [16/07/2023 19:59:58]
AdwCleaner[C06].txt - [5499 octets] - [16/07/2023 20:11:12]
AdwCleaner[S07].txt - [2375 octets] - [16/07/2023 20:15:26]
AdwCleaner[C07].txt - [2988 octets] - [16/07/2023 20:15:59]
AdwCleaner[S08].txt - [2497 octets] - [16/07/2023 20:20:54]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C08].txt ##########

cosinus · 16.07.2023, 19:21

Den vorinstallierten DELL-Krempel deinstallieren.

Pampel_ · 16.07.2023, 19:29

Wie erwähnt:
trotz mehrfachem Scan und Neustart noch zweimal alter Dll_Krempel in der Liste

cosinus · 16.07.2023, 19:33

Du sollst ja auch manuell deinstallieren.

Pampel_ · 16.07.2023, 19:54

Ich habe "DellUpdateforWindows10" über die Systemeinestellungen deinstalliert, trotzdem taucht es beim Scan wieder auf. Für heute mache ich Feierabend.

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2022-10-10.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    07-16-2023
# Duration: 00:00:00
# OS:       Windows 10 (Build 19045.3208)
# Cleaned:  2
# Awaiting reboot:2
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\Program Files (x86)\DELL\UPDATESERVICE
Needs Reboot  Preinstalled.DellUpdateforWindows10   Folder   C:\ProgramData\DELL\UPDATESERVICE


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

***** Reboot Required to Complete *****


***** [ Folders ] *****

Cleaning failed   C:\Program Files (x86)\DELL\UPDATESERVICE
Cleaning failed   C:\ProgramData\DELL\UPDATESERVICE

*************************

AdwCleaner[S00].txt - [7434 octets] - [16/07/2023 14:45:46]
AdwCleaner[C00].txt - [4228 octets] - [16/07/2023 14:46:47]
AdwCleaner[S01].txt - [4321 octets] - [16/07/2023 14:52:00]
AdwCleaner[S02].txt - [4382 octets] - [16/07/2023 15:14:01]
AdwCleaner[S03].txt - [4443 octets] - [16/07/2023 18:04:29]
AdwCleaner[S04].txt - [4504 octets] - [16/07/2023 19:00:17]
AdwCleaner[S05].txt - [4565 octets] - [16/07/2023 19:13:07]
AdwCleaner[S06].txt - [4626 octets] - [16/07/2023 19:59:58]
AdwCleaner[C06].txt - [5499 octets] - [16/07/2023 20:11:12]
AdwCleaner[S07].txt - [2375 octets] - [16/07/2023 20:15:26]
AdwCleaner[C07].txt - [2988 octets] - [16/07/2023 20:15:59]
AdwCleaner[S08].txt - [2497 octets] - [16/07/2023 20:20:54]
AdwCleaner[C08].txt - [3110 octets] - [16/07/2023 20:21:39]
AdwCleaner[S09].txt - [2619 octets] - [16/07/2023 20:23:53]
AdwCleaner[S10].txt - [2680 octets] - [16/07/2023 20:33:21]
AdwCleaner[C10].txt - [3293 octets] - [16/07/2023 20:35:08]
AdwCleaner[S11].txt - [2802 octets] - [16/07/2023 20:37:22]
AdwCleaner[C11].txt - [2855 octets] - [16/07/2023 20:37:52]
AdwCleaner[S12].txt - [2659 octets] - [16/07/2023 20:38:35]
AdwCleaner[C12].txt - [3111 octets] - [16/07/2023 20:38:57]
AdwCleaner[S13].txt - [2781 octets] - [16/07/2023 20:41:18]
AdwCleaner[S14].txt - [2842 octets] - [16/07/2023 20:44:49]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C14].txt ##########

cosinus · 16.07.2023, 20:46

Das ist nur auch Junk, aber keine Malware.
Bitte neue FRST-Logs.

