neuer USB-Stick Fehlermeldung Quarantäne

jokoplant

Hallo zusammen,
mir wurde ein USB-Stick geschenkt, der wohl bei Amazon gekauft wurde, aus China. Als ich diesen in mein Gerät steckte, erschien eine Fehlermeldung. Eine Datei wurde in Quarantäne verschoben. Welche dies war, kann nicht mehr rekonstruiert werden. Quarantäne nun leer.
Ich habe etwas recherchiert und bin auf dieses Forum sowie FRST gestoßen.
Ich habe einen Suchdurchlauf mit FRST gemacht und poste hier die Datei, in der Hoffnung, dass jemand den output überfliegt und mir sagt, ob alles in Ordnung ist. Ich bin dankbar für jede Anregung.
Viele Grüße
jokoplant

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25.01.2024
durchgeführt von helle (Administrator) auf DESKTOP-VRAAJDJ (Microsoft Corporation Surface Pro 7) (26-01-2024 23:49:13)
Gestartet von C:\Users\helle\Desktop\farbar recovery scan tool\FR0124\FRST64.exe
Geladene Profile: helle & Administrator
Plattform: Microsoft Windows 10 Home Version 22H2 19045.3930 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Opera
Start-Modus: Normal

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.147\BraveCrashHandler.exe
(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.147\BraveCrashHandler64.exe
(C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe
(C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\SentryEye.exe
(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <15>
(explorer.exe ->) (CHIP Digital GmbH -> CHIP Digital GmbH) C:\Users\helle\Desktop\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _gQLcp.exe
(explorer.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(explorer.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDWelcome.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIWDE.EXE
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <5>
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe
(services.exe ->) (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
(services.exe ->) (Geek Software GmbH -> geek software GmbH) C:\Program Files\PDF24\pdf24.exe <2>
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dptf_cpu.inf_amd64_4a3ae74cfa6c37d6\esif_uf.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\iigd_dch.inf_amd64_d73f88d32ddb95d3\IntelCpHDCPSvc.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel) C:\Windows\System32\DriverStore\FileRepository\intcoed.inf_amd64_943ac983dea9b81b\AS\IAS\IntelAudioService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Corporation -> Microsoft) C:\Program Files\WindowsApps\Microsoft.SurfaceHub_61.23120.85.0_x64__8wekyb3d8bbwe\Services\SurfaceBroker.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\hdxsstm2.inf_amd64_f74568513a3bb299\RtkAudUService64.exe <2>
(services.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe
(services.exe ->) (Safer-Networking Ltd. -> Safer-Networking Ltd.) C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(svchost.exe ->) (24803D75-212C-471A-BC57-9EF86AB91435 -> ) C:\Program Files\WindowsApps\5319275A.WhatsAppDesktop_2.2401.4.0_x64__cv1g1gvanyjgm\WhatsApp.exe
(svchost.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\pacjsworker.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\hdxsstm2.inf_amd64_f74568513a3bb299\RtkAudUService64.exe [835680 2021-10-12] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [BraveVpnWireguardService] => C:\Program Files\BraveSoftware\Brave-Browser\Application\121.1.62.153\BraveVpnWireguardService\brave_vpn_wireguard_service.exe [10939928 2024-01-24] (Brave Software, Inc. -> Brave Software, Inc.)
