In der Verwandschaft hat es jemanden erwischt, nach ersten Recherchen hat der Virenscanner von Windows "eine Aktion erforderlich" angezeigt, was entweder übersehen wurde oder nie als Meldung hoch kam. Dort wurde heute ausgewählt, dass der Fund entfernt werden soll.

Misleading:Win32/Lodi
containerfile: C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe
file: C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe->(inno#000112)
         

Anschließend wurde kurz über die Software und den Autostart geschaut und (zum wiederholten Male...) "Web Companion" deinstalliert. Weitere Software wurde erstmal nicht entfernt, da ich nicht weiß, was davon aktiv genutzt wird bzw. unschädlich ist (ganz viele Tools, für alles mögliche...)

Anbei die zwei Logs von FRST. Könnt ihr da bitte mal einen Blick darauf werfen? Ich bin nun zwei Tage unterwegs und komme nicht selbst an den Laptop. Dringende (leichte) Aktionen werde ich an die Besitzerin weiterleiten, ansonsten kann ich ab Dienstagabend wieder reagieren. Danke.

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 03-12-2023
durchgeführt von Reni (Administrator) auf LAPTOP-UP7T5C9F (HP HP Pavilion Laptop 15-eh1xxx) (03-12-2023 21:36:55)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS\FRST64.exe
Geladene Profile: Reni
Plattform: Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\Google\Drive File Stream\84.0.6.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\84.0.6.0\crashpad_handler.exe
(C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.72\msedgewebview2.exe <12>
(C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe <6>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\BridgeCommunication.exe <2>
(DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(explorer.exe ->) (ASCI TECHNOLOGY LTD -> ) C:\Users\Renate\AppData\Roaming\PriceWatch\PriceWatch.exe
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\84.0.6.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ScreenSketch_11.2309.16.0_x64__8wekyb3d8bbwe\SnippingTool\SnippingTool.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\regedit.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <12>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <72>
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atiesrxx.exe
(services.exe ->) (Digital Wave Ltd -> Digital Wave Ltd.) C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe
(services.exe ->) (Huawei Technologies Co.,Ltd. -> ) C:\Program Files (x86)\MobileBrServ\mbbService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe <3>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (WatchGuard Technologies -> ) C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe
(sihost.exe ->) (614A9D21-6F29-4C9D-9F7D-FF59321D9E5F -> ) C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.57.0_x64__sbe4t8mqwq93a\FileWatcher\FileWatcher.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <6>
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2307.4.0_x64__8wekyb3d8bbwe\CalculatorApp.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wksprt.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\1.0.2306.10002-0\SecurityHealthHost.exe <2>
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe
(Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [UniConverterUpdateHelper] => C:\Program Files\Wondershare\Wondershare UniConverter 14 für Windows (Deutsch)\WSVCUUpdateHelper.exe [41712 2022-11-09] (Wondershare Technology Group Co.,Ltd -> )
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\Installer\setup.exe [6300216 2023-12-02] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-19\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.10.0\GoogleDriveFS.exe [58391840 2023-12-02] (Google LLC -> Google, Inc.)
HKU\S-1-5-19\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-20\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.10.0\GoogleDriveFS.exe [58391840 2023-12-02] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize  (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.10.0\GoogleDriveFS.exe [58391840 2023-12-02] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [MicrosoftEdgeAutoLaunch_EE3D941D252EFC82CBE181A727CE3B5C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3896784 2023-11-27] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.10.0\GoogleDriveFS.exe [58391840 2023-12-02] (Google LLC -> Google, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
Startup: C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\PriceWatch.lnk [2022-02-12] <==== ACHTUNG
ShortcutTarget: PriceWatch.lnk -> C:\Users\Renate\AppData\Roaming\PriceWatch\PriceWatch.exe (ASCI TECHNOLOGY LTD -> ) <==== ACHTUNG
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {48C50B49-7289-4258-9A7D-F3747E583C61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {886550C5-9436-4728-AFDA-063D9F31266E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {D8927E6B-C827-4FEF-B0B0-031D4DE2B8EA} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://ABO
Task: {477E220B-C6E3-45C1-860F-C4B04E8D0090} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusError
Task: {70274F36-4BB0-41D3-BAB3-56357B45DE9C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusTest
Task: {FAEC61D5-8D0F-42AF-AC50-FED2AFDF0D62} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BCF
Task: {CA3E9BC0-D17C-412F-8C39-8F9D202D3F0C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM1
Task: {9D6EB3BE-87A3-42E4-A8FA-4709E667AEFC} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM2
Task: {F91F6E92-C496-463B-BEA4-B1C20E34D2A4} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://LaunchUI
Task: {E824681C-2C66-4254-8E91-E9C1671EA958} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags:
Task: {F9A446CB-178D-41AD-902D-66093BB1057B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://SmartCheckError
Task: {161C8F21-4CE6-482F-B052-8B77C135DADC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-10-30] (HP Inc. -> HP Inc.)
Task: {2073484B-D5A3-479B-88D1-DB0F37B6455C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-10-30] (HP Inc. -> HP Inc.)
Task: {EEECFCD3-FDF7-4265-8B9B-74CBFEEE28B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2023-10-30] (HP Inc. -> HP Inc.)
Task: {8F290E52-3A73-4721-965F-681A474EFD91} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {D41354EC-4D7B-44B6-A09F-CCF895503720} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1651032 2020-11-05] (HP Inc. -> HP Inc.)
Task: {5166C823-A2D2-4402-B70D-5657799A0773} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {8AB81E92-F12E-4420-9B42-B2DF653BB8F6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {EFD2A433-EC27-4D62-9056-A0E185FC8C06} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305304 2023-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {DFD9A0DA-6737-4AA0-AB0A-D0D7D6C726FE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305304 2023-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {C5942955-2E91-4C99-B8DD-5B9E5809E4AB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169656 2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3DDF727-1849-45B9-BFCC-D1497137958D} - System32\Tasks\Microsoft\Windows\ConsentUX\UnifiedConsent\UnifiedConsentSyncTask => {82aa0895-198a-4c1b-b2d1-c16894218afb} C:\WINDOWS\System32\unifiedconsent.dll [311296 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {3BC42D6F-0F60-4767-8715-4856CF2BFEB5} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Report update status => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,WorkspaceStatusNotify2
Task: {F6750BE7-022B-4ECF-9933-959F0E2473C0} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Start Workspace Runtime at logon => {4F1DFCA6-3AAD-48E1-8406-4BC21A501D7C} C:\WINDOWS\system32\wksprt.exe [425984 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
Task: {25EF2A17-01C4-4330-91EA-1C839499B685} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Update connections => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,TaskUpdateWorkspaces2
Task: {6C3256F5-E9EF-465C-8AD1-397801E2EA3B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC Reboot (Keine Datei)
Task: {A1D63198-2897-47C4-8BE9-FA6130E90961} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery Reboot (Keine Datei)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {50EECB58-DD03-4FC2-860C-C8E778A85559} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {2CACBBCA-9226-4C11-BF6F-EFE12FC6BA3C} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4F66F2D0-FD63-43D2-A28E-1FC89241CD6B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {B92379CB-C35C-4F3F-A456-0200E76070B1} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MpCmdRun.exe [1604680 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {106C1C90-377C-4A27-9E2E-59A2B122184B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674208 2023-11-23] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {CB6BAF6C-D71F-4927-9188-749EF1A34ABE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2023-11-23] (Mozilla Corporation -> Mozilla Foundation)
Task: {03626EEB-E163-49DC-BF06-F8DAC26C242D} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-350907512-2396985161-2789647329-1002 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
Task: {4D5459BF-DDD9-484A-A2BB-639046F0634E} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe [1596800 2022-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
Task: {33D88CCA-56AB-45D1-B3B8-19C8D25AF818} - System32\Tasks\TrackerAutoUpdate => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe [4475136 2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\TrackerAutoUpdate.job => C:\Program Files\Tracker Software\Update\TrackerUpdate.exe-CheckUpdate(Tracker Software Products (Canada) Ltd.Kee

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a0e2536a-e69b-4ef8-b70d-0227a2804bfb}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-03]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge HomePage: Default -> hxxps://?
Edge StartupUrls: Default -> "hxxps://?"
Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
Edge Extension: (Google Docs Offline) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]

FireFox:
========
FF DefaultProfile: ei8ewb6p.default
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\ei8ewb6p.default [2023-08-07]
FF Homepage: Mozilla\Firefox\Profiles\ei8ewb6p.default -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF NewTab: Mozilla\Firefox\Profiles\ei8ewb6p.default -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release [2023-12-03]
FF Homepage: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> t-online.de
FF NewTab: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF Extension: (Coupert - Coupon Assistent & Cashback) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\appledev@soarinfotech.com.xpi [2023-11-23]
FF Extension: (Expressionist – Soft) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\expressionist-soft-colorway@mozilla.org.xpi [2023-03-19]
FF Extension: (uBlock Origin) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\uBlock0@raymondhill.net.xpi [2023-11-27]
FF Extension: (Yahoo Search From PDF to DOC) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{14e9af87-e82e-4b56-a45a-cc8b63ac0aba}.xpi [2023-05-07] [UpdateUrl:hxxps://cdn.frompdftodoc-cdn.com/xpi/frompdftodoc/yhs/0820/search/updates.json]
FF Extension: (Template Search) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{4e023032-b2c9-46f1-a459-6eaa627a7d7e}.xpi [2023-06-10] [UpdateUrl:hxxps://cdn.templatesearch-cdn.org/xpi/templateSearch/yhs/0820/search/updates.json]
FF Extension: (Online PDF Editor (pdf2go.com)) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2021-06-06]
FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2023-08-15]
FF Extension: (Ehrfürchtiger Vimeo Downloader) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{f5eca307-f4c6-4120-89e1-1b32c0262944}.xpi [2021-06-06]
FF SearchPlugin: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\searchplugins\My Firefox Search.xml [2021-08-08]
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin HKU\S-1-5-21-350907512-2396985161-2789647329-1002: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\Win32\npPDFXCviewNPPlugin.dll [2018-12-13] (Tracker Software Products (Canada) Ltd. -> Tracker Software Products (Canada) Ltd.)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12882616 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
S3 CloudBackupRestoreSvc; C:\WINDOWS\System32\CloudRestoreLauncher.dll [1355776 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
R2 DigitalWave.Update.Service; C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\app_updater.exe [440808 2018-02-16] (Digital Wave Ltd -> Digital Wave Ltd.)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe [887856 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe [886720 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe [882728 2023-10-25] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe [886832 2023-10-25] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe [491648 2023-10-23] (HP Inc. -> HP Inc.)
R2 Mobile Broadband HL Service; C:\Program Files (x86)\MobileBrServ\mbbservice.exe [242264 2016-03-24] (Huawei Technologies Co.,Ltd. -> )
S3 PSEXESVC; C:\WINDOWS\PSEXESVC.exe [383872 2021-06-02] (Microsoft Corporation -> Sysinternals)
S2 RtkWiFiManServ; C:\WINDOWS\RtkWiFiManServ.exe [822656 2023-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 wgsslvpnsrc; C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe [114224 2023-07-06] (WatchGuard Technologies -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AMDAfdAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpafd.inf_amd64_dea03ff0fb4183f1\amdacpafd.sys [435136 2023-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-08] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\amdkmdag.sys [94633328 2023-01-11] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [184320 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [90344 2020-04-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens AG -> Siemens Home and Office Communication Devices GmbH & Co. KG)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
R3 MpKsl582d0621; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{F5BF3E16-9561-4E10-B53E-7DEFB3978DED}\MpKslDrv.sys [263560 2023-12-03] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2023-07-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S4 UCPD; C:\WINDOWS\System32\drivers\UCPD.sys [29184 2023-09-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-03 21:36 - 2023-12-03 21:36 - 000000000 ____D C:\Users\Renate\Desktop\MALEWARESCANS
2023-12-03 21:35 - 2023-12-03 21:35 - 002384384 _____ (Farbar) C:\Users\Renate\Downloads\FRST64.exe
2023-12-03 21:03 - 2023-12-03 21:37 - 000000000 ____D C:\FRST
2023-12-03 21:03 - 2023-12-03 21:03 - 003492628 _____ C:\Users\Renate\Downloads\FRST11.zip
2023-12-03 15:19 - 2023-12-03 15:20 - 000000000 ____D C:\ProgramData\F-Secure
2023-12-03 15:19 - 2023-12-03 15:19 - 000000000 ____D C:\Users\Renate\AppData\Local\FSDART
2023-12-01 07:19 - 2023-12-01 07:19 - 000000000 ____D C:\Users\Renate\AppData\Local\Backup
2023-11-30 23:05 - 2023-11-30 23:05 - 000764278 _____ C:\WINDOWS\system32\perfh007.dat
2023-11-30 23:05 - 2023-11-30 23:05 - 000167026 _____ C:\WINDOWS\system32\perfc007.dat
2023-11-28 14:33 - 2023-11-28 14:34 - 000723795 _____ C:\Users\Renate\Downloads\email in kath. jugenfürsorge Anwort nachfrage Doppelzahlung.pdf
2023-11-28 13:59 - 2023-11-28 13:59 - 000273459 _____ C:\Users\Renate\Downloads\tauftermine-2024.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000930670 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-11-01.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000824293 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-07-01-3_1.pdf
2023-11-28 08:16 - 2023-11-28 08:16 - 000741864 _____ C:\Users\Renate\Downloads\test.pdf
2023-11-27 19:09 - 2023-11-27 19:09 - 000290753 _____ C:\Users\Renate\Downloads\4Adventsonntag2015MeditationStarke-Frauen.pdf
2023-11-27 19:08 - 2023-11-27 19:08 - 000184317 _____ C:\Users\Renate\Downloads\Weihnachten-2015-Meditationstext.pdf
2023-11-26 15:04 - 2023-11-26 15:04 - 000004991 _____ C:\Users\Renate\Downloads\Bereit-zum-Aufbruch---1.-Adventsonntag-2013.pdf
2023-11-26 13:00 - 2023-11-26 13:00 - 000059569 _____ C:\Users\Renate\Downloads\5232xxxxxxxx9400_Abrechnung_vom_17_10_2023_****.PDF
2023-11-24 15:24 - 2023-11-24 15:24 - 000517440 _____ C:\Users\Renate\Downloads\2023.10.04-AngebotBriefbogenBrückner.pdf
2023-11-24 15:18 - 2023-11-24 15:18 - 000014850 _____ C:\Users\Renate\Downloads\Mappe1(1).xlsx
2023-11-24 13:53 - 2023-11-24 13:53 - 000016044 _____ C:\Users\Renate\Downloads\04.10.23_11.32_Anruf.07223288910.wav
2023-11-23 17:49 - 2023-12-02 05:32 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-11-22 23:08 - 2023-11-22 23:08 - 000168882 _____ C:\Users\Renate\Downloads\DB_Ticket_510805076913.pdf
2023-11-22 17:43 - 2023-11-22 17:43 - 000019338 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2023-2.wbk
2023-11-22 17:42 - 2023-11-22 17:42 - 000015824 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2024.wbk
2023-11-21 21:26 - 2023-11-21 21:26 - 000183683 _____ C:\Users\Renate\Downloads\Kundenrechnung_01125_200774256-A.pdf
2023-11-20 18:22 - 2023-11-20 18:22 - 000331221 _____ C:\Users\Renate\Downloads\2022-03-03_2022-033_GiPP_AoS_Teilrechnung_1-1.pdf
2023-11-20 18:21 - 2023-11-20 18:22 - 000324344 _____ C:\Users\Renate\Downloads\2022-09-30_2022-161_GiPP_AoS.pdf
2023-11-20 17:32 - 2023-11-20 17:32 - 000080673 _____ C:\Users\Renate\Downloads\GIPP Einnahmen-Ausgaben 2022(1).xlsx
2023-11-20 17:31 - 2023-11-20 17:31 - 000019001 _____ C:\Users\Renate\Downloads\Mappe1.xlsx
2023-11-16 09:55 - 2023-11-16 09:55 - 000029562 _____ C:\Users\Renate\Downloads\RM-Weine-Angebot(1).odt
2023-11-15 14:30 - 2023-11-15 14:30 - 000016240 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2023-11-15 14:23 - 2023-11-15 14:25 - 000000000 ___HD C:\$WinREAgent
2023-11-10 21:41 - 2023-11-10 21:41 - 000029478 _____ C:\Users\Renate\Downloads\Sicherungskopie von Protokoll VS 20231104_intern.wbk
2023-11-10 20:39 - 2023-11-10 20:40 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen-1.pdf
2023-11-09 10:39 - 2023-11-09 10:39 - 001447721 _____ C:\Users\Renate\Downloads\12557.pdf
2023-11-09 10:38 - 2023-11-09 10:38 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen.pdf
2023-11-04 16:14 - 2023-11-04 16:14 - 000235960 _____ C:\Users\Renate\Downloads\Verein2016.pdf
2023-11-04 15:39 - 2023-11-04 15:39 - 000080673 _____ C:\Users\Renate\Downloads\GIPP Seminare Einnahmen-Ausgaben 2022(1).xlsx
2023-11-04 15:38 - 2023-11-04 15:38 - 000019001 _____ C:\Users\Renate\Downloads\GIPP Seminare Einnahmen-Ausgaben 2021.xlsx
2023-11-03 16:52 - 2023-11-03 16:52 - 000000000 ____D C:\Program Files\Common Files\DESIGNER

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-03 21:38 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-12-03 21:17 - 2023-06-10 19:23 - 000000000 ____D C:\Program Files (x86)\Google
2023-12-03 21:17 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-12-03 21:10 - 2021-06-02 08:45 - 000000000 ____D C:\Users\Renate\AppData\Local\D3DSCache
2023-12-03 20:58 - 2021-08-08 12:16 - 000000000 ____D C:\Users\Renate\AppData\Local\Lavasoft
2023-12-03 20:44 - 2023-05-11 22:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-12-03 20:44 - 2021-06-02 08:45 - 000000000 ___SD C:\Users\Renate\AppData\Roaming\Microsoft\Credentials
2023-12-03 15:38 - 2021-08-13 08:18 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2023-12-03 05:31 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-03 05:31 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-12-02 05:35 - 2023-06-10 19:23 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2023-12-02 05:35 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Slides.lnk
2023-12-02 05:35 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Sheets.lnk
2023-12-02 05:35 - 2023-06-10 19:23 - 000002075 _____ C:\Users\Renate\Desktop\Google Docs.lnk
2023-12-01 13:55 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Word
2023-12-01 13:05 - 2021-06-06 13:45 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Excel
2023-11-30 23:05 - 2023-05-12 10:12 - 001774666 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-11-30 23:05 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-11-30 22:58 - 2023-10-13 02:27 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-11-30 22:58 - 2023-05-11 23:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-11-30 22:58 - 2023-05-11 19:46 - 000000000 ____D C:\Users\Renate
2023-11-30 22:58 - 2021-06-03 08:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-11-30 22:58 - 2020-05-06 09:58 - 000012288 ___SH C:\DumpStack.log.tmp
2023-11-30 12:58 - 2023-06-10 19:23 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-11-30 12:58 - 2023-06-10 19:23 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-11-30 12:53 - 2020-12-25 09:33 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-11-30 12:53 - 2020-12-25 09:33 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-11-28 18:10 - 2023-05-11 15:27 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-11-28 18:10 - 2016-09-10 12:09 - 000002386 _____ C:\Users\Renate\Documents\Default.rdp
2023-11-26 12:25 - 2016-09-10 12:14 - 000000000 ____D C:\Users\Renate\Documents\1-paarsynthese
2023-11-24 15:19 - 2021-06-02 08:45 - 000000000 ____D C:\Users\Renate\AppData\Local\Packages
2023-11-24 12:37 - 2021-06-03 08:38 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-11-21 15:41 - 2016-09-10 14:40 - 000000000 ____D C:\Users\Renate\Documents\renate
2023-11-21 08:31 - 2023-05-11 23:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2023-05-11 23:01 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2021-06-02 08:45 - 000002405 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-20 19:02 - 2021-06-04 12:55 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Zoom
2023-11-19 19:49 - 2021-06-06 21:34 - 000000000 ____D C:\Users\Renate\Documents\Benutzerdefinierte Office-Vorlagen
2023-11-18 22:49 - 2020-12-25 09:41 - 000000000 ____D C:\Program Files\Microsoft Office
2023-11-18 20:41 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Office
2023-11-16 09:42 - 2022-03-28 20:42 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Teams
2023-11-15 23:38 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-11-15 23:38 - 2021-04-09 06:23 - 000000000 ____D C:\ProgramData\Packages
2023-11-15 22:49 - 2022-05-07 06:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-11-15 22:47 - 2023-05-11 22:56 - 000617264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-11-15 22:46 - 2023-10-13 02:27 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\TextInput
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\HoloShell
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\system32\de
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2023-11-15 22:46 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2023-11-15 14:39 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-11-15 14:38 - 2022-05-07 11:39 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000076800 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2023-11-15 14:31 - 2023-05-11 22:56 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-11-15 13:39 - 2021-06-02 09:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-11-15 13:35 - 2021-06-02 09:01 - 182871392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-11-12 20:35 - 2023-10-29 15:54 - 000002426 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams classic (work or school).lnk
2023-11-10 23:24 - 2016-09-10 14:32 - 000000000 ____D C:\Users\Renate\Documents\kess
2023-11-10 19:06 - 2023-05-11 23:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2023-11-10 13:39 - 2021-06-02 09:09 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-07 07:54 - 2020-05-06 09:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-06-27 21:03 - 2023-06-27 21:03 - 000646409 _____ () C:\Users\Renate\AppData\Roaming\PhotoPad.dmp