Pampel_ · 17.07.2023, 08:20

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 16-07-2023
durchgeführt von kabee (Administrator) auf CAD5 (Dell Inc. Precision 7730) (17-07-2023 09:16:12)
Gestartet von C:\Users\kabee\Downloads\FRST64.exe
Geladene Profile: kabee
Plattform: Microsoft Windows 10 Pro Version 22H2 19045.3208 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(ALPS ALPINE CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\DellTPad\ApntEx.exe
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserProcess.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\AnalyticsSubAgent\Dell.TechHub.Analytics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\BridgeCommunication.exe
(C:\Program Files\Mozilla Thunderbird\thunderbird.exe ->) (Franz Josef Wechselberger -> ) C:\Program Files (x86)\MyPhoneExplorer\DLL\MozillaConnector.exe
(C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23052.122.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.YourPhone_1.23052.122.0_x64__8wekyb3d8bbwe\YourPhoneAppProxy.exe
(DellTPad\Apoint.exe ->) (ALPS ALPINE CO., LTD. -> ALPSALPINE CO., LTD.) C:\Windows\System32\DellTPad\ApMsgFwd.exe
(DellTPad\Apoint.exe ->) (ALPS ALPINE CO., LTD. -> ALPSALPINE Co., Ltd.) C:\Windows\System32\DellTPad\hidfind.exe
(DellTPad\Apoint.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ALPSALPINE Co., Ltd.) C:\Windows\System32\DellTPad\ApRemote.exe
(DellTPad\HidMonitorSvc.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ALPSALPINE Co., Ltd.) C:\Windows\System32\DellTPad\Apoint.exe
(DriverStore\FileRepository\cui_comp.inf_amd64_f7412e3e3404de80\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_comp.inf_amd64_f7412e3e3404de80\igfxEM.exe
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Thunderbird\thunderbird.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe <2>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <10>
(services.exe ->) (ALPS ALPINE CO., LTD. -> ALPSALPINE Co., Ltd.) C:\Windows\System32\DellTPad\HidMonitorSvc.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk Inc.) C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk) C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\9.0.1.1462\AdskLicensingService\AdskLicensingService.exe
(services.exe ->) (Autodesk, Inc. -> Autodesk, Inc.) C:\Program Files\Autodesk\Inventor 2020\Moldflow\bin\mitsijm.exe
(services.exe ->) (BUFFALO INC. -> BUFFALO INC.) C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\PPO\dpoMonitorSvc.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\PPO\poaService.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\PPO\poaSmSrv.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\PPO\poaTaServ.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\PPO\Telemetry\dpoTelemetrySvc.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService64.exe
(services.exe ->) (Flexera Software LLC -> Flexera) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\igcc_dch.inf_amd64_141eb88527011137\OneApp.IGCC.WinService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d0b39b11619fd0c4\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d0b39b11619fd0c4\IntelCpHeciSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\lms.inf_amd64_4dbf190c04dbd474\LMS.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_21e0cf0737fd48af\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\TbtP2pShortcutService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\ThunderboltService.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\cui_comp.inf_amd64_f7412e3e3404de80\igfxCUIService.exe
(services.exe ->) (Intel(R) Rapid Storage Technology -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iastorac.inf_amd64_9c788f1d162b1224\RstMwService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> ) C:\Windows\System32\UshUpgradeService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corporation) C:\Windows\System32\HostControlService.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corporation) C:\Windows\System32\HostStorageService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_ecd554eea8aca986\Display.NvContainer\NVDisplay.Container.exe <2>
(services.exe ->) (Nvidia Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nvdm.inf_amd64_ecd554eea8aca986\NVWMI\nvWmi64.exe <2>
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(services.exe ->) (Waves Inc -> Waves Audio Ltd.) C:\Windows\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_9e45e2d5613ef7ef\WavesSysSvc64.exe
(svchost.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
(svchost.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_b55ed36a9a78cc75\RtkAudUService64.exe [3495784 2022-07-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [WavesSvc] => C:\WINDOWS\System32\DriverStore\FileRepository\wavesapo75de.inf_amd64_9e45e2d5613ef7ef\WavesSvc64.exe [1237920 2019-09-05] (Waves Inc -> Waves Audio Ltd.)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [11327200 2023-07-11] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Autodesk Desktop App] => C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AutodeskDesktopApp.exe [657704 2019-05-14] (Autodesk, Inc. -> Autodesk, Inc.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-19\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2627968 2023-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-20\...\RunOnce: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2627968 2023-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1785999695-2903281731-292431783-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [2627968 2023-02-01] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1785999695-2903281731-292431783-1001\...\Run: [MyDriveConnect.exe] => C:\Program Files (x86)\MyDrive Connect\TomTom MyDrive Connect.exe [2221480 2022-05-02] (TomTom International B.V. -> TomTom)
HKU\S-1-5-21-1785999695-2903281731-292431783-1001\...\Run: [HP ENVY Photo 6200 (NET)] => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe [4066464 2021-11-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-1785999695-2903281731-292431783-1001\...\Run: [HP ENVY Photo 6200 (NET) #2] => C:\Program Files\HP\HP ENVY Photo 6200 series\Bin\ScanToPCActivationApp.exe [4066464 2021-11-22] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-1785999695-2903281731-292431783-1001\...\MountPoints2: {a92274c1-dd3f-11e8-9946-181dea545fd7} - "E:\HPLauncher.exe" 
HKLM\...\Print\Monitors\CutePDF Writer Monitor v3.2: C:\Windows\system32\cpwmon64_v32.dll [90096 2017-05-26] (Acro Software Inc -> )
HKLM\Software\Microsoft\Active Setup\Installed Components: [{28B89EEF-3007-0000-7102-CF3F3A09B77D}] -> msiexec /fus {28B89EEF-3007-0000-7102-CF3F3A09B77D}
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2016 Fast Start.lnk [2018-10-28]
ShortcutTarget: SOLIDWORKS 2016 Fast Start.lnk -> C:\Windows\Installer\{768F3B65-1695-47B7-9002-B11400CB111D}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2017 Fast Start.lnk [2020-09-05]
ShortcutTarget: SOLIDWORKS 2017 Fast Start.lnk -> C:\Windows\Installer\{BB965FD0-077F-4CA4-BFD1-39FFEFF15770}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS 2019 Fast Start.lnk [2020-01-20]
ShortcutTarget: SOLIDWORKS 2019 Fast Start.lnk -> C:\Windows\Installer\{F261BF5C-81C4-4E81-9ED6-D7EBFA2A9A5B}\NewShortcut2_87EDF6C81D0A4B7B84F42FE0C6A9D608.exe (Flexera Software LLC) [Datei ist nicht signiert]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SOLIDWORKS Hintergrund-Downloader.lnk [2020-01-20]
ShortcutTarget: SOLIDWORKS Hintergrund-Downloader.lnk -> C:\Program Files (x86)\Common Files\SOLIDWORKS Installations-Manager\BackgroundDownloading\sldBgDwld.exe (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation)
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {5D67EC55-FDEB-4FAE-B69C-2823D4C80BDE} - \Opera scheduled assistant Autoupdate 1604155065 -> Keine Datei <==== ACHTUNG
Task: {CBC78E64-DAF3-46D4-98C7-C8823D80092D} - System32\Tasks\DropboxUpdateTaskMachineCore => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {7BC4489D-50FF-47FF-9CB3-3FECD5648A69} - System32\Tasks\DropboxUpdateTaskMachineUA => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
Task: {59FE40F0-9796-4B24-9AE2-0C706B13BF70} - System32\Tasks\GoogleUpdateTaskMachineCore{484710EB-9823-4AA8-9AC8-00B81322CC5D} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-10-25] (Google LLC -> Google LLC)
Task: {5C6A5626-6BCF-45FF-8819-24861B275AE5} - System32\Tasks\GoogleUpdateTaskMachineUA{E0177E87-1008-405B-8C6C-5E13780A2CB6} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2020-10-25] (Google LLC -> Google LLC)
Task: {9BA71786-8BC0-4873-B2E1-F1BB9519973C} - System32\Tasks\Hewlett-Packard\HP Active Health\HP Active Health Scan (HPSA) => C:\Program Files (x86)\Hewlett-Packard\HP Support Framework\Resources\HPActiveHealth\ActiveHealth.exe  -task -source HPSA (Keine Datei)
Task: {F46EEEE2-5658-41D8-92C5-9E5C890CF57E} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-01-10] (HP Inc. -> HP Inc.)
Task: {0AE98E45-3C82-4F89-B311-EDA9FE9BBB01} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HPPrinterLowInk => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPPrinterLowInk\HPPrinterLowInk.exe [228888 2023-01-10] (HP Inc. -> HP Inc.)
Task: {091DDFA3-16D9-4AFC-9104-F3E144808564} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149464 2023-01-10] (HP Inc. -> HP Inc.)
Task: {2AF28CF7-7A8F-43D2-B20B-7D6A4D29F6F2} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH7AO3Y1F5 => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149464 2023-01-10] (HP Inc. -> HP Inc.)
Task: {CC6E68E9-B0A1-459B-BB87-CF91D4B11F65} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_TH7BF3Y18J => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1149464 2023-01-10] (HP Inc. -> HP Inc.)
Task: {BE4614B6-7974-46BE-A494-B6872CA412B5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26616832 2023-07-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {94B55177-BA4D-476A-8441-E09DB600812E} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [26616832 2023-07-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E4AC92B2-1450-48E9-BFD7-6C02209C757A} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-07-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {E05B1669-7D0F-45BE-A0A1-F70C13A78B0D} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [158664 2023-07-15] (Microsoft Corporation -> Microsoft Corporation)
Task: {938417C8-4000-4F34-8305-8157B950D179} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [164752 2023-07-01] (Microsoft Corporation -> Microsoft Corporation)
Task: {C03D0B4F-D063-4785-B605-F9D26C4491C3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F27185BC-8805-4C0D-BECE-C56B79B255C8} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {BBF891D0-D743-47C5-BF54-C13151984072} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F4B48806-7E2C-4E7A-8A58-2E2CD6D35740} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MpCmdRun.exe [1650040 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {C6BAC19E-0C77-44A6-BC4E-13BD0642D144} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [686496 2023-07-11] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {C4964AAF-1A0F-47AD-938C-980AA5FA59F0} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [724384 2023-07-11] (Mozilla Corporation -> Mozilla Foundation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineCore.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskMachineUA.job => C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG (Beschränkung - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{3d66dcc3-c522-40b9-b28f-60c5f2bf2132}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{49aff89e-d459-4438-b65f-5e9847d92e71}: [DhcpNameServer] 192.168.42.129
Tcpip\..\Interfaces\{db59c144-ec27-4971-8a15-28f45ad811e1}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge Extension: (Kein Name) -> AutoFormFill_5ED10D46BD7E47DEB1F3685D2C0FCE08 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\AutoFormFill [nicht gefunden]
Edge Extension: (Kein Name) -> BookReader_B171F20233094AC88D05A8EF7B9763E8 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\BookViewer [nicht gefunden]
Edge Extension: (Kein Name) -> LearningTools_7706F933-971C-41D1-9899-8A026EB5D824 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\LearningTools [nicht gefunden]
Edge Extension: (Kein Name) -> PinJSAPI_EC01B57063BE468FAB6DB7EBFC3BF368 => C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\Assets\HostExtensions\PinJSAPI [nicht gefunden]
Edge DefaultProfile: Default
Edge Profile: C:\Users\kabee\AppData\Local\Microsoft\Edge\User Data\Default [2023-07-16]
Edge Extension: (Edge relevant text changes) - C:\Users\kabee\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-07-01]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]