HKLM\...\Run: [PDF24] => C:\Program Files\PDF24\pdf24.exe [618328 2023-10-04] (Geek Software GmbH -> geek software GmbH)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [454072 2023-12-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SDTray] => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [5109624 2023-01-23] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Beschränkung <==== ACHTUNG
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Beschränkung <==== ACHTUNG
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\Run: [MicrosoftEdgeAutoLaunch_D4CBA67084ED8D16C2EFBAC2ABCE8EB6] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [3788224 2024-01-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\Run: [] => [X]
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\Run: [EPLTarget\P0000000000000000] => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YATIWDE.EXE [418736 2019-08-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\Run: [Opera Stable] => C:\Users\helle\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\RunOnce: [Application Restart #1] => C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe [2849304 2024-01-24] (Brave Software, Inc. -> Brave Software, Inc.)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\helle\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [66077712 2024-01-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\helle\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\...\RunOnce: [Uninstall 23.246.1127.0002] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\helle\AppData\Local\Microsoft\OneDrive\23.246.1127.0002" [0 2024-01-25] () <==== ACHTUNG [Null Byte Datei/Ordner]
HKU\S-1-5-21-3074977942-2715452933-1547312329-500\...\Run: [MicrosoftEdgeAutoLaunch_98769996E24836F99EC8617644423B4C] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3788224 2024-01-25] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-3074977942-2715452933-1547312329-500\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-3074977942-2715452933-1547312329-500\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (Keine Datei)
HKU\S-1-5-21-3074977942-2715452933-1547312329-500\...\RunOnce: [Uninstall 19.043.0304.0013] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Administrator\AppData\Local\Microsoft\OneDrive\19.043.0304.0013" (Keine Datei)
HKLM\...\Print\Monitors\EPSON XP-4100 Series 64MonitorBE: C:\WINDOWS\system32\E_YLMBWDE.DLL [187392 2018-06-15] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EpsonNet Print Port: C:\WINDOWS\system32\enppmon.dll [500736 2016-09-14] (SEIKO EPSON CORPORATION) [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\121.1.62.153\Installer\chrmstp.exe [2024-01-26] (Brave Software, Inc. -> Brave Software, Inc.)
BootExecute: autocheck autochk * sdnclean64.exe
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {6A0473C6-9278-4529-ABC8-2116D7412510} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1566200 2023-09-20] (Adobe Inc. -> Adobe Inc.)
Task: {3CE203D8-4FF1-41C7-B83A-AB046DCF3E60} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [5131712 2023-12-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
Task: {2D0E7C61-CC8A-47DF-AC54-54DEEE341347} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [2181560 2023-12-05] (AVG Technologies USA, LLC -> AVG Technologies)
Task: {1F4FE82E-0C8C-4CA0-9AC0-1B455F76DE56} - System32\Tasks\Avira_FallbackUpdater => C:\WINDOWS\system32\sc.exe [72192 2019-12-07] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {A0351839-D638-42EB-A695-AECA67A90439} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {A0351839-D638-42EB-A695-AECA67A90439} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {A0351839-D638-42EB-A695-AECA67A90439} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {FE653A61-071B-442A-91EC-B17E153A46F2} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [260832 2024-01-16] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {6E78A68F-4AB3-4EF7-AFF8-6A812D10A1EB} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1825360 2024-01-16] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {DEFBA104-5636-455E-B009-DE4244E50345} - System32\Tasks\Avira_Security_Update => C:\WINDOWS\system32\net.exe [59904 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
Task: {748F125F-1D8B-4A77-BE4E-0B2C575F4126} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [37097112 2023-12-17] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {11223E4B-6D83-4FB7-B093-979D2149B164} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{49CE5A74-9D90-4E8B-8130-B36A45C0C471} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {7D9831E2-42D2-4609-853B-7491DE9B3E78} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{978D7CB5-9E07-4F88-AC62-0C9534707704} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-30] (Brave Software, Inc. -> BraveSoftware Inc.)