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 03-12-2023
durchgeführt von Reni (03-12-2023 21:39:04)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS
Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) (2023-05-12 09:05:25)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-350907512-2396985161-2789647329-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-350907512-2396985161-2789647329-503 - Limited - Disabled)
Gast (S-1-5-21-350907512-2396985161-2789647329-501 - Limited - Disabled)
Reni (S-1-5-21-350907512-2396985161-2789647329-1002 - Administrator - Enabled) => C:\Users\Renate
WDAGUtilityAccount (S-1-5-21-350907512-2396985161-2789647329-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3D Youtube Downloader (x64) (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\3D Youtube Downloader (x64)) (Version: 1.19.10 - 3DYD Soft)
AllDup 4.5.13 (HKLM-x32\...\AllDup_is1) (Version: 4.5.13 - MTSD)
Anti-Twin (Installation 12.02.2022) (HKLM-x32\...\Anti-Twin 2022-02-12 17.02.50) (Version:  - Joerg Rosenthal, Germany)
Avidemux VC++ 64bits (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\{4df48f2d-e600-48f8-b9af-61a33d4a23c8}) (Version: 2.8.0 - Mean)
Captura v8.0.0 (HKLM-x32\...\{C1670C5E-5042-4300-9491-6BFFF963823F}_is1) (Version: 8.0.0 - Mathew Sachin)
ClipGrab 3.9.7 (HKLM-x32\...\{8A1033B0-EF33-4FB5-97A1-C47A7DCDD7E6}_is1) (Version:  - The ClipGrab Project)
Debut Video-Aufnahme-Programm (HKLM-x32\...\Debut) (Version: 7.46 - NCH Software)
Doxillion Dokument konverter (HKLM-x32\...\Doxillion) (Version: 6.18 - NCH Software)
Easy Poster Printer (HKLM-x32\...\{085AFF3B-459B-4B8D-9366-F2DC4452D73B}) (Version: 6.8.0 - GD Software)
Fast Duplicate File Finder 4.7.0.1 (HKLM-x32\...\{AFECFED6-0A43-488F-8511-1DC6B52F31C3}_is1) (Version: 4.7.0.1 - MindGems, Inc.)
Free Video Editor (HKLM-x32\...\Free Video Editor_is1) (Version: 1.4.54.606 - Digital Wave Ltd)
Free Video To MP3 Converter (HKLM-x32\...\Free Video To MP3 Converter_is1) (Version: 5.1.6.215 - Digital Wave Ltd)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 84.0.10.0 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
gTool 1.8.8 (HKLM-x32\...\gTool_is1) (Version: 1.8.8 - Shaw Computerhard- & Software)
HP Audio Switch (HKLM-x32\...\{0B1DA73D-0562-4DE1-B942-CEF286CF2EDD}) (Version: 1.0.211.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.19.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Software Framework (HKLM-x32\...\{71E18A14-1BDB-4B58-A67F-1BCDA12462FD}) (Version: 7.1.15.1 - HP)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.16924.20150 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.16924.20150 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 119.0.2151.93 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 119.0.2151.97 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\OneDriveSetup.exe) (Version: 23.226.1031.0003 - Microsoft Corporation)
Microsoft Teams classic (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Teams) (Version: 1.6.00.29964 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27033 (HKLM-x32\...\{624ba875-fdfc-4efa-9c66-b170dfebc3ec}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27033 (HKLM-x32\...\{88D1025F-45D0-45C6-9EDB-379C2EE07AD7}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27033 (HKLM-x32\...\{D5AEE36E-4771-4F65-BDB6-8C59077BFBE4}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.29.00.03 - Huawei Technologies Co.,Ltd)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 120.0 (x64 de)) (Version: 120.0 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 89.0 - Mozilla)
MypdfManager (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\MypdfManager) (Version: 1.0 - MypdfManager)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.16924.20124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16924.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.16924.20088 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{7F556477-50F2-4BCC-AFA7-2A3C09B57149}) (Version: 5.0.7 - dotPDN LLC)
PdfBookShuffler 3.0.6 (HKLM-x32\...\PdfBookShuffler_is1) (Version:  - GAF)
PDF-Viewer (HKLM\...\{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1) (Version: 2.5.322.10 - Tracker Software Products Ltd)
PhotoPad Foto-Editor (HKLM-x32\...\PhotoPad) (Version: 11.49 - NCH Software)
PriceWatch (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\PriceWatch) (Version:  - PriceWatch) <==== ACHTUNG
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WatchGuard Mobile VPN with SSL client 12.10 (HKLM-x32\...\Mobile VPN with SSL client_is1) (Version: 12.10 - WatchGuard)
WhatsApp (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\WhatsApp) (Version: 2.2246.10 - WhatsApp)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Windows-Treiberpaket - Siemens Home and Office Communication Devices GmbH & Co. KG (GigasetGenericUSB_x64) Ports  (07/29/2008 1.70.10.0) (HKLM\...\E2ABB6D1E5898C43D3B6894FDDF34AEEEE613B95) (Version: 07/29/2008 1.70.10.0 - Siemens Home and Office Communication Devices GmbH & Co. KG)
WISO EÜR+Kasse 2020 (HKLM-x32\...\{80AB89B6-9F41-4678-9FE3-6E35ED3B3FB5}) (Version: 27.12.2340 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2021 (HKLM-x32\...\{06FC0205-0F50-40B9-93A3-FD5197E8FAA8}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2022 (HKLM-x32\...\{E6D7FE1F-EA01-49F3-8454-AB80264C32D7}) (Version: 29.06.3060 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2023 (HKLM-x32\...\{B865CD06-A706-4EC9-AC0C-EE0582A698AB}) (Version: 30.03.3240 - Buhl Data Service GmbH)
WISO Steuer 2023 (HKLM-x32\...\{AD2B6C70-B157-4EF3-A864-E35EDAC38601}) (Version: 30.10.3890 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2021 (HKLM-x32\...\{11CDC23E-8AFC-4FFA-B0FE-19BBBA06723E}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2022 (HKLM-x32\...\{4233BA02-9B3B-4658-9E59-5E0B10DA8720}) (Version: 29.10.3460 - Buhl Data Service GmbH)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Wondershare UniConverter 14(Build 14.1.5.103) (HKLM\...\UniConverter 14_is1) (Version: 14.1.5.103 - Wondershare Software)
Zoom (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\ZoomUMX) (Version: 5.15.7 (20303) - Zoom Video Communications, Inc.)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m [2023-07-30] (Advanced Micro Devices Inc.) [Startup Task]
B＆O Audio Control -> C:\Program Files\WindowsApps\AD2F1837.BOAudioControl_1.40.284.0_x64__v10z8vjag6ke6 [2023-08-13] (HP Inc.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.700.323.0_x64__8wekyb3d8bbwe [2023-11-22] (Microsoft Corporation)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2023-11-21] (HP Inc.)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-01-11] (Microsoft Corporation)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.4.0.0_x64__v10z8vjag6ke6 [2023-10-20] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2023-08-15] (HP Inc.)
HP QuickDrop -> C:\Program Files\WindowsApps\AD2F1837.HPQuickDrop_2.5.10921.0_x64__v10z8vjag6ke6 [2023-05-12] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-11-14] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.31.22.0_x64__v10z8vjag6ke6 [2023-11-07] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6 [2023-10-04] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-07-25] (Microsoft Corporation)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2310.10002.0_x64__8wekyb3d8bbwe [2023-10-12] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-10-13] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21027.539.0_x64__8wekyb3d8bbwe [2023-10-30] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2023-07-13] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2023-11-15] (Microsoft Corporation)
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6 [2023-11-10] (HP Inc.) [Startup Task]
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.57.0_x64__sbe4t8mqwq93a [2023-11-09] (NG PDF Lab) [Startup Task]
Solitär -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.14.0_x64__kx24dqmazqk8j [2023-12-01] (Random Salad Games LLC)
Speech Pack - German (Germany) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.de-DE.1_1.0.5.0_x64__cw5n1h2txyewy [2023-10-23] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2023-11-15] (Microsoft Corporation)
Wissen 21 -> C:\Program Files\WindowsApps\E717D397.Wissen21_18.4.7170.27434_neutral__n8kcsh5n6mr4c [2022-10-11] (prosozial GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Renate\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.23270.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Renate\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> Keine Datei
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.10.0\drivefsext.dll [2023-12-02] (Google LLC -> Google, Inc.)
ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} => C:\ProgramData\AllDup\FEShlExt.dll [2008-08-21] (Alex Yakovlev) [Datei ist nicht signiert]

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gratistests.lnk -> C:\Program Files (x86)\Online Services\Adobe\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?type=103&RedeemCode=b8QsonGEXF46YWkLcCGqpnNAYXgoWAix%2bzyizok1ez%2bbhpN5o%2fW8JS5qmJhldMKkWC5eZb9kYwwrhb%2bb0S0OgcWmMub74Pj3J%2bvD8YYI%2bdXpxCswYU3ZvEK5eSMTq2fDNWCg6KGJptuhvbq%2bShse2%2fAYHCzA0Pew3lDCEBOj1zQ%3d
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LastPass.lnk -> C:\Program Files (x86)\Online Services\LastPass\WizLink.exe () -> hxxp://js.redirect.hp.com/jumpstation?bd=lastpass&c=*&locale=*&pf=*&s=*&tp=edge

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2022-11-15 10:32 - 2016-07-21 10:54 - 000137728 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSCreateVC.dll
2022-11-15 10:32 - 2017-03-23 09:49 - 001506304 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\DAQExp.dll
2022-02-12 17:02 - 2022-02-12 17:02 - 001033728 _____ () [Datei ist nicht signiert] C:\Users\Renate\AppData\Roaming\PriceWatch\sqlite3.dll
2023-09-17 00:34 - 2023-09-17 00:34 - 000138240 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\f712706f64865098201219e2b0307dbc\Interop.IWshRuntimeLibrary.ni.dll
2022-02-12 17:10 - 2008-08-21 00:08 - 001107520 _____ (Alex Yakovlev) [Datei ist nicht signiert] C:\ProgramData\AllDup\FEShlExt.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000139776 _____ (hardcodet.net) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\939f51bd30c5e2e78302a06a4cb15fa7\Hardcodet.Wpf.TaskbarNotification.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 001716224 _____ (Mark Heath & Contributors) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\412c0cf0abd23e376935d6442bb3a6fb\NAudio.ni.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 003088896 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\94180e3729222bb20299a7ac8a678eb5\Newtonsoft.Json.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000780288 _____ (The Apache Software Foundation) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\c377668f29dbaaf78dee5dcb284c52f3\log4net.ni.dll
2022-11-15 10:32 - 2017-03-23 09:52 - 000708608 _____ (Wondershare) [Datei ist nicht signiert] C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\CBSProducstInfo.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10118__210808__yaie
SearchScopes: HKLM -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKU\S-1-5-21-350907512-2396985161-2789647329-1002 -> {993F5746-4C15-42BC-99C1-064A1764271B} URL = hxxps://securesearch.org?q={searchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-10-30] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-10-30] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2021-07-07 17:27 - 2022-03-20 17:01 - 000000444 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
92.168.137.1 LAPTOP-UP7T5C9F.mshome.net # 2026 7 1 6 16 27 12 259

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "UniConverterUpdateHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\StartupApproved\Run: => "Web Companion"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{E9E2D074-3623-44AB-8704-420BE9080C0E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6706475D-EEA8-41DA-A6AF-7B9C899D13FA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FB8BE7CE-6836-4EAB-B4A5-16BE3F8DAF35}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95F00BAF-78E0-40D2-B7E9-59D096D268D8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5361C9C8-B9F5-437A-98C4-C734E1BCA183}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{66EFE8CF-D133-47E0-8BD3-2667898C07CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9447F732-042B-4570-985B-4F71890C4DE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{C940D831-A431-4BDC-A7A4-94198727745B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8B3B46A1-1913-4DF4-A779-7A910C321281}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CA25381-EF43-4A4A-86D7-3D0E61887D31}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7C29AB0A-9582-4084-AEEF-2AFE672DA11C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{88606089-C41D-49BE-A262-6642A84D4E15}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{B1A8CAF9-C469-44E0-B18D-1552957B9B58}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{292FE6C2-74A6-4775-B2E7-3072BA00E197}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6E506EC2-C0E2-4173-8147-900B7F3D8D46}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{D2B3D828-8EC8-44ED-A744-D6D4ABB6D8E9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9230B6E6-DC68-4862-8192-AE34685C1120}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{A5F99B48-00AA-413D-AF04-14A959C41813}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3294DCBE-76A9-45BA-96AD-1B891FB323B4}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{120C830B-E339-4133-8575-7AA6740C1F4E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F7DE4683-625C-4A2D-A1B6-A354AF26E293}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{CB978C4B-F166-44DD-9E81-1365C3BDC686}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{4DBC80C4-8CA7-4AF7-9A29-3AFA6DF3B068}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7E1196B3-C02C-453E-AF47-B20B4466BD98}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{85B6B163-6712-4588-A054-4839E8FFE6B0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{388DF2E6-160F-4C70-A379-36C29B0A16C4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7BB5F2D4-ACBD-4CB5-A3FF-4BA73BD25FD0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{54D5A1C0-98BC-4849-BA93-6DD24E0F7584}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9CB439DD-9082-47BE-B59D-7BFF6154E630}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{07A62B29-D805-492B-B3D8-3010A5AD5C8F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{EA475618-A60F-4AC4-97EF-A596A3C55680}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [UDP Query User{DB9CA146-619D-4793-9751-3EA1DBB94A2D}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8D555FCA-7085-4BF7-AA91-D4AD591C8514}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5D6CD05E-B8F3-4BAD-9C91-2BD1F56B15EB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5EF75767-0357-44D4-9919-1BB53B67D4AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{3D0BD166-D866-48AC-8D00-BC5612CB262A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F90B5708-4EFE-4EC4-B127-99A3CBA8EA6B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FBB6FC8D-DEB0-41CA-8E37-FE546B060B72}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95AA6E71-A18E-4B01-9195-A00E127F8D2B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1A89935C-A603-468D-85AF-10FD4983ED75}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{E5B659E1-D32C-40C1-9399-7F0A48F5C0AB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{78C9F8FD-1671-47B3-9010-67CCA13DFCBF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1BC291D0-236C-4634-9AED-104316FBF56D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8975A4D1-07BF-466F-BB00-5FE940B77C99}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CD224CE-A596-4B9E-8977-1DDF26FDF874}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{23205541-28FF-4D9B-9239-6369B13A4FAA}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{CD268FD3-40A8-40C2-9124-CD4774DD3A29}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{FB50F9BA-8FF4-495B-9F1F-9D9FE2ADAD09}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{7A517224-2D60-410E-BE14-4EE20459B0B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{64085C17-619A-4DDA-97B3-BDD83EED2750}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{57254250-3AF4-4974-91D4-E2C982A9CC31}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{BA052953-1607-436E-97A7-436BAEF9A0C9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{74B43660-7BE0-43AF-A911-C4A5B58C7A3D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8EAD8BA1-7239-41B4-B2C2-37FD98A16660}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{E7F79D37-57F4-4F4D-B311-D52A4F4FA0F7}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CEE0BA56-6F18-4B7B-A752-9ED0E78EB6BF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{34B4F9FF-3708-461D-9DEF-304EE2659C87}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{F98BB66E-8DC8-42A7-9C7D-598B38961B3A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{1F497557-73C7-4C6B-B0C3-34D74FA8E036}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4FAB8486-66F1-4647-9F51-03462EADAF9D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{031CF13A-2D04-4C34-B01B-66F829E8BC10}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{DD20C7D0-DA9D-40BA-860F-698A0B9B1B55}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{3C7A0F64-EA11-4397-812B-CEF5DEDF5B79}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{6C1A36AC-7DD0-4AF0-9E4C-EB831E7A9BBB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{4A61C91B-D14E-4764-8486-61E77E3AF8B4}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{08222135-8D64-4C91-B7C0-D17F5610B088}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{477FD66A-08B5-4475-B309-8F8214AF3C3C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{ED2EF36D-B424-4689-A352-EDDDB59A8BD5}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5E2EE7C9-074C-459B-933E-0A33D633D951}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{66464860-6A39-4ED7-A774-B7D019C97E7A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{33F0A59E-1D22-4730-9F9A-794A12DD50CB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D45FA75F-3C9D-4A8C-A1DC-993F938944BA}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7132A558-0398-43A6-993D-5F4479E3675B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{264F015E-5B19-4DFC-804A-EE3CCD16EE52}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{EC409102-6AB2-414B-8B32-56AB1744596A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5FD98FFE-2E98-454A-8B32-A9644A263029}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8C92EEA5-333E-49EE-A349-375BC65B6F43}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{94A1A8E2-1F90-4768-91A8-C76D60E76AC1}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{F73A060A-1EA8-45D1-86F5-08314332815D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{69FE13B3-0EB8-4679-A1CC-07223C4BE249}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [TCP Query User{DA4898AD-D221-4E71-8CC7-31BD2EE11047}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [UDP Query User{6D7A1A74-61B5-4C7C-9CDB-178D82BB685C}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [{7BE08E55-754E-4D0A-BDDF-26B15277140B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{668E0FF0-63BF-4462-A256-7958CE4E33D9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{80492833-0AA6-462D-9C4D-E5848DF4EB7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FA536B33-643E-491B-BF03-197731165E8A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{6DC04C85-A237-4A47-AAC1-AA6B72F7FCA0}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.72\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{E3D8FA1F-3D00-4C85-A30E-DF98BBDC136F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BA10B6DA-C23B-428C-A33D-EEA09BA832C7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FC674D54-E561-45F9-A9FE-1D7983077B85}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

28-11-2023 08:54:23 Windows Update
01-12-2023 23:11:22 Windows Update
01-12-2023 23:11:27 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (12/03/2023 09:17:04 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/02/2023 11:18:25 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/01/2023 03:52:35 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-UP7T5C9F)
Description: Name der fehlerhaften Anwendung: SecHealthUI.exe, Version: 10.0.25873.1001, Zeitstempel: 0x6f37102f
Name des fehlerhaften Moduls: SecHealthUIDataModel.dll, Version: 10.0.25873.1001, Zeitstempel: 0xdfce6c6f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000179f4
ID des fehlerhaften Prozesses: 0x0x18b8
Startzeit der fehlerhaften Anwendung: 0x0x1da24401937614a
Pfad der fehlerhaften Anwendung: C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
Pfad des fehlerhaften Moduls: C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUIDataModel.dll
Berichtskennung: 62884250-ccb2-4552-97c3-7cde90093bcd
Vollständiger Name des fehlerhaften Pakets: Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SecHealthUI

Error: (12/01/2023 10:41:51 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/01/2023 07:16:24 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (11/30/2023 11:09:46 PM) (Source: Application Hang) (EventID: 1002) (User: NT-AUTORITÄT)
Description: Das Programm SystemSettings.exe Version 10.0.22621.2506 hat aufgehört mit Windows zu interagieren und wurde geschlossen. Weitere Informationen zum Problem finden Sie im Problemverlauf in der Systemsteuerung „Sicherheit und Wartung“.

Error: (11/30/2023 10:59:32 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (11/28/2023 09:15:19 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2


Systemfehler:
=============
Error: (12/03/2023 08:58:41 PM) (Source: Service Control Manager) (EventID: 7011) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Warten auf eine Transaktionsrückmeldung von Dienst DCIService erreicht.

Error: (12/03/2023 04:54:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Gruppenrichtlinienclient" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (12/03/2023 04:54:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Gruppenrichtlinienclient erreicht.

Error: (12/03/2023 02:23:57 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/03/2023 12:36:47 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows-Kamera-Frame-Server-Monitor" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst antwortete nicht rechtzeitig auf die Start- oder Steuerungsanforderung.

Error: (12/03/2023 12:36:47 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Windows-Kamera-Frame-Server-Monitor erreicht.

Error: (12/02/2023 09:17:00 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/02/2023 05:36:44 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{C53A4F16-787E-42A4-B304-29EFFB4BF597}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================
Date: 2023-12-03 09:17:04
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {99D4B684-1697-48C8-9EE6-0D841E688882}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-02 09:00:48
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2CB628CE-8FEC-4D5E-B104-0AA64E917815}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-01 15:41:03
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Misleading:Win32/Lodi&threatid=240849&enterprise=0
Name: Misleading:Win32/Lodi
Schweregrad: Hoch
Kategorie: Adware
Pfad: containerfile:_C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe; file:_C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe->(inno#000112)
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Benutzer
Benutzer: LAPTOP-UP7T5C9F\Reni
Prozessname: Unknown
Sicherheitsversion: AV: 1.401.1462.0, AS: 1.401.1462.0, NIS: 1.401.1462.0
Modulversion: AM: 1.1.23100.2009, NIS: 1.1.23100.2009 

Date: 2023-11-28 08:53:24
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8A37C76B-2B83-4F37-A162-37B7E1E99D20}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-11-26 10:36:32
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {ADDBE7A8-7048-40C2-82D9-E96C65F6EDCB}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2023-08-25 03:33:02
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x80004005
Fehlerbeschreibung: Unbekannter Fehler 
Ursache: Die Elementenüberprüfung des Filtertreibers wurde übersprungen, und er befindet sich nun im Durchleitungsmodus. Dies ist möglicherweise auf Ressourcenmangel zurückzuführen. 