FireFox:
========
FF DefaultProfile: n2d3llfu.default
FF DefaultProfile: xre36950.default
FF DefaultProfile: 0hji4rf0.default-1450004086143-1507910813515
FF ProfilePath: C:\Users\kabee\AppData\Roaming\TomTom\HOME\Profiles\kzrk8rd2.default [2019-07-14]
FF Extension: (Kein Name) - C:\Users\kabee\AppData\Roaming\TomTom\HOME\Profiles\kzrk8rd2.default\Extensions\tyre@tyre.tk [2019-08-17] [ist nicht signiert]
FF Extension: (Kein Name) - C:\Program Files (x86)\TomTom HOME 2\xul\extensions\MapShare-status@tomtom.com [nicht gefunden]
FF ProfilePath: C:\Users\kabee\AppData\Roaming\Thunderbird_alt\Profiles\n2d3llfu.default [2018-10-30]
FF Extension: (Lightning) - C:\Users\kabee\AppData\Roaming\Thunderbird_alt\Profiles\n2d3llfu.default\Extensions\{e2fda1a4-762b-4020-b5ad-a41df1933103}.xpi [2018-10-28] [] [ist nicht signiert]
FF ProfilePath: C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default [2018-10-31]
FF Homepage: Mozilla_alt\Firefox\Profiles\xre36950.default -> hxxps://www.bing.com/
FF Extension: (Cisco Webex Extension) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\ciscowebexstart1@cisco.com.xpi [2018-10-28]
FF Extension: (AdBlock) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2018-10-28]
FF Extension: (Avast SafePrice) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\sp@avast.com.xpi [2018-10-28] [UpdateUrl:hxxps://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\wrc@avast.com.xpi [2018-10-29]
FF ProfilePath: C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515 [2023-07-17]
FF Homepage: Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515 -> hxxps://www.bing.com/
FF NewTab: Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515 -> hxxp://www.bing.com/?pc=COS2&ptag=D103118-N0600A74DCDF78DC&form=CONMHP&conlogo=CT3335043
FF Notifications: Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515 -> hxxps://portal.imice.de
FF Extension: (Cisco Webex Extension) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\ciscowebexstart1@cisco.com.xpi [2022-07-22]
FF Extension: (Übersetzen Sie Websites in Ihrem Browser, ohne die Cloud zu verwenden.) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\firefox-translations-addon@mozilla.org.xpi [2023-03-18]
FF Extension: (AdBlock) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\jid1-NIfFY2CA8fy1tg@jetpack.xpi [2020-02-05]
FF Extension: (Avast Passwords) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2020-02-10] [UpdateUrl:hxxps://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
FF Extension: (KeePassXC-Browser) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\keepassxc-browser@keepassxc.org.xpi [2023-07-11]
FF Extension: (Fake-Shop Detector) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\{b5c1c196-56a8-4eee-92c2-f1c497e3a1d3}.xpi [2023-04-04]
FF Plugin: 3ds.com/ComposerPlayerWebPlugin_x86_64 -> C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS Composer Player (3)\Bin\npcomposerplayerwebplugin.dll [2017-11-14] (Dassault Systemes SE -> Dassault Systemes)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.10 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.14 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
FF Plugin-x32: 3ds.com/ComposerPlayerWebPlugin -> C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS Composer Player (3)\Bin\x86\npcomposerplayerwebplugin.dll [2017-11-14] (Dassault Systemes SE -> Dassault Systemes)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-07-01] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Users\kabee\AppData\Roaming\mozilla\plugins\npatgpc.dll [2018-10-31]