Task: {A5BE1E5E-B8E7-4E8B-B3A1-EC73B8CBCCE1} - System32\Tasks\EPSON XP-4100 Series Update {CAA8B39C-8D62-47BB-B75D-87C012CA22EA} => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {FCC54C16-628C-4493-B436-A1FA0E888D6B} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {6EACBC51-72E3-4B85-B5CC-ED1087552D86} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28425192 2024-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {35A67980-5119-4EC0-8315-9E4CB4AD2777} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {3275A498-5D5F-4AA4-A457-724A7C428681} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [305744 2024-01-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {9D133F43-182F-42CD-9659-AA6E2C146A4A} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\VFS\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [170048 2024-01-08] (Microsoft Corporation -> Microsoft Corporation)
Task: {93E570F5-44F8-42D5-B045-50B72274A6E0} - System32\Tasks\Opera scheduled Autoupdate 1706306779 => C:\Users\helle\AppData\Local\Programs\Opera\launcher.exe [2350496 2024-01-25] (Opera Norway AS -> Opera Software)
Task: {5637E37D-1C66-4D40-ADF2-9B3B133029B4} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [5339512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {73E7A608-DD78-402D-8AC9-69488DB28461} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [5659512 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
Task: {205122E3-001D-4064-9E7A-7BD9182E2E28} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => C:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [5839224 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\EPSON XP-4100 Series Update {CAA8B39C-8D62-47BB-B75D-87C012CA22EA}.job => C:\WINDOWS\system32\spool\DRIVERS\x64\3\E_YTSWDE.EXE:/EXE:{CAA8B39C-8D62-47BB-B75D-87C012CA22EA} /F:UpdateWORKGROUP\DESKTOP-VRAAJDJ$ĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}\14E64627F69646140543036393: [DhcpNameServer] 192.168.43.1
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}\64259445A51224F6870273433303026494: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}\64259445A51224F6870273433303026494: [DhcpDomain] fritz.box
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}\947435D27464D2C456862756: [DhcpNameServer] 10.0.0.1
Tcpip\..\Interfaces\{8f530d09-e30a-404d-b1a7-9219936f3a8f}\947435D27464D2C456862756: [DhcpDomain] i.local

Edge:
=======
Edge Profile: C:\Users\helle\AppData\Local\Microsoft\Edge\User Data\Default [2024-01-26]
Edge Extension: (Avira Password Manager) - C:\Users\helle\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\emgfgdclgfeldebanedpihppahgngnle [2023-11-04]
Edge Extension: (Google Docs Offline) - C:\Users\helle\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-10-30]
Edge Extension: (Edge relevant text changes) - C:\Users\helle\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-25]
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]

FireFox:
========
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.19 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2023-10-07] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2024-01-13] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-12-05] (Microsoft Corporation -> Microsoft Corporation)

Chrome:
=======
CHR HKU\S-1-5-21-3074977942-2715452933-1547312329-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Opera:
=======
OPR DefaultProfile: Default

Brave:
=======
BRA Profile: C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2024-01-26]
BRA DefaultSearchKeyword: Default -> :g
BRA Extension: (Avira Password Manager) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2023-11-04]
BRA Extension: (Avira Safe Shopping) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2024-01-22]
BRA Extension: (Adobe Acrobat: Tools zum Bearbeiten, Konvertieren und Signieren von PDF-Dateien) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2023-12-17]
BRA Extension: (Avira Browserschutz) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2023-10-30]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2024-01-26]
BRA Extension: (Brave Local Data Files Updater) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2024-01-26]
BRA Extension: (Brave NTP background images) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2023-10-30]
BRA Extension: (Brave Ads Resources) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\bbefpembgddgdihpkcidgdgiojjlchji [2024-01-26]
BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2024-01-26]
BRA Extension: (Wallet Data Files Updater) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\BraveWallet [2024-01-22]
BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2024-01-26]
BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2023-11-11]
BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2023-10-30]
BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2024-01-26]
BRA Extension: (Brave Ads Resources) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\jcncoheihebhhiemmbmpfhkceomfipbj [2024-01-26]
BRA Extension: (Brave Ad Block Updater (EasyList Germany (plaintext))) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\lfmefmifdjlfneapckmpkinmlofjehbp [2024-01-26]
BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2024-01-26]
BRA Extension: (Brave NTP sponsored images) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\obbokncgfcbepeipkhpdepjjoncelefj [2024-01-26]
BRA Extension: (Brave HTTPS Everywhere Updater) - C:\Users\helle\AppData\Local\BraveSoftware\Brave-Browser\User Data\oofiananboodjbbmdelgdommihjbkfag [2023-10-30]

==================== Dienste (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [789952 2023-12-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [1194424 2023-12-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [9090496 2023-12-20] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
R2 AVGWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [109480 2023-12-05] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6782232 2024-01-17] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3003056 2023-06-29] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [389096 2023-09-06] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [268600 2024-01-16] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [298400 2024-01-16] (Avira Operations GmbH -> Avira Operations GmbH)
S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-30] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [175424 2023-10-30] (Brave Software, Inc. -> BraveSoftware Inc.)