Date: 2023-08-13 00:03:05
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen.
Dateiname: C:\Windows\System32\spool\drivers\x64\3\New\FXSUI.DLL
Sha256: 1e264c6623302db746513f7670469603404b59d89cc93a28164437b1e7ced5b6
Aktuelle Sicherheitsversion: AV: 1.395.249.0, AS: 1.395.249.0
Aktuelle Modulversion: 1.1.23070.1005
Fehlercode: 0x80508016
 

Date: 2023-06-28 00:29:52
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.391.2789.0;1.391.2789.0
Modulversion: 1.1.23050.3 

Date: 2023-05-12 00:01:14
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Sicherung
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.389.883.0;1.389.883.0
Modulversion: 1.1.20300.3 

Date: 2023-05-12 00:01:10
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80070003
Fehlerbeschreibung: Das System kann den angegebenen Pfad nicht finden. 
Security Intelligence-Version: 0.0.0.0;0.0.0.0
Modulversion: 0.0.0.0 

CodeIntegrity:
===============
Date: 2023-12-01 11:09:44
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2023-10-13 07:49:04
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23090.2008-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2023-09-29 19:48:08
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23080.2006-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.26 07/04/2023
Hauptplatine: HP 88D0
Prozessor: AMD Ryzen 5 5500U with Radeon Graphics 
Prozentuale Nutzung des RAM: 75%
Installierter physikalischer RAM: 15693.96 MB
Verfügbarer physikalischer RAM: 3838.54 MB
Summe virtueller Speicher: 37197.96 MB
Verfügbarer virtueller Speicher: 14925.64 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.99 GB) (Free:122.95 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) (Protected) NTFS
Drive g: (Google Drive) (Fixed) (Total:15 GB) (Free:13.86 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) FAT32

\\?\Volume{c60e7d4e-a73b-4499-a0e5-025e4f991b45}\ () (Fixed) (Total:0.67 GB) (Free:0.07 GB) NTFS
\\?\Volume{19290398-fefe-4918-9431-745f82246ade}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: CA275C3D)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

System aufräumen: unnötige und veraltete Programme deinstallieren

Bitte über Programme und Features (appwiz.cpl) deinstallieren:

• PDF-Viewer
• PriceWatch

Danke für die Rückmeldung, gemacht wie getan.

Anbei ein neuer Scan. Folgende Programme werden wohl aktiv benutzt:
- Anti-Twin
- 3D Youtube Downloader

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 05-12-2023
durchgeführt von Reni (Administrator) auf LAPTOP-UP7T5C9F (HP HP Pavilion Laptop 15-eh1xxx) (05-12-2023 22:01:50)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS\FRST64.exe
Geladene Profile: Reni
Plattform: Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\84.0.11.0\crashpad_handler.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe <18>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\BridgeCommunication.exe <3>
(DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atiesrxx.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atieclxx.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(Malwarebytes Inc. -> Malwarebytes) C:\Windows\Temp\6ce834b493b111ee88e4000000000000
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <45>
(SECOMN64.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOCL64.exe
(services.exe ->) (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.) C:\Windows\System32\amdfendrsr.exe
(services.exe ->) (Advanced Micro Devices Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\atiesrxx.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPCommRecovery\HPCommRecovery.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe
(services.exe ->) (HP Inc. -> HP) C:\Program Files (x86)\HP\Shared\hpqwmiex.exe
(services.exe ->) (Huawei Technologies Co.,Ltd. -> ) C:\Program Files (x86)\MobileBrServ\mbbService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Realtek Semiconductor Corp.) C:\Windows\RtkBtManServ.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.) C:\Windows\RtkWiFiManServ.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe <3>
(services.exe ->) (Sound Research Corporation -> Sound Research, Corp.) C:\Windows\System32\SECOMN64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnhService.exe
(services.exe ->) (WatchGuard Technologies -> ) C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe
(sihost.exe ->) (614A9D21-6F29-4C9D-9F7D-FF59321D9E5F -> ) C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.57.0_x64__sbe4t8mqwq93a\FileWatcher\FileWatcher.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5>
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21750.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21750.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wksprt.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Windows\System32\SynTPEnh.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [UniConverterUpdateHelper] => C:\Program Files\Wondershare\Wondershare UniConverter 14 für Windows (Deutsch)\WSVCUUpdateHelper.exe (Keine Datei)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Keine Datei)
HKU\S-1-5-19\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-19\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-20\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [HPSEU_Host_Launcher] => C:\System.sav\util\HPSEU\HpseuHostLauncher.exe [538160 2023-09-29] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [Web Companion] => C:\Program Files (x86)\Lavasoft\Web Companion\Application\WebCompanion.exe --minimize  (Keine Datei) <==== ACHTUNG
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [MicrosoftEdgeAutoLaunch_EE3D941D252EFC82CBE181A727CE3B5C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3896768 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {48C50B49-7289-4258-9A7D-F3747E583C61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {886550C5-9436-4728-AFDA-063D9F31266E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {D8927E6B-C827-4FEF-B0B0-031D4DE2B8EA} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://ABO
Task: {477E220B-C6E3-45C1-860F-C4B04E8D0090} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusError
Task: {70274F36-4BB0-41D3-BAB3-56357B45DE9C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusTest
Task: {FAEC61D5-8D0F-42AF-AC50-FED2AFDF0D62} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BCF
Task: {CA3E9BC0-D17C-412F-8C39-8F9D202D3F0C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM1
Task: {9D6EB3BE-87A3-42E4-A8FA-4709E667AEFC} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM2
Task: {F91F6E92-C496-463B-BEA4-B1C20E34D2A4} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://LaunchUI
Task: {E824681C-2C66-4254-8E91-E9C1671EA958} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags:
Task: {F9A446CB-178D-41AD-902D-66093BB1057B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://SmartCheckError
Task: {161C8F21-4CE6-482F-B052-8B77C135DADC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-10-30] (HP Inc. -> HP Inc.)
Task: {2073484B-D5A3-479B-88D1-DB0F37B6455C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-10-30] (HP Inc. -> HP Inc.)
Task: {EEECFCD3-FDF7-4265-8B9B-74CBFEEE28B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2023-10-30] (HP Inc. -> HP Inc.)
Task: {8F290E52-3A73-4721-965F-681A474EFD91} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {D41354EC-4D7B-44B6-A09F-CCF895503720} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1651032 2020-11-05] (HP Inc. -> HP Inc.)
Task: {5166C823-A2D2-4402-B70D-5657799A0773} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {8AB81E92-F12E-4420-9B42-B2DF653BB8F6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
Task: {EFD2A433-EC27-4D62-9056-A0E185FC8C06} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305304 2023-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {DFD9A0DA-6737-4AA0-AB0A-D0D7D6C726FE} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305304 2023-11-18] (Microsoft Corporation -> Microsoft Corporation)
Task: {C5942955-2E91-4C99-B8DD-5B9E5809E4AB} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169656 2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {3BC42D6F-0F60-4767-8715-4856CF2BFEB5} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Report update status => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,WorkspaceStatusNotify2
Task: {F6750BE7-022B-4ECF-9933-959F0E2473C0} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Start Workspace Runtime at logon => {4F1DFCA6-3AAD-48E1-8406-4BC21A501D7C} C:\WINDOWS\system32\wksprt.exe [425984 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
Task: {25EF2A17-01C4-4330-91EA-1C839499B685} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Update connections => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,TaskUpdateWorkspaces2
Task: {6C3256F5-E9EF-465C-8AD1-397801E2EA3B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC Reboot (Keine Datei)
Task: {A1D63198-2897-47C4-8BE9-FA6130E90961} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery Reboot (Keine Datei)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {106C1C90-377C-4A27-9E2E-59A2B122184B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674208 2023-12-02] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {CB6BAF6C-D71F-4927-9188-749EF1A34ABE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2023-12-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {03626EEB-E163-49DC-BF06-F8DAC26C242D} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-350907512-2396985161-2789647329-1002 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
Task: {4D5459BF-DDD9-484A-A2BB-639046F0634E} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe [1596800 2022-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a0e2536a-e69b-4ef8-b70d-0227a2804bfb}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-05]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge HomePage: Default -> hxxps://?
Edge StartupUrls: Default -> "hxxps://?"
Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
Edge Extension: (Google Docs Offline) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]

FireFox:
========
FF DefaultProfile: ei8ewb6p.default
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\ei8ewb6p.default [2023-08-07]
FF Homepage: Mozilla\Firefox\Profiles\ei8ewb6p.default -> hxxps://links.malwarebytes.com/link/restorebrowser?lic=trial&product=MBAM-C/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release [2023-12-05]
FF Homepage: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> t-online.de
FF NewTab: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF Extension: (Coupert - Coupon Assistent & Cashback) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\appledev@soarinfotech.com.xpi [2023-11-23]
FF Extension: (Expressionist – Soft) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\expressionist-soft-colorway@mozilla.org.xpi [2023-03-19]
FF Extension: (uBlock Origin) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\uBlock0@raymondhill.net.xpi [2023-11-27]
FF Extension: (Yahoo Search From PDF to DOC) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{14e9af87-e82e-4b56-a45a-cc8b63ac0aba}.xpi [2023-05-07] [UpdateUrl:hxxps://cdn.frompdftodoc-cdn.com/xpi/frompdftodoc/yhs/0820/search/updates.json]
FF Extension: (Template Search) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{4e023032-b2c9-46f1-a459-6eaa627a7d7e}.xpi [2023-06-10] [UpdateUrl:hxxps://cdn.templatesearch-cdn.org/xpi/templateSearch/yhs/0820/search/updates.json]
FF Extension: (Online PDF Editor (pdf2go.com)) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2021-06-06]
FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2023-08-15]
FF Extension: (Ehrfürchtiger Vimeo Downloader) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{f5eca307-f4c6-4120-89e1-1b32c0262944}.xpi [2021-06-06]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12882616 2023-11-11] (Microsoft Corporation -> Microsoft Corporation)
S3 CloudBackupRestoreSvc; C:\WINDOWS\System32\CloudRestoreLauncher.dll [1355776 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
R2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe [887856 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe [886720 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe [882728 2023-10-25] (HP Inc. -> HP Inc.)
R3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe [886832 2023-10-25] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe [491648 2023-10-23] (HP Inc. -> HP Inc.)
R2 Mobile Broadband HL Service; C:\Program Files (x86)\MobileBrServ\mbbservice.exe [242264 2016-03-24] (Huawei Technologies Co.,Ltd. -> )
S3 PSEXESVC; C:\WINDOWS\PSEXESVC.exe [383872 2021-06-02] (Microsoft Corporation -> Sysinternals)
R2 RtkWiFiManServ; C:\WINDOWS\RtkWiFiManServ.exe [822656 2023-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\NisSrv.exe [3121120 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 wgsslvpnsrc; C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe [114224 2023-07-06] (WatchGuard Technologies -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe [133704 2023-11-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AMDAfdAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpafd.inf_amd64_dea03ff0fb4183f1\amdacpafd.sys [435136 2023-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-08] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\amdkmdag.sys [94633328 2023-01-11] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [184320 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [90344 2020-04-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens AG -> Siemens Home and Office Communication Devices GmbH & Co. KG)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2023-07-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S4 UCPD; C:\WINDOWS\System32\drivers\UCPD.sys [29184 2023-09-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55744 2023-11-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [578856 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105768 2023-11-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-05 22:01 - 2023-12-05 22:01 - 000001305 ____T C:\Users\Renate\AppData\Local\Temp\xakc.0
2023-12-05 21:39 - 2023-12-05 21:39 - 000000156 _____ C:\Users\Renate\AppData\Local\Temp\Twunk001.MTX
2023-12-05 21:39 - 2023-12-05 21:39 - 000000002 _____ C:\Users\Renate\AppData\Local\Temp\Twain001.Mtx
2023-12-05 21:39 - 2023-12-05 21:39 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\nchuninst
2023-12-05 21:39 - 2023-12-05 21:39 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\Twunk002.MTX
2023-12-05 21:34 - 2023-12-05 21:34 - 000000002 _____ C:\Users\Renate\AppData\Local\Temp\2058636100.cfg
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\uninst
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB240.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23F.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23E.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23D.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23C.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23B.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB23A.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB239.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB209.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB208.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB207.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB206.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB205.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB204.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB203.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB202.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB201.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB200.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FF.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FE.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FD.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FC.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FB.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1FA.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F9.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F8.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F7.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F6.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F5.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F4.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F3.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F2.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F1.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmpB1F0.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp3FC0.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp3FBF.tmp
2023-12-05 21:34 - 2023-12-05 21:34 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp3FBE.tmp
2023-12-05 21:31 - 2022-11-15 10:32 - 000723294 _____ C:\Users\Renate\AppData\Local\Temp\_iu14D2N.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFDA7.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFDA6.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFDA5.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD95.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD94.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD93.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD92.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD91.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD90.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD66.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFD26.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFCF6.tmp
2023-12-05 18:50 - 2023-12-05 18:50 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFCF5.tmp
2023-12-05 18:25 - 2023-12-05 18:26 - 003253005 _____ C:\Users\Renate\AppData\Local\Temp\bac752a7-2779-4d55-b7a0-6271837ebde6.tmp
2023-12-05 18:25 - 2023-12-05 18:26 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_21160_1516998686
2023-12-05 18:25 - 2023-12-05 18:25 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\e9ea80a2-42ef-4ec7-8b86-4b6dc9b8fa15.tmp
2023-12-05 18:10 - 2023-12-05 18:10 - 000376386 _____ C:\Users\Renate\AppData\Local\Temp\tmp-33q.xpi
2023-12-05 17:58 - 2023-12-05 17:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{8A083004-9C13-4E2A-BBF5-835D3041D5CE}
2023-12-05 17:58 - 2023-12-05 17:58 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\bd699d77-4984-4e14-8731-6d9ee5394433.tmp
2023-12-05 17:58 - 2023-12-05 17:58 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\{01DC57DE-AA57-404B-BA1B-BF798C1441EA} - OProcSessId.dat
2023-12-05 17:36 - 2023-12-05 21:00 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\mozilla-temp-files
2023-12-05 17:31 - 2023-12-05 17:31 - 000764278 _____ C:\WINDOWS\system32\perfh007.dat
2023-12-05 17:31 - 2023-12-05 17:31 - 000167026 _____ C:\WINDOWS\system32\perfc007.dat
2023-12-05 17:29 - 2023-12-05 20:56 - 005863819 _____ C:\Users\Renate\AppData\Local\Temp\56dcad1b-72b4-4a01-8d63-6825a94377f0.tmp
2023-12-05 17:27 - 2023-12-05 17:27 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14068_727999711
2023-12-05 17:26 - 2023-12-05 17:27 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14068_1988695338
2023-12-05 17:25 - 2023-12-05 17:26 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14068_628723703
2023-12-05 17:25 - 2023-12-05 17:25 - 000075804 _____ C:\Users\Renate\AppData\Local\Temp\wctE37E.tmp
2023-12-05 17:25 - 2023-12-05 17:25 - 000075804 _____ C:\Users\Renate\AppData\Local\Temp\wctE37D.tmp
2023-12-05 17:25 - 2023-12-05 17:25 - 000075804 _____ C:\Users\Renate\AppData\Local\Temp\wct472.tmp
2023-12-05 17:24 - 2023-12-05 17:25 - 005014240 _____ C:\Users\Renate\AppData\Local\Temp\bb837745-6b3d-44fa-95a7-3ac779cace75.tmp
2023-12-05 17:24 - 2023-12-05 17:25 - 000704515 _____ C:\Users\Renate\AppData\Local\Temp\45fa7bc6-2d64-4fd1-a0f6-72c7a6a2d134.tmp
2023-12-05 17:24 - 2023-12-05 17:24 - 006462288 _____ C:\Users\Renate\AppData\Local\Temp\431edcf8-561b-4754-b396-91f5faaf7143.tmp
2023-12-05 17:24 - 2023-12-05 17:24 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\afe9c385-5622-4e98-844d-fa0ed971b266.tmp
2023-12-04 20:07 - 2023-12-04 20:07 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14040_224023620
2023-12-04 19:21 - 2023-12-04 19:21 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{D747EC08-98B6-4C04-99A9-1A2DA95E50EE}
2023-12-04 19:21 - 2023-12-04 19:21 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\{B97C34C8-8AB9-4279-9C0A-6755DD2FAAD8} - OProcSessId.dat
2023-12-04 19:16 - 2023-12-04 19:17 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14416_561189457
2023-12-04 18:48 - 2023-12-04 18:48 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14416_252109198
2023-12-04 18:45 - 2023-12-04 18:45 - 000075759 _____ C:\Users\Renate\AppData\Local\Temp\wctCCA3.tmp
2023-12-04 18:45 - 2023-12-04 18:45 - 000075759 _____ C:\Users\Renate\AppData\Local\Temp\wct9A29.tmp
2023-12-04 18:45 - 2023-12-04 18:45 - 000075759 _____ C:\Users\Renate\AppData\Local\Temp\wct996D.tmp
2023-12-04 01:22 - 2023-12-04 01:23 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_14416_470533302
2023-12-04 01:12 - 2023-12-04 01:12 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\mbam
2023-12-04 01:10 - 2023-12-04 01:11 - 000000000 ____D C:\Program Files\Malwarebytes
2023-12-04 01:10 - 2023-12-04 01:10 - 002606880 _____ (Malwarebytes) C:\Users\Renate\Downloads\MBSetup.exe
2023-12-04 01:06 - 2023-12-04 01:06 - 000002644 _____ C:\Users\Renate\AppData\Local\Temp\ExchangePerflog_8484fa31c4dfe435cfcccd43.dat
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8D43.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8A82.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8928.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8917.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8897.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD86C1.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8661.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8323.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD81C9.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD8179.tmp
2023-12-04 01:06 - 2023-12-04 01:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD803E.tmp
2023-12-04 01:02 - 2023-12-04 01:02 - 000000196 _____ C:\Users\Renate\AppData\Local\Temp\371648401.cfg
2023-12-04 01:02 - 2023-12-04 01:02 - 000000002 _____ C:\Users\Renate\AppData\Local\Temp\273265479.cfg
2023-12-04 01:02 - 2023-12-04 01:02 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\Wondershare
2023-12-04 01:02 - 2023-12-04 01:02 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\upgrade_sensors
2023-12-04 01:01 - 2023-12-04 01:01 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp2A91.tmp
2023-12-04 01:01 - 2023-12-04 01:01 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp2A90.tmp
2023-12-04 01:01 - 2023-12-04 01:01 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp2A8F.tmp
2023-12-04 00:51 - 2023-12-04 00:51 - 000001130 _____ C:\Users\Renate\AppData\Local\Temp\Setup Log 2023-12-04 #001.txt
2023-12-04 00:43 - 2023-12-04 00:43 - 000017687 _____ C:\Users\Renate\AppData\Local\Temp\tmp642.tmp
2023-12-04 00:43 - 2023-12-04 00:43 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp641.xml
2023-12-04 00:43 - 2023-12-04 00:43 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\tmp641.tmp
2023-12-03 21:36 - 2023-12-05 21:40 - 000000000 ____D C:\Users\Renate\Desktop\MALEWARESCANS
2023-12-03 21:03 - 2023-12-05 22:02 - 000000000 ____D C:\FRST
2023-12-03 15:19 - 2023-12-03 15:20 - 000000000 ____D C:\ProgramData\F-Secure
2023-12-03 15:19 - 2023-12-03 15:19 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\F-Secure102OnlineScanner_exe_0031220231519083725873727
2023-12-03 15:18 - 2023-12-03 15:18 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\temp.html
2023-12-03 15:14 - 2023-12-03 15:14 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_13320_1509319538
2023-12-03 12:17 - 2023-12-03 12:17 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\edge_BITS_20828_768195585
2023-12-03 10:55 - 2023-12-03 10:55 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct52E3.tmp
2023-12-03 10:55 - 2023-12-03 10:55 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct3605.tmp
2023-12-03 10:55 - 2023-12-03 10:55 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct3604.tmp
2023-12-02 11:49 - 2023-12-02 11:49 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\msedge_url_fetcher_20828_890468214
2023-12-02 11:45 - 2023-12-02 11:45 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct7E82.tmp
2023-12-02 11:45 - 2023-12-02 11:45 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct1066.tmp
2023-12-02 11:45 - 2023-12-02 11:45 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct1056.tmp
2023-12-02 05:32 - 2023-12-04 01:21 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-12-01 15:25 - 2023-12-01 15:25 - 000547427 _____ C:\Users\Renate\AppData\Local\Temp\prep___Program Files_Microsoft Office_root_Office16_AugLoop_bundle_js_V8_perf.cache
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDF18.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDF08.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDEF5.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDEF4.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDEE3.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDEE1.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDEE0.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE9D.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE9C.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE6A.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE69.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE57.tmp
2023-12-01 15:18 - 2023-12-01 15:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDDE45.tmp
2023-12-01 12:56 - 2023-12-01 12:56 - 000376386 _____ C:\Users\Renate\AppData\Local\Temp\tmp-w5k.xpi
2023-12-01 12:04 - 2023-12-01 12:04 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{51B96CFB-39C5-49B0-8144-4CA797D6451F}
2023-12-01 12:04 - 2023-12-01 12:04 - 000000000 _____ C:\Users\Renate\AppData\Local\Temp\{630A135C-8184-41DD-9B95-FD4230E58E16} - OProcSessId.dat
2023-12-01 10:35 - 2023-12-01 10:35 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct2FCD.tmp
2023-12-01 10:35 - 2023-12-01 10:35 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct109E.tmp
2023-12-01 10:35 - 2023-12-01 10:35 - 000075754 _____ C:\Users\Renate\AppData\Local\Temp\wct109D.tmp
2023-11-30 12:56 - 2023-11-30 12:56 - 000376386 _____ C:\Users\Renate\AppData\Local\Temp\tmp-wgn.xpi
2023-11-28 14:33 - 2023-11-28 14:34 - 000723795 _____ C:\Users\Renate\Downloads\email in kath. jugenfürsorge Anwort nachfrage Doppelzahlung.pdf
2023-11-28 13:59 - 2023-11-28 13:59 - 000273459 _____ C:\Users\Renate\Downloads\tauftermine-2024.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000930670 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-11-01.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000824293 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-07-01-3_1.pdf
2023-11-28 09:35 - 2023-11-28 09:35 - 000075665 _____ C:\Users\Renate\AppData\Local\Temp\wct413C.tmp
2023-11-28 09:35 - 2023-11-28 09:35 - 000075665 _____ C:\Users\Renate\AppData\Local\Temp\wct1F2D.tmp
2023-11-28 09:25 - 2023-11-28 09:25 - 000075665 _____ C:\Users\Renate\AppData\Local\Temp\wct4BB3.tmp
2023-11-28 08:16 - 2023-11-28 08:16 - 000741864 _____ C:\Users\Renate\Downloads\test.pdf
2023-11-28 08:15 - 2023-11-28 08:15 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\msedge_url_fetcher_23068_1211425395
2023-11-27 19:57 - 2023-11-27 19:57 - 000376386 _____ C:\Users\Renate\AppData\Local\Temp\tmp-9tg.xpi
2023-11-27 19:09 - 2023-11-27 19:09 - 000290753 _____ C:\Users\Renate\Downloads\4Adventsonntag2015MeditationStarke-Frauen.pdf
2023-11-27 19:08 - 2023-11-27 19:08 - 000184317 _____ C:\Users\Renate\Downloads\Weihnachten-2015-Meditationstext.pdf
2023-11-27 17:35 - 2023-11-27 17:35 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctEF71.tmp
2023-11-27 17:35 - 2023-11-27 17:35 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctCB60.tmp
2023-11-27 17:35 - 2023-11-27 17:35 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctCB5F.tmp
2023-11-26 15:04 - 2023-11-26 15:04 - 000004991 _____ C:\Users\Renate\Downloads\Bereit-zum-Aufbruch---1.-Adventsonntag-2013.pdf
2023-11-26 13:00 - 2023-11-26 13:00 - 000059569 _____ C:\Users\Renate\Downloads\5232xxxxxxxx9400_Abrechnung_vom_17_10_2023_*****.PDF
2023-11-26 12:10 - 2023-11-26 12:10 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctD0AE.tmp
2023-11-26 12:10 - 2023-11-26 12:10 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctB21A.tmp
2023-11-26 10:30 - 2023-11-26 10:30 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctF5B3.tmp
2023-11-25 10:25 - 2023-11-25 10:25 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wctB49E.tmp
2023-11-25 10:25 - 2023-11-25 10:25 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wct9465.tmp
2023-11-25 10:25 - 2023-11-25 10:25 - 000075698 _____ C:\Users\Renate\AppData\Local\Temp\wct9464.tmp
2023-11-24 18:35 - 2023-11-24 18:35 - 000376386 _____ C:\Users\Renate\AppData\Local\Temp\tmp-wj6.xpi
2023-11-24 15:24 - 2023-11-24 15:24 - 000517440 _____ C:\Users\Renate\Downloads\2023.10.04-AngebotBriefbogenBrückner.pdf
2023-11-24 15:18 - 2023-11-24 15:18 - 000014850 _____ C:\Users\Renate\Downloads\Mappe1(1).xlsx
2023-11-24 13:53 - 2023-11-24 13:53 - 000016044 _____ C:\Users\Renate\Downloads\04.10.23_11.32_Anruf.07223288910.wav
2023-11-24 12:52 - 2023-11-24 12:52 - 014485862 _____ C:\Users\Renate\AppData\Local\Temp\tmpaddon-7
2023-11-24 12:52 - 2023-11-24 12:52 - 000491284 _____ C:\Users\Renate\AppData\Local\Temp\tmpaddon-6
2023-11-24 11:10 - 2023-11-24 11:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\msohtmlclip1
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD4E.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD3D.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD2B.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD2A.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD29.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD16.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAD15.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDACF2.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDACE0.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDACCE.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDACCD.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDACBC.tmp
2023-11-23 21:39 - 2023-12-01 11:09 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDAC8A.tmp
2023-11-22 23:08 - 2023-11-22 23:08 - 000168882 _____ C:\Users\Renate\Downloads\DB_Ticket_510805076913.pdf
2023-11-22 17:45 - 2023-11-22 17:45 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{728C5AAF-CF1C-4C40-8D54-5AAC0C176FCA}
2023-11-22 17:45 - 2023-11-22 17:45 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{2D291EF3-AF31-4F98-AFC2-B48089BB95D4}
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4E3A.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4E19.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4E18.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4E07.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4E06.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4DF2.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4DF1.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4DDE.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4DDC.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4D9C.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4D9B.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4D88.tmp
2023-11-22 17:43 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4D87.tmp
2023-11-22 17:43 - 2023-11-22 17:43 - 000019338 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2023-2.wbk
2023-11-22 17:42 - 2023-11-22 17:42 - 000015824 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2024.wbk
2023-11-22 17:19 - 2023-12-04 07:39 - 000002028 _____ C:\Users\Renate\AppData\Local\Temp\drive_fs_trace
2023-11-21 21:26 - 2023-11-21 21:26 - 000183683 _____ C:\Users\Renate\Downloads\Kundenrechnung_01125_200774256-A.pdf
2023-11-21 18:13 - 2023-11-30 13:41 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\msedge_url_fetcher_12224_143498416
2023-11-20 18:22 - 2023-11-20 18:22 - 000331221 _____ C:\Users\Renate\Downloads\2022-03-03_2022-033_GiPP_AoS_Teilrechnung_1-1.pdf
2023-11-20 18:21 - 2023-11-20 18:22 - 000324344 _____ C:\Users\Renate\Downloads\2022-09-30_2022-161_GiPP_AoS.pdf
2023-11-20 17:32 - 2023-11-20 17:32 - 000080673 _____ C:\Users\Renate\Downloads\GIPP Einnahmen-Ausgaben 2022(1).xlsx
2023-11-20 17:31 - 2023-11-20 17:31 - 000019001 _____ C:\Users\Renate\Downloads\Mappe1.xlsx
2023-11-20 17:16 - 2023-11-20 17:16 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\PowerQuery
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wctE69C.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wctD0B0.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wctB661.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wctA69E.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wct9A81.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wct5F44.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wct3887.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wct274E.tmp
2023-11-20 17:02 - 2023-11-20 17:02 - 000000899 _____ C:\Users\Renate\AppData\Local\Temp\wct13FA.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC362.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC351.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC330.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC31F.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC31E.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC31C.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC30A.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC307.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC2F7.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC2F5.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC2F3.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC2E0.tmp
2023-11-19 17:50 - 2023-11-28 08:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDC29F.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFCD9.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFCB8.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC97.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC86.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC75.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC74.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC72.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC61.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC4C.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC3B.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC3A.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC18.tmp
2023-11-17 18:19 - 2023-11-25 00:58 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDFC17.tmp
2023-11-16 09:55 - 2023-11-16 09:55 - 000029562 _____ C:\Users\Renate\Downloads\RM-Weine-Angebot(1).odt
2023-11-15 14:30 - 2023-11-15 14:30 - 000016240 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2023-11-15 14:23 - 2023-11-15 14:25 - 000000000 ___HD C:\$WinREAgent
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE771.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE76F.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE76E.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE76D.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE759.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE758.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE746.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE735.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE734.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE720.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE6EF.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE6EE.tmp
2023-11-14 21:11 - 2023-11-22 18:10 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCDE6ED.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD42BA.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4299.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4298.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4297.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4286.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4271.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD4250.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD424F.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD423E.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD422B.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD420A.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD41E8.tmp
2023-11-12 13:06 - 2023-11-19 16:38 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD41E7.tmp
2023-11-10 21:41 - 2023-11-10 21:41 - 000029478 _____ C:\Users\Renate\Downloads\Sicherungskopie von Protokoll VS 20231104_intern.wbk
2023-11-10 20:39 - 2023-11-10 20:40 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen-1.pdf
2023-11-09 10:39 - 2023-11-09 10:39 - 001447721 _____ C:\Users\Renate\Downloads\12557.pdf
2023-11-09 10:38 - 2023-11-09 10:38 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen.pdf
2023-11-09 10:23 - 2023-11-09 10:23 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{87F68EBA-CB91-4F56-A8F4-0A821E659A56}
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6C5D.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6C4B.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6C39.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6BE9.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6BB8.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6BA7.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6B86.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6B55.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6B43.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6B12.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6AF1.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6AD0.tmp
2023-11-09 09:53 - 2023-11-17 16:06 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD6ABE.tmp
2023-11-09 09:53 - 2023-11-09 09:53 - 000024331 _____ C:\Users\Renate\AppData\Local\Temp\prep_96b416466a7587ae7f08860fbc72_PackageResources_index_win32_bundle_V8_perf.cache
2023-11-09 09:53 - 2023-11-09 09:53 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\{9BDC1C1D-1AE9-4E91-9C2A-E823F1A62783}
2023-11-05 07:35 - 2023-12-05 21:47 - 001697472 _____ C:\Users\Renate\AppData\Local\Temp\bc3902d8132f43e3ae086a009979fa88.db-wal
2023-11-05 07:35 - 2023-12-05 17:24 - 000032768 _____ C:\Users\Renate\AppData\Local\Temp\bc3902d8132f43e3ae086a009979fa88.db-shm