Chrome: 
=======
CHR Profile: C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default [2023-07-16]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Präsentationen) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-10-28]
CHR Extension: (Docs) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-12-11]
CHR Extension: (Google Drive) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2022-03-04]
CHR Extension: (YouTube) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-12-11]
CHR Extension: (Avira Password Manager) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-03-04]
CHR Extension: (Avira Safe Shopping) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2022-03-04]
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-03-04]
CHR Extension: (Tabellen) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-10-28]
CHR Extension: (Google Docs Offline) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2022-03-04]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-03-04]
CHR Extension: (FreeWeather Pro) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ligjgelillmklpanapfgmojbhgfdjlck [2019-03-16]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2022-03-04]
CHR Extension: (Google Mail) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2022-03-04]
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKLM-x32\...\Chrome\Extension: [ligjgelillmklpanapfgmojbhgfdjlck]

Opera: 
=======
OPR Profile: C:\Users\kabee\AppData\Roaming\Opera Software\Opera Stable [2023-07-16]
OPR DefaultSuggestURL: Opera Stable -> hxxps://www.google.com/complete/search?client=opera&q={searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\kabee\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2020-10-31]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdAppMgrSvc; C:\Program Files (x86)\Autodesk\Autodesk Desktop App\AdAppMgrSvc.exe [1233272 2019-05-14] (Autodesk, Inc. -> Autodesk Inc.)
R2 AdskLicensingService; C:\Program Files (x86)\Common Files\Autodesk Shared\AdskLicensing\Current\AdskLicensingService\AdskLicensingService.exe [16939312 2019-01-09] (Autodesk, Inc. -> Autodesk)
R2 ApHidMonitorService; C:\WINDOWS\system32\DellTPad\HidMonitorSvc.exe [894880 2021-05-24] (ALPS ALPINE CO., LTD. -> ALPSALPINE Co., Ltd.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [11851240 2023-07-15] (Microsoft Corporation -> Microsoft Corporation)
S3 CoordinatorServiceHost; C:\Program Files\SOLIDWORKS Corp\SOLIDWORKS (2)\swScheduler\DTSCoordinatorService.exe [78736 2019-11-02] (Dassault Systemes SolidWorks Corp. -> Dassault Systèmes SolidWorks Corporation)
S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [130320 2021-11-13] (Dropbox, Inc -> Dropbox, Inc.)
R2 DbxSvc; C:\WINDOWS\system32\DbxSvc.exe [46824 2023-07-11] (Dropbox, Inc -> Dropbox, Inc.)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2023-03-14] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [161488 2023-03-14] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2023-03-14] (Dell Inc -> Dell Technologies Inc.)
S3 Dell.CommandPowerManager.Service; C:\WINDOWS\system32\dllhost.exe /Processid:{CB8DD5B6-E532-4FD8-9E01-0998A1773C39} [21312 2022-09-08] (Microsoft Windows -> Microsoft Corporation)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [49880 2023-01-19] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [156064 2022-12-09] (Dell Inc -> Dell)
R2 DpoMonitorSvc; C:\Program Files\Dell\PPO\dpoMonitorSvc.exe [1383616 2021-05-24] (Dell Inc -> Dell Inc.)
R2 dpoTelemetrySvc; C:\Program Files\Dell\PPO\Telemetry\dpoTelemetrySvc.exe [242880 2021-05-24] (Dell Inc -> Dell Inc.)
S3 ElfoService; C:\Program Files (x86)\ElsterFormular Update Service\bin\elfoService.exe [1115560 2021-07-03] (Bayerisches Landesamt fuer Steuern -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\23.007.0109.0004\FileSyncHelper.exe [3484544 2023-02-01] (Microsoft Corporation -> Microsoft Corporation)
R2 hostcontrolsvc; C:\WINDOWS\System32\HostControlService.exe [815616 2019-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corporation)
R2 hoststoragesvc; C:\WINDOWS\System32\HostStorageService.exe [161280 2019-12-20] (Microsoft Windows Hardware Compatibility Publisher -> Broadcom Corporation)
R2 HPAppHelperCap; C:\Program Files\HP\HP Enabling Services\AppHelperCap.exe [797640 2023-01-10] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\Program Files\HP\HP Enabling Services\DiagsCap.exe [796616 2023-01-10] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\Program Files\HP\HP Enabling Services\NetworkCap.exe [793000 2023-01-10] (HP Inc. -> HP Inc.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [229360 2023-03-02] (HP Inc. -> HP Inc.)
R2 HPSysInfoCap; C:\Program Files\HP\HP Enabling Services\SysInfoCap.exe [796584 2023-01-10] (HP Inc. -> HP Inc.)
R2 mitsijm2020; C:\Program Files\Autodesk\Inventor 2020\Moldflow\bin\mitsijm.exe [844088 2019-01-31] (Autodesk, Inc. -> Autodesk, Inc.)
R2 NasPmService; C:\Program Files (x86)\BUFFALO\NASNAVI\nassvc.exe [251760 2018-10-29] (BUFFALO INC. -> BUFFALO INC.)
R2 NVWMI; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_ecd554eea8aca986\NVWMI\nvWmi64.exe [4486648 2022-10-28] (Nvidia Corporation -> NVIDIA Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\23.007.0109.0004\OneDriveUpdaterService.exe [3854208 2023-02-01] (Microsoft Corporation -> Microsoft Corporation)
R2 poaService; C:\Program Files\Dell\PPO\poaService.exe [1750208 2021-05-24] (Dell Inc -> Dell Inc.)
R2 PoaSMSrv; C:\Program Files\Dell\PPO\poaSmSrv.exe [426176 2021-05-24] (Dell Inc -> Dell Inc.)
R2 poaTaServ; C:\Program Files\Dell\PPO\poaTaServ.exe [1509056 2021-05-24] (Dell Inc -> Dell Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [402216 2023-07-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 SolidWorks Licensing Service; C:\Program Files (x86)\Common Files\SolidWorks Shared\Service\SolidWorksLicensing.exe [79360 2018-10-28] (SolidWorks) [Datei ist nicht signiert]
R2 ss_conn_service; C:\Program Files (x86)\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-10-04] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files (x86)\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-10-04] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
R2 TbtP2pShortcutService; C:\WINDOWS\TbtP2pShortcutService.exe [256608 2022-06-29] (Intel Corporation -> Intel Corporation)
R2 ushupgradesvc; C:\WINDOWS\System32\UshUpgradeService.exe [265728 2019-12-20] (Microsoft Windows Hardware Compatibility Publisher -> )
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\NisSrv.exe [3232576 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23050.5-0\MsMpEng.exe [133592 2023-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 dcpm-notify; "C:\Program Files\Dell\CommandPowerManager\NotifyService.exe" [X]
R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_ecd554eea8aca986\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nvdm.inf_amd64_ecd554eea8aca986\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
S2 SupportAssistAgent; "C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 ApHidfiltrService; C:\WINDOWS\System32\drivers\ApHidfiltrSW.sys [362512 2021-05-24] (WDKTestCert CHT1HTSH3180,132475688214743128 -> ALPSALPINE Co., Ltd.)
S3 aswWintun; C:\WINDOWS\System32\drivers\aswWintun.sys [51112 2022-12-03] (Avast Software s.r.o. -> AVAST Software)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 DDDriver; C:\WINDOWS\System32\drivers\dddriver64Dcsa.sys [43400 2021-09-09] (Microsoft Windows Hardware Compatibility Publisher -> Dell Technologies)