S3 BraveVpnService; C:\Program Files\BraveSoftware\Brave-Browser\Application\121.1.62.153\brave_vpn_helper.exe [2811416 2024-01-24] (Brave Software, Inc. -> Brave Software, Inc.)
S3 BraveVpnWireguardService; C:\Program Files\BraveSoftware\Brave-Browser\Application\121.1.62.153\BraveVpnWireguardService\brave_vpn_wireguard_service.exe [10939928 2024-01-24] (Brave Software, Inc. -> Brave Software, Inc.)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [13777080 2024-01-14] (Microsoft Corporation -> Microsoft Corporation)
S2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [11280288 2024-01-17] (Avira Operations GmbH -> Avira Operations GmbH)
R3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [11280288 2024-01-17] (Avira Operations GmbH -> Avira Operations GmbH)
R2 EpsonScanSvc; C:\WINDOWS\system32\EscSvc64.exe [145224 2019-07-04] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 IntelAudioService; C:\WINDOWS\System32\DriverStore\FileRepository\intcoed.inf_amd64_943ac983dea9b81b\AS\IAS\IntelAudioService.exe [402488 2022-08-11] (Intel Corporation -> Intel)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9410296 2024-01-26] (Malwarebytes Inc. -> Malwarebytes)
R2 PDF24; C:\Program Files\PDF24\pdf24.exe [618328 2023-10-04] (Geek Software GmbH -> geek software GmbH)
R2 SDScannerService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [2737016 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SDUpdateService; C:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [4588408 2023-02-14] (Safer-Networking Ltd. -> Safer-Networking Ltd.)
R2 SurfaceExperienceService-61.23120.85; C:\Program Files\WindowsApps\Microsoft.SurfaceHub_61.23120.85.0_x64__8wekyb3d8bbwe\Services\SurfaceBroker.exe [8738744 2023-12-17] (Microsoft Corporation -> Microsoft)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [3004048 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103384 2019-12-07] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 BraveElevationService; "C:\Program Files\BraveSoftware\Brave-Browser\Application\121.1.62.153\elevation_service.exe" [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [31568 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [243176 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [394048 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [298024 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [96616 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [26096 2023-12-05] (Microsoft Windows Early Launch Anti-Malware Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [39792 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [276888 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [561928 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [105392 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [80568 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [952896 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [711696 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [213336 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [319712 2023-12-20] (Microsoft Windows Hardware Compatibility Publisher -> AVG Technologies CZ, s.r.o.)
R0 BdNet; C:\WINDOWS\System32\DRIVERS\BdNet.sys [190712 2023-10-28] (Avira Operations GmbH -> Avira Operations GmbH)
R1 BdSentry; C:\WINDOWS\System32\DRIVERS\BdSentry.sys [233560 2023-10-25] (Avira Operations GmbH -> Avira Operations GmbH)
S3 BthA2dp; C:\WINDOWS\System32\drivers\BthA2dp.sys [279040 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 BthHFEnum; C:\WINDOWS\System32\drivers\bthhfenum.sys [144896 2019-12-07] (Microsoft Corporation) [Datei ist nicht signiert]
S3 dg_ssudbus; C:\WINDOWS\System32\drivers\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [21480 2024-01-26] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