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-05 22:01 - 2022-05-07 06:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-12-05 22:01 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-12-05 21:55 - 2021-06-02 08:45 - 000000000 ___SD C:\Users\Renate\AppData\Roaming\Microsoft\Credentials
2023-12-05 21:52 - 2020-12-25 09:40 - 000000000 ___RD C:\Program Files (x86)\Online Services
2023-12-05 21:39 - 2023-05-11 23:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2023-12-05 21:39 - 2021-08-08 11:54 - 000000000 ____D C:\Users\Renate\AppData\Roaming\NCH Software
2023-12-05 21:39 - 2021-08-08 11:54 - 000000000 ____D C:\ProgramData\NCH Software
2023-12-05 21:38 - 2023-05-11 19:46 - 000000000 ____D C:\Users\Renate
2023-12-05 21:36 - 2022-11-15 10:32 - 000000000 ____D C:\ProgramData\Wondershare
2023-12-05 21:36 - 2022-11-15 10:32 - 000000000 ____D C:\Program Files\Wondershare
2023-12-05 21:31 - 2023-06-10 19:23 - 000000000 ____D C:\Program Files (x86)\Google
2023-12-05 21:31 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-12-05 20:55 - 2023-05-11 22:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-12-05 20:55 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Word
2023-12-05 18:55 - 2021-06-06 13:45 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Excel
2023-12-05 18:50 - 2023-05-12 10:08 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\Outlook Logging
2023-12-05 18:24 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-05 18:24 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-12-05 18:21 - 2020-12-25 09:33 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-05 18:21 - 2020-12-25 09:33 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-12-05 17:31 - 2023-05-12 10:12 - 001774666 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-12-05 17:31 - 2023-05-12 10:07 - 000000053 _____ C:\Users\Renate\AppData\Local\Temp\.ses
2023-12-05 17:31 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-12-05 17:24 - 2023-10-13 02:27 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-12-05 17:24 - 2023-05-11 23:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-12-05 17:24 - 2020-05-06 09:58 - 000012288 ___SH C:\DumpStack.log.tmp
2023-12-04 20:03 - 2022-05-07 06:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-04 20:03 - 2022-05-07 06:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-12-04 19:31 - 2016-09-10 14:38 - 000000000 ____D C:\Users\Renate\Documents\noten
2023-12-04 03:01 - 2023-06-10 19:23 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Slides.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Sheets.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002075 _____ C:\Users\Renate\Desktop\Google Docs.lnk
2023-12-04 01:21 - 2023-10-25 16:16 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\ECSCache
2023-12-04 01:21 - 2021-06-03 08:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-12-04 01:19 - 2022-02-12 17:02 - 000000000 ____D C:\Users\Renate\AppData\Roaming\PriceWatch
2023-12-04 01:06 - 2023-01-31 17:58 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\MMC
2023-12-04 01:03 - 2021-06-03 08:38 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-12-04 01:02 - 2022-11-15 10:30 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2023-12-04 00:56 - 2021-08-13 08:17 - 000000000 ____D C:\Users\Renate\AppData\Roaming\DVDVideoSoft
2023-12-04 00:50 - 2021-08-13 08:18 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2023-11-30 12:58 - 2023-06-10 19:23 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-11-30 12:58 - 2023-06-10 19:23 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-11-28 18:10 - 2023-05-11 15:27 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-11-28 18:10 - 2016-09-10 12:09 - 000002386 _____ C:\Users\Renate\Documents\Default.rdp
2023-11-26 12:25 - 2016-09-10 12:14 - 000000000 ____D C:\Users\Renate\Documents\1-paarsynthese
2023-11-22 18:10 - 2023-10-02 16:20 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\RarSFX0
2023-11-21 15:41 - 2016-09-10 14:40 - 000000000 ____D C:\Users\Renate\Documents\renate
2023-11-21 08:31 - 2023-05-11 23:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2023-05-11 23:01 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2021-06-02 08:45 - 000002405 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-20 19:02 - 2021-06-04 12:55 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Zoom
2023-11-19 19:49 - 2021-06-06 21:34 - 000000000 ____D C:\Users\Renate\Documents\Benutzerdefinierte Office-Vorlagen
2023-11-18 22:49 - 2020-12-25 09:41 - 000000000 ____D C:\Program Files\Microsoft Office
2023-11-18 20:41 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Office
2023-11-16 09:42 - 2022-03-28 20:42 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Teams
2023-11-15 23:38 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-11-15 23:38 - 2021-04-09 06:23 - 000000000 ____D C:\ProgramData\Packages
2023-11-15 22:47 - 2023-05-11 22:56 - 000617264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-11-15 22:46 - 2023-10-13 02:27 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\TextInput
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\HoloShell
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\system32\de
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2023-11-15 22:46 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2023-11-15 14:39 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-11-15 14:38 - 2022-05-07 11:39 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000076800 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2023-11-15 14:31 - 2023-05-11 22:56 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-11-15 13:39 - 2021-06-02 09:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-11-15 13:35 - 2021-06-02 09:01 - 182871392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-11-12 20:35 - 2023-10-29 15:54 - 000002426 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams classic (work or school).lnk
2023-11-10 23:24 - 2016-09-10 14:32 - 000000000 ____D C:\Users\Renate\Documents\kess
2023-11-10 19:06 - 2023-05-11 23:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2023-11-10 13:49 - 2023-05-12 13:32 - 000024576 _____ C:\Users\Renate\AppData\Local\Temp\bc3902d8132f43e3ae086a009979fa88.db
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD991.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD971.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD960.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD95F.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD94F.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD94E.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD93B.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD93A.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD929.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD926.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD924.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD923.tmp
2023-11-10 13:40 - 2023-11-02 10:47 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD922.tmp
2023-11-10 13:39 - 2021-06-02 09:09 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9AC6.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9AB5.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9AA3.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A91.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A80.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A7F.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A6D.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A5A.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A59.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A37.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A36.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A26.tmp
2023-11-07 08:33 - 2023-10-29 18:18 - 000000000 ____D C:\Users\Renate\AppData\Local\Temp\TCD9A12.tmp
2023-11-07 07:54 - 2020-05-06 09:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-06-27 21:03 - 2023-06-27 21:03 - 000646409 _____ () C:\Users\Renate\AppData\Roaming\PhotoPad.dmp

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 05-12-2023
durchgeführt von Reni (05-12-2023 22:04:55)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS
Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) (2023-05-12 09:05:25)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-350907512-2396985161-2789647329-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-350907512-2396985161-2789647329-503 - Limited - Disabled)
Gast (S-1-5-21-350907512-2396985161-2789647329-501 - Limited - Disabled)
Reni (S-1-5-21-350907512-2396985161-2789647329-1002 - Administrator - Enabled) => C:\Users\Renate
WDAGUtilityAccount (S-1-5-21-350907512-2396985161-2789647329-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3D Youtube Downloader (x64) (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\3D Youtube Downloader (x64)) (Version: 1.19.10 - 3DYD Soft)
Anti-Twin (Installation 12.02.2022) (HKLM-x32\...\Anti-Twin 2022-02-12 17.02.50) (Version:  - Joerg Rosenthal, Germany)
Avidemux VC++ 64bits (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\{4df48f2d-e600-48f8-b9af-61a33d4a23c8}) (Version: 2.8.0 - Mean)
Captura v8.0.0 (HKLM-x32\...\{C1670C5E-5042-4300-9491-6BFFF963823F}_is1) (Version: 8.0.0 - Mathew Sachin)
Easy Poster Printer (HKLM-x32\...\{085AFF3B-459B-4B8D-9366-F2DC4452D73B}) (Version: 6.8.0 - GD Software)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 84.0.11.0 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
gTool 1.8.8 (HKLM-x32\...\gTool_is1) (Version: 1.8.8 - Shaw Computerhard- & Software)
HP Audio Switch (HKLM-x32\...\{0B1DA73D-0562-4DE1-B942-CEF286CF2EDD}) (Version: 1.0.211.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.19.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Software Framework (HKLM-x32\...\{71E18A14-1BDB-4B58-A67F-1BCDA12462FD}) (Version: 7.1.15.1 - HP)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.16924.20150 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.16924.20150 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 119.0.2151.97 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 119.0.2151.97 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\OneDriveSetup.exe) (Version: 23.226.1031.0003 - Microsoft Corporation)
Microsoft Teams classic (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Teams) (Version: 1.6.00.29964 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27033 (HKLM-x32\...\{624ba875-fdfc-4efa-9c66-b170dfebc3ec}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27033 (HKLM-x32\...\{88D1025F-45D0-45C6-9EDB-379C2EE07AD7}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27033 (HKLM-x32\...\{D5AEE36E-4771-4F65-BDB6-8C59077BFBE4}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.29.00.03 - Huawei Technologies Co.,Ltd)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 120.0.1 (x64 de)) (Version: 120.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 89.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.16924.20124 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.16924.20150 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.16924.20088 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{7F556477-50F2-4BCC-AFA7-2A3C09B57149}) (Version: 5.0.7 - dotPDN LLC)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WatchGuard Mobile VPN with SSL client 12.10 (HKLM-x32\...\Mobile VPN with SSL client_is1) (Version: 12.10 - WatchGuard)
WhatsApp (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\WhatsApp) (Version: 2.2246.10 - WhatsApp)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Windows-Treiberpaket - Siemens Home and Office Communication Devices GmbH & Co. KG (GigasetGenericUSB_x64) Ports  (07/29/2008 1.70.10.0) (HKLM\...\E2ABB6D1E5898C43D3B6894FDDF34AEEEE613B95) (Version: 07/29/2008 1.70.10.0 - Siemens Home and Office Communication Devices GmbH & Co. KG)
WISO EÜR+Kasse 2020 (HKLM-x32\...\{80AB89B6-9F41-4678-9FE3-6E35ED3B3FB5}) (Version: 27.12.2340 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2021 (HKLM-x32\...\{06FC0205-0F50-40B9-93A3-FD5197E8FAA8}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2022 (HKLM-x32\...\{E6D7FE1F-EA01-49F3-8454-AB80264C32D7}) (Version: 29.06.3060 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2023 (HKLM-x32\...\{B865CD06-A706-4EC9-AC0C-EE0582A698AB}) (Version: 30.03.3240 - Buhl Data Service GmbH)
WISO Steuer 2023 (HKLM-x32\...\{AD2B6C70-B157-4EF3-A864-E35EDAC38601}) (Version: 30.10.3890 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2021 (HKLM-x32\...\{11CDC23E-8AFC-4FFA-B0FE-19BBBA06723E}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2022 (HKLM-x32\...\{4233BA02-9B3B-4658-9E59-5E0B10DA8720}) (Version: 29.10.3460 - Buhl Data Service GmbH)
Zoom (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\ZoomUMX) (Version: 5.15.7 (20303) - Zoom Video Communications, Inc.)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m [2023-07-30] (Advanced Micro Devices Inc.) [Startup Task]
B＆O Audio Control -> C:\Program Files\WindowsApps\AD2F1837.BOAudioControl_1.40.284.0_x64__v10z8vjag6ke6 [2023-08-13] (HP Inc.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.700.323.0_x64__8wekyb3d8bbwe [2023-11-22] (Microsoft Corporation)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2023-11-21] (HP Inc.)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-01-11] (Microsoft Corporation)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.4.0.0_x64__v10z8vjag6ke6 [2023-10-20] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2023-08-15] (HP Inc.)
HP QuickDrop -> C:\Program Files\WindowsApps\AD2F1837.HPQuickDrop_2.5.10921.0_x64__v10z8vjag6ke6 [2023-05-12] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-11-14] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.31.22.0_x64__v10z8vjag6ke6 [2023-11-07] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6 [2023-10-04] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-07-25] (Microsoft Corporation)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2310.10002.0_x64__8wekyb3d8bbwe [2023-10-12] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-10-13] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21027.539.0_x64__8wekyb3d8bbwe [2023-10-30] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2023-07-13] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2023-11-15] (Microsoft Corporation)
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6 [2023-11-10] (HP Inc.) [Startup Task]
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.57.0_x64__sbe4t8mqwq93a [2023-11-09] (NG PDF Lab) [Startup Task]
Solitär -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.14.0_x64__kx24dqmazqk8j [2023-12-01] (Random Salad Games LLC)
Speech Pack - German (Germany) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.de-DE.1_1.0.5.0_x64__cw5n1h2txyewy [2023-10-23] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2023-11-15] (Microsoft Corporation)
Wissen 21 -> C:\Program Files\WindowsApps\E717D397.Wissen21_18.4.7170.27434_neutral__n8kcsh5n6mr4c [2022-10-11] (prosozial GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Renate\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.23270.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Renate\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> Keine Datei
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} =>  -> Keine Datei