R3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [46528 2023-03-14] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-10-04] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-10-28] (Martin Malik - REALiX -> REALiX(tm))
R3 MpKsl094c7e23; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{5250962A-399A-4A24-9004-C1569C07584E}\MpKslDrv.sys [221480 2023-07-17] (Microsoft Windows -> Microsoft Corporation)
R3 POADrvr; C:\WINDOWS\system32\drivers\POADrvr.sys [40872 2019-09-08] (DellDPO(driver) -> Dell Computer Corporation)
R3 RtkUsbAD_2330; C:\WINDOWS\System32\DriverStore\FileRepository\rtdusbad_dell.inf_amd64_1a8f1ed8100d99e0\RtUsbA64.sys [493408 2022-07-01] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 rtump64x64; C:\WINDOWS\System32\drivers\rtump64x64.sys [1134544 2022-07-27] (Realtek Semiconductor Corp. -> Realtek Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-10-04] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-10-04] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49560 2023-06-13] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\WINDOWS\System32\drivers\wdcsam64.sys [35584 2018-02-26] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [498944 2023-06-13] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [99568 2023-06-13] (Microsoft Windows -> Microsoft Corporation)
R3 WiMan; C:\WINDOWS\System32\DriverStore\FileRepository\wiman.inf_amd64_6e6883aaac7c1f77\WiMan\WiMan.sys [169048 2022-06-29] (Intel Corporation -> Intel Corporation)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-07-16 14:45 - 2023-07-16 14:46 - 000000000 ____D C:\AdwCleaner
2023-07-16 14:44 - 2023-07-16 14:45 - 008791352 _____ (Malwarebytes) C:\Users\kabee\Downloads\adwcleaner.exe
2023-07-16 14:44 - 2023-07-16 14:44 - 000000000 _____ C:\WINDOWS\invcol.tmp
2023-07-16 14:22 - 2023-07-16 14:22 - 002384384 _____ (Farbar) C:\Users\kabee\Downloads\FRST64.exe
2023-07-16 14:22 - 2023-07-16 14:22 - 000000000 ____D C:\Users\kabee\Downloads\FRST-OlderVersion
2023-07-15 16:06 - 2023-07-15 16:06 - 002601176 _____ (Malwarebytes) C:\Users\kabee\Downloads\MBSetup.exe
2023-07-15 15:55 - 2023-07-16 14:24 - 000092856 _____ C:\Users\kabee\Downloads\Addition.txt
2023-07-15 15:54 - 2023-07-17 09:16 - 000041473 _____ C:\Users\kabee\Downloads\FRST.txt
2023-07-15 15:54 - 2023-07-17 09:16 - 000000000 ____D C:\FRST
2023-07-15 13:07 - 2023-07-15 13:07 - 000380798 _____ C:\Users\kabee\Documents\Scan_0007.pdf
2023-07-13 23:22 - 2023-07-13 23:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2023-07-13 18:25 - 2023-07-13 18:25 - 000000000 ___HD C:\$WinREAgent
2023-07-11 18:05 - 2023-07-11 18:05 - 000059496 _____ C:\Users\kabee\Downloads\2023-06-netcologne-11162493-rgn-mobilfunk.pdf
2023-07-11 18:05 - 2023-07-11 18:05 - 000058132 _____ C:\Users\kabee\Downloads\2023-06-netcologne-11162493-rgn-internet_telefon.pdf
2023-07-11 17:58 - 2023-07-11 17:58 - 000891917 _____ C:\Users\kabee\Documents\Aktienvertrag ARI Motors 2023-17-07.pdf
2023-07-11 17:12 - 2023-07-13 18:11 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-07-11 03:17 - 2023-07-11 03:17 - 000046824 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2023-07-10 18:55 - 2023-07-10 18:55 - 000561554 _____ C:\Users\kabee\Documents\eidesstattliche Versicherung.pdf
2023-07-10 18:52 - 2023-07-10 18:52 - 000726376 _____ C:\Users\kabee\Documents\Zahlungsreklamation.pdf
2023-07-10 18:28 - 2023-03-15 20:51 - 008877680 _____ (Intel Corporation) C:\WINDOWS\system32\Drivers\Netwtw08.sys
2023-07-10 18:28 - 2023-03-15 20:51 - 001470576 _____ (Intel Corporation) C:\WINDOWS\system32\IntelIHVRouter08.dll
2023-07-10 18:27 - 2023-07-10 18:27 - 000124836 _____ C:\Users\kabee\Desktop\Zahlungsreklamation.pdf
2023-07-09 16:33 - 2023-07-09 16:33 - 000436487 _____ C:\Users\kabee\Downloads\faq-s_mastercard-id-check_übersicht_august22(1).pdf
2023-07-08 19:29 - 2023-07-10 18:25 - 000000000 ____D C:\Program Files\Mozilla Thunderbird
2023-07-08 14:50 - 2023-07-08 14:50 - 000436487 _____ C:\Users\kabee\Downloads\faq-s_mastercard-id-check_übersicht_august22.pdf
2023-07-04 20:31 - 2023-07-04 20:31 - 000028391 _____ C:\Users\kabee\Downloads\217_5190_3102_Uebertragungsprotokoll_UStVA_2023_-_Juni.pdf
2023-07-04 20:13 - 2023-07-04 20:13 - 000059526 _____ C:\Users\kabee\Downloads\2023-05-netcologne-11162493-rgn-mobilfunk.pdf
2023-07-04 20:13 - 2023-07-04 20:13 - 000059017 _____ C:\Users\kabee\Downloads\2023-05-netcologne-11162493-rgn-internet_telefon.pdf
2023-07-04 19:54 - 2023-07-04 19:54 - 000279411 _____ C:\Users\kabee\Downloads\Girokonto_0480147030_Kontoauszug_20230602.pdf
2023-07-04 19:54 - 2023-07-04 19:54 - 000261643 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Abrechnung_Kauf_FR0010756114_Order_296627150_001_20230601.pdf
2023-07-04 19:54 - 2023-07-04 19:54 - 000261638 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Abrechnung_Kauf_DE0006289382_Order_295859490_001_20230601.pdf
2023-07-04 19:53 - 2023-07-04 19:53 - 000260645 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Abrechnung_Kauf_DE0009769869_Order_296877703_001_20230603.pdf
2023-07-04 19:53 - 2023-07-04 19:53 - 000258027 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Bestandsveraenderung_DE000A3D6Q45_Order_0021393438_20230602.pdf
2023-07-04 19:53 - 2023-07-04 19:53 - 000256667 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Ertragsabrechnung_US5949181045_20230613.pdf
2023-07-04 19:53 - 2023-07-04 19:53 - 000256472 _____ C:\Users\kabee\Downloads\Direkt_Depot_8005439899_Ertragsabrechnung_DE0006289382_20230615.pdf
2023-07-04 19:52 - 2023-07-04 19:52 - 000277769 _____ C:\Users\kabee\Downloads\Girokonto_0480147030_Kontoauszug_20230702.pdf
2023-07-04 19:52 - 2023-07-04 19:52 - 000036804 _____ C:\Users\kabee\Downloads\Information_20230627.pdf
2023-07-04 19:52 - 2023-07-04 19:52 - 000036804 _____ C:\Users\kabee\Downloads\Information_20230627(1).pdf
2023-07-04 19:51 - 2023-07-04 19:51 - 000266507 _____ C:\Users\kabee\Downloads\Rahmenkredit_0480147080_Kontoauszug_20230702.pdf
2023-07-03 22:04 - 2023-07-03 22:04 - 000449893 _____ C:\Users\kabee\Documents\Aktivierungsformular_2023-07-03.pdf
2023-07-02 16:46 - 2023-07-02 16:46 - 000002140 _____ C:\Users\Public\Desktop\MyPhoneExplorer.lnk
2023-07-02 16:46 - 2023-07-02 16:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MyPhoneExplorer
2023-07-02 16:44 - 2023-07-02 16:44 - 020249280 _____ C:\Users\kabee\Downloads\MyPhoneExplorer_Setup_2.0.exe
2023-07-02 12:19 - 2023-07-16 20:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2023-07-02 12:19 - 2023-07-02 12:19 - 000000000 ____D C:\Users\Public\Documents\NativeFus_Log
2023-07-02 12:18 - 2023-07-02 12:19 - 000000000 ____D C:\ProgramData\Samsung
2023-07-02 12:18 - 2022-10-04 08:16 - 000174112 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudmdm.sys
2023-07-02 12:18 - 2022-10-04 08:16 - 000167440 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ssudbus2.sys
2023-07-02 12:18 - 2022-10-04 08:16 - 000050720 _____ (Samsung Electronics Co., Ltd.) C:\WINDOWS\system32\Drivers\ss_conn_usb_driver2.sys
2023-07-02 12:17 - 2023-07-16 20:11 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Samsung
2023-07-02 12:17 - 2023-07-16 20:11 - 000000000 ____D C:\Program Files (x86)\Samsung
2023-07-02 12:17 - 2022-01-25 11:29 - 000144664 _____ (MAPILab Ltd. & Add-in Express Ltd.) C:\WINDOWS\SysWOW64\secman.dll
2023-07-02 12:16 - 2023-07-02 12:16 - 043879232 _____ (Samsung Electronics) C:\Users\kabee\Downloads\Smart.Switch.PC_setup.exe
2023-07-02 11:02 - 2023-07-02 11:02 - 000000000 ____D C:\Users\kabee\Documents\FeedbackHub