S3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239576 2024-01-26] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R1 netprotection_network_filter; C:\WINDOWS\System32\drivers\netprotection_network_filter.sys [114992 2023-10-25] (Avira Operations GmbH -> Avira Operations GmbH)
S0 rtp_elam; C:\WINDOWS\System32\DRIVERS\rtp_elam.sys [28784 2023-11-10] (Microsoft Windows Early Launch Anti-Malware Publisher -> Avira Operations GmbH)
R1 rtp_filter; C:\WINDOWS\System32\DRIVERS\rtp_filter.sys [376952 2023-12-20] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp_traverse; C:\WINDOWS\system32\DRIVERS\rtp_traverse.sys [41984 2023-11-10] (Avira Operations GmbH -> Avira Operations GmbH)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ssudqcfilter; C:\WINDOWS\System32\drivers\ssudqcfilter.sys [76832 2022-09-30] (Samsung Electronics CO., LTD. -> QUALCOMM Incorporated)
S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 SurfaceSerialHubDriver; C:\WINDOWS\System32\DriverStore\FileRepository\surfaceserialhubdriver.inf_amd64_f531483c52451822\SurfaceSerialHubDriver.sys [366056 2021-03-05] (Microsoft Corporation -> Microsoft Corporation)
S3 WdBoot; C:\WINDOWS\system32\drivers\WdBoot.sys [46688 2019-12-07] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\WdFilter.sys [350136 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [54200 2019-12-07] (Microsoft Windows -> Microsoft Corporation)
U1 avgbdisk; kein ImagePath
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-01-26 23:19 - 2024-01-26 23:19 - 000000000 ____D C:\Users\helle\Desktop\farbar recovery scan tool
2024-01-26 23:07 - 2024-01-26 23:07 - 000000000 ____D C:\WINDOWS\system32\Tasks\Safer-Networking
2024-01-26 23:06 - 2024-01-26 23:14 - 000000000 ____D C:\ProgramData\Spybot - Search & Destroy
2024-01-26 23:06 - 2024-01-26 23:12 - 000000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2
2024-01-26 23:06 - 2024-01-26 23:06 - 000004232 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1706306779
2024-01-26 23:06 - 2024-01-26 23:06 - 000001474 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk
2024-01-26 23:06 - 2024-01-26 23:06 - 000001462 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk
2024-01-26 23:06 - 2024-01-26 23:06 - 000001423 _____ C:\Users\helle\Desktop\Opera-Browser.lnk
2024-01-26 23:06 - 2024-01-26 23:06 - 000001413 _____ C:\Users\helle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera-Browser.lnk
2024-01-26 23:06 - 2024-01-26 23:06 - 000000000 ____D C:\Users\helle\AppData\Local\Opera Software
2024-01-26 23:06 - 2024-01-26 23:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2
2024-01-26 23:06 - 2018-02-06 18:04 - 000032168 _____ (Safer-Networking Ltd.) C:\WINDOWS\system32\sdnclean64.exe
2024-01-26 23:03 - 2024-01-26 23:03 - 000000000 ____D C:\Users\helle\AppData\Roaming\Opera Software
2024-01-26 22:46 - 2024-01-26 22:46 - 003499033 _____ C:\Users\helle\Downloads\FR0124.zip
2024-01-26 22:34 - 2024-01-26 23:49 - 000000000 ____D C:\FRST
2024-01-26 22:32 - 2024-01-26 22:32 - 005331520 _____ (CHIP Digital GmbH) C:\Users\helle\Desktop\Farbar Recovery Scan Tool (HijackThis Alternative) - CHIP Installer _gQLcp.exe
2024-01-26 22:18 - 2024-01-26 22:30 - 000000000 ____D C:\Users\helle\AppData\Local\Malwarebytes
2024-01-26 22:18 - 2024-01-26 22:18 - 000000000 ____D C:\Users\helle\AppData\Local\mbam
2024-01-26 22:17 - 2024-01-26 22:17 - 000002043 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2024-01-26 22:17 - 2024-01-26 22:17 - 000002031 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2024-01-26 22:17 - 2024-01-26 22:17 - 000000000 ____D C:\ProgramData\Malwarebytes
2024-01-26 22:17 - 2024-01-26 22:17 - 000000000 ____D C:\Program Files\Malwarebytes
2024-01-25 11:44 - 2024-01-25 11:44 - 000000000 ___HD C:\OneDriveTemp