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2023-09-17 00:34 - 2023-09-17 00:34 - 000138240 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\f712706f64865098201219e2b0307dbc\Interop.IWshRuntimeLibrary.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000139776 _____ (hardcodet.net) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\939f51bd30c5e2e78302a06a4cb15fa7\Hardcodet.Wpf.TaskbarNotification.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 001716224 _____ (Mark Heath & Contributors) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\412c0cf0abd23e376935d6442bb3a6fb\NAudio.ni.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 003088896 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\94180e3729222bb20299a7ac8a678eb5\Newtonsoft.Json.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000780288 _____ (The Apache Software Foundation) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\c377668f29dbaaf78dee5dcb284c52f3\log4net.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10118__210808__yaie
SearchScopes: HKLM -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-10-30] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-10-30] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-10-30] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\.DEFAULT\...\webcompanion.com -> hxxp://webcompanion.com
IE trusted site: HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\webcompanion.com -> hxxp://webcompanion.com

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2021-07-07 17:27 - 2022-03-20 17:01 - 000000444 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
92.168.137.1 LAPTOP-UP7T5C9F.mshome.net # 2026 7 1 6 16 27 12 259

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "UniConverterUpdateHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\StartupApproved\Run: => "OneDrive"
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\StartupApproved\Run: => "Web Companion"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{E9E2D074-3623-44AB-8704-420BE9080C0E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6706475D-EEA8-41DA-A6AF-7B9C899D13FA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FB8BE7CE-6836-4EAB-B4A5-16BE3F8DAF35}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95F00BAF-78E0-40D2-B7E9-59D096D268D8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5361C9C8-B9F5-437A-98C4-C734E1BCA183}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{66EFE8CF-D133-47E0-8BD3-2667898C07CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9447F732-042B-4570-985B-4F71890C4DE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{C940D831-A431-4BDC-A7A4-94198727745B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8B3B46A1-1913-4DF4-A779-7A910C321281}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CA25381-EF43-4A4A-86D7-3D0E61887D31}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7C29AB0A-9582-4084-AEEF-2AFE672DA11C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{88606089-C41D-49BE-A262-6642A84D4E15}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{B1A8CAF9-C469-44E0-B18D-1552957B9B58}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{292FE6C2-74A6-4775-B2E7-3072BA00E197}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6E506EC2-C0E2-4173-8147-900B7F3D8D46}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{D2B3D828-8EC8-44ED-A744-D6D4ABB6D8E9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9230B6E6-DC68-4862-8192-AE34685C1120}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{A5F99B48-00AA-413D-AF04-14A959C41813}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3294DCBE-76A9-45BA-96AD-1B891FB323B4}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{120C830B-E339-4133-8575-7AA6740C1F4E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F7DE4683-625C-4A2D-A1B6-A354AF26E293}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{CB978C4B-F166-44DD-9E81-1365C3BDC686}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{4DBC80C4-8CA7-4AF7-9A29-3AFA6DF3B068}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7E1196B3-C02C-453E-AF47-B20B4466BD98}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{85B6B163-6712-4588-A054-4839E8FFE6B0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{388DF2E6-160F-4C70-A379-36C29B0A16C4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7BB5F2D4-ACBD-4CB5-A3FF-4BA73BD25FD0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{54D5A1C0-98BC-4849-BA93-6DD24E0F7584}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9CB439DD-9082-47BE-B59D-7BFF6154E630}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{07A62B29-D805-492B-B3D8-3010A5AD5C8F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{EA475618-A60F-4AC4-97EF-A596A3C55680}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [UDP Query User{DB9CA146-619D-4793-9751-3EA1DBB94A2D}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8D555FCA-7085-4BF7-AA91-D4AD591C8514}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5D6CD05E-B8F3-4BAD-9C91-2BD1F56B15EB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5EF75767-0357-44D4-9919-1BB53B67D4AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{3D0BD166-D866-48AC-8D00-BC5612CB262A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F90B5708-4EFE-4EC4-B127-99A3CBA8EA6B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FBB6FC8D-DEB0-41CA-8E37-FE546B060B72}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95AA6E71-A18E-4B01-9195-A00E127F8D2B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1A89935C-A603-468D-85AF-10FD4983ED75}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{E5B659E1-D32C-40C1-9399-7F0A48F5C0AB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{78C9F8FD-1671-47B3-9010-67CCA13DFCBF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1BC291D0-236C-4634-9AED-104316FBF56D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8975A4D1-07BF-466F-BB00-5FE940B77C99}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CD224CE-A596-4B9E-8977-1DDF26FDF874}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{23205541-28FF-4D9B-9239-6369B13A4FAA}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{CD268FD3-40A8-40C2-9124-CD4774DD3A29}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{FB50F9BA-8FF4-495B-9F1F-9D9FE2ADAD09}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{7A517224-2D60-410E-BE14-4EE20459B0B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{64085C17-619A-4DDA-97B3-BDD83EED2750}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{57254250-3AF4-4974-91D4-E2C982A9CC31}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{BA052953-1607-436E-97A7-436BAEF9A0C9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{74B43660-7BE0-43AF-A911-C4A5B58C7A3D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8EAD8BA1-7239-41B4-B2C2-37FD98A16660}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{E7F79D37-57F4-4F4D-B311-D52A4F4FA0F7}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CEE0BA56-6F18-4B7B-A752-9ED0E78EB6BF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{34B4F9FF-3708-461D-9DEF-304EE2659C87}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{F98BB66E-8DC8-42A7-9C7D-598B38961B3A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{1F497557-73C7-4C6B-B0C3-34D74FA8E036}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4FAB8486-66F1-4647-9F51-03462EADAF9D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{031CF13A-2D04-4C34-B01B-66F829E8BC10}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{DD20C7D0-DA9D-40BA-860F-698A0B9B1B55}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{3C7A0F64-EA11-4397-812B-CEF5DEDF5B79}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{6C1A36AC-7DD0-4AF0-9E4C-EB831E7A9BBB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{4A61C91B-D14E-4764-8486-61E77E3AF8B4}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{08222135-8D64-4C91-B7C0-D17F5610B088}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{477FD66A-08B5-4475-B309-8F8214AF3C3C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{ED2EF36D-B424-4689-A352-EDDDB59A8BD5}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5E2EE7C9-074C-459B-933E-0A33D633D951}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{66464860-6A39-4ED7-A774-B7D019C97E7A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{33F0A59E-1D22-4730-9F9A-794A12DD50CB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D45FA75F-3C9D-4A8C-A1DC-993F938944BA}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7132A558-0398-43A6-993D-5F4479E3675B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{264F015E-5B19-4DFC-804A-EE3CCD16EE52}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{EC409102-6AB2-414B-8B32-56AB1744596A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5FD98FFE-2E98-454A-8B32-A9644A263029}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8C92EEA5-333E-49EE-A349-375BC65B6F43}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{94A1A8E2-1F90-4768-91A8-C76D60E76AC1}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{F73A060A-1EA8-45D1-86F5-08314332815D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{69FE13B3-0EB8-4679-A1CC-07223C4BE249}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [TCP Query User{DA4898AD-D221-4E71-8CC7-31BD2EE11047}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [UDP Query User{6D7A1A74-61B5-4C7C-9CDB-178D82BB685C}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [{7BE08E55-754E-4D0A-BDDF-26B15277140B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{668E0FF0-63BF-4462-A256-7958CE4E33D9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{80492833-0AA6-462D-9C4D-E5848DF4EB7B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{FA536B33-643E-491B-BF03-197731165E8A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.107.3215.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{E3D8FA1F-3D00-4C85-A30E-DF98BBDC136F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BA10B6DA-C23B-428C-A33D-EEA09BA832C7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FC674D54-E561-45F9-A9FE-1D7983077B85}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)

==================== Wiederherstellungspunkte =========================

01-12-2023 23:11:22 Windows Update
01-12-2023 23:11:27 Windows Update

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (12/05/2023 05:31:33 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/05/2023 05:24:51 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/04/2023 08:06:38 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/04/2023 06:10:09 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/04/2023 01:21:54 AM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/03/2023 09:17:04 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/02/2023 11:18:25 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/01/2023 03:52:35 PM) (Source: Application Error) (EventID: 1000) (User: LAPTOP-UP7T5C9F)
Description: Name der fehlerhaften Anwendung: SecHealthUI.exe, Version: 10.0.25873.1001, Zeitstempel: 0x6f37102f
Name des fehlerhaften Moduls: SecHealthUIDataModel.dll, Version: 10.0.25873.1001, Zeitstempel: 0xdfce6c6f
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00000000000179f4
ID des fehlerhaften Prozesses: 0x0x18b8
Startzeit der fehlerhaften Anwendung: 0x0x1da24401937614a
Pfad der fehlerhaften Anwendung: C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
Pfad des fehlerhaften Moduls: C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUIDataModel.dll
Berichtskennung: 62884250-ccb2-4552-97c3-7cde90093bcd
Vollständiger Name des fehlerhaften Pakets: Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: SecHealthUI


Systemfehler:
=============
Error: (12/05/2023 05:26:59 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/05/2023 05:24:20 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎04.‎12.‎2023 um 21:46:14 unerwartet heruntergefahren.

Error: (12/05/2023 05:24:06 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 3221225684Bei der Verarbeitung der Wiederherstellungsdaten ist ein schwerwiegender Fehler aufgetreten.

Error: (12/04/2023 08:08:26 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{8CFC164F-4BE5-4FDD-94E9-E2AF73ED4A19}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/04/2023 08:03:30 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Fehler "1115" in DCOM, als der Dienst "UsoSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{B91D5831-B1BD-4608-8198-D72E155020F7}

Error: (12/04/2023 08:03:30 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)
Description: Fehler "1115" in DCOM, als der Dienst "UsoSvc" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:
{B91D5831-B1BD-4608-8198-D72E155020F7}

Error: (12/04/2023 08:03:25 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/04/2023 08:03:25 PM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================
Date: 2023-12-04 19:52:05
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6B0E017C-3DB9-4C1D-84B3-C81BAABCBE8F}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-03 09:17:04
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {99D4B684-1697-48C8-9EE6-0D841E688882}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-02 09:00:48
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2CB628CE-8FEC-4D5E-B104-0AA64E917815}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-01 15:41:03
Description: 
Microsoft Defender Antivirus hat Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Misleading:Win32/Lodi&threatid=240849&enterprise=0
Name: Misleading:Win32/Lodi
Schweregrad: Hoch
Kategorie: Adware
Pfad: containerfile:_C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe; file:_C:\ProgramData\DigitalWave.ApplicationUpdater_files\install_app_15.exe->(inno#000112)
Erkennungsursprung: Lokaler Computer
Erkennungstype: Konkret
Erkennungsquelle: Benutzer
Benutzer: LAPTOP-UP7T5C9F\Reni
Prozessname: Unknown
Sicherheitsversion: AV: 1.401.1462.0, AS: 1.401.1462.0, NIS: 1.401.1462.0
Modulversion: AM: 1.1.23100.2009, NIS: 1.1.23100.2009 

Date: 2023-11-28 08:53:24
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {8A37C76B-2B83-4F37-A162-37B7E1E99D20}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2023-08-25 03:33:02
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x80004005
Fehlerbeschreibung: Unbekannter Fehler 
Ursache: Die Elementenüberprüfung des Filtertreibers wurde übersprungen, und er befindet sich nun im Durchleitungsmodus. Dies ist möglicherweise auf Ressourcenmangel zurückzuführen. 

Date: 2023-08-13 00:03:05
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen.
Dateiname: C:\Windows\System32\spool\drivers\x64\3\New\FXSUI.DLL
Sha256: 1e264c6623302db746513f7670469603404b59d89cc93a28164437b1e7ced5b6
Aktuelle Sicherheitsversion: AV: 1.395.249.0, AS: 1.395.249.0
Aktuelle Modulversion: 1.1.23070.1005
Fehlercode: 0x80508016
 

Date: 2023-06-28 00:29:52
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.391.2789.0;1.391.2789.0
Modulversion: 1.1.23050.3 

Date: 2023-05-12 00:01:14
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Sicherung
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.389.883.0;1.389.883.0
Modulversion: 1.1.20300.3 

Date: 2023-05-12 00:01:10
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80070003
Fehlerbeschreibung: Das System kann den angegebenen Pfad nicht finden. 
Security Intelligence-Version: 0.0.0.0;0.0.0.0
Modulversion: 0.0.0.0 

CodeIntegrity:
===============
Date: 2023-12-04 19:52:05
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2023-12-04 19:30:33
Description: 
Windows blocked file \Device\HarddiskVolume3\Windows\System32\scrobj.dll which has been disallowed for protected processes. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.26 07/04/2023
Hauptplatine: HP 88D0
Prozessor: AMD Ryzen 5 5500U with Radeon Graphics 
Prozentuale Nutzung des RAM: 56%
Installierter physikalischer RAM: 15693.96 MB
Verfügbarer physikalischer RAM: 6857.84 MB
Summe virtueller Speicher: 37197.96 MB
Verfügbarer virtueller Speicher: 22855.98 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.99 GB) (Free:125.98 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) (Protected) NTFS
Drive g: (Google Drive) (Fixed) (Total:15 GB) (Free:13.86 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) FAT32

\\?\Volume{c60e7d4e-a73b-4499-a0e5-025e4f991b45}\ () (Fixed) (Total:0.67 GB) (Free:0.07 GB) NTFS
\\?\Volume{19290398-fefe-4918-9431-745f82246ade}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: CA275C3D)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

adwCleaner

Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei in CODE-Tags.

adwcleaner zwecks Kontrolle bitte wiederholen, falls es Funde gab.

Ebenfalls erledigt, hier die Log.
3 vorinstallierte HP Tools habe ich nicht in die Quarantäne verschieben lassen, da sie für mich im ersten Moment als eher nützlich klangen: HPAudioSwitch, HPSupportAssistant, HPSureConnect


1. Lauf

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    12-06-2023
# Duration: 00:00:02
# OS:       Windows 11 (Build 22621.2715)
# Cleaned:  21
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

Deleted       C:\ProgramData\Application Data\Lavasoft\Web Companion

***** [ Files ] *****

Deleted       C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\invalidprefs.js

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

Deleted       HKCU\Software\Lavasoft\Web Companion
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|Web Companion
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted       HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Web Companion
Deleted       HKLM\Software\Wow6432Node\Lavasoft\Web Companion
Deleted       HKLM\System\Setup\FirstBoot\Services\WCAssistantService
Deleted       HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com
Deleted       HKU\.DEFAULT\Software\Mozilla\NativeMessagingHosts\com.webcompanion.native
Deleted       HKU\S-1-5-18\SOFTWARE\Mozilla\NativeMessagingHosts\com.webcompanion.native
Deleted       HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\webcompanion.com

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

Deleted       My Firefox Search
Deleted       My Firefox Search

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPCleanFLC   Registry   HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run|HPSEU_Host_Launcher
Deleted       Preinstalled.HPCleanFLC   Registry   HKCU\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted       Preinstalled.HPCleanFLC   Registry   HKU\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted       Preinstalled.HPCleanFLC   Registry   HKU\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run|HPSEU_Host_Launcher
Deleted       Preinstalled.HPRegistrationService   Folder   C:\ProgramData\HP\HP REGISTRATION SERVICE
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT
Deleted       Preinstalled.HPTouchpointAnalyticsClient   Registry   HKLM\Software\Microsoft\Windows\CurrentVersion\Uninstall\{E5FB98E0-0784-44F0-8CEC-95CD4690C43F}


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5410 octets] - [06/12/2023 21:29:15]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C00].txt ##########
         

2. Lauf, doch HPTouchpointAnalyticsClient scheint nicht vollständig entfernt werden zu können. Der Ordner bleibt bestehen.

# -------------------------------
# Malwarebytes AdwCleaner 8.4.0.0
# -------------------------------
# Build:    08-30-2022
# Database: 2023-07-19.3 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Clean
# -------------------------------
# Start:    12-06-2023
# Duration: 00:00:00
# OS:       Windows 11 (Build 22621.2715)
# Cleaned:  1
# Failed:   0


***** [ Services ] *****

No malicious services cleaned.

***** [ Folders ] *****

No malicious folders cleaned.

***** [ Files ] *****

No malicious files cleaned.

***** [ DLL ] *****

No malicious DLLs cleaned.

***** [ WMI ] *****

No malicious WMI cleaned.

***** [ Shortcuts ] *****

No malicious shortcuts cleaned.

***** [ Tasks ] *****

No malicious tasks cleaned.

***** [ Registry ] *****

No malicious registry entries cleaned.

***** [ Chromium (and derivatives) ] *****

No malicious Chromium entries cleaned.

***** [ Chromium URLs ] *****

No malicious Chromium URLs cleaned.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries cleaned.

***** [ Firefox URLs ] *****

No malicious Firefox URLs cleaned.

***** [ Hosts File Entries ] *****

No malicious hosts file entries cleaned.

***** [ Preinstalled Software ] *****

Deleted       Preinstalled.HPTouchpointAnalyticsClient   Folder   C:\ProgramData\HP\HP TOUCHPOINT ANALYTICS CLIENT


*************************

[+] Delete Tracing Keys
[+] Reset Winsock

*************************

AdwCleaner[S00].txt - [5410 octets] - [06/12/2023 21:29:15]
AdwCleaner[C00].txt - [3513 octets] - [06/12/2023 21:37:17]
AdwCleaner[S01].txt - [3529 octets] - [06/12/2023 21:40:20]
AdwCleaner[S02].txt - [3590 octets] - [06/12/2023 21:42:26]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[C02].txt ##########
         

Dann jetzt neue FRST-Logs.

Neue Entwicklung in der "Hacking" Sache: Heute kam ein Brief vom Internet-Provider/E-Mail Anbieter, dass die Identität im Internet zum Verkauf angeboten wird. Da ist also definitiv etwas schief gegangen resp. auf dem PC gewesen. Kann das wirklich "Lodi" gewesen sein, oder muss da tiefer gegraben werden?