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-07-17 09:14 - 2022-02-09 20:42 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2023-07-17 09:13 - 2022-09-08 05:13 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-07-17 09:13 - 2018-10-28 15:24 - 000000000 ____D C:\Users\kabee\AppData\LocalLow\Mozilla
2023-07-17 09:13 - 2018-10-28 15:13 - 000000000 ____D C:\Program Files (x86)\Google
2023-07-17 09:11 - 2018-10-28 14:42 - 000000000 __SHD C:\Users\kabee\IntelGraphicsProfiles
2023-07-16 20:56 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-07-16 20:56 - 2018-10-13 17:01 - 000000000 ____D C:\ProgramData\NVIDIA
2023-07-16 20:51 - 2023-02-13 14:12 - 001723010 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-07-16 20:51 - 2019-12-07 16:51 - 000746440 _____ C:\WINDOWS\system32\perfh007.dat
2023-07-16 20:51 - 2019-12-07 16:51 - 000150810 _____ C:\WINDOWS\system32\perfc007.dat
2023-07-16 20:51 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2023-07-16 20:46 - 2023-05-22 17:40 - 000008192 ___SH C:\DumpStack.log.tmp
2023-07-16 20:46 - 2023-02-13 14:10 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-07-16 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\ServiceState
2023-07-16 20:46 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2023-07-16 20:46 - 2018-10-13 17:00 - 001441552 _____ C:\WINDOWS\system32\CVFirmwareUpgradeLog.txt
2023-07-16 20:43 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2023-07-16 20:43 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-07-16 20:43 - 2018-10-28 14:42 - 000000000 ____D C:\Users\kabee\AppData\Local\Packages
2023-07-16 20:37 - 2018-10-13 16:59 - 000000000 ____D C:\ProgramData\Dell
2023-07-16 20:37 - 2018-10-13 16:56 - 000000000 ____D C:\Program Files\Dell
2023-07-16 20:11 - 2021-12-16 23:19 - 000000000 ____D C:\Users\kabee\Documents\Dell
2023-07-16 20:11 - 2018-10-31 21:19 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Hewlett-Packard
2023-07-16 20:11 - 2018-10-31 20:59 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2023-07-16 20:11 - 2018-10-31 20:59 - 000000000 ____D C:\Program Files (x86)\Hewlett-Packard
2023-07-16 19:09 - 2018-10-28 15:12 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2023-07-16 19:08 - 2018-10-28 16:46 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Microsoft\Excel
2023-07-16 17:17 - 2018-10-28 16:47 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Microsoft\Word
2023-07-16 14:46 - 2018-10-31 21:34 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Lavasoft
2023-07-16 14:46 - 2018-10-31 21:34 - 000000000 ____D C:\Users\kabee\AppData\Local\Lavasoft
2023-07-16 14:46 - 2018-10-31 21:34 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
2023-07-16 14:46 - 2018-10-31 21:34 - 000000000 ____D C:\ProgramData\Lavasoft
2023-07-16 14:46 - 2018-10-31 21:34 - 000000000 ____D C:\Program Files (x86)\Lavasoft
2023-07-16 14:14 - 2018-10-28 16:43 - 000000000 ____D C:\Program Files (x86)\Microsoft Office
2023-07-16 14:13 - 2019-12-07 11:14 - 000000000 __RSD C:\WINDOWS\Media
2023-07-16 14:13 - 2018-10-28 16:45 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools
2023-07-16 14:12 - 2023-02-13 13:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Verwaltung
2023-07-16 14:12 - 2018-10-28 16:45 - 000000013 _____ C:\WINDOWS\vbaddin.ini
2023-07-16 14:11 - 2019-12-07 11:14 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-07-16 14:11 - 2019-10-14 19:34 - 000000000 ____D C:\Program Files\Microsoft Office
2023-07-16 14:10 - 2018-10-28 17:27 - 000000000 ____D C:\ProgramData\ProductData
2023-07-16 14:10 - 2018-10-28 15:11 - 000000000 ____D C:\ProgramData\AVAST Software
2023-07-16 14:10 - 2018-10-28 15:11 - 000000000 ____D C:\Program Files\AVAST Software
2023-07-16 11:52 - 2023-02-13 14:03 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-07-16 11:29 - 2018-10-29 21:57 - 000000000 ____D C:\Users\kabee\AppData\Local\CrashDumps
2023-07-15 17:02 - 2018-10-28 16:47 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Microsoft\Vorlagen
2023-07-15 16:09 - 2019-12-07 11:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-07-15 16:07 - 2023-05-18 16:19 - 000000000 ____D C:\Users\kabee\AppData\LocalLow\IGDump
2023-07-15 13:24 - 2020-09-05 17:58 - 000000000 ____D C:\temp
2023-07-15 11:41 - 2020-11-06 01:59 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-07-15 11:41 - 2020-11-06 01:59 - 000002278 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-07-14 06:39 - 2022-07-31 16:24 - 000914872 ____N (Microsoft Corporation) C:\WINDOWS\system32\MpSigStub.exe
2023-07-13 23:22 - 2018-11-01 15:48 - 000000000 ____D C:\Program Files (x86)\Dropbox
2023-07-13 20:14 - 2023-02-13 14:03 - 001435880 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-07-13 20:12 - 2019-12-07 16:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\SystemResources
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\setup
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-07-13 20:12 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-07-13 18:32 - 2019-12-07 11:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-07-13 18:29 - 2023-02-13 14:04 - 003015168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-07-13 18:24 - 2022-04-02 12:01 - 000000000 ____D C:\Program Files\dotnet
2023-07-13 18:24 - 2018-10-13 16:57 - 000000000 ____D C:\ProgramData\Package Cache
2023-07-13 18:19 - 2018-10-29 19:34 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-07-13 18:17 - 2018-10-29 19:34 - 173351160 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-07-13 18:11 - 2018-10-28 15:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-07-12 18:33 - 2018-10-28 15:24 - 000001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-07-11 17:23 - 2018-10-28 16:46 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Microsoft\Office
2023-07-09 12:30 - 2022-06-03 17:44 - 000001029 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2023-07-08 16:47 - 2019-03-16 18:24 - 000000000 ____D C:\Users\kabee\AppData\Roaming\vlc
2023-07-06 19:13 - 2023-02-14 20:48 - 000003832 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA{0E39D627-7261-4B2B-997C-84282BDD63EB}
2023-07-06 19:13 - 2023-02-14 20:48 - 000003708 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore{7B0DF5C0-BA2C-4692-809E-4754EB57E1B0}
2023-07-02 19:10 - 2021-11-21 16:08 - 000000000 ____D C:\Users\kabee\AppData\Roaming\MyPhoneExplorer
2023-07-02 16:46 - 2021-11-21 16:08 - 000000000 ____D C:\Program Files (x86)\MyPhoneExplorer
2023-07-02 12:17 - 2018-10-13 16:57 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2023-07-02 11:09 - 2019-12-10 12:36 - 000000000 ____D C:\Users\kabee\AppData\Roaming\audacity
2023-06-29 19:23 - 2018-11-01 15:48 - 000000000 ____D C:\Users\kabee\AppData\Roaming\Dropbox
2023-06-29 19:23 - 2018-11-01 15:48 - 000000000 ____D C:\Users\kabee\AppData\Local\Dropbox
2023-06-20 19:11 - 2018-10-28 18:46 - 000000000 ____D C:\Users\kabee\AppData\Local\SolidWorks