2024-01-24 09:53 - 2024-01-24 09:53 - 000003888 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Maintenance
2024-01-24 09:53 - 2024-01-24 09:53 - 000003428 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2024-01-24 09:53 - 2024-01-24 09:53 - 000002818 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Systray
2024-01-14 23:08 - 2024-01-14 23:08 - 000000000 ____D C:\Program Files\Common Files\DESIGNER
2024-01-14 22:49 - 2024-01-14 22:49 - 000000000 ___HD C:\$WinREAgent
2024-01-04 17:39 - 2024-01-15 03:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Thunderbird

==================== Ein Monat (geänderte) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2024-01-26 23:48 - 2023-11-14 11:37 - 000000000 ____D C:\Users\helle\Desktop\Sortieren
2024-01-26 23:41 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp
2024-01-26 23:14 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps
2024-01-26 23:14 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2024-01-26 23:14 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2024-01-26 23:07 - 2023-10-30 20:13 - 000000000 ____D C:\WINDOWS\SystemTemp
2024-01-26 22:38 - 2023-10-30 20:48 - 000000000 ____D C:\Users\helle\AppData\Local\D3DSCache
2024-01-26 22:32 - 2023-10-30 20:24 - 000002446 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2024-01-26 22:17 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2024-01-26 22:13 - 2023-10-30 20:23 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2024-01-26 08:40 - 2023-10-30 20:55 - 000002366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk
2024-01-26 08:40 - 2023-10-30 20:55 - 000002325 _____ C:\Users\Public\Desktop\Brave.lnk
2024-01-26 08:39 - 2023-12-05 15:08 - 000004266 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update
2024-01-26 08:37 - 2023-10-30 23:14 - 000000000 ____D C:\Users\helle\AppData\Roaming\BiBox 2.0
2024-01-25 12:41 - 2023-10-30 21:08 - 000000000 ____D C:\Users\helle\AppData\Local\activdashboard
2024-01-25 12:41 - 2023-10-30 21:06 - 000000000 ____D C:\ProgramData\Promethean
2024-01-25 11:44 - 2023-10-30 20:48 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3074977942-2715452933-1547312329-1001
2024-01-25 11:44 - 2023-10-30 20:48 - 000003380 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3074977942-2715452933-1547312329-1001
2024-01-25 11:44 - 2023-10-30 20:30 - 000002409 _____ C:\Users\helle\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2024-01-25 11:44 - 2021-01-14 20:01 - 000000000 ___RD C:\Users\helle\OneDrive
2024-01-25 11:10 - 2023-10-30 21:20 - 000000000 ____D C:\Users\helle\AppData\Roaming\GeoGebra
2024-01-25 10:37 - 2023-11-09 12:04 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2024-01-25 10:37 - 2023-10-30 20:30 - 000000000 ____D C:\Users\helle
2024-01-24 13:33 - 2023-10-30 22:47 - 000000000 ____D C:\Users\helle\AppData\Local\CrashDumps
2024-01-24 12:48 - 2023-10-30 20:46 - 000000000 ____D C:\Users\helle\AppData\Local\Packages
2024-01-24 12:47 - 2023-10-30 20:49 - 000000000 ____D C:\Users\helle\AppData\Roaming\Microsoft\Word
2024-01-24 09:53 - 2023-10-30 21:13 - 000003474 _____ C:\WINDOWS\system32\Tasks\Avira_Security_Update
2024-01-24 09:53 - 2023-10-30 21:13 - 000000000 ____D C:\Program Files (x86)\Avira
2024-01-24 09:53 - 2021-04-18 09:59 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2024-01-24 09:43 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\LiveKernelReports
2024-01-24 09:43 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF
2024-01-23 12:32 - 2023-10-30 20:49 - 000000000 ____D C:\Users\helle\AppData\Roaming\Microsoft\Excel
2024-01-21 13:20 - 2023-11-13 18:08 - 000002083 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2024-01-21 13:20 - 2023-10-30 21:12 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2024-01-21 11:59 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState