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 08-12-2023
durchgeführt von Reni (Administrator) auf LAPTOP-UP7T5C9F (HP HP Pavilion Laptop 15-eh1xxx) (08-12-2023 23:26:28)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS\FRST64.exe
Geladene Profile: Reni
Plattform: Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: FF
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe
(0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe
(C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\84.0.11.0\crashpad_handler.exe
(C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSServ.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\AMDRSSrcExt.exe
(C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\RadeonSoftware.exe ->) (0A0B0503-04C2-4CCF-9BC2-4F164DC80FEE -> Advanced Micro Devices, Inc.) C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m\radeonsoftware\cncmd.exe
(C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe <18>
(DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\BridgeCommunication.exe
(ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.) C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6\SystemEventUtility\HPSystemEventUtilityHost.exe
(explorer.exe ->) (Google LLC -> Google, Inc.) C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE
(explorer.exe ->) (Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <38>
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <7>
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Windows\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe <3>
(sihost.exe ->) (614A9D21-6F29-4C9D-9F7D-FF59321D9E5F -> ) C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.58.0_x64__sbe4t8mqwq93a\FileWatcher\FileWatcher.exe
(sihost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\win32\DesktopExtension.exe
(sihost.exe ->) (Skype Software Sarl -> Skype Technologies S.A.) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.109.3209.0_x64__kzf8qxf38zg5c\Skype\Skype.exe <5>
(svchost.exe ->) (ED346674-0FA1-4272-85CE-3187C9C86E26 -> ) C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6\HP.myHP.exe
(svchost.exe ->) (HP Inc. -> HP Inc.) C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2311.1001.7.0_x64__8wekyb3d8bbwe\XboxGameBarWidgets.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2311.1001.7.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.25873.9001.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21750.0_x64__8wekyb3d8bbwe\HxOutlook.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.14326.21750.0_x64__8wekyb3d8bbwe\HxTsr.exe
(svchost.exe ->) (Microsoft Windows -> ) C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_423.30700.0.0_x64__cw5n1h2txyewy\Dashboard\WidgetService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <3>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wksprt.exe
(svchost.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\System32\SecurityHealth\1.0.2306.10002-0\SecurityHealthHost.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [UniConverterUpdateHelper] => C:\Program Files\Wondershare\Wondershare UniConverter 14 für Windows (Deutsch)\WSVCUUpdateHelper.exe (Keine Datei)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe (Keine Datei)
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-19\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-20\...\RunOnce: [OMENCC_InstallationBooster] => C:\system.sav\util\OMENCC_InstallationBooster.exe [16424 2020-03-07] (HP Inc. -> )
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Run: [MicrosoftEdgeAutoLaunch_EE3D941D252EFC82CBE181A727CE3B5C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3896768 2023-11-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\84.0.11.0\GoogleDriveFS.exe [58391840 2023-12-04] (Google LLC -> Google, Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] -> 
HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {48C50B49-7289-4258-9A7D-F3747E583C61} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {886550C5-9436-4728-AFDA-063D9F31266E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155592 2023-06-10] (Google LLC -> Google LLC)
Task: {D8927E6B-C827-4FEF-B0B0-031D4DE2B8EA} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ABO => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://ABO
Task: {477E220B-C6E3-45C1-860F-C4B04E8D0090} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusError
Task: {70274F36-4BB0-41D3-BAB3-56357B45DE9C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BatteryStatusTest => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BatteryStatusTest
Task: {FAEC61D5-8D0F-42AF-AC50-FED2AFDF0D62} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BCF => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BCF
Task: {CA3E9BC0-D17C-412F-8C39-8F9D202D3F0C} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM1 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM1
Task: {9D6EB3BE-87A3-42E4-A8FA-4709E667AEFC} - System32\Tasks\Hewlett-Packard\HP Diagnostics\BHM2 => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://BHM2
Task: {F91F6E92-C496-463B-BEA4-B1C20E34D2A4} - System32\Tasks\Hewlett-Packard\HP Diagnostics\LaunchUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://LaunchUI
Task: {E824681C-2C66-4254-8E91-E9C1671EA958} - System32\Tasks\Hewlett-Packard\HP Diagnostics\ShowUI => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags:
Task: {F9A446CB-178D-41AD-902D-66093BB1057B} - System32\Tasks\Hewlett-Packard\HP Diagnostics\SmartCheckError => C:\WINDOWS\system32\cmd.exe [323584 2023-11-15] (Microsoft Windows -> Microsoft Corporation) -> /c start hpdiags://SmartCheckError
Task: {161C8F21-4CE6-482F-B052-8B77C135DADC} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Assistant Update Notice => C:\Program Files (x86)\HP\HP Support Framework\Resources\BingPopup\BingPopup.exe [703536 2023-10-30] (HP Inc. -> HP Inc.)
Task: {2073484B-D5A3-479B-88D1-DB0F37B6455C} - System32\Tasks\Hewlett-Packard\HP Support Assistant\HP Support Solutions Framework Report => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPSFReport.exe [138328 2023-10-30] (HP Inc. -> HP Inc.)
Task: {EEECFCD3-FDF7-4265-8B9B-74CBFEEE28B0} - System32\Tasks\Hewlett-Packard\HP Support Assistant\WarrantyChecker_DeviceScan => C:\Program Files (x86)\HP\HP Support Framework\Resources\HPWarrantyCheck\HPWarrantyChecker.exe [1161264 2023-10-30] (HP Inc. -> HP Inc.)
Task: {8F290E52-3A73-4721-965F-681A474EFD91} - System32\Tasks\HP\Consent Manager Launcher => C:\WINDOWS\system32\sc.exe [98304 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> start hptouchpointanalyticsservice
Task: {D41354EC-4D7B-44B6-A09F-CCF895503720} - System32\Tasks\HPAudioSwitch => C:\Program Files (x86)\HP\HPAudioSwitch\HPAudioSwitch.exe [1651032 2020-11-05] (HP Inc. -> HP Inc.)
Task: {369F85EE-A991-4BA6-AC2D-4124FC7D75C7} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {5CA84928-28F5-4278-A707-22E3F05BF226} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28175336 2023-11-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {7CB7F84D-F3E6-4F9E-BBEB-655D0280A3FF} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {3DE1B876-56F4-40EA-850B-43ACE8DD064B} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [306624 2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {C71F4CF9-324E-41C7-9EF6-0F103B9FE478} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [169144 2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe  (Keine Datei)
Task: {3BC42D6F-0F60-4767-8715-4856CF2BFEB5} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Report update status => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,WorkspaceStatusNotify2
Task: {F6750BE7-022B-4ECF-9933-959F0E2473C0} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Start Workspace Runtime at logon => {4F1DFCA6-3AAD-48E1-8406-4BC21A501D7C} C:\WINDOWS\system32\wksprt.exe [425984 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
Task: {25EF2A17-01C4-4330-91EA-1C839499B685} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\Reni\Update connections => C:\WINDOWS\system32\RUNDLL32.exe [73728 2022-05-07] (Microsoft Windows -> Microsoft Corporation) -> tsworkspace,TaskUpdateWorkspaces2
Task: {6C3256F5-E9EF-465C-8AD1-397801E2EA3B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe  /RunOnAC Reboot (Keine Datei)
Task: {A1D63198-2897-47C4-8BE9-FA6130E90961} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe  /RunOnBattery Reboot (Keine Datei)
Task: {E0F10DCF-44AD-40E8-9370-FB5DA59F93FB} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe  (Keine Datei)
Task: {858E1DFA-CBB6-4998-A107-E2BD578F0DA2} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {63D9E326-563E-437C-899E-D92CD11C1F20} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {E056FAC4-578C-41C0-B0AD-A10569768F59} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {5604AC7A-6ACC-4AEC-BC7A-DEBF16D32658} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MpCmdRun.exe [1608808 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {106C1C90-377C-4A27-9E2E-59A2B122184B} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [674208 2023-12-02] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask backgroundupdate
Task: {CB6BAF6C-D71F-4927-9188-749EF1A34ABE} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [35232 2023-12-02] (Mozilla Corporation -> Mozilla Foundation)
Task: {03626EEB-E163-49DC-BF06-F8DAC26C242D} - System32\Tasks\Optimize Push Notification Data File-S-1-5-21-350907512-2396985161-2789647329-1002 => {201600D8-6EFF-48CE-B842-E14D37A0682D} C:\WINDOWS\System32\wpninprc.dll [65536 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
Task: {4D5459BF-DDD9-484A-A2BB-639046F0634E} - System32\Tasks\RtkAudUService64_BG => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_1c0a31316508effa\RtkAudUService64.exe [1596800 2022-09-29] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{a0e2536a-e69b-4ef8-b70d-0227a2804bfb}: [DhcpNameServer] 192.168.178.1

Edge: 
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default [2023-12-08]
Edge Notifications: Default -> hxxps://www.facebook.com
Edge HomePage: Default -> hxxps://?
Edge StartupUrls: Default -> "hxxps://?"
Edge DefaultSearchURL: Default -> {bing:baseURL}search?q={searchTerms}&{bing:cvid}{bing:msb}{google:assistedQueryStats}
Edge Extension: (Google Docs Offline) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-28]
Edge Extension: (Edge relevant text changes) - C:\Users\Renate\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2023-09-14]

FireFox:
========
FF DefaultProfile: ei8ewb6p.default
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\ei8ewb6p.default [2023-08-07]
FF Homepage: Mozilla\Firefox\Profiles\ei8ewb6p.default -> hxxps://links.malwarebytes.com/link/restorebrowser?lic=trial&product=MBAM-C/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF ProfilePath: C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release [2023-12-08]
FF Homepage: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> t-online.de
FF NewTab: Mozilla\Firefox\Profiles\58j3d9rl.default-release -> hxxps://myfiresearch.com/homepage?hp=1&bitmask=9996&pId=IC150206&iDate=2021-08-08 11:16:04&bName=
FF Extension: (Coupert - Coupon Assistent & Cashback) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\appledev@soarinfotech.com.xpi [2023-12-08]
FF Extension: (Expressionist – Soft) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\expressionist-soft-colorway@mozilla.org.xpi [2023-03-19]
FF Extension: (uBlock Origin) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\uBlock0@raymondhill.net.xpi [2023-11-27]
FF Extension: (Yahoo Search From PDF to DOC) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{14e9af87-e82e-4b56-a45a-cc8b63ac0aba}.xpi [2023-05-07] [UpdateUrl:hxxps://cdn.frompdftodoc-cdn.com/xpi/frompdftodoc/yhs/0820/search/updates.json]
FF Extension: (Template Search) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{4e023032-b2c9-46f1-a459-6eaa627a7d7e}.xpi [2023-06-10] [UpdateUrl:hxxps://cdn.templatesearch-cdn.org/xpi/templateSearch/yhs/0820/search/updates.json]
FF Extension: (Online PDF Editor (pdf2go.com)) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{5fe0e3b1-ef04-41af-aae8-4653d2dbd0eb}.xpi [2021-06-06]
FF Extension: (Easy Youtube Video Downloader Express) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{b9acf540-acba-11e1-8ccb-001fd0e08bd4}.xpi [2023-08-15]
FF Extension: (Ehrfürchtiger Vimeo Downloader) - C:\Users\Renate\AppData\Roaming\Mozilla\Firefox\Profiles\58j3d9rl.default-release\Extensions\{f5eca307-f4c6-4120-89e1-1b32c0262944}.xpi [2021-06-06]
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.16 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-06-18] (VideoLAN -> VideoLAN)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13233744 2023-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 CloudBackupRestoreSvc; C:\WINDOWS\System32\CloudRestoreLauncher.dll [1355776 2023-11-15] (Microsoft Windows -> Microsoft Corporation)
S2 HP Comm Recover; C:\Program Files\HPCommRecovery\HPCommRecovery.exe [891256 2020-07-30] (HP Inc. -> HP Inc.)
R2 HPAppHelperCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\AppHelperCap.exe [887856 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPDiagsCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\DiagsCap.exe [886720 2023-10-25] (HP Inc. -> HP Inc.)
R2 HPNetworkCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\NetworkCap.exe [882728 2023-10-25] (HP Inc. -> HP Inc.)
S3 hpqcaslwmiex; C:\Program Files (x86)\HP\Shared\hpqwmiex.exe [1149480 2018-06-07] (HP Inc. -> HP)
R2 HPSysInfoCap; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapcomp.inf_amd64_30f448e100bbebf7\x64\SysInfoCap.exe [886832 2023-10-25] (HP Inc. -> HP Inc.)
R2 HpTouchpointAnalyticsService; C:\WINDOWS\System32\DriverStore\FileRepository\hpanalyticscomp.inf_amd64_2f779d0a8fdf496c\x64\TouchpointAnalyticsClientService.exe [491648 2023-10-23] (HP Inc. -> HP Inc.)
S2 Mobile Broadband HL Service; C:\Program Files (x86)\MobileBrServ\mbbservice.exe [242264 2016-03-24] (Huawei Technologies Co.,Ltd. -> )
S3 PSEXESVC; C:\WINDOWS\PSEXESVC.exe [383872 2021-06-02] (Microsoft Corporation -> Sysinternals)
S2 RtkWiFiManServ; C:\WINDOWS\RtkWiFiManServ.exe [822656 2023-04-18] (Realtek Semiconductor Corp. -> Realtek Semiconductor Corp.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\NisSrv.exe [3174840 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S2 wgsslvpnsrc; C:\Program Files (x86)\WatchGuard\WatchGuard Mobile VPN with SSL\wgsslvpnsrc.exe [114224 2023-07-06] (WatchGuard Technologies -> )
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.23110.3-0\MsMpEng.exe [133592 2023-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AMDAfdAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\amdacpafd.inf_amd64_dea03ff0fb4183f1\amdacpafd.sys [435136 2023-02-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)
R3 amdfendrmgr; C:\WINDOWS\System32\drivers\amdfendrmgr.sys [35344 2022-09-08] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R3 amdwddmg; C:\WINDOWS\System32\DriverStore\FileRepository\u0387389.inf_amd64_995be970e30b8c79\B385477\amdkmdag.sys [94633328 2023-01-11] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [544768 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [184320 2023-05-24] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BTHMODEM; C:\WINDOWS\System32\drivers\bthmodem.sys [106496 2022-05-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 dlcdcncm; C:\WINDOWS\System32\drivers\dlcdcncm62_x64.sys [90344 2020-04-28] (DISPLAYLINK (UK) LIMITED -> DisplayLink Corp.)
S3 GigasetGenericUSB_x64; C:\WINDOWS\system32\DRIVERS\GigasetGenericUSB_x64.sys [54272 2009-02-20] (Siemens AG -> Siemens Home and Office Communication Devices GmbH & Co. KG)
R1 googledrivefs31357; C:\WINDOWS\System32\DriverStore\FileRepository\googledrivefs31357.inf_amd64_a8bf31a168cf7d00\googledrivefs31357.sys [384712 2023-11-02] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R3 HPCustomCapDriver; C:\WINDOWS\System32\DriverStore\FileRepository\hpcustomcapdriver.inf_amd64_a955fa431e522f5e\x64\hpcustomcapdriver.sys [25592 2021-09-16] (HP Inc. -> HP Inc.)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2023-07-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S4 UCPD; C:\WINDOWS\System32\drivers\UCPD.sys [29184 2023-09-13] (Microsoft Windows -> Microsoft Corporation)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [55856 2023-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
U5 WdDevFlt; C:\Windows\System32\Drivers\WdDevFlt.sys [169232 2022-05-07] (Microsoft Windows -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [594304 2023-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105856 2023-12-07] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\WINDOWS\System32\drivers\WirelessButtonDriver64.sys [40104 2022-06-17] (HP Inc. -> HP)
S1 WinSetupMon; system32\DRIVERS\WinSetupMon.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-07 10:52 - 2023-12-07 10:52 - 000764278 _____ C:\WINDOWS\system32\perfh007.dat
2023-12-07 10:52 - 2023-12-07 10:52 - 000167026 _____ C:\WINDOWS\system32\perfc007.dat
2023-12-06 21:47 - 2023-12-06 21:47 - 002606880 _____ (Malwarebytes) C:\Users\Renate\Downloads\MBSetup(2).exe
2023-12-06 21:28 - 2023-12-06 21:37 - 000000000 ____D C:\AdwCleaner
2023-12-06 21:27 - 2023-12-06 21:27 - 008791352 _____ (Malwarebytes) C:\Users\Renate\Desktop\adwcleaner.exe
2023-12-06 21:26 - 2023-12-06 21:27 - 002606880 _____ (Malwarebytes) C:\Users\Renate\Downloads\MBSetup(1).exe
2023-12-06 19:36 - 2023-12-06 19:36 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2023-12-04 01:12 - 2023-12-04 01:12 - 000000000 ____D C:\Users\Renate\AppData\Local\mbam
2023-12-04 01:11 - 2023-12-05 17:25 - 000000000 ____D C:\Users\Renate\AppData\Local\Malwarebytes
2023-12-04 01:10 - 2023-12-04 01:11 - 000000000 ____D C:\Program Files\Malwarebytes
2023-12-04 01:10 - 2023-12-04 01:10 - 002606880 _____ (Malwarebytes) C:\Users\Renate\Downloads\MBSetup.exe
2023-12-03 21:36 - 2023-12-08 23:26 - 000000000 ____D C:\Users\Renate\Desktop\MALEWARESCANS
2023-12-03 21:03 - 2023-12-08 23:27 - 000000000 ____D C:\FRST
2023-12-03 15:19 - 2023-12-04 01:21 - 000000000 ____D C:\Users\Renate\AppData\Local\FSDART
2023-12-03 15:19 - 2023-12-03 15:20 - 000000000 ____D C:\ProgramData\F-Secure
2023-12-02 05:32 - 2023-12-04 01:21 - 000000000 ____D C:\Program Files\Mozilla Firefox
2023-12-01 07:19 - 2023-12-01 07:19 - 000000000 ____D C:\Users\Renate\AppData\Local\Backup
2023-11-28 14:33 - 2023-11-28 14:34 - 000723795 _____ C:\Users\Renate\Downloads\email in kath. jugenfürsorge Anwort nachfrage Doppelzahlung.pdf
2023-11-28 13:59 - 2023-11-28 13:59 - 000273459 _____ C:\Users\Renate\Downloads\tauftermine-2024.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000930670 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-11-01.pdf
2023-11-28 13:57 - 2023-11-28 13:57 - 000824293 _____ C:\Users\Renate\Downloads\pfarrblatt-2023-07-01-3_1.pdf
2023-11-28 08:16 - 2023-11-28 08:16 - 000741864 _____ C:\Users\Renate\Downloads\test.pdf
2023-11-27 19:09 - 2023-11-27 19:09 - 000290753 _____ C:\Users\Renate\Downloads\4Adventsonntag2015MeditationStarke-Frauen.pdf
2023-11-27 19:08 - 2023-11-27 19:08 - 000184317 _____ C:\Users\Renate\Downloads\Weihnachten-2015-Meditationstext.pdf
2023-11-26 15:04 - 2023-11-26 15:04 - 000004991 _____ C:\Users\Renate\Downloads\Bereit-zum-Aufbruch---1.-Adventsonntag-2013.pdf
2023-11-26 13:00 - 2023-11-26 13:00 - 000059569 _____ C:\Users\Renate\Downloads\5232xxxxxxxx9400_Abrechnung_vom_17_10_2023_*****.PDF
2023-11-24 15:24 - 2023-11-24 15:24 - 000517440 _____ C:\Users\Renate\Downloads\2023.10.04-AngebotBriefbogenBrückner.pdf
2023-11-24 15:18 - 2023-11-24 15:18 - 000014850 _____ C:\Users\Renate\Downloads\Mappe1(1).xlsx
2023-11-24 13:53 - 2023-11-24 13:53 - 000016044 _____ C:\Users\Renate\Downloads\04.10.23_11.32_Anruf.07223288910.wav
2023-11-22 23:08 - 2023-11-22 23:08 - 000168882 _____ C:\Users\Renate\Downloads\DB_Ticket_510805076913.pdf
2023-11-22 17:43 - 2023-11-22 17:43 - 000019338 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2023-2.wbk
2023-11-22 17:42 - 2023-11-22 17:42 - 000015824 _____ C:\Users\Renate\Downloads\Sicherungskopie von Gottesdienstplan 2024.wbk
2023-11-21 21:26 - 2023-11-21 21:26 - 000183683 _____ C:\Users\Renate\Downloads\Kundenrechnung_01125_200774256-A.pdf
2023-11-20 18:22 - 2023-11-20 18:22 - 000331221 _____ C:\Users\Renate\Downloads\2022-03-03_2022-033_GiPP_AoS_Teilrechnung_1-1.pdf
2023-11-20 18:21 - 2023-11-20 18:22 - 000324344 _____ C:\Users\Renate\Downloads\2022-09-30_2022-161_GiPP_AoS.pdf
2023-11-20 17:32 - 2023-11-20 17:32 - 000080673 _____ C:\Users\Renate\Downloads\GIPP Einnahmen-Ausgaben 2022(1).xlsx
2023-11-20 17:31 - 2023-11-20 17:31 - 000019001 _____ C:\Users\Renate\Downloads\Mappe1.xlsx
2023-11-16 09:55 - 2023-11-16 09:55 - 000029562 _____ C:\Users\Renate\Downloads\RM-Weine-Angebot(1).odt
2023-11-15 14:30 - 2023-11-15 14:30 - 000016240 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2023-11-15 14:23 - 2023-11-15 14:25 - 000000000 ___HD C:\$WinREAgent
2023-11-10 21:41 - 2023-11-10 21:41 - 000029478 _____ C:\Users\Renate\Downloads\Sicherungskopie von Protokoll VS 20231104_intern.wbk
2023-11-10 20:39 - 2023-11-10 20:40 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen-1.pdf
2023-11-09 10:39 - 2023-11-09 10:39 - 001447721 _____ C:\Users\Renate\Downloads\12557.pdf
2023-11-09 10:38 - 2023-11-09 10:38 - 000251849 _____ C:\Users\Renate\Downloads\als PDF herunterladen - Kess-erziehen.pdf