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2018-12-19 16:20 - 2020-06-06 18:46 - 000004608 _____ () C:\Users\kabee\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2020-09-05 17:52 - 2020-09-05 17:54 - 000000000 _____ () C:\Users\kabee\AppData\Local\Temptable.xml
2021-01-09 17:46 - 2021-01-09 17:46 - 000001870 _____ () C:\Users\kabee\AppData\Local\TreehouseSettings.settings

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================

cosinus · 17.07.2023, 09:41

Scripting/Repair mit FRST64

WARNUNG AN ALLE MITLESER !!!
Dieses FRST-Script ist ausschließlich für diesen Nutzer gedacht und sollte niemals 1:1 für ein anderes System angewendet werden!

Kopiere den gesamten Inhalt der folgenden Code-Box:

Code:

ATTFilter

Start::
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
Task: {5D67EC55-FDEB-4FAE-B69C-2823D4C80BDE} - \Opera scheduled assistant Autoupdate 1604155065 -> Keine Datei <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG
Edge Extension: (Edge relevant text changes) - C:\Users\kabee\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-07-01]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FF Extension: (Avast SafePrice) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\sp@avast.com.xpi [2018-10-28] [UpdateUrl:https://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\wrc@avast.com.xpi [2018-10-29]
FF Extension: (Avast Passwords) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2020-02-10] [UpdateUrl:https://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
CHR Extension: (Avira Password Manager) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-03-04]
CHR Extension: (Avira Safe Shopping) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2022-03-04]
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-03-04]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-03-04]
C:\Users\kabee\AppData\Roaming\Lavasoft
C:\Users\kabee\AppData\Local\Lavasoft
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
C:\ProgramData\Lavasoft
C:\Program Files (x86)\Lavasoft
C:\Program Files\Common Files\AVAST Software
C:\ProgramData\AVAST Software
C:\Program Files\AVAST Software
emptytemp:
End::

Starte nun FRST und klicke direkt den Reparieren Button.Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich FRST befindet.
Gegebenenfalls muss dein Rechner neu gestartet werden.
Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.