2024-01-18 11:01 - 2023-10-30 21:21 - 000002354 _____ C:\Users\helle\Desktop\Graphing Calc.lnk
2024-01-18 11:01 - 2023-10-30 21:20 - 000000000 ____D C:\Users\helle\AppData\Local\GeoGebra_Graphing
2024-01-18 11:00 - 2023-10-30 21:19 - 000000000 ____D C:\Users\helle\AppData\Local\SquirrelTemp
2024-01-17 10:32 - 2023-10-30 21:13 - 000003706 _____ C:\WINDOWS\system32\Tasks\Avira_FallbackUpdater
2024-01-16 16:40 - 2023-12-18 23:34 - 000000000 ____D C:\Users\helle\Desktop\KA
2024-01-16 08:51 - 2023-10-30 21:20 - 000002279 _____ C:\Users\helle\Desktop\CAS Calculator.lnk
2024-01-16 08:51 - 2023-10-30 21:20 - 000000000 ____D C:\Users\helle\AppData\Local\GeoGebra_CAS
2024-01-15 09:38 - 2023-10-31 21:50 - 000000000 ____D C:\WINDOWS\system32\MRT
2024-01-15 09:17 - 2023-10-31 21:50 - 189718008 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2024-01-15 03:35 - 2023-12-05 15:06 - 000000000 ____D C:\ProgramData\AVG
2024-01-15 03:35 - 2023-12-01 23:51 - 000000951 _____ C:\WINDOWS\Tasks\EPSON XP-4100 Series Update {CAA8B39C-8D62-47BB-B75D-87C012CA22EA}.job
2024-01-15 03:35 - 2023-10-30 21:15 - 001026464 _____ C:\WINDOWS\system32\rtp.db
2024-01-15 03:35 - 2023-10-30 20:59 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-01-15 03:35 - 2023-10-30 20:34 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2024-01-15 03:35 - 2023-10-30 20:23 - 000518184 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2024-01-15 03:35 - 2021-04-08 14:28 - 000008192 ___SH C:\DumpStack.log.tmp
2024-01-15 03:35 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences
2024-01-15 03:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr
2024-01-14 23:07 - 2020-03-21 04:08 - 000000000 ____D C:\Program Files\Microsoft Office
2024-01-10 09:58 - 2023-10-30 21:17 - 000000000 ____D C:\Users\Public\Security Sessions
2024-01-08 21:35 - 2021-01-18 09:47 - 000000000 ____D C:\Users\helle\AppData\LocalLow\Adobe
2024-01-08 21:13 - 2023-12-18 21:35 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software
2024-01-08 21:13 - 2023-12-17 13:23 - 000002860 _____ C:\WINDOWS\system32\Tasks\AviraSystemSpeedupVerify
2024-01-08 21:13 - 2023-12-01 23:51 - 000003504 _____ C:\WINDOWS\system32\Tasks\EPSON XP-4100 Series Update {CAA8B39C-8D62-47BB-B75D-87C012CA22EA}
2024-01-08 21:13 - 2023-10-31 23:28 - 000003062 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-3074977942-2715452933-1547312329-500
2024-01-08 21:13 - 2023-10-31 23:28 - 000002858 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3074977942-2715452933-1547312329-500
2024-01-08 21:13 - 2023-10-30 20:55 - 000003658 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineUA{978D7CB5-9E07-4F88-AC62-0C9534707704}
2024-01-08 21:13 - 2023-10-30 20:55 - 000003434 _____ C:\WINDOWS\system32\Tasks\BraveSoftwareUpdateTaskMachineCore{49CE5A74-9D90-4E8B-8130-B36A45C0C471}
2024-01-08 21:13 - 2023-10-30 20:34 - 000003682 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2024-01-08 21:13 - 2023-10-30 20:34 - 000003488 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore1da0b66b3bb9cfe
2024-01-08 21:13 - 2023-10-30 20:34 - 000002856 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1767824243-3817737779-3556334746-500
2024-01-07 22:18 - 2023-10-30 20:59 - 000001292 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk
2024-01-07 22:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Drivers\DriverData
2024-01-04 17:25 - 2023-12-01 23:31 - 000000000 ____D C:\Users\helle\AppData\Local\ElevatedDiagnostics

==================== SigCheck ============================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

==================== Ende von FRST.txt ========================