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2023-12-08 23:24 - 2023-05-11 22:56 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2023-12-08 23:23 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2023-12-08 23:15 - 2023-06-10 19:23 - 000000000 ____D C:\Program Files (x86)\Google
2023-12-08 23:15 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemTemp
2023-12-08 22:41 - 2021-06-02 08:45 - 000000000 ___SD C:\Users\Renate\AppData\Roaming\Microsoft\Credentials
2023-12-08 21:55 - 2021-06-06 13:45 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Excel
2023-12-08 17:38 - 2022-05-07 06:24 - 000000000 ___HD C:\Program Files\WindowsApps
2023-12-08 17:38 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\AppReadiness
2023-12-08 17:38 - 2021-06-02 08:45 - 000000000 ____D C:\Users\Renate\AppData\Local\D3DSCache
2023-12-07 13:26 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Word
2023-12-07 10:52 - 2023-05-12 10:12 - 001774666 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2023-12-07 10:52 - 2022-05-07 06:22 - 000000000 ____D C:\WINDOWS\INF
2023-12-07 10:08 - 2023-06-10 19:23 - 000003926 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA
2023-12-07 10:08 - 2023-06-10 19:23 - 000003802 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore
2023-12-07 09:52 - 2020-05-06 09:58 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd
2023-12-06 21:44 - 2020-12-25 09:39 - 000000000 ____D C:\ProgramData\HP
2023-12-06 19:36 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\microsoft shared
2023-12-06 19:36 - 2020-12-25 09:41 - 000000000 ____D C:\Program Files\Microsoft Office
2023-12-06 19:31 - 2023-05-11 23:01 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2023-12-06 19:31 - 2020-05-06 09:58 - 000012288 ___SH C:\DumpStack.log.tmp
2023-12-06 19:30 - 2023-10-13 02:27 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2023-12-05 22:01 - 2022-05-07 06:24 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2023-12-05 21:52 - 2020-12-25 09:40 - 000000000 ___RD C:\Program Files (x86)\Online Services
2023-12-05 21:39 - 2023-05-11 23:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\NCH Software
2023-12-05 21:39 - 2021-08-08 11:54 - 000000000 ____D C:\Users\Renate\AppData\Roaming\NCH Software
2023-12-05 21:39 - 2021-08-08 11:54 - 000000000 ____D C:\ProgramData\NCH Software
2023-12-05 21:38 - 2023-05-11 19:46 - 000000000 ____D C:\Users\Renate
2023-12-05 21:36 - 2022-11-15 10:32 - 000000000 ____D C:\ProgramData\Wondershare
2023-12-05 21:36 - 2022-11-15 10:32 - 000000000 ____D C:\Program Files\Wondershare
2023-12-05 18:21 - 2020-12-25 09:33 - 000002443 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2023-12-05 18:21 - 2020-12-25 09:33 - 000002281 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2023-12-04 20:03 - 2022-05-07 06:17 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2023-12-04 20:03 - 2022-05-07 06:17 - 000032768 _____ C:\WINDOWS\system32\config\ELAM
2023-12-04 19:31 - 2016-09-10 14:38 - 000000000 ____D C:\Users\Renate\Documents\noten
2023-12-04 03:01 - 2023-06-10 19:23 - 000002180 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Slides.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002087 _____ C:\Users\Renate\Desktop\Google Sheets.lnk
2023-12-04 03:01 - 2023-06-10 19:23 - 000002075 _____ C:\Users\Renate\Desktop\Google Docs.lnk
2023-12-04 01:21 - 2021-06-03 08:38 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2023-12-04 01:19 - 2022-02-12 17:02 - 000000000 ____D C:\Users\Renate\AppData\Roaming\PriceWatch
2023-12-04 01:06 - 2023-01-31 17:58 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\MMC
2023-12-04 01:03 - 2021-06-03 08:38 - 000001012 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2023-12-04 01:02 - 2022-11-15 10:30 - 000000000 ____D C:\Users\Public\Documents\Wondershare
2023-12-04 00:56 - 2021-08-13 08:17 - 000000000 ____D C:\Users\Renate\AppData\Roaming\DVDVideoSoft
2023-12-04 00:50 - 2021-08-13 08:18 - 000000000 ____D C:\ProgramData\DigitalWave.ApplicationUpdater_files
2023-12-03 20:58 - 2021-08-08 12:16 - 000000000 ____D C:\Users\Renate\AppData\Local\Lavasoft
2023-11-28 18:10 - 2023-05-11 15:27 - 000000000 ____D C:\WINDOWS\system32\FxsTmp
2023-11-28 18:10 - 2016-09-10 12:09 - 000002386 _____ C:\Users\Renate\Documents\Default.rdp
2023-11-26 12:25 - 2016-09-10 12:14 - 000000000 ____D C:\Users\Renate\Documents\1-paarsynthese
2023-11-24 15:19 - 2021-06-02 08:45 - 000000000 ____D C:\Users\Renate\AppData\Local\Packages
2023-11-21 15:41 - 2016-09-10 14:40 - 000000000 ____D C:\Users\Renate\Documents\renate
2023-11-21 08:31 - 2023-05-11 23:01 - 000003588 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2023-05-11 23:01 - 000003376 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-350907512-2396985161-2789647329-1002
2023-11-21 08:31 - 2021-06-02 08:45 - 000002405 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2023-11-20 19:02 - 2021-06-04 12:55 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Zoom
2023-11-19 19:49 - 2021-06-06 21:34 - 000000000 ____D C:\Users\Renate\Documents\Benutzerdefinierte Office-Vorlagen
2023-11-18 20:41 - 2021-06-03 08:50 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Office
2023-11-16 09:42 - 2022-03-28 20:42 - 000000000 ____D C:\Users\Renate\AppData\Roaming\Microsoft\Teams
2023-11-15 23:38 - 2022-05-07 06:24 - 000000000 ____D C:\ProgramData\USOPrivate
2023-11-15 23:38 - 2021-04-09 06:23 - 000000000 ____D C:\ProgramData\Packages
2023-11-15 22:47 - 2023-05-11 22:56 - 000617264 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2023-11-15 22:46 - 2023-10-13 02:27 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\TextInput
2023-11-15 22:46 - 2023-05-11 15:31 - 000000000 ____D C:\WINDOWS\HoloShell
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\SysWOW64\de
2023-11-15 22:46 - 2022-05-07 11:29 - 000000000 ____D C:\WINDOWS\system32\de
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___SD C:\WINDOWS\system32\UNP
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\PrintDialog
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\UUS
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SysWOW64\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\SystemResources
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\vi-VN
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Sgrm
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\setup
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\oobe
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\migwiz
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lv-LV
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\lt-LT
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\id-ID
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\gl-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\eu-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\et-EE
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\es-MX
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\Dism
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\DDFs
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\ca-ES
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\system32\appraiser
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellExperiences
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\ShellComponents
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\Provisioning
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\DiagTrack
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\WINDOWS\bcastdvr
2023-11-15 22:46 - 2022-05-07 06:24 - 000000000 ____D C:\Program Files\Common Files\System
2023-11-15 22:46 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\servicing
2023-11-15 14:39 - 2022-05-07 06:17 - 000000000 ____D C:\WINDOWS\CbsTemp
2023-11-15 14:38 - 2022-05-07 11:39 - 000036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\OEMDefaultAssociations.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000209920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:25 - 000076800 _____ (Khronos Group) C:\WINDOWS\SysWOW64\opencl.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000249856 _____ (Microsoft Corporation) C:\WINDOWS\system32\msclmd.dll
2023-11-15 14:38 - 2022-05-07 06:24 - 000118784 _____ (Khronos Group) C:\WINDOWS\system32\opencl.dll
2023-11-15 14:31 - 2023-05-11 22:56 - 003212800 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2023-11-15 13:39 - 2021-06-02 09:02 - 000000000 ____D C:\WINDOWS\system32\MRT
2023-11-15 13:35 - 2021-06-02 09:01 - 182871392 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2023-11-12 20:35 - 2023-10-29 15:54 - 000002426 _____ C:\Users\Renate\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft Teams classic (work or school).lnk
2023-11-10 23:24 - 2016-09-10 14:32 - 000000000 ____D C:\Users\Renate\Documents\kess
2023-11-10 19:06 - 2023-05-11 23:01 - 000000000 ____D C:\WINDOWS\system32\Tasks\Hewlett-Packard
2023-11-10 13:39 - 2021-06-02 09:09 - 000000000 ____D C:\Program Files\Microsoft Update Health Tools

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========

2023-06-27 21:03 - 2023-06-27 21:03 - 000646409 _____ () C:\Users\Renate\AppData\Roaming\PhotoPad.dmp

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================
         

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 08-12-2023
durchgeführt von Reni (08-12-2023 23:28:42)
Gestartet von C:\Users\Renate\Desktop\MALEWARESCANS
Microsoft Windows 11 Home Version 22H2 22621.2715 (X64) (2023-05-12 09:05:25)
Start-Modus: Normal
==========================================================


==================== Konten: =============================


(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

Administrator (S-1-5-21-350907512-2396985161-2789647329-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-350907512-2396985161-2789647329-503 - Limited - Disabled)
Gast (S-1-5-21-350907512-2396985161-2789647329-501 - Limited - Disabled)
Reni (S-1-5-21-350907512-2396985161-2789647329-1002 - Administrator - Enabled) => C:\Users\Renate
WDAGUtilityAccount (S-1-5-21-350907512-2396985161-2789647329-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

3D Youtube Downloader (x64) (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\3D Youtube Downloader (x64)) (Version: 1.19.10 - 3DYD Soft)
Anti-Twin (Installation 12.02.2022) (HKLM-x32\...\Anti-Twin 2022-02-12 17.02.50) (Version:  - Joerg Rosenthal, Germany)
Avidemux VC++ 64bits (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\{4df48f2d-e600-48f8-b9af-61a33d4a23c8}) (Version: 2.8.0 - Mean)
Captura v8.0.0 (HKLM-x32\...\{C1670C5E-5042-4300-9491-6BFFF963823F}_is1) (Version: 8.0.0 - Mathew Sachin)
Easy Poster Printer (HKLM-x32\...\{085AFF3B-459B-4B8D-9366-F2DC4452D73B}) (Version: 6.8.0 - GD Software)
Google Drive (HKLM\...\{6BBAE539-2232-434A-A4E5-9A33560C6283}) (Version: 84.0.11.0 - Google LLC)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden
gTool 1.8.8 (HKLM-x32\...\gTool_is1) (Version: 1.8.8 - Shaw Computerhard- & Software)
HP Audio Switch (HKLM-x32\...\{0B1DA73D-0562-4DE1-B942-CEF286CF2EDD}) (Version: 1.0.211.0 - HP Inc.)
HP Connection Optimizer (HKLM-x32\...\{6468C4A5-E47E-405F-B675-A70A70983EA6}) (Version: 2.0.19.0 - HP Inc.)
HP Documentation (HKLM\...\HP_Documentation) (Version: 1.0.0.1 - HP Inc.)
HP Software Framework (HKLM-x32\...\{71E18A14-1BDB-4B58-A67F-1BCDA12462FD}) (Version: 7.1.15.1 - HP)
Microsoft 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.17029.20068 - Microsoft Corporation)
Microsoft 365 - en-us (HKLM\...\O365HomePremRetail - en-us) (Version: 16.0.17029.20068 - Microsoft Corporation)
Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 119.0.2151.97 - Microsoft Corporation)
Microsoft Edge WebView2-Laufzeit (HKLM-x32\...\Microsoft EdgeWebView) (Version: 119.0.2151.97 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\OneDriveSetup.exe) (Version: 23.226.1031.0003 - Microsoft Corporation)
Microsoft Teams classic (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\Teams) (Version: 1.6.00.29964 - Microsoft Corporation)
Microsoft Update Health Tools (HKLM\...\{C6FD611E-7EFE-488C-A0E0-974C09EF6473}) (Version: 5.72.0.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.16.27033 (HKLM-x32\...\{624ba875-fdfc-4efa-9c66-b170dfebc3ec}) (Version: 14.16.27033.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 X86 Additional Runtime - 14.16.27033 (HKLM-x32\...\{88D1025F-45D0-45C6-9EDB-379C2EE07AD7}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2017 X86 Minimum Runtime - 14.16.27033 (HKLM-x32\...\{D5AEE36E-4771-4F65-BDB6-8C59077BFBE4}) (Version: 14.16.27033 - Microsoft Corporation) Hidden
Mobile Broadband HL Service (HKLM-x32\...\Mobile Broadband HL Service) (Version: 22.001.29.00.03 - Huawei Technologies Co.,Ltd)
Mozilla Firefox (x64 de) (HKLM\...\Mozilla Firefox 120.0.1 (x64 de)) (Version: 120.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 89.0 - Mozilla)
Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.17029.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.17029.20068 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.17029.20000 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0409-1000-0000000FF1CE}) (Version: 16.0.14131.20278 - Microsoft Corporation) Hidden
paint.net (HKLM\...\{7F556477-50F2-4BCC-AFA7-2A3C09B57149}) (Version: 5.0.7 - dotPDN LLC)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.16 - VideoLAN)
WatchGuard Mobile VPN with SSL client 12.10 (HKLM-x32\...\Mobile VPN with SSL client_is1) (Version: 12.10 - WatchGuard)
WhatsApp (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\WhatsApp) (Version: 2.2246.10 - WhatsApp)
Windows-PC-Integritätsprüfung (HKLM\...\{B3956CF3-F6C5-4567-AC38-1FD4432B319C}) (Version: 3.6.2204.08001 - Microsoft Corporation)
Windows-Treiberpaket - Siemens Home and Office Communication Devices GmbH & Co. KG (GigasetGenericUSB_x64) Ports  (07/29/2008 1.70.10.0) (HKLM\...\E2ABB6D1E5898C43D3B6894FDDF34AEEEE613B95) (Version: 07/29/2008 1.70.10.0 - Siemens Home and Office Communication Devices GmbH & Co. KG)
WISO EÜR+Kasse 2020 (HKLM-x32\...\{80AB89B6-9F41-4678-9FE3-6E35ED3B3FB5}) (Version: 27.12.2340 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2021 (HKLM-x32\...\{06FC0205-0F50-40B9-93A3-FD5197E8FAA8}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2022 (HKLM-x32\...\{E6D7FE1F-EA01-49F3-8454-AB80264C32D7}) (Version: 29.06.3060 - Buhl Data Service GmbH)
WISO EÜR+Kasse 2023 (HKLM-x32\...\{B865CD06-A706-4EC9-AC0C-EE0582A698AB}) (Version: 30.03.3240 - Buhl Data Service GmbH)
WISO Steuer 2023 (HKLM-x32\...\{AD2B6C70-B157-4EF3-A864-E35EDAC38601}) (Version: 30.10.3890 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2021 (HKLM-x32\...\{11CDC23E-8AFC-4FFA-B0FE-19BBBA06723E}) (Version: 28.06.2220 - Buhl Data Service GmbH)
WISO Steuer-Sparbuch 2022 (HKLM-x32\...\{4233BA02-9B3B-4658-9E59-5E0B10DA8720}) (Version: 29.10.3460 - Buhl Data Service GmbH)
Zoom (HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\ZoomUMX) (Version: 5.15.7 (20303) - Zoom Video Communications, Inc.)

Packages:
=========
AMD Radeon Software -> C:\Program Files\WindowsApps\AdvancedMicroDevicesInc-2.AMDRadeonSoftware_10.22.20073.0_x64__0a9344xs7nr4m [2023-07-30] (Advanced Micro Devices Inc.) [Startup Task]
B＆O Audio Control -> C:\Program Files\WindowsApps\AD2F1837.BOAudioControl_1.40.284.0_x64__v10z8vjag6ke6 [2023-08-13] (HP Inc.)
Dev Home -> C:\Program Files\WindowsApps\Microsoft.Windows.DevHome_0.700.323.0_x64__8wekyb3d8bbwe [2023-11-22] (Microsoft Corporation)
Energy Star -> C:\Program Files\WindowsApps\AD2F1837.HPInc.EnergyStar_1.2.0.0_x64__v10z8vjag6ke6 [2023-11-21] (HP Inc.)
Fotos-Add-On -> C:\Program Files\WindowsApps\Microsoft.Windows.Photos.DLC.Main_2021.39122.10110.0_x64__8wekyb3d8bbwe [2022-01-11] (Microsoft Corporation)
HP PC Hardware Diagnostics Windows -> C:\Program Files\WindowsApps\AD2F1837.HPPCHardwareDiagnosticsWindows_2.4.0.0_x64__v10z8vjag6ke6 [2023-10-20] (HP Inc.)
HP Privacy Settings -> C:\Program Files\WindowsApps\AD2F1837.HPPrivacySettings_1.3.7.0_x64__v10z8vjag6ke6 [2023-08-15] (HP Inc.)
HP QuickDrop -> C:\Program Files\WindowsApps\AD2F1837.HPQuickDrop_2.5.10921.0_x64__v10z8vjag6ke6 [2023-05-12] (HP Inc.)
HP Smart -> C:\Program Files\WindowsApps\AD2F1837.HPPrinterControl_150.1.1140.0_x64__v10z8vjag6ke6 [2023-11-14] (HP Inc.)
HP Support Assistant -> C:\Program Files\WindowsApps\AD2F1837.HPSupportAssistant_9.31.22.0_x64__v10z8vjag6ke6 [2023-11-07] (HP Inc.)
HP System Event Utility -> C:\Program Files\WindowsApps\AD2F1837.HPSystemEventUtility_1.3.39.0_x64__v10z8vjag6ke6 [2023-10-04] (HP Inc.)
Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2021-07-25] (Microsoft Corporation)
Microsoft Defender -> C:\Program Files\WindowsApps\Microsoft.6365217CE6EB4_102.2310.10002.0_x64__8wekyb3d8bbwe [2023-10-12] (Microsoft Corporation) [Startup Task]
Microsoft Family -> C:\Program Files\WindowsApps\MicrosoftCorporationII.MicrosoftFamily_0.2.40.0_x64__8wekyb3d8bbwe [2023-10-13] (Microsoft Corp.)
Microsoft Whiteboard -> C:\Program Files\WindowsApps\Microsoft.Whiteboard_53.21027.539.0_x64__8wekyb3d8bbwe [2023-10-30] (Microsoft Corporation)
Microsoft.AV1VideoExtension -> C:\Program Files\WindowsApps\Microsoft.AV1VideoExtension_1.1.61781.0_x64__8wekyb3d8bbwe [2023-07-13] (Microsoft Corporation)
Microsoft.WindowsAppRuntime.CBS -> C:\WINDOWS\SystemApps\Microsoft.WindowsAppRuntime.CBS_8wekyb3d8bbwe [2023-11-15] (Microsoft Corporation)
myHP -> C:\Program Files\WindowsApps\AD2F1837.myHP_26.52343.948.0_x64__v10z8vjag6ke6 [2023-11-10] (HP Inc.) [Startup Task]
PDF X -> C:\Program Files\WindowsApps\6760NGPDFLab.PDFX_1.3.58.0_x64__sbe4t8mqwq93a [2023-12-08] (NG PDF Lab) [Startup Task]
Solitär -> C:\Program Files\WindowsApps\26720RandomSaladGamesLLC.SimpleSolitaire_7.4.14.0_x64__kx24dqmazqk8j [2023-12-01] (Random Salad Games LLC)
Speech Pack - German (Germany) -> C:\Program Files\WindowsApps\MicrosoftWindows.Speech.de-DE.1_1.0.5.0_x64__cw5n1h2txyewy [2023-10-23] (Microsoft Windows)
Windows Feature Experience Pack -> C:\WINDOWS\SystemApps\MicrosoftWindows.Client.FileExp_cw5n1h2txyewy [2023-11-15] (Microsoft Corporation)
Wissen 21 -> C:\Program Files\WindowsApps\E717D397.Wissen21_18.4.7170.27434_neutral__n8kcsh5n6mr4c [2022-10-11] (prosozial GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\Renate\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.23270.2\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-350907512-2396985161-2789647329-1002_Classes\CLSID\{d1b22d3d-8585-53a6-acb3-0e803c7e8d2a}\localserver32 -> C:\Users\Renate\AppData\Local\Microsoft\Teams\current\Teams.exe (Microsoft Corporation -> Microsoft Corporation)
ShellIconOverlayIdentifiers: [    GoogleDriveCloudOverlayIconHandler] -> {A8E52322-8734-481D-A7E2-27B309EF8D56} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveMirrorBlacklistedOverlayIconHandler] -> {51EF1569-67EE-4AD6-9646-E726C3FFC8A2} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDrivePinnedOverlayIconHandler] -> {CFE8B367-77A7-41D7-9C90-75D16D7DC6B6} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ShellIconOverlayIdentifiers: [    GoogleDriveProgressOverlayIconHandler] -> {C973DA94-CBDF-4E77-81D1-E5B794FBD146} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers1: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers4: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers5: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} =>  -> Keine Datei
ContextMenuHandlers5: [DriveFS 28 or later] -> {EE15C2BD-CECB-49F8-A113-CA1BFC528F5B} => C:\Program Files\Google\Drive File Stream\84.0.11.0\drivefsext.dll [2023-12-04] (Google LLC -> Google, Inc.)
ContextMenuHandlers6: [Fast Explorer] -> {693BE9C0-BEC3-11D2-B4C1-C33BBD3AD64B} =>  -> Keine Datei

==================== Codecs (Nicht auf der Ausnahmeliste) ====================

==================== Verknüpfungen & WMI ========================

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============

2023-09-17 00:34 - 2023-09-17 00:34 - 000138240 _____ () [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Interop.IWs06dcaa36#\f712706f64865098201219e2b0307dbc\Interop.IWshRuntimeLibrary.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000139776 _____ (hardcodet.net) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Hardcodet.W6cab32f3#\939f51bd30c5e2e78302a06a4cb15fa7\Hardcodet.Wpf.TaskbarNotification.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 001716224 _____ (Mark Heath & Contributors) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\NAudio\412c0cf0abd23e376935d6442bb3a6fb\NAudio.ni.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\AppvIsvSubsystems64.dll] C:\Program Files\Microsoft Office\root\Office16\AppVIsvSubsystems64.dll
2020-12-25 09:41 - 2020-12-25 09:41 - 000000000 ____L (Microsoft Corporation) [symlink -> C:\Program Files\Common Files\Microsoft Shared\ClickToRun\C2R64.dll] C:\Program Files\Microsoft Office\root\Office16\c2r64.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 003088896 _____ (Newtonsoft) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Newtonsoft.Json\94180e3729222bb20299a7ac8a678eb5\Newtonsoft.Json.ni.dll
2023-11-16 08:35 - 2023-11-16 08:35 - 000780288 _____ (The Apache Software Foundation) [Datei ist nicht signiert] C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\log4net\c377668f29dbaaf78dee5dcb284c52f3\log4net.ni.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.search.yahoo.com/yhs/web?hspart=lvs&hsimp=yhs-awc&type=lvs__webcompa__1_0__ya__hp_WCYID10118__210808__yaie
SearchScopes: HKLM -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
SearchScopes: HKLM-x32 -> {D8EE8D52-B813-4ED6-AD21-87A312B69F30} URL = hxxp://www.amazon.co.uk/s/ref=azs_osd_ieauk?ie=UTF-8&tag=hp-uk1-vsb-21&link%5Fcode=qs&index=aps&field-keywords={searchTerms}
BHO: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPluginx64.dll [2023-10-30] (HP Inc. -> HP Inc.)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
BHO-x32: HP Network Check Helper -> {E76FD755-C1BA-4DCB-9F13-99BD91223ADE} -> C:\Program Files (x86)\HP\HP Support Framework\Resources\HPNetworkCheck\HPNetworkCheckPlugin.dll [2023-10-30] (HP Inc. -> HP Inc.)
Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2023-12-06] (Microsoft Corporation -> Microsoft Corporation)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\.DEFAULT\...\localhost -> localhost
IE trusted site: HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\localhost -> localhost

==================== Hosts Inhalt: =========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2019-12-07 10:14 - 2019-12-07 10:12 - 000000824 _____ C:\WINDOWS\system32\drivers\etc\hosts

2021-07-07 17:27 - 2022-03-20 17:01 - 000000444 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics
92.168.137.1 LAPTOP-UP7T5C9F.mshome.net # 2026 7 1 6 16 27 12 259

==================== Andere Bereiche ===========================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-350907512-2396985161-2789647329-1002\Control Panel\Desktop\\Wallpaper -> C:\WINDOWS\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost => (EnableWebContentEvaluation: 1)
 ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