Pampel_ · 17.07.2023, 10:57

Code:

ATTFilter

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 16-07-2023
durchgeführt von kabee (17-07-2023 11:51:51) Run:1
Gestartet von C:\Users\kabee\Downloads
Geladene Profile: kabee
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
Start::
CloseProcesses:
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
GroupPolicy-Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
Task: {5D67EC55-FDEB-4FAE-B69C-2823D4C80BDE} - \Opera scheduled assistant Autoupdate 1604155065 -> Keine Datei <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ACHTUNG
Edge Extension: (Edge relevant text changes) - C:\Users\kabee\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-07-01]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FF Extension: (Avast SafePrice) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\sp@avast.com.xpi [2018-10-28] [UpdateUrl:https://firefoxext.avcdn.net/firefoxext/avast/sp/update.json]
FF Extension: (Avast Online Security) - C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\wrc@avast.com.xpi [2018-10-29]
FF Extension: (Avast Passwords) - C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi [2020-02-10] [UpdateUrl:https://pamcdn.avast.com/pamcdn/extensions/firefox/update.json]
CHR Extension: (Avira Password Manager) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-03-04]
CHR Extension: (Avira Safe Shopping) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2022-03-04]
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-03-04]
CHR Extension: (Avast Online Security & Privacy) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-03-04]
C:\Users\kabee\AppData\Roaming\Lavasoft
C:\Users\kabee\AppData\Local\Lavasoft
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft
C:\ProgramData\Lavasoft
C:\Program Files (x86)\Lavasoft
C:\Program Files\Common Files\AVAST Software
C:\ProgramData\AVAST Software
C:\Program Files\AVAST Software
emptytemp:
End::
         
*****************

Prozesse erfolgreich geschlossen.
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate => erfolgreich entfernt
C:\Program Files\Mozilla Firefox\distribution\policies.json => erfolgreich verschoben
HKLM\SOFTWARE\Policies\Mozilla => erfolgreich entfernt
HKLM\SOFTWARE\Policies\Google => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5D67EC55-FDEB-4FAE-B69C-2823D4C80BDE}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5D67EC55-FDEB-4FAE-B69C-2823D4C80BDE}" => erfolgreich entfernt
"HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Opera scheduled assistant Autoupdate 1604155065" => nicht gefunden
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 => erfolgreich entfernt
Edge Extension: (Edge relevant text changes) - C:\Users\kabee\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-07-01] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
HKLM\SOFTWARE\Microsoft\Edge\Extensions\bojobppfploabceghnmlahpoonbcbacn => erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Microsoft\Edge\Extensions\bojobppfploabceghnmlahpoonbcbacn => erfolgreich entfernt
C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\sp@avast.com.xpi => erfolgreich verschoben
C:\Users\kabee\AppData\Roaming\Mozilla_alt\Firefox\Profiles\xre36950.default\Extensions\wrc@avast.com.xpi => erfolgreich verschoben
C:\Users\kabee\AppData\Roaming\Mozilla\Firefox\Profiles\0hji4rf0.default-1450004086143-1507910813515\Extensions\jid1-r1tDuNiNb4SEww@jetpack.xpi => erfolgreich verschoben
CHR Extension: (Avira Password Manager) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2022-03-04] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
CHR Extension: (Avira Safe Shopping) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2022-03-04] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
CHR Extension: (Avast SafePrice | Vergleich, Angebote, Gutscheine) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2022-03-04] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
CHR Extension: (Avast Online Security & Privacy) - C:\Users\kabee\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2022-03-04] => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
C:\Users\kabee\AppData\Roaming\Lavasoft => erfolgreich verschoben
C:\Users\kabee\AppData\Local\Lavasoft => erfolgreich verschoben
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Lavasoft => erfolgreich verschoben
C:\ProgramData\Lavasoft => erfolgreich verschoben
C:\Program Files (x86)\Lavasoft => erfolgreich verschoben
C:\Program Files\Common Files\AVAST Software => erfolgreich verschoben
C:\ProgramData\AVAST Software => erfolgreich verschoben
C:\Program Files\AVAST Software => erfolgreich verschoben

=========== EmptyTemp: ==========

FlushDNS => abgeschlossen
BITS transfer queue => 0 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 14966212 B
Java, Discord, Steam htmlcache, WinHttpAutoProxySvc/winhttp *.cache => 0 B
Windows/system/drivers => 9960139 B
Edge => 110 B
Chrome => 159744 B
Firefox => 216047184 B
Opera => 5151624 B

Temp, IE cache, history, cookies, recent:
Default => 6656 B
ProgramData => 6656 B
Public => 6656 B
systemprofile => 6656 B
systemprofile32 => 6656 B
LocalService => 13312 B
NetworkService => 21134 B
kabee => 78673237 B

RecycleBin => 0 B
EmptyTemp: => 310 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 11:52:21 ====

16.07.2023, 17:47	#17
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Trojaner vermutet Lies meinen Beitrag #13 nochmal richtig __________________ __________________

16.07.2023, 19:05	#21
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Trojaner vermutet Ich hab den Eindruck, dass du immer noch nicht verstanden hast, warum du adwCleaner wiederholen solltest. Es geht darum, dass adwCleaner nichts mehr findet. __________________ --> Trojaner vermutet

16.07.2023, 19:21	#23
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Trojaner vermutet Den vorinstallierten DELL-Krempel deinstallieren. __________________ Logfiles bitte immer in CODE-Tags posten

16.07.2023, 19:33	#25
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Trojaner vermutet Du sollst ja auch manuell deinstallieren. __________________ Logfiles bitte immer in CODE-Tags posten

16.07.2023, 20:46	#27
cosinus /// Winkelfunktion /// TB-Süch-Tiger™	Trojaner vermutet Das ist nur auch Junk, aber keine Malware. Bitte neue FRST-Logs. __________________ Logfiles bitte immer in CODE-Tags posten

Trojaner vermutet

Log-Analyse und Auswertung: Trojaner vermutet