HKLM\...\StartupApproved\Run: => "UniConverterUpdateHelper"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-350907512-2396985161-2789647329-1002\...\StartupApproved\Run: => "OneDrive"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{E9E2D074-3623-44AB-8704-420BE9080C0E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{6706475D-EEA8-41DA-A6AF-7B9C899D13FA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FB8BE7CE-6836-4EAB-B4A5-16BE3F8DAF35}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95F00BAF-78E0-40D2-B7E9-59D096D268D8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5361C9C8-B9F5-437A-98C4-C734E1BCA183}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.95.3413.0_x64__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{66EFE8CF-D133-47E0-8BD3-2667898C07CE}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9447F732-042B-4570-985B-4F71890C4DE8}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{C940D831-A431-4BDC-A7A4-94198727745B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8B3B46A1-1913-4DF4-A779-7A910C321281}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.93.3408.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CA25381-EF43-4A4A-86D7-3D0E61887D31}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7C29AB0A-9582-4084-AEEF-2AFE672DA11C}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{88606089-C41D-49BE-A262-6642A84D4E15}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{B1A8CAF9-C469-44E0-B18D-1552957B9B58}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.92.3401.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{292FE6C2-74A6-4775-B2E7-3072BA00E197}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6E506EC2-C0E2-4173-8147-900B7F3D8D46}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{D2B3D828-8EC8-44ED-A744-D6D4ABB6D8E9}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9230B6E6-DC68-4862-8192-AE34685C1120}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.90.3407.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{A5F99B48-00AA-413D-AF04-14A959C41813}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{3294DCBE-76A9-45BA-96AD-1B891FB323B4}] => (Allow) C:\hp\Diagnostics\PSDR\HPDiagnosticCoreUI.exe (HP Inc. -> HP Development Company, L.P.)
FirewallRules: [{120C830B-E339-4133-8575-7AA6740C1F4E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F7DE4683-625C-4A2D-A1B6-A354AF26E293}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{CB978C4B-F166-44DD-9E81-1365C3BDC686}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{4DBC80C4-8CA7-4AF7-9A29-3AFA6DF3B068}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.89.3403.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7E1196B3-C02C-453E-AF47-B20B4466BD98}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{85B6B163-6712-4588-A054-4839E8FFE6B0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{388DF2E6-160F-4C70-A379-36C29B0A16C4}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{7BB5F2D4-ACBD-4CB5-A3FF-4BA73BD25FD0}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.86.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{54D5A1C0-98BC-4849-BA93-6DD24E0F7584}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{9CB439DD-9082-47BE-B59D-7BFF6154E630}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{07A62B29-D805-492B-B3D8-3010A5AD5C8F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{EA475618-A60F-4AC4-97EF-A596A3C55680}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.85.3409.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [UDP Query User{DB9CA146-619D-4793-9751-3EA1DBB94A2D}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [TCP Query User{8D555FCA-7085-4BF7-AA91-D4AD591C8514}C:\users\renate\appdata\local\microsoft\teams\current\teams.exe] => (Allow) C:\users\renate\appdata\local\microsoft\teams\current\teams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{5D6CD05E-B8F3-4BAD-9C91-2BD1F56B15EB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{5EF75767-0357-44D4-9919-1BB53B67D4AC}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{3D0BD166-D866-48AC-8D00-BC5612CB262A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{F90B5708-4EFE-4EC4-B127-99A3CBA8EA6B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.80.194.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{FBB6FC8D-DEB0-41CA-8E37-FE546B060B72}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{95AA6E71-A18E-4B01-9195-A00E127F8D2B}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1A89935C-A603-468D-85AF-10FD4983ED75}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{E5B659E1-D32C-40C1-9399-7F0A48F5C0AB}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.78.159.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{78C9F8FD-1671-47B3-9010-67CCA13DFCBF}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{1BC291D0-236C-4634-9AED-104316FBF56D}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{8975A4D1-07BF-466F-BB00-5FE940B77C99}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{6CD224CE-A596-4B9E-8977-1DDF26FDF874}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.74.152.0_x86__kzf8qxf38zg5c\Skype\Skype.exe => Keine Datei
FirewallRules: [{23205541-28FF-4D9B-9239-6369B13A4FAA}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{CD268FD3-40A8-40C2-9124-CD4774DD3A29}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\airhost.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{FB50F9BA-8FF4-495B-9F1F-9D9FE2ADAD09}] => (Allow) C:\Users\Renate\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)
FirewallRules: [{7A517224-2D60-410E-BE14-4EE20459B0B5}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{64085C17-619A-4DDA-97B3-BDD83EED2750}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{57254250-3AF4-4974-91D4-E2C982A9CC31}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{BA052953-1607-436E-97A7-436BAEF9A0C9}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{74B43660-7BE0-43AF-A911-C4A5B58C7A3D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8EAD8BA1-7239-41B4-B2C2-37FD98A16660}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{E7F79D37-57F4-4F4D-B311-D52A4F4FA0F7}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{CEE0BA56-6F18-4B7B-A752-9ED0E78EB6BF}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{34B4F9FF-3708-461D-9DEF-304EE2659C87}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{F98BB66E-8DC8-42A7-9C7D-598B38961B3A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{1F497557-73C7-4C6B-B0C3-34D74FA8E036}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{4FAB8486-66F1-4647-9F51-03462EADAF9D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{031CF13A-2D04-4C34-B01B-66F829E8BC10}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{DD20C7D0-DA9D-40BA-860F-698A0B9B1B55}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{3C7A0F64-EA11-4397-812B-CEF5DEDF5B79}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{6C1A36AC-7DD0-4AF0-9E4C-EB831E7A9BBB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{4A61C91B-D14E-4764-8486-61E77E3AF8B4}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{08222135-8D64-4C91-B7C0-D17F5610B088}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{477FD66A-08B5-4475-B309-8F8214AF3C3C}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\OmenCommandCenterBackground.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{ED2EF36D-B424-4689-A352-EDDDB59A8BD5}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5E2EE7C9-074C-459B-933E-0A33D633D951}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{66464860-6A39-4ED7-A774-B7D019C97E7A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{33F0A59E-1D22-4730-9F9A-794A12DD50CB}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{D45FA75F-3C9D-4A8C-A1DC-993F938944BA}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{7132A558-0398-43A6-993D-5F4479E3675B}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{264F015E-5B19-4DFC-804A-EE3CCD16EE52}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{EC409102-6AB2-414B-8B32-56AB1744596A}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{5FD98FFE-2E98-454A-8B32-A9644A263029}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\HP.Omen.OmenCommandCenter.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc.)
FirewallRules: [{8C92EEA5-333E-49EE-A349-375BC65B6F43}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{94A1A8E2-1F90-4768-91A8-C76D60E76AC1}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{F73A060A-1EA8-45D1-86F5-08314332815D}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [{69FE13B3-0EB8-4679-A1CC-07223C4BE249}] => (Allow) C:\Program Files\WindowsApps\AD2F1837.OMENCommandCenter_11.0.15.0_x64__v10z8vjag6ke6\win32\StreamerV2\Omen.exe (ED346674-0FA1-4272-85CE-3187C9C86E26 -> HP Inc)
FirewallRules: [TCP Query User{DA4898AD-D221-4E71-8CC7-31BD2EE11047}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [UDP Query User{6D7A1A74-61B5-4C7C-9CDB-178D82BB685C}C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe] => (Allow) C:\program files\windowsapps\microsoft.skypeapp_15.97.3404.0_x64__kzf8qxf38zg5c\skype\skype.exe => Keine Datei
FirewallRules: [{E3D8FA1F-3D00-4C85-A30E-DF98BBDC136F}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{BA10B6DA-C23B-428C-A33D-EEA09BA832C7}] => (Allow) C:\Program Files\WindowsApps\MicrosoftTeams_23306.3309.2530.1346_x64__8wekyb3d8bbwe\msteams.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{FC674D54-E561-45F9-A9FE-1D7983077B85}] => (Allow) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\119.0.2151.97\msedgewebview2.exe (Microsoft Corporation -> Microsoft Corporation)
FirewallRules: [{81B5C3FD-DC57-4CA9-9EB7-B2C23E099E31}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.109.3209.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{AD27A899-0CB9-4F62-BD11-F3383552333F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.109.3209.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{3B664373-C974-4C05-9323-A627AC7788CA}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.109.3209.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)
FirewallRules: [{27AADF88-C9B7-46D2-B4BF-0ECD67505152}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.109.3209.0_x64__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

==================== Wiederherstellungspunkte =========================

06-12-2023 21:14:02 Windows Update
06-12-2023 21:37:06 AdwCleaner_BeforeCleaning_06/12/2023_21:37:06
06-12-2023 21:43:19 AdwCleaner_BeforeCleaning_06/12/2023_21:43:19

==================== Fehlerhafte Geräte im Gerätemanager ============


==================== Fehlereinträge in der Ereignisanzeige: ========================

Applikationsfehler:
==================
Error: (12/08/2023 04:43:08 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/08/2023 04:37:41 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/07/2023 10:07:52 AM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/06/2023 07:38:59 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/06/2023 07:31:52 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/05/2023 05:31:33 PM) (Source: Firefox Default Browser Agent) (EventID: 2) (User: )
Description: Event-ID 2

Error: (12/05/2023 05:24:51 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894

Error: (12/04/2023 08:06:38 PM) (Source: Microsoft-Windows-AppModel-State) (EventID: 13) (User: LAPTOP-UP7T5C9F)
Description: C:\Users\Renate\AppData\Local\Publishers\8wekyb3d8bbwe\TeamsSharedConfigMicrosoftTeams_8wekyb3d8bbwe-2147024894


Systemfehler:
=============
Error: (12/08/2023 06:50:08 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/08/2023 05:38:47 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80073d02 fehlgeschlagen: 9WZDNCRFHVQM-MICROSOFT.WINDOWSCOMMUNICATIONSAPPS

Error: (12/07/2023 04:29:39 PM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2023 09:58:06 AM) (Source: DCOM) (EventID: 10010) (User: NT-AUTORITÄT)
Description: Der Server "{338B40F9-9D68-4B53-A793-6B9AA0C5F63B}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2023 09:51:58 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{283EDD52-69B2-473D-BEB6-2C0B4C01FD73}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2023 06:32:37 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{08949FF9-54D2-47CB-9B3F-82E9ACC93DF1}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2023 06:32:37 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{A28430CA-1EBF-48DD-AA17-9221B6F86A6C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (12/07/2023 03:09:55 AM) (Source: DCOM) (EventID: 10010) (User: LAPTOP-UP7T5C9F)
Description: Der Server "{A28430CA-1EBF-48DD-AA17-9221B6F86A6C}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.


Windows Defender:
================
Date: 2023-12-08 17:37:17
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4A4BE96A-C960-484C-9A79-91CD01A4BFCA}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-07 00:12:35
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {B12FE324-EAAD-4F99-BEF0-01A4355F8A55}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-04 19:52:05
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {6B0E017C-3DB9-4C1D-84B3-C81BAABCBE8F}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-03 09:17:04
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {99D4B684-1697-48C8-9EE6-0D841E688882}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 

Date: 2023-12-02 09:00:48
Description: 
Die Microsoft Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {2CB628CE-8FEC-4D5E-B104-0AA64E917815}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM 
Event[0]

Date: 2023-08-25 03:33:02
Description: 
Fehler des Microsoft Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x80004005
Fehlerbeschreibung: Unbekannter Fehler 
Ursache: Die Elementenüberprüfung des Filtertreibers wurde übersprungen, und er befindet sich nun im Durchleitungsmodus. Dies ist möglicherweise auf Ressourcenmangel zurückzuführen. 

Date: 2023-08-13 00:03:05
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler bei dem Versuch aufgetreten, eine verdächtige Datei zur weiteren Analyse hochzuladen.
Dateiname: C:\Windows\System32\spool\drivers\x64\3\New\FXSUI.DLL
Sha256: 1e264c6623302db746513f7670469603404b59d89cc93a28164437b1e7ced5b6
Aktuelle Sicherheitsversion: AV: 1.395.249.0, AS: 1.395.249.0
Aktuelle Modulversion: 1.1.23070.1005
Fehlercode: 0x80508016
 

Date: 2023-06-28 00:29:52
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.391.2789.0;1.391.2789.0
Modulversion: 1.1.23050.3 

Date: 2023-05-12 00:01:14
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Sicherung
Fehlercode: 0x80501102
Fehlerbeschreibung: Unerwartetes Problem. Installieren Sie bei Bedarf verfügbare Updates, und starten Sie das Programm dann erneut. Informationen zum Installieren von Updates finden Sie unter "Hilfe und Support". 
Security Intelligence-Version: 1.389.883.0;1.389.883.0
Modulversion: 1.1.20300.3 

Date: 2023-05-12 00:01:10
Description: 
Bei Microsoft Defender Antivirus ist ein Fehler beim Aktualisieren der Security Intelligence aufgetreten. Es wird versucht, zu einer vorherigen Version zurückzukehren.
Security Intelligence versucht: Aktuell
Fehlercode: 0x80070003
Fehlerbeschreibung: Das System kann den angegebenen Pfad nicht finden. 
Security Intelligence-Version: 0.0.0.0;0.0.0.0
Modulversion: 0.0.0.0 

CodeIntegrity:
===============
Date: 2023-12-06 21:14:01
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume3\ProgramData\Microsoft\Windows Defender\Platform\4.18.23100.2009-0\MsMpEng.exe) attempted to load \Device\HarddiskVolume3\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL that did not meet the Custom 3 / Antimalware signing level requirements. 

Date: 2023-12-04 19:30:33
Description: 
Windows blocked file \Device\HarddiskVolume3\Windows\System32\scrobj.dll which has been disallowed for protected processes. 


==================== Speicherinformationen =========================== 

BIOS: AMI F.26 07/04/2023
Hauptplatine: HP 88D0
Prozessor: AMD Ryzen 5 5500U with Radeon Graphics 
Prozentuale Nutzung des RAM: 60%
Installierter physikalischer RAM: 15693.96 MB
Verfügbarer physikalischer RAM: 6250.95 MB
Summe virtueller Speicher: 37197.96 MB
Verfügbarer virtueller Speicher: 22392.58 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:475.99 GB) (Free:138.75 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) (Protected) NTFS
Drive g: (Google Drive) (Fixed) (Total:15 GB) (Free:13.86 GB) (Model: WDC PC SN530 SDBPNPZ-512G-1006) FAT32

\\?\Volume{c60e7d4e-a73b-4499-a0e5-025e4f991b45}\ () (Fixed) (Total:0.67 GB) (Free:0.07 GB) NTFS
\\?\Volume{19290398-fefe-4918-9431-745f82246ade}\ (SYSTEM) (Fixed) (Total:0.25 GB) (Free:0.17 GB) FAT32

==================== MBR & Partitionstabelle ====================

==========================================================
Disk: 0 (Size: 476.9 GB) (Disk ID: CA275C3D)

Partition: GPT.

==================== Ende von Addition.txt =======================
         

Kontrollscans mit MBAM und RK

• Malwarebytes
• RogueKiller

Poste nach Abschluss der beiden Scans die Logs in CODE-Tags.

MBAM

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 09.12.23
Scan-Zeit: 16:24
Protokolldatei: fddc6e84-96a6-11ee-9d96-000000000000.json

-Softwaredaten-
Version: 4.6.7.301
Komponentenversion: 1.0.2222
Version des Aktualisierungspakets: 1.0.78186
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 11 (Build 22621.2715)
CPU: x64
Dateisystem: NTFS
Benutzer: LAPTOP-UP7T5C9F\Reni

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 255813
Erkannte Bedrohungen: 4
In die Quarantäne verschobene Bedrohungen: 4
Abgelaufene Zeit: 2 Min., 26 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 4
PUP.Optional.MyFireSearch, C:\USERS\RENATE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\58J3D9RL.DEFAULT-RELEASE\PREFS.JS, Ersetzt, 10004, 914864, 1.0.78186, , ame, , 5C2171DF1A95FADB576623F3C0904D66, 1535E965A6199BE30CC766C436169F4DE8ACB5967063A35C27C874521653C738
PUP.Optional.MyFireSearch, C:\USERS\RENATE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\58J3D9RL.DEFAULT-RELEASE\PREFS.JS, Ersetzt, 10004, 914865, 1.0.78186, , ame, , 5C2171DF1A95FADB576623F3C0904D66, 1535E965A6199BE30CC766C436169F4DE8ACB5967063A35C27C874521653C738
PUP.Optional.MyFireSearch, C:\USERS\RENATE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\58J3D9RL.DEFAULT-RELEASE\PREFS.JS, Ersetzt, 10004, 914866, 1.0.78186, , ame, , 5C2171DF1A95FADB576623F3C0904D66, 1535E965A6199BE30CC766C436169F4DE8ACB5967063A35C27C874521653C738
PUP.Optional.MyFireSearch, C:\USERS\RENATE\APPDATA\ROAMING\MOZILLA\FIREFOX\PROFILES\58J3D9RL.DEFAULT-RELEASE\PREFS.JS, Ersetzt, 10004, 914867, 1.0.78186, , ame, , 5C2171DF1A95FADB576623F3C0904D66, 1535E965A6199BE30CC766C436169F4DE8ACB5967063A35C27C874521653C738

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)
         

RK

Program            : RogueKiller Anti-Malware
Version            : 15.13.1.0
x64                : Yes
Program Date       : Dec  5 2023
Location           : C:\Users\Renate\Desktop\RogueKiller_portable64.exe
Premium            : No
Company            : Adlice Software
Website            : https://www.adlice.com/
Contact            : https://adlice.com/contact/
Website            : https://adlice.com/download/roguekiller/
Operating System   : Windows 11 (10.0.22621) 64-bit
64-bit OS          : Yes
Startup            : 0
WindowsPE          : No
User               : Reni
User is Admin      : Yes
Date               : 2023/12/09 15:34:48
Type               : Removal
Aborted            : No
Scan Mode          : Standard
Duration           : 260
Found items        : 2
Total scanned      : 84926
Signatures Version : 20231127_125432
Truesight Driver   : Yes
Updates Count      : 16

************************* Warnings *************************

************************* Removal *************************
[PUP.Gen0 (Potenziell bösartig)] HKEY_CLASSES_ROOT\CLSID\{A43DE495-3D00-47d4-9D2C-303115707939} -- [%ProgramFiles%\Wondershare\Wondershare UniConverter 14 für Windows (Deutsch)\DownloadRes\URLReqService.exe] -> Gelöscht
  [+] scan_what       : 2
  [+] vendors         : PUP.Gen0
  [+] Name            : HKEY_CLASSES_ROOT\CLSID\{A43DE495-3D00-47d4-9D2C-303115707939}
  [+] value           : [%ProgramFiles%\Wondershare\Wondershare UniConverter 14 für Windows (Deutsch)\DownloadRes\URLReqService.exe]
  [+] Type            : Registry
  [+] file_vtscore    : 0
  [+] file_vttotal    : 0
  [+] is_malicious    : Yes
  [+] detection_level : 3
  [+] id              : 0
  [+] status          : 3
  [+] status_str      : Gelöscht
  [+] removed         : Yes
  [+] status_choice   : 2
  [+] malpe_score     : 0

[PUP.Gen1 (Potenziell bösartig)] HKEY_USERS\S-1-5-21-350907512-2396985161-2789647329-1002\Software\OCS --  -> Gelöscht
  [+] scan_what       : 2
  [+] vendors         : PUP.Gen1
  [+] Name            : HKEY_USERS\S-1-5-21-350907512-2396985161-2789647329-1002\Software\OCS
  [+] Type            : Registry
  [+] file_vtscore    : 0
  [+] file_vttotal    : 0
  [+] is_malicious    : Yes
  [+] detection_level : 3
  [+] id              : 1
  [+] status          : 3
  [+] status_str      : Gelöscht
  [+] removed         : Yes
  [+] status_choice   : 2
  [+] malpe_score     : 0
         

Da war nur Adware/Junkware. Mit dem was die Telekom schriebt hast das nichts zu tun.
Ich denke du hast einfach nur schlechte Passwörter gewählt bzw nur ein oder zwei Passwörter und diese überall genutzt.

An den Passwörtern hat es angeblich nicht gelegen, da hier durchaus verschiedene genutzt wurden - angeblich. Mittlerweile kam auch raus, dass wohl auch der Sohn der Bekannten eine Woche vorher betroffen war (auch erst das E-Mail Konto). Das Timing ist alles ein bisschen komisch.

Neuer Router angeschafft und direkt Tags drauf hat es den Sohn erwischt.
Defender meldet diesen Fund und Tags drauf hat es die Bekannte erwischt.
Alles im Abstand von einer Woche.

Danke schon mal soweit für die Hilfe.
Gibt es noch was, was man tun könnte, um 100% sicher zu gehen? Oder sollten wir durch sein?

Wir sollten hier durch sein.



Entfernung der verwendeten Tools
Führe KpRm gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.





Dann wären wir durch!
Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.

Wenn Du möchtest, kannst Du hier sagen, ob du mit mir und meiner Hilfe zufrieden warst...
Vielleicht möchtest du das Forum mit einer kleinen Spende unterstützen.





Zum Schluss bitte unbedingt die Sicherheitsmaßnahmen lesen und umsetzen:

Lesestoff:
Anleitung: Maßnahmen zur Absicherung des Rechners

Hinweis:
Bitte gib mir eine kurze Rückmeldung, sobald du die oben verlinkten Informationen gelesen hast, alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Wir sind froh, dass wir helfen konnten

Dieses Thema scheint erledigt und wird aus unseren Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke uns bitte eine Erinnerung inklusive Link zum Thema.

Jeder andere bitte hier klicken und ein eigenes Thema erstellen.